last executing test programs: 7m11.037452041s ago: executing program 0 (id=9962): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x100}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8935, &(0x7f0000000200)) 7m10.950758843s ago: executing program 0 (id=9963): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@tclass={{0x14, 0x29, 0x43, 0x8}}], 0x18}}], 0x1, 0x0) 7m10.762897397s ago: executing program 0 (id=9968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 7m10.557325642s ago: executing program 0 (id=9970): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 7m10.334128827s ago: executing program 0 (id=9974): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1ca5220560dca020}, 0x20000000) 7m9.887324757s ago: executing program 0 (id=9979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) 7m9.619883253s ago: executing program 32 (id=9979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) 5m51.438080817s ago: executing program 2 (id=10740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000440)=0x2, 0x5c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 5m51.321640719s ago: executing program 2 (id=10742): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2801\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0x4000000e, 0x4, 0x2, 0x2, 0x2000007, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffffb]}) 5m51.149179543s ago: executing program 2 (id=10745): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x8000080, 0x1, 0x0, 0x1, 0x40, 0x3c}, 0x20) 5m51.060805935s ago: executing program 2 (id=10747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) 5m50.922805758s ago: executing program 2 (id=10749): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) 5m50.771614682s ago: executing program 2 (id=10751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) 5m47.035233515s ago: executing program 3 (id=10770): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x40005, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 5m46.957311857s ago: executing program 3 (id=10771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5m46.788860231s ago: executing program 3 (id=10774): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24) 5m46.672996714s ago: executing program 3 (id=10776): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m46.540585097s ago: executing program 3 (id=10778): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a000802"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) 5m46.353292481s ago: executing program 3 (id=10780): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000400010902240001000040b10904000001030001000921010100012205000905810379e8a979"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m46.054223047s ago: executing program 33 (id=10780): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000400010902240001000040b10904000001030001000921010100012205000905810379e8a979"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m35.561500172s ago: executing program 34 (id=10751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) 1m32.906846036s ago: executing program 5 (id=13374): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) 1m32.708706091s ago: executing program 5 (id=13375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 1m32.224407782s ago: executing program 5 (id=13378): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000580)="c3", 0x1}], 0x1) 1m32.061476775s ago: executing program 5 (id=13380): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/306], 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 1m31.591065926s ago: executing program 5 (id=13387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f00000001c0)="a1"}) 1m30.999766149s ago: executing program 5 (id=13397): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) pwritev2(r0, &(0x7f0000001c00)=[{&(0x7f0000000940)='^', 0x1}], 0x1, 0x6, 0x4, 0xa) 1m30.589626249s ago: executing program 35 (id=13397): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) pwritev2(r0, &(0x7f0000001c00)=[{&(0x7f0000000940)='^', 0x1}], 0x1, 0x6, 0x4, 0xa) 1m29.489230903s ago: executing program 1 (id=13410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000400000000600000008"], 0x50) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 1m29.402480215s ago: executing program 1 (id=13412): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='5', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002180)="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", 0x5ad}], 0x1}}], 0x2, 0x240000c4) 1m29.20512083s ago: executing program 1 (id=13414): r0 = socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, 0x0) 1m29.024328054s ago: executing program 1 (id=13416): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m28.681262441s ago: executing program 1 (id=13418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0) 1m28.373048508s ago: executing program 1 (id=13421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1m28.084016835s ago: executing program 36 (id=13421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 5.141430056s ago: executing program 7 (id=14196): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807000000feffff7f", 0x18) 5.014803638s ago: executing program 7 (id=14198): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f9a, &(0x7f0000003100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 4.327181894s ago: executing program 7 (id=14203): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) 4.129215928s ago: executing program 7 (id=14206): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x5, 0x832, &(0x7f0000000bc0)="$eJzs3V9oHPedAPDvKLJjK4kJucNnjONMnBzY4Cgr2VEQgUs2q5E8yWpXt7sKNseRmLNsjOUk2Bc4+yGOX+64IxCOe7jHJA99aZ9KX1oKLbTQ9qnQvvYtEOhD0n+0Dy0BlZlZyZKllWxHsU36+QhrfjO/38zvO79dz3dHy8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY6pWG0uimbfmT6aDNaY67dlN6pe398M1k036jUiKf7FrV+yrFu37+xvVe4tfh+JANXcgdhWTXXH1ob2PvvB3w0PL628S0HYb3mjh5StXL5xeXFy4dBcD+Qr8z/fXzH5jJG5xZGeyVt5t57P1mSzNu+10cmKi9uyJ6W46nTez7qluL5tNG52s3mt30sONI+nY5OSxNBs91Z5vzUzVm1k6XC18/pnxWm0ifWV0Lqt3uu3Ws6+Mdhsn8mYzb82UKxbVRZvnizfiq3kv7WX12TQ9e35x4djakHavC7JoNLZmyRdLq+cOPP3op+988ofzC+Nb7e54bXx8bGx8fGwiiYhabfjGgucmn3u+Vhuu3STWtbirb1ruQ9t8BIc7N9TP/9GMPFoxHycj3fCnEVPRiXbMxo038Or6vuX8/4/P/ubnm/X7QZX/r6+K5MC+GzP7o8z/B6u5g4Pyf9V3cnMsX/XPjf2/HFfialyI07EYi7EQl1a3e3C7+ku2L/ah22s/skX9TGTRijy60Y48ZqNeLkn7S9KYjImYiFq8HidiOrqRxnTk0YwsunEqutGLrHxHNaITWdSjF+3oRBqHoxFHIo2dMRmTcSzSyGI0TkU75qMVMzEV9XIrZ+N8Oe7Hbopr77tvfO/cLz79sHy1lhuNbTbE70WUjX6/SaN1yVz+57ZFxI+//IEbtsHScv4HAAAAvraS8jv24vx/RzxelqbzZvYvW6w1XPx67+5ECAAAAHxZ5Tf/B4rJjqL0eCTF+X9tbaNv7bg3wQEAAADbIimvsUsiYiSeqErLl0vV7nVsAAAAwPYov/8/WExGIq7tXl7s/B8AAAC+Rl77Tr9w8z32P3mlmE2SGJp7MPnBb6PT2ZEc/+jk08nFelFRv/hAtV5/8trKFnvT+5Po31Cw3NbE8NWHivlHGtmBZPnmuV88WE0/L3/vH15ZfW0cL/X/IpEkSRHA9bmBAVR+t1TZ09+LlQDKuXg/nqzaPXmmmp5ZrqnuKDwynTez0Ua7+cJY1Ot7hnrZyd47b57/jyh3/79bs3uSOHt+cWH0395aPFPGUt7A+PrF/v6uu49iMRgDYlnqj0A8vv7uxsWmdpQXYvT7Han6ra3e/6HLe4rC0G30+Z9x6OGyzaGRqu3I2v3fVfQ5NrrB3j8cVRSFsXV7Prz+jVVFcao/d1MUT1VLnzr8VDXZIIrxjaJYPRbjq6PoD8L6sdjZL6yMxdLS5lHEoxHx4ZPXTv7pJ+0kO7ZVFMduKYrBrwjAvXK2vOtPkYWqdFRlob/002iR/zudHTtjTd6pVrjVo1xS9tJ/ks+59ze+k/+tZffCn5c2yW6HqzaHq88Tw/vX5JVih5pZbYMj+tvn3/5p/4h+/Jv//9G/HvzZt+84r+9abrLyXcpjP3poKMoodvez29V+TWdHsrzlxYUqq35czHw8sN9uczwpPi488O8X3469l69cfeb8xdPnFs4tvDk+fmyidrxWey5J+i/eUvmJYTnST0LuAWDFoThYJfKBz9gZ8BSe8gNAlbuPb3ZW/UAkj61cUlDkxLdiMc7E0fJqg4h4YuN+R6p1/lh8Kjkah6q2/9wP+qaz1pFVT3g5usW5ZXE+WLUd37LtyKrHy9zwD//7Fb4cAHBXHNoiDw/M/6vO3Y9uft69Ko/W4mgcqdoeWY5gcC6PiBfv7mgAwN+GrPN5MtL7r6TTyedeH5ucHKv3TmRpp914Ne3kUzNZmrd6WSeG662ZLJ3rtHvtRrtZFF7Lp7Ju2p2fm2t3eul0u5POtbv5yfLJ72n/0e/dbLbe6uWN7lwzq3eztNFu9eqNXjqVdxvp3PzLzbx7IuuUK3fnskY+nTfqvbzdSrvt+U4jG03TbpataphPZa1ePp0XxVY618ln653rEdGcn83Sqazb6ORzvXa1weW+8tZ0uzNbbvbXe+71aAPA/eHylasXTi8uLly6pcL/RcSaJb+6lbVWOlt3G+F3z9zt/QUAVuf/zx65uc4f3wEAAAAAAAAAAAAA4P5we9f/3UJh9/ZucNeAqn/as7hwaelaxPqqZGlp6Ta62B1F4eHBbZZvIb/NA3VXCte3ZTtDsdE43z+FZHDVGy++eGHQ6i9f23diwFuisrJky/8pw+UtnMtLXd/7bOd3P6iqXrqj3RkaWJUMCuOXEXEHfS0lm7S5d8ckAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjkrwEAAP//vtxslw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000031c0)=""/4096, 0x1000) 3.814522125s ago: executing program 7 (id=14210): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x143041, 0x31) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) 2.623118942s ago: executing program 7 (id=14213): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0xa, 0xd, {0xd, 0xd, "1d29125fa36bc2857d265f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.933256767s ago: executing program 8 (id=14217): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}, @ib={0x1b, 0x0, 0xffffffff, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x2}}}, 0x118) 1.84121557s ago: executing program 6 (id=14219): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 1.733222382s ago: executing program 8 (id=14221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000003400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000100900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1.666811403s ago: executing program 8 (id=14222): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f000000a4c0)={0x2020}, 0xa5) 1.594210715s ago: executing program 6 (id=14223): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d700006cff99acf92c3cce050100000000000000bb00000000000000000000000000000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.35635175s ago: executing program 8 (id=14226): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x80c808, &(0x7f0000000340)=ANY=[], 0x1, 0x2f0, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002400)=""/4096, 0x1000) 1.216873823s ago: executing program 8 (id=14228): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) 760.934394ms ago: executing program 4 (id=14231): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 760.774904ms ago: executing program 6 (id=14232): syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x30}}, 0xc000) 660.946906ms ago: executing program 6 (id=14233): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001680)={0x0, 0x200000, 0x0, 0x0, 0x6, 0x8ca8}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="b969cabbc754", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 613.612357ms ago: executing program 4 (id=14234): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200007fffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50) 586.277958ms ago: executing program 6 (id=14235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x80000000, 0x2, r1}) 523.180329ms ago: executing program 6 (id=14236): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x77, 0x7, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x7, 0xeb}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200d280000002802f125f11a9bb6acb117bd528f6b8c8696b6b06dd611"], 0x0, 0x0, 0x0, 0x0}, 0x0) 494.614389ms ago: executing program 4 (id=14237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 381.299702ms ago: executing program 4 (id=14238): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa0) 379.907902ms ago: executing program 4 (id=14239): syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 46.02528ms ago: executing program 8 (id=14240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000101920800024000000001"], 0xfea1}}, 0x800) 0s ago: executing program 4 (id=14241): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2c00868f18a1e97fa9f648d8087f1a20fb", 0x11}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): 0, SerialNumber=0 [ 1004.729258][ T3865] FAT-fs (loop1): Directory bread(block 66) failed [ 1004.735856][ T3865] FAT-fs (loop1): Directory bread(block 67) failed [ 1004.753433][ T10] usb 6-1: config 0 descriptor?? [ 1004.769158][ T3865] FAT-fs (loop1): Directory bread(block 68) failed [ 1004.775781][ T3865] FAT-fs (loop1): Directory bread(block 69) failed [ 1004.813477][ T3865] FAT-fs (loop1): Directory bread(block 70) failed [ 1004.829509][ T3865] FAT-fs (loop1): Directory bread(block 71) failed [ 1004.846804][ T3865] FAT-fs (loop1): Directory bread(block 72) failed [ 1004.870192][ T3865] FAT-fs (loop1): Directory bread(block 73) failed [ 1005.288715][ T3745] Set syz1 is full, maxelem 65536 reached [ 1005.396883][ T3867] loop4: detected capacity change from 0 to 32768 [ 1005.397119][ T10] usb 6-1: USB disconnect, device number 26 [ 1005.485572][ T3872] loop1: detected capacity change from 0 to 512 [ 1005.595861][ T3872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.661645][ T3872] ext4 filesystem being mounted at /3281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.696560][ T3879] loop6: detected capacity change from 0 to 2048 [ 1005.750876][ T3879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.781287][ T3879] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.812867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.898524][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.919208][ T3879] fs-verity (loop6, inode 18): Unknown hash algorithm number: 0 [ 1006.079849][T30120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.537103][ T788] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1006.613253][ T3903] loop6: detected capacity change from 0 to 4096 [ 1006.676122][ T3908] vivid-004: ================= START STATUS ================= [ 1006.685710][ T3903] __ntfs_error: 36 callbacks suppressed [ 1006.685726][ T3903] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1006.704218][ T3910] vcan0: Master is either lo or non-ether device [ 1006.711432][ T3908] vivid-004: Radio HW Seek Mode: Bounded [ 1006.723348][ T3908] vivid-004: Radio Programmable HW Seek: false [ 1006.732373][ T3903] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1006.746313][ T3908] vivid-004: RDS Rx I/O Mode: Block I/O [ 1006.752821][ T788] usb 6-1: Using ep0 maxpacket: 32 [ 1006.759805][ T3908] vivid-004: Generate RBDS Instead of RDS: false [ 1006.776155][ T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.789795][ T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.801805][ T3908] vivid-004: RDS Reception: true [ 1006.807833][ T3903] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1006.820166][ T3908] vivid-004: RDS Program Type: 0 inactive [ 1006.826305][ T3908] vivid-004: RDS PS Name: inactive [ 1006.827534][ T3903] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1006.833646][ T788] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1006.868750][ T3903] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1006.876341][ T3908] vivid-004: RDS Radio Text: [ 1006.880198][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.893749][ T3903] ntfs: volume version 3.1. [ 1006.904440][ T3903] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1006.917076][ T3908] inactive [ 1006.920269][ T3908] vivid-004: RDS Traffic Announcement: false inactive [ 1006.930666][ T3908] vivid-004: RDS Traffic Program: false inactive [ 1006.937730][ T3903] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1006.938851][ T788] usb 6-1: config 0 descriptor?? [ 1006.955849][ T3908] vivid-004: RDS Music: false inactive [ 1006.963966][ T3908] vivid-004: ================== END STATUS ================== [ 1006.977438][ T3903] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1006.993162][ T3903] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1007.024923][ T3903] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1007.247991][ T3919] loop4: detected capacity change from 0 to 4096 [ 1007.266384][ T3919] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1007.277445][T30275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1007.288924][ T1002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1007.370890][ T3919] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1007.397585][ T3919] ntfs3: loop4: ino=5, "/" directory corrupted [ 1007.412583][ T788] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 1007.454224][ T788] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 1007.609933][ T788] ft260 0003:0403:6030.0035: failed to retrieve chip version [ 1007.623333][ T788] ft260: probe of 0003:0403:6030.0035 failed with error -71 [ 1007.656103][ T788] usb 6-1: USB disconnect, device number 27 [ 1007.997240][T27747] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1008.070527][ T3921] loop6: detected capacity change from 0 to 32768 [ 1008.203490][T27747] usb 2-1: Using ep0 maxpacket: 32 [ 1008.221973][T27747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.257326][T27747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.290939][T27747] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1008.309568][T27747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.333297][T27747] usb 2-1: config 0 descriptor?? [ 1008.369761][T27747] hub 2-1:0.0: USB hub found [ 1008.381629][ T3947] loop4: detected capacity change from 0 to 1024 [ 1008.532155][ T3947] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.567934][ T3947] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.597509][T27747] hub 2-1:0.0: 1 port detected [ 1008.630006][ T3947] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.658379][ T3947] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.702221][ T3952] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.747147][ T3952] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.803209][T27747] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1008.837081][T27747] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1008.873146][T27747] usbhid 2-1:0.0: can't add hid device: -71 [ 1008.890599][ T11] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.890772][T27747] usbhid: probe of 2-1:0.0 failed with error -71 [ 1008.920962][ T11] hfsplus: request for non-existent node 33554434 in B*Tree [ 1008.957518][T27747] usb 2-1: USB disconnect, device number 97 [ 1008.999715][ T3960] loop5: detected capacity change from 0 to 4096 [ 1009.407207][ T56] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1009.599027][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.627188][ T56] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1009.646865][ T56] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1009.664111][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.697897][ T56] usb 5-1: config 0 descriptor?? [ 1009.716491][ T3981] loop5: detected capacity change from 0 to 4096 [ 1009.726817][ T56] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1009.745313][ T3987] netlink: 'syz.6.13153': attribute type 3 has an invalid length. [ 1009.755742][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 1009.793959][ T56] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1009.832093][ T56] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1009.868522][ T56] usb 5-1: media controller created [ 1009.888292][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1009.954668][ T3967] dvb-usb: bulk message failed: -22 (56/0) [ 1009.996221][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 1010.011397][ T56] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1010.053984][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input93 [ 1010.099094][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 1010.116501][ T3996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13157'. [ 1010.116573][ T56] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1010.182258][ T56] usb 5-1: USB disconnect, device number 33 [ 1010.281246][ T56] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1010.286737][ T4000] netlink: 'syz.5.13159': attribute type 4 has an invalid length. [ 1010.893323][ T4002] loop1: detected capacity change from 0 to 32768 [ 1011.117114][ T56] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1011.167373][ T4022] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 1011.167373][ T4022] program syz.1.13169 not setting count and/or reply_len properly [ 1011.320061][ T56] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1011.325545][ T4025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13170'. [ 1011.329650][ T56] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1011.357846][ T4025] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13170'. [ 1011.357932][ T56] usb 5-1: Product: syz [ 1011.383672][ T56] usb 5-1: Manufacturer: syz [ 1011.404290][ T56] usb 5-1: config 0 descriptor?? [ 1011.427183][ T56] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1011.451182][ T56] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 1011.720581][T26736] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1011.721365][ T56] usb 5-1: USB disconnect, device number 34 [ 1011.775532][ T56] ftdi_sio 5-1:0.0: device disconnected [ 1011.903440][ T4045] netlink: 'syz.5.13178': attribute type 3 has an invalid length. [ 1011.921945][ T4045] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13178'. [ 1011.934247][ T4046] loop1: detected capacity change from 0 to 256 [ 1011.978071][ T4046] exfat: Deprecated parameter 'namecase' [ 1012.021552][ T4046] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1012.101867][ T4050] loop6: detected capacity change from 0 to 256 [ 1012.993429][ T4082] loop5: detected capacity change from 0 to 512 [ 1013.039950][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.051272][ T4292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.095140][ T4082] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.13194: bg 0: block 393: padding at end of block bitmap is not set [ 1013.147514][ T4082] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1013.228551][ T4082] EXT4-fs (loop5): 2 truncates cleaned up [ 1013.235682][ T4082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.302259][ T4070] loop4: detected capacity change from 0 to 32768 [ 1013.403223][T29978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.425149][ T4070] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 1013.425149][ T4070] [ 1013.445128][ T4070] ERROR: (device loop4): remounting filesystem as read-only [ 1013.494339][ T4088] loop6: detected capacity change from 0 to 4096 [ 1013.538871][ T4091] loop1: detected capacity change from 0 to 2048 [ 1013.624993][ T4088] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1013.644534][ T4091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.674657][ T4088] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 1013.687400][ T4091] ext4 filesystem being mounted at /3304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.915404][ T4091] fs-verity (loop1, inode 18): Unknown hash algorithm number: 0 [ 1013.964329][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.634891][ T4106] loop4: detected capacity change from 0 to 32768 [ 1014.693577][ T4106] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1014.812766][ T4116] loop1: detected capacity change from 0 to 32768 [ 1014.816707][ T4106] XFS (loop4): Ending clean mount [ 1014.864236][ T4116] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.063696][ T4116] XFS (loop1): Ending clean mount [ 1015.156440][T27650] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1015.238280][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.583038][ T4148] bridge0: port 3(bond0) entered blocking state [ 1015.598225][ T4148] bridge0: port 3(bond0) entered disabled state [ 1015.604881][ T4148] bond0: entered allmulticast mode [ 1015.636191][ T4148] bond_slave_0: entered allmulticast mode [ 1015.659047][ T4148] bond_slave_1: entered allmulticast mode [ 1015.664858][ T4148] dummy0: entered allmulticast mode [ 1015.691570][ T4148] bond0: entered promiscuous mode [ 1015.696671][ T4148] bond_slave_0: entered promiscuous mode [ 1015.724306][ T4152] loop1: detected capacity change from 0 to 64 [ 1015.731648][ T4148] bond_slave_1: entered promiscuous mode [ 1015.757958][ T4148] dummy0: entered promiscuous mode [ 1015.764805][ T4148] bridge0: port 3(bond0) entered blocking state [ 1015.771231][ T4148] bridge0: port 3(bond0) entered forwarding state [ 1015.924305][ T4137] loop5: detected capacity change from 0 to 32768 [ 1016.027950][ T4137] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1016.273776][ T4137] XFS (loop5): Ending clean mount [ 1016.318470][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1016.318485][ T27] audit: type=1800 audit(2000000909.710:895): pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13210" name="file2" dev="loop5" ino=4423 res=0 errno=0 [ 1016.411255][T29978] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1016.777926][ T4180] loop6: detected capacity change from 0 to 256 [ 1016.808562][ T4180] exfat: Deprecated parameter 'utf8' [ 1016.898638][ T4180] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1017.003880][ T4186] loop1: detected capacity change from 0 to 2048 [ 1017.034779][ T4186] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1017.088527][ T4188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.170977][ T27] audit: type=1800 audit(2000000910.560:896): pid=4186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13229" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1017.172623][ T4186] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1017.307548][ T4186] Remounting filesystem read-only [ 1017.603292][ T4208] loop5: detected capacity change from 0 to 512 [ 1017.644147][ T4208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.745445][T29978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.929413][ T4214] loop5: detected capacity change from 0 to 2048 [ 1017.954064][ T4204] loop1: detected capacity change from 0 to 32768 [ 1017.989751][ T4214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.007264][ T4214] ext4 filesystem being mounted at /554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.107739][ T4204] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1018.130714][ T4214] fs-verity (loop5, inode 18): Unknown hash algorithm number: 0 [ 1018.250017][T29978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.399822][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 1018.499341][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13243'. [ 1018.552771][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13246'. [ 1018.753429][ T4221] loop6: detected capacity change from 0 to 32768 [ 1018.787781][ T1085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.788304][T30275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.834929][ T4221] JBD2: Ignoring recovery information on journal [ 1018.939976][ T4221] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1019.033776][ T4245] loop1: detected capacity change from 0 to 512 [ 1019.105133][ T4249] netlink: 240 bytes leftover after parsing attributes in process `syz.4.13254'. [ 1019.113872][ T4245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.134070][ T4245] ext4 filesystem being mounted at /3318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.186167][T30120] ocfs2: Unmounting device (7,6) on (node local) [ 1019.204372][ T4245] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.13252: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1019.229641][ T4251] loop4: detected capacity change from 0 to 4096 [ 1019.271531][ T4251] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1019.290035][ T4245] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1019.307389][T27747] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1019.346438][ T4251] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1019.460282][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.537377][T27747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.587132][T27747] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1019.613125][T27747] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1019.649587][T27747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.688176][T27747] usb 6-1: config 0 descriptor?? [ 1019.716689][T27747] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1019.731860][T27747] dvb-usb: bulk message failed: -22 (3/0) [ 1019.772925][T27747] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1019.805271][T27747] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1019.820023][T27747] usb 6-1: media controller created [ 1019.839011][T27747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.874848][T27747] dvb-usb: bulk message failed: -22 (6/0) [ 1019.883272][T27747] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1019.913447][T27747] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 1019.935751][ T4246] dvb-usb: bulk message failed: -22 (56/0) [ 1019.944039][T27747] dvb-usb: schedule remote query interval to 150 msecs. [ 1019.958966][T27747] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1020.013848][T27747] usb 6-1: USB disconnect, device number 28 [ 1020.069782][T27747] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1020.334489][ T4255] loop6: detected capacity change from 0 to 32768 [ 1020.361622][ T4255] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1020.454690][ T4255] XFS (loop6): Ending clean mount [ 1020.542821][ T27] audit: type=1800 audit(2000000913.930:897): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13255" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 1020.614259][T30120] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1020.709546][ T4259] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1020.877185][ T4259] XFS (loop4): Ending clean mount [ 1021.075598][ T4298] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.13271'. [ 1021.091612][T27650] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1021.711848][ T4296] set_capacity_and_notify: 1 callbacks suppressed [ 1021.711863][ T4296] loop1: detected capacity change from 0 to 32768 [ 1021.751274][ T4296] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.13270 (4296) [ 1021.807557][ T4296] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1021.832426][ T4296] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1021.845302][ T4296] BTRFS info (device loop1): setting nodatasum [ 1021.854494][ T4296] BTRFS info (device loop1): force zlib compression, level 3 [ 1021.865710][ T4296] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1021.876893][ T4296] BTRFS info (device loop1): use lzo compression, level 0 [ 1021.884255][ T4296] BTRFS info (device loop1): turning on flush-on-commit [ 1021.913210][ T4296] BTRFS info (device loop1): enabling auto defrag [ 1021.932894][ T4296] BTRFS info (device loop1): max_inline at 4096 [ 1021.955163][ T4296] BTRFS info (device loop1): using free space tree [ 1022.184679][ T4296] BTRFS info (device loop1): enabling ssd optimizations [ 1022.397293][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1022.976567][ T4351] loop4: detected capacity change from 0 to 4096 [ 1023.111257][ T4351] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1023.123152][ T4351] ntfs3: loop4: Failed to load $Extend (-22). [ 1023.137436][ T4351] ntfs3: loop4: Failed to initialize $Extend. [ 1023.581596][ T4368] netlink: 'syz.1.13293': attribute type 12 has an invalid length. [ 1023.607367][T27747] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1023.747080][T26736] Bluetooth: hci3: command 0x0406 tx timeout [ 1023.800941][T27747] usb 5-1: Using ep0 maxpacket: 8 [ 1023.818202][T27747] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1023.837636][T27747] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.857078][T27747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1023.874037][T27747] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 1023.897419][T27747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.910208][ T1085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1023.936135][T27747] usb 5-1: config 0 descriptor?? [ 1024.375822][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x3 [ 1024.408498][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.415437][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.438695][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.448571][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.455521][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.472925][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.487070][T27747] apple 0003:05AC:024C.0036: unknown main item tag 0x0 [ 1024.500641][ T788] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1024.511582][T27747] apple 0003:05AC:024C.0036: hidraw0: USB HID v0.06 Device [HID 05ac:024c] on usb-dummy_hcd.4-1/input0 [ 1024.547432][ T1002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.668934][T27747] usb 5-1: USB disconnect, device number 35 [ 1024.698153][ T4389] fido_id[4389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1024.707257][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 1024.739899][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.761831][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.769261][ T4377] loop6: detected capacity change from 0 to 32768 [ 1024.790397][ T788] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1024.811998][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.838790][ T788] usb 2-1: config 0 descriptor?? [ 1024.855013][ T4377] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1024.998867][ T5766] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1025.136458][ T4399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13307'. [ 1025.276400][ T788] corsair 0003:1B1C:1B02.0037: report_id 1961031690 is invalid [ 1025.305714][ T788] corsair 0003:1B1C:1B02.0037: item 0 4 1 8 parsing failed [ 1025.333847][ T788] corsair 0003:1B1C:1B02.0037: parse failed [ 1025.357117][ T788] corsair: probe of 0003:1B1C:1B02.0037 failed with error -22 [ 1025.561738][T27747] usb 2-1: USB disconnect, device number 98 [ 1026.344362][ T4434] loop4: detected capacity change from 0 to 2048 [ 1026.382702][ T4438] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1026.788967][ T4420] loop6: detected capacity change from 0 to 32768 [ 1027.100370][ T4448] netlink: 'syz.6.13328': attribute type 1 has an invalid length. [ 1027.433602][ T4456] vlan0: entered promiscuous mode [ 1027.444622][ T4456] veth1_to_bridge: entered promiscuous mode [ 1027.499682][ T4446] loop4: detected capacity change from 0 to 40427 [ 1027.518717][ T4446] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 1027.535063][ T4446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1027.552237][ T4446] F2FS-fs (loop4): invalid crc value [ 1027.588357][ T4446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1027.771973][ T4446] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 1027.779413][ T4446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1028.243938][ T4477] loop6: detected capacity change from 0 to 128 [ 1028.307145][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.321519][ T4477] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1028.360517][ T4469] loop5: detected capacity change from 0 to 32768 [ 1028.380686][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.13337 (4469) [ 1028.406407][ T4469] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1028.417396][ T4469] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1028.426260][ T4469] BTRFS info (device loop5): setting nodatasum [ 1028.432825][ T4469] BTRFS info (device loop5): force zlib compression, level 3 [ 1028.456243][ T4469] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1028.485116][ T4469] BTRFS info (device loop5): use lzo compression, level 0 [ 1028.511558][ T4469] BTRFS info (device loop5): turning on flush-on-commit [ 1028.525682][ T4469] BTRFS info (device loop5): enabling auto defrag [ 1028.551059][ T4469] BTRFS info (device loop5): max_inline at 4096 [ 1028.554259][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13344'. [ 1028.567286][ T4483] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.570061][ T4469] BTRFS info (device loop5): using free space tree [ 1028.590656][ T4483] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1028.727685][ T4469] BTRFS info (device loop5): enabling ssd optimizations [ 1028.752295][ T4499] netlink: 480 bytes leftover after parsing attributes in process `syz.4.13346'. [ 1028.818704][ T27] audit: type=1326 audit(2000000922.210:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.6.13347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f321319de59 code=0x0 [ 1028.919457][ T4506] loop1: detected capacity change from 0 to 128 [ 1028.983538][T29978] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1029.594405][ T1085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.687574][ T1002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1030.127259][T27747] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1030.328866][T27747] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1030.347059][T27747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.371309][T27747] usb 2-1: config 0 has no interface number 0 [ 1030.387237][T27747] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1030.398198][ T4531] loop6: detected capacity change from 0 to 32768 [ 1030.404756][T27747] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.420614][ T4531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.13359 (4531) [ 1030.442360][T27747] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1030.474625][T27747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.489308][T27747] usb 2-1: Product: syz [ 1030.499073][T27747] usb 2-1: Manufacturer: syz [ 1030.506273][ T4531] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1030.523591][T27747] usb 2-1: SerialNumber: syz [ 1030.542669][ T4531] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1030.553495][T27747] usb 2-1: config 0 descriptor?? [ 1030.577055][ T4531] BTRFS info (device loop6): setting nodatasum [ 1030.583650][ T4531] BTRFS info (device loop6): force zlib compression, level 3 [ 1030.620838][ T4531] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1030.649555][ T4531] BTRFS info (device loop6): use lzo compression, level 0 [ 1030.656885][ T4531] BTRFS info (device loop6): turning on flush-on-commit [ 1030.677014][ T4531] BTRFS info (device loop6): enabling auto defrag [ 1030.683577][ T4531] BTRFS info (device loop6): max_inline at 4096 [ 1030.707429][ T4531] BTRFS info (device loop6): using free space tree [ 1030.825722][ T4531] BTRFS info (device loop6): enabling ssd optimizations [ 1031.181837][T30120] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1031.195779][ T788] usb 2-1: USB disconnect, device number 99 [ 1031.695703][ T4590] loop5: detected capacity change from 0 to 2048 [ 1031.780106][ T4590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1031.861569][ T4590] overlayfs: upper fs needs to support d_type. [ 1031.891222][ T4590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1031.936352][ T4590] overlayfs: failed to set xattr on upper [ 1031.950487][ T4590] overlayfs: ...falling back to index=off. [ 1031.956353][ T4590] overlayfs: ...falling back to uuid=null. [ 1032.127290][T29978] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1032.149744][T29978] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1032.391757][ T4614] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 1032.486695][ T4618] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1032.527540][ T56] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1032.732167][ T56] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.757497][ T56] usb 2-1: config 0 has no interface number 0 [ 1032.784794][ T56] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1032.806381][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.827480][ T56] usb 2-1: Product: syz [ 1032.831723][ T56] usb 2-1: Manufacturer: syz [ 1032.847064][ T56] usb 2-1: SerialNumber: syz [ 1032.868006][ T56] usb 2-1: config 0 descriptor?? [ 1032.869178][T30275] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.893567][ T56] usb 2-1: selecting invalid altsetting 1 [ 1032.910190][ T56] dvb_ttusb_budget: ttusb_init_controller: error [ 1032.920387][ T56] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1032.994840][ T56] DVB: Unable to find symbol stv0299_attach() [ 1033.037421][ T56] DVB: Unable to find symbol tda8083_attach() [ 1033.046803][ T56] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1033.083083][T30275] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.139020][ T56] usb 2-1: USB disconnect, device number 100 [ 1033.246914][ T4634] loop4: detected capacity change from 0 to 256 [ 1033.285898][T30275] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.319221][ T4634] FAT-fs (loop4): Directory bread(block 64) failed [ 1033.325874][ T4634] FAT-fs (loop4): Directory bread(block 65) failed [ 1033.338272][ T4634] FAT-fs (loop4): Directory bread(block 66) failed [ 1033.345146][ T4634] FAT-fs (loop4): Directory bread(block 67) failed [ 1033.360526][ T4634] FAT-fs (loop4): Directory bread(block 68) failed [ 1033.397204][ T4634] FAT-fs (loop4): Directory bread(block 69) failed [ 1033.403903][ T4634] FAT-fs (loop4): Directory bread(block 70) failed [ 1033.421555][T30275] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.432717][ T4634] FAT-fs (loop4): Directory bread(block 71) failed [ 1033.440075][ T4634] FAT-fs (loop4): Directory bread(block 72) failed [ 1033.446754][ T4634] FAT-fs (loop4): Directory bread(block 73) failed [ 1033.773712][T26736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.791401][T26736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.803373][T26736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.816893][T26736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.825089][T26736] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1033.835440][T26736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1034.091402][T30275] tipc: Left network mode [ 1034.348107][ T788] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1034.547130][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 1034.554307][ T788] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.570448][ T788] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1034.583859][ T788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1034.594824][ T788] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1034.614288][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.639093][ T788] usb 5-1: config 0 descriptor?? [ 1034.759684][ T4682] loop1: detected capacity change from 0 to 256 [ 1034.913026][ T5776] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1034.930700][ T5776] FAT-fs (loop1): Filesystem has been set read-only [ 1034.940602][ T5776] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1035.035351][ T4642] chnl_net:caif_netlink_parms(): no params data found [ 1035.063676][ T788] sony 0003:1345:3008.0038: global environment stack underflow [ 1035.081270][ T788] sony 0003:1345:3008.0038: item 0 4 1 11 parsing failed [ 1035.102718][ T788] sony 0003:1345:3008.0038: parse failed [ 1035.114565][ T788] sony: probe of 0003:1345:3008.0038 failed with error -22 [ 1035.326369][ T8] usb 5-1: USB disconnect, device number 36 [ 1035.495141][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.503082][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.513454][ T4642] bridge_slave_0: entered allmulticast mode [ 1035.524351][ T4642] bridge_slave_0: entered promiscuous mode [ 1035.564359][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.572788][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.580509][ T4642] bridge_slave_1: entered allmulticast mode [ 1035.589089][ T4642] bridge_slave_1: entered promiscuous mode [ 1035.613632][ T27] audit: type=1326 audit(2000000929.000:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1035.675553][ T27] audit: type=1326 audit(2000000929.000:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1035.751509][ T27] audit: type=1326 audit(2000000929.000:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1035.806563][ T27] audit: type=1326 audit(2000000929.000:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1035.854407][ T27] audit: type=1326 audit(2000000929.000:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1035.922717][T26736] Bluetooth: hci1: command tx timeout [ 1035.949337][ T4642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.998716][ T27] audit: type=1326 audit(2000000929.000:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1036.059617][ T4642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.089596][ T27] audit: type=1326 audit(2000000929.000:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.6.13423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1036.189591][ T4642] team0: Port device team_slave_0 added [ 1036.306093][ T4642] team0: Port device team_slave_1 added [ 1036.351229][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.385267][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.407075][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1036.414553][T30275] hsr_slave_0: left promiscuous mode [ 1036.427441][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1036.435366][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1036.444344][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1036.450903][T30275] hsr_slave_1: left promiscuous mode [ 1036.485835][T30275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.513120][T30275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.525216][T30275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.533806][T30275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.552093][T30275] bridge_slave_1: left allmulticast mode [ 1036.568240][T30275] bridge_slave_1: left promiscuous mode [ 1036.574049][T30275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.588601][ T788] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1036.588793][T30275] bridge_slave_0: left allmulticast mode [ 1036.617044][T30275] bridge_slave_0: left promiscuous mode [ 1036.627944][T30275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.685157][T30275] bridge0: left promiscuous mode [ 1036.691582][ T4700] loop6: detected capacity change from 0 to 40427 [ 1036.700335][T30275] veth1_macvtap: left promiscuous mode [ 1036.705933][ T4700] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1036.713473][T30275] veth0_macvtap: left promiscuous mode [ 1036.719115][ T4700] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1036.737220][T30275] veth1_vlan: left promiscuous mode [ 1036.742584][T30275] veth0_vlan: left promiscuous mode [ 1036.748723][ T4700] F2FS-fs (loop6): heap/no_heap options were deprecated [ 1036.769500][ T4700] F2FS-fs (loop6): invalid crc value [ 1036.790039][ T4700] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1036.800934][ T788] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1036.832585][ T788] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.867386][ T788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1036.874067][ T788] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1036.903950][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.926474][ T788] usb 5-1: config 0 descriptor?? [ 1036.970672][ T4700] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1036.984145][ T4700] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1037.181713][T30275] pim6reg2 (unregistering): left allmulticast mode [ 1037.346860][ T788] hid (null): report_id 0 is invalid [ 1037.370973][ T788] hid-steam 0003:28DE:1102.0039: report_id 0 is invalid [ 1037.387326][ T788] hid-steam 0003:28DE:1102.0039: item 0 0 1 8 parsing failed [ 1037.414762][ T788] hid-steam 0003:28DE:1102.0039: steam_probe:parse of hid interface failed [ 1037.437301][ T788] hid-steam: probe of 0003:28DE:1102.0039 failed with error -22 [ 1037.563290][ T788] usb 5-1: USB disconnect, device number 37 [ 1037.991863][T26736] Bluetooth: hci1: command tx timeout [ 1038.223573][T30275] team0 (unregistering): Port device team_slave_1 removed [ 1038.318176][T30275] team0 (unregistering): Port device team_slave_0 removed [ 1038.404220][T30275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.495254][T30275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.552812][ T4729] loop4: detected capacity change from 0 to 40427 [ 1038.565708][T26736] Bluetooth: hci2: command tx timeout [ 1038.596650][ T4729] F2FS-fs (loop4): invalid crc value [ 1038.628432][ T4729] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1038.699323][ T4729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1039.360950][T30275] bond0 (unregistering): Released all slaves [ 1039.572088][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.584283][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.611467][ T4642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.647761][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.654754][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.705543][ T4642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.785668][ T4742] loop6: detected capacity change from 0 to 1024 [ 1039.857389][ T788] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1039.928761][ T4642] hsr_slave_0: entered promiscuous mode [ 1039.959865][ T4642] hsr_slave_1: entered promiscuous mode [ 1039.972683][ T60] hfsplus: b-tree write err: -5, ino 8 [ 1040.067203][T26736] Bluetooth: hci1: command tx timeout [ 1040.085149][ T788] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1040.126172][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.181587][ T788] usb 5-1: Product: syz [ 1040.185823][ T788] usb 5-1: Manufacturer: syz [ 1040.231848][ T788] usb 5-1: SerialNumber: syz [ 1040.297924][ T788] usb 5-1: config 0 descriptor?? [ 1040.309549][ T788] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1040.442891][ T4755] binder: 4754:4755 ioctl 40046210 0 returned -14 [ 1040.501968][T30275] IPVS: stop unused estimator thread 0... [ 1040.637702][T26736] Bluetooth: hci2: command tx timeout [ 1040.740297][ T4642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1040.755206][ T4642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1040.812905][ T4642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1040.825100][ T4642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1040.883224][ T4711] chnl_net:caif_netlink_parms(): no params data found [ 1040.958182][ T788] gspca_sunplus: reg_w_riv err -71 [ 1040.963456][ T788] sunplus: probe of 5-1:0.0 failed with error -71 [ 1040.995885][ T788] usb 5-1: USB disconnect, device number 38 [ 1041.120451][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.134088][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.142108][ T4711] bridge_slave_0: entered allmulticast mode [ 1041.150181][ T4711] bridge_slave_0: entered promiscuous mode [ 1041.186581][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.196148][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.203514][ T4711] bridge_slave_1: entered allmulticast mode [ 1041.212581][ T4711] bridge_slave_1: entered promiscuous mode [ 1041.303095][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.323806][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.433683][ T4711] team0: Port device team_slave_0 added [ 1041.453992][ T4711] team0: Port device team_slave_1 added [ 1041.566158][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.576511][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.585698][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.611657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.618434][ T4782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13439'. [ 1041.634582][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.878348][ T4789] loop4: detected capacity change from 0 to 512 [ 1041.927273][ T4789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1041.975372][ T4789] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.13441: bad orphan inode 131083 [ 1042.000101][ T4789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.013829][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.023231][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.050833][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.097522][ T4642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.141757][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.148964][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.156678][T26736] Bluetooth: hci1: command tx timeout [ 1042.184947][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.243313][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.250506][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.305004][ T4711] hsr_slave_0: entered promiscuous mode [ 1042.315692][ T4711] hsr_slave_1: entered promiscuous mode [ 1042.327263][ T4711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.334980][ T4711] Cannot create hsr debugfs directory [ 1042.489321][ T4642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.708702][T26736] Bluetooth: hci2: command tx timeout [ 1042.890100][ T4711] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1042.920332][ T4711] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1042.938833][ T4711] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1042.953222][ T4711] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1042.981631][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.208831][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.255189][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.292323][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.299599][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.324960][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.332208][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.676257][ T4642] veth0_vlan: entered promiscuous mode [ 1043.795433][ T4642] veth1_vlan: entered promiscuous mode [ 1043.864045][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.033001][ T4642] veth0_macvtap: entered promiscuous mode [ 1044.051896][ T4642] veth1_macvtap: entered promiscuous mode [ 1044.096478][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.131870][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.157693][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.187202][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.206175][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.305027][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.334997][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.356608][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.367627][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.381918][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.418110][ T4743] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1044.479971][ T4642] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.492145][ T4642] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.504264][ T4642] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.516549][ T4642] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.631798][ T4743] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1044.652003][ T4743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.667538][ T4743] usb 5-1: Product: syz [ 1044.671765][ T4743] usb 5-1: Manufacturer: syz [ 1044.687522][ T4743] usb 5-1: SerialNumber: syz [ 1044.717956][ T4743] usb 5-1: config 0 descriptor?? [ 1044.751581][ T4743] ch341 5-1:0.0: ch341-uart converter detected [ 1044.755961][ T4711] veth0_vlan: entered promiscuous mode [ 1044.787403][T26736] Bluetooth: hci2: command tx timeout [ 1044.835950][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.848224][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.900947][ T4711] veth1_vlan: entered promiscuous mode [ 1044.955424][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.963624][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.019906][ T4711] veth0_macvtap: entered promiscuous mode [ 1045.081420][ T4711] veth1_macvtap: entered promiscuous mode [ 1045.143983][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.191744][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.211640][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.237235][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.253555][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.265335][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.285883][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.332762][T30275] hsr_slave_0: left promiscuous mode [ 1045.339405][T30275] hsr_slave_1: left promiscuous mode [ 1045.345708][T30275] bridge_slave_1: left allmulticast mode [ 1045.352373][T30275] bridge_slave_1: left promiscuous mode [ 1045.363631][T30275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.378959][T30275] bridge_slave_0: left allmulticast mode [ 1045.384845][ T4743] usb 5-1: failed to send control message: -71 [ 1045.392614][ T4870] loop7: detected capacity change from 0 to 4096 [ 1045.395238][ T4743] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1045.407802][T30275] bridge_slave_0: left promiscuous mode [ 1045.413552][T30275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.426116][ T4870] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 1045.449742][ T4743] usb 5-1: USB disconnect, device number 39 [ 1045.457376][ T4743] ch341 5-1:0.0: device disconnected [ 1045.981094][ T788] IPVS: starting estimator thread 0... [ 1046.078149][ T4879] IPVS: using max 24 ests per chain, 57600 per kthread [ 1046.106364][ T4881] Bluetooth: MGMT ver 1.22 [ 1046.182244][T30275] bond3 (unregistering): Released all slaves [ 1046.800807][T30275] bond2 (unregistering): Released all slaves [ 1046.936081][ T4905] loop7: detected capacity change from 0 to 1024 [ 1046.989460][ T4907] hugetlbfs: Bad value 'ß' for mount option 'size' [ 1046.989460][ T4907] [ 1047.222210][T30275] bond1 (unregistering): Released all slaves [ 1047.240865][ T4292] hfsplus: b-tree write err: -5, ino 8 [ 1047.293268][T30275] bond0 (unregistering): Released all slaves [ 1047.739780][ T4916] loop4: detected capacity change from 0 to 16 [ 1047.776879][ T4916] erofs: (device loop4): mounted with root inode @ nid 36. [ 1047.821704][ T4916] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 1047.835058][T30275] virt_wifi0 (unregistering): left allmulticast mode [ 1047.842807][ T4916] syz.4.13473: attempt to access beyond end of device [ 1047.842807][ T4916] loop4: rw=0, sector=4294967295, nr_sectors = 2 limit=16 [ 1047.864898][T30275] team0 (unregistering): Port device virt_wifi0 removed [ 1048.243781][ T4922] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1048.263734][ T4922] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1048.440387][T30275] team_slave_1 (unregistering): left allmulticast mode [ 1048.451878][T30275] team0 (unregistering): Port device team_slave_1 removed [ 1049.084134][T30275] team0 (unregistering): left allmulticast mode [ 1049.235323][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.248753][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.263176][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.284216][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.294618][ T4711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.308666][ T4711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.323107][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.460546][ T4711] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.513311][ T4711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.545544][ T4711] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.568099][ T4711] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.754155][ T4935] loop4: detected capacity change from 0 to 2048 [ 1049.862956][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.881747][ T4935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.888844][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.004663][ T4940] loop6: detected capacity change from 0 to 4096 [ 1050.030017][ T4926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.067476][ T4926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.197283][ T4946] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1050.455407][ T4951] loop8: detected capacity change from 0 to 128 [ 1050.490275][ T4954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13486'. [ 1050.511117][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13486'. [ 1050.568614][ T4951] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1050.655973][ T4951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1050.979566][ T4968] loop7: detected capacity change from 0 to 64 [ 1051.843617][ T4997] loop6: detected capacity change from 0 to 4096 [ 1051.865856][ T4997] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1052.008375][ T4997] ntfs: volume version 3.1. [ 1052.141876][ T4997] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1052.193687][ T4997] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1052.233067][ T4997] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to map page. [ 1052.262342][ T4997] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1052.292860][ T4997] ntfs: (device loop6): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1052.461644][ T5021] loop8: detected capacity change from 0 to 512 [ 1052.501422][ T5021] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1052.534438][ T5021] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.13510: bg 0: block 4: invalid block bitmap [ 1052.618990][ T5021] EXT4-fs (loop8): Remounting filesystem read-only [ 1052.624051][ T5012] loop4: detected capacity change from 0 to 32768 [ 1052.625659][ T5021] EXT4-fs (loop8): 1 truncate cleaned up [ 1052.728616][ T5021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.776186][ T5012] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1052.882958][ T27] audit: type=1800 audit(2000000946.270:906): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13508" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 1052.960135][ T27] audit: type=1800 audit(2000000946.310:907): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13504" name="file1" dev="loop6" ino=67 res=0 errno=0 [ 1053.099282][ T4711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.175045][ T5012] syz.4.13508 (5012) used greatest stack depth: 17944 bytes left [ 1053.213487][T30120] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1053.318283][T27650] ocfs2: Unmounting device (7,4) on (node local) [ 1053.531199][ T5042] loop6: detected capacity change from 0 to 16 [ 1053.564205][ T5042] erofs: (device loop6): mounted with root inode @ nid 36. [ 1053.644098][ T5042] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1053.684858][ T5047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13513'. [ 1053.694167][ T5042] erofs: (device loop6): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1053.705339][ T5042] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1053.735437][ T5042] erofs: (device loop6): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1053.775190][ T5042] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1053.806866][ T5042] erofs: (device loop6): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1053.835158][ T5042] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1053.870334][ T5042] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1053.888302][ T5042] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1053.923269][ T27] audit: type=1800 audit(2000000947.310:908): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13514" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1053.943036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1054.392544][ T5068] loop8: detected capacity change from 0 to 128 [ 1054.400648][T27747] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1054.443766][ T5068] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1054.497015][ T5068] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.529031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1054.605907][T27747] usb 5-1: Using ep0 maxpacket: 32 [ 1054.636430][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.638725][ T4711] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1054.655793][T27747] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.702823][T27747] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.737198][T27747] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.755397][T27747] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.817537][T27747] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1054.824223][T27747] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1054.855173][T27747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.870834][ T5089] tipc: MTU too low for tipc bearer [ 1054.888095][T27747] usb 5-1: config 0 descriptor?? [ 1055.224475][ T5098] loop7: detected capacity change from 0 to 4096 [ 1055.333041][T27747] corsair-cpro 0003:1B1C:0C10.003A: unknown main item tag 0x3 [ 1055.357042][T27747] corsair-cpro 0003:1B1C:0C10.003A: item fetching failed at offset 2/5 [ 1055.393936][T27747] corsair-cpro: probe of 0003:1B1C:0C10.003A failed with error -22 [ 1055.603897][T27747] usb 5-1: USB disconnect, device number 40 [ 1055.660760][ T5103] loop8: detected capacity change from 0 to 8192 [ 1055.695413][ T5103] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1055.730256][ T5103] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 1055.765569][ T5103] REISERFS (device loop8): using ordered data mode [ 1055.820617][ T5103] reiserfs: using flush barriers [ 1055.867473][ T5103] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1055.901308][ T5103] REISERFS (device loop8): checking transaction log (loop8) [ 1055.937240][ T5103] REISERFS (device loop8): Using r5 hash to sort names [ 1055.965284][ T5103] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 1056.384077][ T5137] tmpfs: Cannot change global quota limit on remount [ 1056.652174][ T5149] loop8: detected capacity change from 0 to 1024 [ 1056.665028][ T5149] EXT4-fs: Ignoring removed orlov option [ 1056.732523][ T5149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.901078][ T4711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.856869][ T5196] loop4: detected capacity change from 0 to 4096 [ 1057.952121][ T5208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1058.719800][ T5241] loop7: detected capacity change from 0 to 128 [ 1058.776440][ T27] audit: type=1326 audit(2000000952.160:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.13574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94f959de59 code=0x0 [ 1058.821428][ T5241] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1058.837492][ T5241] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.854330][ T5245] loop6: detected capacity change from 0 to 2048 [ 1058.972788][ T5252] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1059.043897][ T4642] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1059.789038][ T5276] xt_socket: unknown flags 0xe4 [ 1060.044286][ T5274] loop4: detected capacity change from 0 to 8192 [ 1060.108844][ T5274] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1060.181467][ T5274] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1060.237250][ T5274] REISERFS (device loop4): using ordered data mode [ 1060.286575][ T5274] reiserfs: using flush barriers [ 1060.322782][ T5274] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1060.393724][ T5274] REISERFS (device loop4): checking transaction log (loop4) [ 1060.608250][ T5274] REISERFS (device loop4): Using tea hash to sort names [ 1060.620961][ T5274] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1061.118299][ T5307] loop4: detected capacity change from 0 to 4096 [ 1061.125842][ T5307] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1061.247536][ T5319] netlink: 'syz.7.13595': attribute type 4 has an invalid length. [ 1061.252539][ T5307] ntfs: volume version 3.1. [ 1061.434593][ T5307] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1061.489981][ T5307] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1061.581126][ T5307] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 1061.609377][ T5307] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1061.629114][ T5307] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1061.739378][ T27] audit: type=1800 audit(2000000955.120:910): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13592" name="file1" dev="loop4" ino=67 res=0 errno=0 [ 1061.839975][T27650] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1062.037404][ T788] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1062.234821][ T788] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1062.244488][ T788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.265275][ T788] usb 9-1: Product: syz [ 1062.274993][ T788] usb 9-1: Manufacturer: syz [ 1062.284284][ T788] usb 9-1: SerialNumber: syz [ 1062.304774][ T788] usb 9-1: config 0 descriptor?? [ 1062.360848][ T5353] loop4: detected capacity change from 0 to 2048 [ 1062.397202][ T5353] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1062.438317][ T5356] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.537520][ T5339] loop7: detected capacity change from 0 to 32768 [ 1062.616119][ T788] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1062.702504][ T5339] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1062.772904][ T27] audit: type=1800 audit(2000000956.160:911): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13601" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 1063.043477][ T788] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1063.061334][ T788] usb 9-1: USB disconnect, device number 2 [ 1063.157125][ T4642] ocfs2: Unmounting device (7,7) on (node local) [ 1063.896904][ T5402] loop7: detected capacity change from 0 to 1024 [ 1063.939164][ T5402] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1064.375010][ T5412] loop8: detected capacity change from 0 to 4096 [ 1064.425700][ T5412] ntfs: (device loop8): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1064.499194][ T5412] ntfs: volume version 3.1. [ 1064.593642][ T5412] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1064.637077][ T5412] ntfs: (device loop8): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1064.675102][ T5412] ntfs: (device loop8): ntfs_cluster_alloc(): Failed to map page. [ 1064.714909][ T5412] ntfs: (device loop8): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1064.757047][ T5412] ntfs: (device loop8): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1064.763811][ T5441] program syz.7.13631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.118648][ T27] audit: type=1800 audit(2000000958.510:912): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.13620" name="file1" dev="loop8" ino=67 res=0 errno=0 [ 1065.170045][ T5450] macvtap1: entered promiscuous mode [ 1065.312769][ T4711] ntfs: (device loop8): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1065.665892][ T5428] loop6: detected capacity change from 0 to 32768 [ 1065.767454][ T5428] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1065.977791][ T5428] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1066.130124][ T5428] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1066.195696][ T5428] XFS (loop6): Ending clean mount [ 1066.383206][T30120] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1066.483532][ T5491] loop8: detected capacity change from 0 to 1024 [ 1066.575038][ T5491] hfsplus: invalid length 2325 has been corrected to 255 [ 1066.622003][ T5491] hfsplus: invalid length 2325 has been corrected to 255 [ 1066.720008][ T5491] hfsplus: invalid length 2325 has been corrected to 255 [ 1066.980089][ T5480] loop4: detected capacity change from 0 to 32768 [ 1067.377924][ T5518] rdma_op ffff8880314561f0 conn xmit_rdma 0000000000000000 [ 1067.902143][ T5515] loop8: detected capacity change from 0 to 32768 [ 1067.931189][ T5536] loop7: detected capacity change from 0 to 64 [ 1067.993481][ T5515] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1068.271861][ T4711] ocfs2: Unmounting device (7,8) on (node local) [ 1068.361708][ T5549] tipc: Enabling of bearer rejected, failed to enable media [ 1068.879437][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13667'. [ 1069.083285][ T5581] loop4: detected capacity change from 0 to 128 [ 1069.133806][ T5581] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1069.185001][ T5581] ext4 filesystem being mounted at /946/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.356474][T27650] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.082875][ T5601] loop8: detected capacity change from 0 to 32768 [ 1070.094422][ T5617] loop4: detected capacity change from 0 to 2048 [ 1070.159458][ T5617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.190505][ T5601] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1070.279669][ T5617] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1070.347628][ T5601] XFS (loop8): Ending clean mount [ 1070.496272][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.594380][ T4711] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1071.230835][ T5665] loop8: detected capacity change from 0 to 256 [ 1071.893521][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13694'. [ 1071.912477][ T5681] netlink: 'syz.8.13694': attribute type 22 has an invalid length. [ 1071.922094][ T5681] netlink: 36 bytes leftover after parsing attributes in process `syz.8.13694'. [ 1071.945042][ T5661] loop4: detected capacity change from 0 to 40427 [ 1071.969256][ T5661] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1071.987527][ T5661] F2FS-fs (loop4): invalid crc value [ 1072.014015][ T5661] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1072.157149][ T5661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1072.280281][ T5691] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13696'. [ 1073.269469][ T27] audit: type=1326 audit(2000000966.650:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.354793][ T5730] loop8: detected capacity change from 0 to 256 [ 1073.386599][ T27] audit: type=1326 audit(2000000966.650:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.399081][ T5730] exfat: Deprecated parameter 'utf8' [ 1073.457438][ T27] audit: type=1326 audit(2000000966.650:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.513224][ T5730] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1073.525826][ T27] audit: type=1326 audit(2000000966.660:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.586478][ T5735] loop4: detected capacity change from 0 to 256 [ 1073.598539][ T5736] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1073.641393][ T27] audit: type=1326 audit(2000000966.660:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.673835][ T5735] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 1073.751104][ T27] audit: type=1326 audit(2000000966.660:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.856121][ T5745] loop7: detected capacity change from 0 to 8 [ 1073.873592][ T27] audit: type=1326 audit(2000000966.660:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1073.950124][ T27] audit: type=1326 audit(2000000966.660:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.13707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1074.146107][ T5759] loop7: detected capacity change from 0 to 128 [ 1074.173583][ T5759] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1074.199908][ T5759] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1074.250970][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13717'. [ 1074.361254][ T27] audit: type=1326 audit(2000000967.740:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.4.13718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x0 [ 1074.966514][ T5760] loop8: detected capacity change from 0 to 32768 [ 1075.295529][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13728'. [ 1075.499972][ T5793] loop6: detected capacity change from 0 to 32768 [ 1075.558368][ T5793] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1075.717342][ T5793] XFS (loop6): Ending clean mount [ 1075.745443][ T5813] loop8: detected capacity change from 0 to 128 [ 1075.777335][ T5813] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1075.861256][ T5813] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1075.908596][ T5813] ext2 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.922788][T30120] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1075.937743][ T5800] loop4: detected capacity change from 0 to 32768 [ 1075.982113][ T5813] EXT4-fs warning (device loop8): verify_group_input:169: Last group not full [ 1076.024163][ T5800] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1076.135373][ T4711] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.277108][ T5800] XFS (loop4): Ending clean mount [ 1076.446102][ T5832] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1076.505932][T27650] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1077.883749][ T5879] tipc: Started in network mode [ 1077.901654][ T5879] tipc: Node identity 5f000000000000000000120000000001, cluster identity 4711 [ 1077.942808][ T5879] tipc: Enabling of bearer rejected, failed to enable media [ 1078.294771][ T5901] loop4: detected capacity change from 0 to 512 [ 1078.441614][ T5901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.520676][ T5901] ext4 filesystem being mounted at /966/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.598892][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.633038][ T5973] loop4: detected capacity change from 0 to 128 [ 1079.676225][ T5973] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1079.722110][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.722110][ T5973] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 1079.740150][ T5973] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 1079.751782][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.751782][ T5973] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 1079.772245][ T5973] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 1079.781360][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.781360][ T5973] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 1079.800342][ T5973] Buffer I/O error on dev loop4, logical block 1157, async page read [ 1079.809891][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.809891][ T5973] loop4: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 1079.838343][ T5973] Buffer I/O error on dev loop4, logical block 3211264, async page read [ 1079.846903][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.846903][ T5973] loop4: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 1079.861523][ T5973] Buffer I/O error on dev loop4, logical block 8768635, async page read [ 1079.870392][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.870392][ T5973] loop4: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 1079.884755][ T5973] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 1079.898664][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.898664][ T5973] loop4: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 1079.918333][ T5973] Buffer I/O error on dev loop4, logical block 209285, async page read [ 1079.929435][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.929435][ T5973] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 1079.954876][ T5973] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 1079.966324][ T5973] syz.4.13768: attempt to access beyond end of device [ 1079.966324][ T5973] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 1079.990034][ T5973] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 1080.004031][ T5973] syz.4.13768: attempt to access beyond end of device [ 1080.004031][ T5973] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 1080.026163][ T5973] Buffer I/O error on dev loop4, logical block 1157, async page read [ 1080.107855][T27650] sysv_free_block: trying to free block not in datazone [ 1080.139065][T27650] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1080.160408][ T5986] No buffer was provided with the request [ 1080.301532][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1080.313957][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1080.324081][ T5993] netlink: 'syz.4.13775': attribute type 13 has an invalid length. [ 1080.605512][ T5991] loop8: detected capacity change from 0 to 32768 [ 1080.622948][ T5991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.13776 (5991) [ 1080.667408][ T5991] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1080.686713][ T5991] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1080.696830][ T5991] BTRFS info (device loop8): enabling auto defrag [ 1080.704229][ T5991] BTRFS info (device loop8): max_inline at 4096 [ 1080.711227][ T5991] BTRFS info (device loop8): using free space tree [ 1080.812298][ T5991] BTRFS info (device loop8): enabling ssd optimizations [ 1080.850686][ T5991] BTRFS info (device loop8): auto enabling async discard [ 1081.038791][ T4711] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1081.245907][ T6025] loop6: detected capacity change from 0 to 64 [ 1081.642740][ T6041] loop6: detected capacity change from 0 to 512 [ 1081.659423][ T4863] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1081.711124][ T6041] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1081.744910][ T6041] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.13789: bad orphan inode 15 [ 1081.804096][ T6041] ext4_test_bit(bit=14, block=18) = 1 [ 1081.859160][ T6041] is_bad_inode(inode)=0 [ 1081.863985][ T6041] NEXT_ORPHAN(inode)=1023 [ 1081.870021][ T6041] max_ino=32 [ 1081.873265][ T6041] i_nlink=0 [ 1081.885337][ T6041] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #15: comm syz.6.13789: corrupted xattr block 19: e_value size too large [ 1081.944623][ T4863] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.965257][ T4863] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.969140][ T6041] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 1081.986887][ T4863] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.000054][ T6041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 1082.045909][ T4863] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1082.096625][ T4863] usb 9-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1082.115671][ T4863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.187468][ T4863] usb 9-1: config 0 descriptor?? [ 1082.286201][T30120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 1082.629047][ T4863] kye 0003:0458:5015.003B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1082.666588][ T4863] kye 0003:0458:5015.003B: unknown main item tag 0x0 [ 1082.722623][ T4863] kye 0003:0458:5015.003B: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.8-1/input0 [ 1082.777090][ T4863] kye 0003:0458:5015.003B: tablet-enabling feature report not found [ 1082.826245][ T4863] kye 0003:0458:5015.003B: tablet enabling failed [ 1082.846142][ T4863] usb 9-1: USB disconnect, device number 3 [ 1082.987675][ T6075] fido_id[6075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1083.866118][ T6115] bridge0: entered promiscuous mode [ 1083.966775][ T6096] loop6: detected capacity change from 0 to 40427 [ 1084.028146][ T6096] F2FS-fs (loop6): invalid crc value [ 1084.064730][ T6096] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1084.094642][ T6123] loop7: detected capacity change from 0 to 512 [ 1084.119222][ T6125] loop8: detected capacity change from 0 to 1024 [ 1084.178625][ T6123] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1084.206398][ T6123] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.13818: bad orphan inode 15 [ 1084.320106][ T6123] ext4_test_bit(bit=14, block=18) = 1 [ 1084.325551][ T6123] is_bad_inode(inode)=0 [ 1084.337455][ T6123] NEXT_ORPHAN(inode)=1023 [ 1084.352691][ T6096] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1084.358878][ T6123] max_ino=32 [ 1084.366811][ T6123] i_nlink=0 [ 1084.377612][ T6123] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2971: inode #15: comm syz.7.13818: corrupted xattr block 19: e_value size too large [ 1084.450002][ T6123] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 1084.478444][ T6123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 1084.490874][ T6096] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 1084.719268][ T6135] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13823'. [ 1084.760170][ T4642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 1084.811933][ T6137] loop4: detected capacity change from 0 to 256 [ 1084.835942][ T6137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d) [ 1085.140310][ T6145] loop4: detected capacity change from 0 to 1024 [ 1085.175199][ T6145] EXT4-fs: Ignoring removed orlov option [ 1085.261208][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13830'. [ 1085.306422][ T6145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.531154][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.144771][ T6193] loop6: detected capacity change from 0 to 512 [ 1086.196254][ T6193] EXT4-fs: Ignoring removed oldalloc option [ 1086.242509][ T6193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1086.252081][ T6193] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1086.276190][ T6193] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1086.293676][ T6193] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1086.322550][ T6193] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #13: comm syz.6.13843: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1086.354766][ T6193] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.13843: couldn't read orphan inode 13 (err -117) [ 1086.374335][ T6193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1086.498728][ T6193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1086.527514][ T6207] loop8: detected capacity change from 0 to 64 [ 1086.538905][ T6193] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1086.581554][ T6193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 1086.651103][ T6193] System zones: 0-2, 18-18, 34-34 [ 1086.656659][ T6193] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1086.835368][T30120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.923346][ T6217] netlink: 'syz.8.13850': attribute type 3 has an invalid length. [ 1087.008527][ T6223] loop7: detected capacity change from 0 to 2048 [ 1087.104208][ T6229] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1087.331095][ T6223] NILFS error (device loop7): nilfs_dotdot: directory #12 missing '..' [ 1087.415998][ T6223] Remounting filesystem read-only [ 1087.567404][ T4642] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1087.576363][ T4642] NILFS (loop7): discard dirty page: offset=0, ino=18 [ 1087.605316][ T4642] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 1087.621326][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.667119][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.687753][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.731906][ T4642] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 1087.748835][ T4642] NILFS (loop7): discard dirty block: blocknr=18, size=1024 [ 1087.776514][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.805827][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.826747][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.867276][ T4642] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 1087.883599][ T6259] netlink: 'syz.6.13866': attribute type 1 has an invalid length. [ 1087.888530][ T4642] NILFS (loop7): discard dirty block: blocknr=35, size=1024 [ 1087.916536][ T4642] NILFS (loop7): discard dirty block: blocknr=36, size=1024 [ 1087.935074][ T4642] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 1087.947176][ T4642] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 1087.954564][ T4642] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 1088.007066][ T4642] NILFS (loop7): discard dirty block: blocknr=39, size=1024 [ 1088.022590][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.047106][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.087849][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.103612][ T6266] loop4: detected capacity change from 0 to 1024 [ 1088.129355][ T4642] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 1088.136124][ T4642] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 1088.164135][ T4642] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 1088.197157][ T4642] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 1088.204699][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.242117][ T4642] NILFS (loop7): discard dirty page: offset=65536, ino=3 [ 1088.270888][ T6266] VFS: Lookup of 'file0' in hfsplus loop4 would have caused loop [ 1088.286837][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.321381][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.348430][ T4642] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 1088.365919][ T4642] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1088.503408][T26736] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1088.766005][ T6290] loop6: detected capacity change from 0 to 1024 [ 1088.986122][ T6298] loop8: detected capacity change from 0 to 1024 [ 1089.576727][ T6317] netlink: 'syz.4.13884': attribute type 3 has an invalid length. [ 1089.654003][ T6294] loop7: detected capacity change from 0 to 32768 [ 1089.802840][ T6294] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1089.953235][ T6294] XFS (loop7): Ending clean mount [ 1090.157761][ T4642] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1090.941172][ T6337] loop8: detected capacity change from 0 to 32768 [ 1090.976613][ T6337] (syz.8.13888,6337,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.039939][ T6337] (syz.8.13888,6337,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.098248][ T6337] JBD2: Ignoring recovery information on journal [ 1091.157842][ T6337] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1091.171946][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13901'. [ 1091.210674][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13901'. [ 1091.221316][ T6375] netlink: 'syz.7.13901': attribute type 11 has an invalid length. [ 1091.854430][ T4711] ocfs2: Unmounting device (7,8) on (node local) [ 1092.443265][ T6413] loop8: detected capacity change from 0 to 4096 [ 1093.026194][ T6395] loop7: detected capacity change from 0 to 40427 [ 1093.035818][ T6404] loop4: detected capacity change from 0 to 32768 [ 1093.081932][ T6395] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1093.082369][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13919'. [ 1093.099808][ T6395] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1093.127947][ T6395] F2FS-fs (loop7): heap/no_heap options were deprecated [ 1093.147700][ T6395] F2FS-fs (loop7): invalid crc value [ 1093.161738][ T6395] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1093.176042][ T6404] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1093.382341][T27650] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1093.439016][ T6395] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1093.446178][ T6395] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1093.556851][ T6451] vlan4: entered allmulticast mode [ 1093.610281][ T6451] bond0: entered allmulticast mode [ 1093.636481][ T6451] bond_slave_1: entered allmulticast mode [ 1093.694224][ T6395] bio_check_eod: 4 callbacks suppressed [ 1093.694243][ T6395] syz.7.13908: attempt to access beyond end of device [ 1093.694243][ T6395] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1093.772108][ T6395] F2FS-fs (loop7): Remounting filesystem read-only [ 1094.652935][ T6482] loop8: detected capacity change from 0 to 4096 [ 1095.331090][ T6509] loop4: detected capacity change from 0 to 512 [ 1095.347794][ T6509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1095.380124][ T6509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1095.399949][ T6509] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1095.412196][ T6512] vivid-007: ================= START STATUS ================= [ 1095.419884][ T6512] vivid-007: Enable Output Cropping: true [ 1095.452914][ T6512] vivid-007: Enable Output Composing: true [ 1095.463192][ T6509] Quota error (device loop4): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 1095.485270][ T6509] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1095.495953][ T6512] vivid-007: Enable Output Scaler: true [ 1095.506682][ T6509] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13941: Failed to acquire dquot type 1 [ 1095.533277][ T6512] vivid-007: Tx RGB Quantization Range: Automatic [ 1095.543204][ T6512] vivid-007: Transmit Mode: HDMI [ 1095.549983][ T6509] EXT4-fs (loop4): Remounting filesystem read-only [ 1095.562288][ T6512] vivid-007: Display Present: true inactive [ 1095.568268][ T6512] vivid-007: Hotplug Present: 0x00000001 [ 1095.574637][ T6512] vivid-007: RxSense Present: 0x00000001 [ 1095.578235][ T6509] EXT4-fs (loop4): 1 truncate cleaned up [ 1095.580541][ T6512] vivid-007: EDID Present: 0x00000001 [ 1095.597217][ T6512] vivid-007: ================== END STATUS ================== [ 1095.600727][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.840279][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.965170][ T6503] loop7: detected capacity change from 0 to 32768 [ 1096.019025][ T6503] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.130265][ T6503] XFS (loop7): Ending clean mount [ 1096.333807][ T4642] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.579780][ T6554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13952'. [ 1097.468087][ T6588] loop8: detected capacity change from 0 to 1024 [ 1097.592846][ T6588] hfsplus: bad catalog entry type [ 1097.698733][ T4292] hfsplus: b-tree write err: -5, ino 25 [ 1097.711048][ T4292] hfsplus: b-tree write err: -5, ino 4 [ 1097.731388][ T4292] hfsplus: b-tree write err: -5, ino 2 [ 1098.156032][ T6608] loop6: detected capacity change from 0 to 4096 [ 1098.162702][ T27] audit: type=1326 audit(2000000991.070:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.211568][ T6608] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 1098.238495][ T27] audit: type=1326 audit(2000000991.070:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.308312][ T27] audit: type=1326 audit(2000000991.070:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.356567][ T6608] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1098.430943][ T27] audit: type=1326 audit(2000000991.070:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.537966][ T27] audit: type=1326 audit(2000000991.070:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.644814][ T27] audit: type=1326 audit(2000000991.070:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.793819][ T27] audit: type=1326 audit(2000000991.070:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.863290][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13978'. [ 1098.895583][ T27] audit: type=1326 audit(2000000991.070:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.7.13972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe3cbf9de59 code=0x7ffc0000 [ 1098.960339][ T6636] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1099.210228][ T6645] loop7: detected capacity change from 0 to 1024 [ 1099.245123][ T6653] program syz.6.13984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1099.567394][ T6662] loop7: detected capacity change from 0 to 1024 [ 1099.639396][ T6664] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 1099.881264][ T6671] loop6: detected capacity change from 0 to 1024 [ 1100.683799][ T6705] netlink: 'syz.6.14001': attribute type 2 has an invalid length. [ 1101.093847][ T6721] block nbd8: not configured, cannot reconfigure [ 1101.276022][ T6732] loop8: detected capacity change from 0 to 256 [ 1101.453823][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14014'. [ 1101.482400][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14014'. [ 1101.509872][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14014'. [ 1101.584827][ T6738] loop6: detected capacity change from 0 to 4096 [ 1101.741789][ T6738] ntfs3: loop6: failed to convert "0080" to koi8-ru [ 1101.742650][ T6738] ntfs3: loop6: failed to convert name for inode 1e. [ 1102.621395][ T6747] loop4: detected capacity change from 0 to 40427 [ 1102.651870][ T6747] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1102.669719][ T6747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1102.705069][ T6747] F2FS-fs (loop4): invalid crc value [ 1102.970951][ T6747] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1102.978068][ T6747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1103.097636][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1103.097652][ T27] audit: type=1400 audit(2000000995.691:931): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D03 pid=6796 comm="syz.8.14027" [ 1103.182959][ T6801] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.14028'. [ 1103.301212][T27650] syz-executor: attempt to access beyond end of device [ 1103.301212][T27650] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1103.334278][T27650] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1103.386865][ T6803] loop8: detected capacity change from 0 to 4096 [ 1103.427552][ T6803] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512). [ 1103.509061][ T6803] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 1103.886750][ T27] audit: type=1326 audit(2000000996.430:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1103.953934][ T27] audit: type=1326 audit(2000000996.458:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.011588][ T27] audit: type=1326 audit(2000000996.468:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.101751][ T27] audit: type=1326 audit(2000000996.468:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.177284][ T27] audit: type=1326 audit(2000000996.468:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.233409][ T27] audit: type=1326 audit(2000000996.468:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.324601][ T27] audit: type=1326 audit(2000000996.468:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.6.14035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321319de59 code=0x7ffc0000 [ 1104.473181][ T6841] loop4: detected capacity change from 0 to 2048 [ 1104.544328][ T6841] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1104.652000][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.719381][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.6.14047'. [ 1104.740232][ T6850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1104.963451][T26736] Bluetooth: Wrong link type (-71) [ 1105.772502][ T6860] loop8: detected capacity change from 0 to 32768 [ 1105.777425][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14068'. [ 1105.801633][ T6860] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 1106.035483][ T5766] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 1106.285247][ T6906] loop4: detected capacity change from 0 to 512 [ 1106.370490][ T6906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1106.421472][ T6906] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.14076: bg 0: block 393: padding at end of block bitmap is not set [ 1106.503950][ T6906] EXT4-fs (loop4): Remounting filesystem read-only [ 1106.514146][ T6906] EXT4-fs (loop4): 2 truncates cleaned up [ 1106.521916][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.590787][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.619845][ T6918] tipc: Enabling of bearer rejected, failed to enable media [ 1106.763095][ T27] audit: type=1326 audit(2000000999.124:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.14082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1106.820334][ T27] audit: type=1326 audit(2000000999.124:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.14082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f959de59 code=0x7ffc0000 [ 1107.026595][T26736] Bluetooth: hci0: Malformed HCI Event [ 1107.070240][ T6916] loop7: detected capacity change from 0 to 32768 [ 1107.148058][ T4740] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1107.180039][ T6916] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1107.196480][ T6916] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1107.309060][ T6916] XFS (loop7): Ending clean mount [ 1107.344211][ T6916] XFS (loop7): Quotacheck needed: Please wait. [ 1107.385835][ T4740] usb 9-1: Using ep0 maxpacket: 16 [ 1107.434516][ T4740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.464537][ T6916] XFS (loop7): Quotacheck: Done. [ 1107.470996][ T4740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.516311][ T4740] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1107.540096][ T4740] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1107.566617][ T4740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.579080][ T4740] usb 9-1: config 0 descriptor?? [ 1107.600442][ T4642] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1108.028491][ T4740] microsoft 0003:045E:07DA.003C: item 0 4 0 8 parsing failed [ 1108.053457][ T4740] microsoft 0003:045E:07DA.003C: parse failed [ 1108.066975][ T4740] microsoft: probe of 0003:045E:07DA.003C failed with error -22 [ 1108.162384][ T6960] loop7: detected capacity change from 0 to 2048 [ 1108.204387][ T6960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.235338][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14100'. [ 1108.264791][ T6960] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.305978][ T8] usb 9-1: USB disconnect, device number 4 [ 1108.423274][ T4642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.676166][T27747] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1108.870907][T27747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.892367][T27747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1108.938074][T27747] usb 5-1: config 1 has no interface number 0 [ 1108.969627][ T6974] loop7: detected capacity change from 0 to 40427 [ 1108.976249][T27747] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.011525][T27747] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1109.024600][ T6974] F2FS-fs (loop7): Zoned block device path is missing [ 1109.028055][T27747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.043277][ T6974] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1109.047709][T27747] usb 5-1: Product: syz [ 1109.056177][T27747] usb 5-1: Manufacturer: syz [ 1109.065757][T27747] usb 5-1: SerialNumber: syz [ 1109.078721][T27747] usb 5-1: selecting invalid altsetting 1 [ 1109.087998][ T6974] F2FS-fs (loop7): invalid crc value [ 1109.369598][ T6974] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1109.388916][ T6974] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1109.501564][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1109.501579][ T27] audit: type=1800 audit(2000001001.688:947): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14104" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1109.523062][ T6985] f2fs_ckpt-7:7: attempt to access beyond end of device [ 1109.523062][ T6985] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1109.540079][T27747] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 1109.576324][T27747] cdc_ncm 5-1:1.1: bind() failure [ 1109.577843][ T6985] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1109.603887][T27747] usb 5-1: USB disconnect, device number 41 [ 1110.098241][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1110.341068][ T8] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1110.351905][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.397462][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1110.418285][ T8] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.447013][ T8] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1110.475252][ T8] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1110.492173][ T8] usb 9-1: Product: syz [ 1110.497166][ T8] usb 9-1: Manufacturer: syz [ 1110.535906][ T8] cdc_wdm 9-1:1.0: skipping garbage [ 1110.550529][ T8] cdc_wdm 9-1:1.0: skipping garbage [ 1110.567123][ T8] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1110.585521][ T8] cdc_wdm 9-1:1.0: Unknown control protocol [ 1110.867581][ T4743] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1110.970182][ T7001] loop6: detected capacity change from 0 to 65536 [ 1111.048001][ T7001] XFS (loop6): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1111.070648][ T4743] usb 5-1: Using ep0 maxpacket: 16 [ 1111.079778][ T4743] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1111.091088][ T4743] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1111.103333][ T4743] usb 5-1: Product: syz [ 1111.107587][ T4743] usb 5-1: Manufacturer: syz [ 1111.121768][ T4743] usb 5-1: SerialNumber: syz [ 1111.136197][ T7001] XFS (loop6): Ending clean mount [ 1111.146168][ T4743] usb 5-1: config 0 descriptor?? [ 1111.271254][T30120] XFS (loop6): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1111.571740][ T10] usb 5-1: USB disconnect, device number 42 [ 1112.070232][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14133'. [ 1112.219746][ T7052] loop7: detected capacity change from 0 to 512 [ 1112.286669][ T7052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.344627][ T7052] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.439669][ T7052] EXT4-fs error (device loop7): ext4_resize_begin:62: comm syz.7.14135: resize_inode disabled but reserved GDT blocks non-zero [ 1112.576963][ T4642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.725169][ T7071] loop4: detected capacity change from 0 to 64 [ 1113.040279][T27747] usb 9-1: USB disconnect, device number 5 [ 1113.252920][ T7081] loop8: detected capacity change from 0 to 1024 [ 1113.316647][ T7083] program syz.7.14148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.369124][ T7081] hfsplus: bad catalog entry type [ 1113.454900][T30122] hfsplus: b-tree write err: -5, ino 25 [ 1113.464253][T30122] hfsplus: b-tree write err: -5, ino 4 [ 1113.481848][T30122] hfsplus: b-tree write err: -5, ino 2 [ 1113.694413][ T7076] loop4: detected capacity change from 0 to 32768 [ 1113.800875][ T7098] loop8: detected capacity change from 0 to 512 [ 1113.867137][ T7076] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1114.020865][ T7076] XFS (loop4): Ending clean mount [ 1114.058409][ T7103] loop7: detected capacity change from 0 to 4096 [ 1114.153068][ T7106] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.308639][T27650] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1114.486828][ T7114] loop8: detected capacity change from 0 to 256 [ 1114.518586][ T7114] exfat: Deprecated parameter 'utf8' [ 1114.601493][ T7114] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1114.945469][ T7121] loop4: detected capacity change from 0 to 256 [ 1114.975764][ T7121] exfat: Deprecated parameter 'utf8' [ 1115.017912][ T7121] exfat: Deprecated parameter 'namecase' [ 1115.067465][ T7121] exfat: Deprecated parameter 'namecase' [ 1115.090886][ T7121] exfat: Deprecated parameter 'utf8' [ 1115.112835][ T7121] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1115.114505][ T7110] loop6: detected capacity change from 0 to 32768 [ 1115.339680][ T7129] loop7: detected capacity change from 0 to 16 [ 1115.368477][ T7129] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1115.471237][ T7133] loop4: detected capacity change from 0 to 1024 [ 1115.495311][ T7133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.559260][ T7133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.731966][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.530355][ T7141] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1116.611013][ T7169] vlan2: entered promiscuous mode [ 1116.616469][ T7169] batadv0: entered promiscuous mode [ 1116.721343][ T7141] XFS (loop7): Ending clean mount [ 1116.741271][ T7141] XFS (loop7): Quotacheck needed: Please wait. [ 1116.888987][ T7141] XFS (loop7): Quotacheck: Done. [ 1117.298836][ T7184] exfat: Deprecated parameter 'utf8' [ 1117.311407][ T4642] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1117.322357][ T7184] exfat: Deprecated parameter 'namecase' [ 1117.336287][ T7184] exfat: Deprecated parameter 'namecase' [ 1117.341998][ T7184] exfat: Deprecated parameter 'utf8' [ 1117.481366][ T7184] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1117.814876][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.052125][ T7195] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1118.084843][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1118.098771][ T7187] set_capacity_and_notify: 4 callbacks suppressed [ 1118.098786][ T7187] loop8: detected capacity change from 0 to 40427 [ 1118.125450][ T7195] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.136116][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1118.173435][ T7187] F2FS-fs (loop8): invalid crc value [ 1118.243507][ T7187] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1118.285374][ T4642] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1118.338742][ T7187] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1118.462259][ T7205] loop4: detected capacity change from 0 to 2048 [ 1118.502006][ T7205] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1118.544552][ T7205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1119.196896][ T7212] loop7: detected capacity change from 0 to 32768 [ 1119.252252][ T5807] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1119.472365][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 1119.482507][ T5807] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1119.507009][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1119.541265][ T5807] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1119.568468][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.599083][ T7234] loop7: detected capacity change from 0 to 764 [ 1119.610645][ T5807] usb 5-1: config 0 descriptor?? [ 1119.620843][ T7234] rock: directory entry would overflow storage [ 1119.653948][ T7234] rock: sig=0x4654, size=5, remaining=4 [ 1120.028228][T27747] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1120.103852][ T5807] apple 0003:05AC:027C.003D: ignoring exceeding usage max [ 1120.141293][ T5807] apple 0003:05AC:027C.003D: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.4-1/input0 [ 1120.243611][T27747] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1120.280490][T27747] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.299400][T27747] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1120.320620][T27747] usb 9-1: SerialNumber: syz [ 1120.393471][ T7240] loop6: detected capacity change from 0 to 40427 [ 1120.393822][ T4743] usb 5-1: USB disconnect, device number 43 [ 1120.402719][ T7240] F2FS-fs (loop6): heap/no_heap options were deprecated [ 1120.417248][ T7240] F2FS-fs (loop6): invalid crc value [ 1120.433955][ T7240] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1120.616741][ T7240] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1120.625196][ T7242] loop7: detected capacity change from 0 to 40427 [ 1120.650546][ T7242] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 1120.669068][ T7242] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1120.694291][ T7242] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1120.784264][T27747] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 1120.815484][T27747] usb 9-1: USB disconnect, device number 6 [ 1120.834672][ T7242] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1120.842502][ T7242] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1121.041901][ T4642] syz-executor: attempt to access beyond end of device [ 1121.041901][ T4642] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1121.073264][ T4642] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1121.190757][ T7254] loop4: detected capacity change from 0 to 1024 [ 1121.204990][ T7254] EXT4-fs: Ignoring removed nobh option [ 1121.235131][ T7254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.395577][ T7254] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1121.456981][ T7259] netlink: 236 bytes leftover after parsing attributes in process `syz.6.14211'. [ 1121.487915][T27650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.579337][ T7261] loop6: detected capacity change from 0 to 64 [ 1122.331596][ T7287] loop8: detected capacity change from 0 to 64 [ 1122.355444][ T27] audit: type=1800 audit(2000001013.709:948): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14226" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 1122.703628][ T7294] loop4: detected capacity change from 0 to 4096 [ 1123.342145][ T7315] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1123.359200][ T7315] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1123.383080][ T7315] REISERFS (device loop4): using ordered data mode [ 1123.391014][ T7315] reiserfs: using flush barriers [ 1123.405692][ T7315] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1123.439027][ T7315] REISERFS (device loop4): checking transaction log (loop4) [ 1123.462252][ T7315] REISERFS (device loop4): Using r5 hash to sort names [ 1123.469397][ T7315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1123.487030][ T7315] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1123.534656][ T7315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1123.556700][ T7315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1123.645716][ T7318] [ 1123.648095][ T7318] ====================================================== [ 1123.655128][ T7318] WARNING: possible circular locking dependency detected [ 1123.662170][ T7318] syzkaller #0 Not tainted [ 1123.666581][ T7318] ------------------------------------------------------ [ 1123.673587][ T7318] syz.8.14240/7318 is trying to acquire lock: [ 1123.679648][ T7318] ffffffff976bd498 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 1123.689727][ T7318] [ 1123.689727][ T7318] but task is already holding lock: [ 1123.697077][ T7318] ffff888030a804b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1123.707489][ T7318] [ 1123.707489][ T7318] which lock already depends on the new lock. [ 1123.707489][ T7318] [ 1123.717985][ T7318] [ 1123.717985][ T7318] the existing dependency chain (in reverse order) is: [ 1123.727001][ T7318] [ 1123.727001][ T7318] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1123.735421][ T7318] __mutex_lock+0x135/0xc80 [ 1123.740447][ T7318] nf_tables_dumpreset_obj+0x72/0xa0 [ 1123.746318][ T7318] netlink_dump+0x738/0xec0 [ 1123.751372][ T7318] __netlink_dump_start+0x57c/0x7a0 [ 1123.757112][ T7318] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1123.763281][ T7318] nf_tables_getobj_reset+0x1e1/0x630 [ 1123.769197][ T7318] nfnetlink_rcv_msg+0x89c/0x1290 [ 1123.774840][ T7318] netlink_rcv_skb+0x235/0x4c0 [ 1123.780120][ T7318] nfnetlink_rcv+0x2c9/0x2490 [ 1123.785310][ T7318] netlink_unicast+0x7b1/0x930 [ 1123.790594][ T7318] netlink_sendmsg+0x8d0/0xbf0 [ 1123.795877][ T7318] ____sys_sendmsg+0x61b/0x980 [ 1123.801418][ T7318] ___sys_sendmsg+0x2a6/0x360 [ 1123.806614][ T7318] __se_sys_sendmsg+0x1d0/0x2c0 [ 1123.811977][ T7318] do_syscall_64+0x55/0xb0 [ 1123.816917][ T7318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.823343][ T7318] [ 1123.823343][ T7318] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1123.831613][ T7318] __mutex_lock+0x135/0xc80 [ 1123.836732][ T7318] __netlink_dump_start+0xf4/0x7a0 [ 1123.842366][ T7318] ip_set_dump+0x15c/0x1f0 [ 1123.847298][ T7318] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1123.852852][ T7318] netlink_rcv_skb+0x235/0x4c0 [ 1123.858156][ T7318] nfnetlink_rcv+0x2c9/0x2490 [ 1123.863371][ T7318] netlink_unicast+0x7b1/0x930 [ 1123.868660][ T7318] netlink_sendmsg+0x8d0/0xbf0 [ 1123.873945][ T7318] ____sys_sendmsg+0x61b/0x980 [ 1123.879232][ T7318] ___sys_sendmsg+0x2a6/0x360 [ 1123.884426][ T7318] __se_sys_sendmsg+0x1d0/0x2c0 [ 1123.889797][ T7318] do_syscall_64+0x55/0xb0 [ 1123.894732][ T7318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.901140][ T7318] [ 1123.901140][ T7318] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1123.908983][ T7318] __lock_acquire+0x37ef/0x7d80 [ 1123.914354][ T7318] lock_acquire+0x19e/0x420 [ 1123.919370][ T7318] __mutex_lock+0x135/0xc80 [ 1123.924388][ T7318] ip_set_nfnl_get_byindex+0x67/0x230 [ 1123.930273][ T7318] set_target_v1_checkentry+0x8c/0x4f0 [ 1123.936350][ T7318] xt_check_target+0x4a1/0xbf0 [ 1123.941666][ T7318] nft_target_init+0x694/0xa00 [ 1123.946948][ T7318] nf_tables_newrule+0x176e/0x2870 [ 1123.952582][ T7318] nfnetlink_rcv+0x1133/0x2490 [ 1123.957867][ T7318] netlink_unicast+0x7b1/0x930 [ 1123.963150][ T7318] netlink_sendmsg+0x8d0/0xbf0 [ 1123.968428][ T7318] ____sys_sendmsg+0x61b/0x980 [ 1123.973708][ T7318] ___sys_sendmsg+0x2a6/0x360 [ 1123.978900][ T7318] __se_sys_sendmsg+0x1d0/0x2c0 [ 1123.984276][ T7318] do_syscall_64+0x55/0xb0 [ 1123.989213][ T7318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.995623][ T7318] [ 1123.995623][ T7318] other info that might help us debug this: [ 1123.995623][ T7318] [ 1124.005839][ T7318] Chain exists of: [ 1124.005839][ T7318] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1124.005839][ T7318] [ 1124.020257][ T7318] Possible unsafe locking scenario: [ 1124.020257][ T7318] [ 1124.027695][ T7318] CPU0 CPU1 [ 1124.033044][ T7318] ---- ---- [ 1124.038400][ T7318] lock(&nft_net->commit_mutex); [ 1124.043416][ T7318] lock(nlk_cb_mutex-NETFILTER); [ 1124.050952][ T7318] lock(&nft_net->commit_mutex); [ 1124.058500][ T7318] lock(nfnl_subsys_ipset); [ 1124.063079][ T7318] [ 1124.063079][ T7318] *** DEADLOCK *** [ 1124.063079][ T7318] [ 1124.071209][ T7318] 1 lock held by syz.8.14240/7318: [ 1124.076334][ T7318] #0: ffff888030a804b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1124.087037][ T7318] [ 1124.087037][ T7318] stack backtrace: [ 1124.092916][ T7318] CPU: 0 PID: 7318 Comm: syz.8.14240 Not tainted syzkaller #0 [ 1124.100451][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.110498][ T7318] Call Trace: [ 1124.113769][ T7318] [ 1124.116693][ T7318] dump_stack_lvl+0x18c/0x250 [ 1124.121370][ T7318] ? load_image+0x420/0x420 [ 1124.125869][ T7318] ? show_regs_print_info+0x20/0x20 [ 1124.131067][ T7318] ? print_circular_bug+0x12b/0x1a0 [ 1124.136263][ T7318] check_noncircular+0x2fc/0x400 [ 1124.141198][ T7318] ? print_deadlock_bug+0x5d0/0x5d0 [ 1124.146392][ T7318] ? lockdep_lock+0xf5/0x230 [ 1124.150979][ T7318] ? _find_first_zero_bit+0xd6/0x100 [ 1124.156263][ T7318] __lock_acquire+0x37ef/0x7d80 [ 1124.161115][ T7318] ? __lock_acquire+0x1262/0x7d80 [ 1124.166131][ T7318] ? verify_lock_unused+0x140/0x140 [ 1124.171330][ T7318] lock_acquire+0x19e/0x420 [ 1124.175824][ T7318] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1124.181363][ T7318] ? __might_sleep+0xe0/0xe0 [ 1124.185949][ T7318] ? read_lock_is_recursive+0x20/0x20 [ 1124.191314][ T7318] ? is_bpf_text_address+0x26/0x2a0 [ 1124.196514][ T7318] __mutex_lock+0x135/0xc80 [ 1124.201018][ T7318] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1124.206561][ T7318] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1124.212100][ T7318] ? mutex_lock_nested+0x20/0x20 [ 1124.217029][ T7318] ? ip_set_pernet+0x23/0x230 [ 1124.221709][ T7318] ip_set_nfnl_get_byindex+0x67/0x230 [ 1124.227121][ T7318] set_target_v1_checkentry+0x8c/0x4f0 [ 1124.232597][ T7318] ? set_target_v1+0x3f0/0x3f0 [ 1124.237365][ T7318] xt_check_target+0x4a1/0xbf0 [ 1124.242129][ T7318] ? __flush_work+0x120/0xac0 [ 1124.246897][ T7318] ? xt_find_jump_offset+0xe0/0xe0 [ 1124.252009][ T7318] ? stack_trace_snprint+0xf0/0xf0 [ 1124.257122][ T7318] ? __stack_depot_save+0x1f/0x660 [ 1124.262252][ T7318] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1124.268228][ T7318] ? nft_target_init+0x1ea/0xa00 [ 1124.273160][ T7318] nft_target_init+0x694/0xa00 [ 1124.278175][ T7318] ? nfnetlink_rcv+0x1133/0x2490 [ 1124.283108][ T7318] ? netlink_unicast+0x7b1/0x930 [ 1124.288064][ T7318] ? nft_target_release_ops+0x70/0x70 [ 1124.293458][ T7318] ? nf_tables_newrule+0x1515/0x2870 [ 1124.298749][ T7318] ? rcu_is_watching+0x15/0xb0 [ 1124.303521][ T7318] ? nf_tables_newrule+0x1515/0x2870 [ 1124.308803][ T7318] ? __kmalloc+0xe5/0x240 [ 1124.313138][ T7318] nf_tables_newrule+0x176e/0x2870 [ 1124.318253][ T7318] ? nf_tables_delchain+0x1050/0x1050 [ 1124.323619][ T7318] ? __lock_acquire+0x7d80/0x7d80 [ 1124.328635][ T7318] ? mutex_unlock+0x10/0x10 [ 1124.333134][ T7318] ? __nla_parse+0x40/0x50 [ 1124.337547][ T7318] nfnetlink_rcv+0x1133/0x2490 [ 1124.342320][ T7318] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1124.347870][ T7318] ? lock_chain_count+0x20/0x20 [ 1124.352734][ T7318] ? __lock_acquire+0x7d80/0x7d80 [ 1124.357761][ T7318] ? netlink_deliver_tap+0x2e/0x1b0 [ 1124.362958][ T7318] netlink_unicast+0x7b1/0x930 [ 1124.367726][ T7318] netlink_sendmsg+0x8d0/0xbf0 [ 1124.372492][ T7318] ? netlink_getsockopt+0x590/0x590 [ 1124.377695][ T7318] ? aa_sock_msg_perm+0x94/0x150 [ 1124.382633][ T7318] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1124.387909][ T7318] ? security_socket_sendmsg+0x80/0xa0 [ 1124.393367][ T7318] ? netlink_getsockopt+0x590/0x590 [ 1124.398559][ T7318] ____sys_sendmsg+0x61b/0x980 [ 1124.403321][ T7318] ? __asan_memset+0x22/0x40 [ 1124.407907][ T7318] ? __sys_sendmsg_sock+0x30/0x30 [ 1124.412952][ T7318] ? __import_iovec+0x5f2/0x850 [ 1124.417821][ T7318] ? import_iovec+0x73/0xa0 [ 1124.422334][ T7318] ___sys_sendmsg+0x2a6/0x360 [ 1124.427019][ T7318] ? __sys_sendmsg+0x2b0/0x2b0 [ 1124.431802][ T7318] __se_sys_sendmsg+0x1d0/0x2c0 [ 1124.436657][ T7318] ? __x64_sys_sendmsg+0x80/0x80 [ 1124.441599][ T7318] ? lockdep_hardirqs_on+0x98/0x150 [ 1124.446806][ T7318] do_syscall_64+0x55/0xb0 [ 1124.451231][ T7318] ? clear_bhb_loop+0x40/0x90 [ 1124.455906][ T7318] ? clear_bhb_loop+0x40/0x90 [ 1124.460577][ T7318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.466466][ T7318] RIP: 0033:0x7facfdd9de59 [ 1124.470872][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.490476][ T7318] RSP: 002b:00007facfec7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.498883][ T7318] RAX: ffffffffffffffda RBX: 00007facfe025fa0 RCX: 00007facfdd9de59 [ 1124.506844][ T7318] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1124.514807][ T7318] RBP: 00007facfde33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1124.522864][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.530826][ T7318] R13: 00007facfe026038 R14: 00007facfe025fa0 R15: 00007ffc9f447f68 [ 1124.538795][ T7318] [ 1124.571178][ T7318] Cannot find add_set index 0 as target