last executing test programs: 4m57.002964502s ago: executing program 2 (id=4335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x48, 0x32, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 4m56.811726119s ago: executing program 2 (id=4338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x34eaaa04}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}]}, 0xb0}}, 0x0) 4m56.645941014s ago: executing program 2 (id=4340): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c1, 0x2, @ofdm={0x4, 0x13, 0x16, 0x4, 0x4, 0x2}}) 4m56.446405982s ago: executing program 2 (id=4342): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m55.883122022s ago: executing program 2 (id=4348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m55.486306377s ago: executing program 2 (id=4353): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002880)) 4m55.013065359s ago: executing program 32 (id=4353): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002880)) 2.12746573s ago: executing program 0 (id=8649): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x21, 0x1508, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1.609002006s ago: executing program 0 (id=8655): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0x10, 0x6, 0x2, 0x0, 0x20, 0x20, 0x20, 0x7, &(0x7f0000000240)=[0x0], 0x1, 0x0}) 1.475861088s ago: executing program 3 (id=8657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x800}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.465205989s ago: executing program 0 (id=8658): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000140)) 1.286039265s ago: executing program 0 (id=8661): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="2000230c1100"}) 1.173863275s ago: executing program 3 (id=8663): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0xa, 0x1, "3258ae1eabfc09e27c5d10ff0000000000000000000500000000271e00000020", 0x32314752}) 1.087746133s ago: executing program 0 (id=8664): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 1.071970004s ago: executing program 4 (id=8665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x178, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0xfffffff4, 0x0, 0x0, 0x8, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x0, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 1.070989164s ago: executing program 1 (id=8666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execve(0x0, 0x0, 0x0) 1.015290939s ago: executing program 3 (id=8667): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000300)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@rodir}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@fat=@nocase}, {@shortname_lower}]}, 0x4, 0x350, &(0x7f0000000580)="$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") open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) 861.707363ms ago: executing program 1 (id=8668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a3000"], 0x122}}, 0x0) 731.074974ms ago: executing program 4 (id=8669): iopl(0x3) tkill(0x0, 0x13) 606.540386ms ago: executing program 1 (id=8670): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000000c0)=0x8001, 0x4) 522.476773ms ago: executing program 4 (id=8671): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x41}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) 462.504529ms ago: executing program 1 (id=8672): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2}}) 399.863814ms ago: executing program 3 (id=8673): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, @raw_data=[0x7, 0x400008, 0x3010, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x0, 0x101, 0x5, 0xd60, 0x80000004, 0xbb, 0x1, 0xeb]}) 349.314789ms ago: executing program 4 (id=8674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x49, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffd9c) 261.926677ms ago: executing program 1 (id=8675): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 219.57362ms ago: executing program 3 (id=8676): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0x2, 0x83, 0x0) 183.525733ms ago: executing program 4 (id=8677): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2a, 0x1, 0x7, {0xd, @sctp_ip6_spec={@loopback, @rand_addr=' \x01\x00', 0x4e25, 0x4e20, 0x2}, {0x0, @remote, 0xf13, 0x64d5, [0x7, 0x8]}, @hdata="5060104ae4ee030000000000004dd4b1764f27b74ce4589fc6d427f205629ce134ebf28c23ccd500fe134cc1e5f122f098526696", {0x0, @broadcast, 0x4, 0xc, [0x7, 0x3]}, 0x4, 0xeb1}}}) 175.941744ms ago: executing program 3 (id=8678): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xd6, 0x79, 0x40, 0x10, 0xa156, 0xe35a, 0x74ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0xc, 0x3, 0x0, 0x8, 0x3, 0x1, 0x3}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x262040, 0x0) 20.052048ms ago: executing program 0 (id=8679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 19.267888ms ago: executing program 4 (id=8680): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000070000004404a6f007036f001c"], 0x38}, 0x2000004) 0s ago: executing program 1 (id=8681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000001]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) kernel console output (not intermixed with test programs): uid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7308" name="file1" dev="loop0" ino=1048694 res=0 errno=0 [ 599.260367][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 599.270688][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 599.271163][T22130] usb usb2: check_ctrlrecip: process 22130 (syz.3.7311) requesting ep 01 but needs 81 [ 599.291744][T22130] usb usb2: usbfs: process 22130 (syz.3.7311) did not claim interface 0 before use [ 599.310377][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.330370][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.360423][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 599.372544][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 599.386178][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 599.397275][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.430379][ T23] usb 5-1: config 0 descriptor?? [ 599.436581][T22118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 599.755092][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.756486][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 599.763152][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.777353][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.784343][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.791439][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.798296][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.805286][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.812270][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.819238][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.826320][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.833355][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.840273][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.847213][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.854147][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.861141][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.868007][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.874969][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.881857][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.888763][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.895658][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.904508][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.911408][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.918326][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.925284][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.932348][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.939259][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.946244][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.953245][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.960220][ T5777] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 599.986195][T22143] loop1: detected capacity change from 0 to 2048 [ 599.995688][T15539] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 600.005330][ T23] usb 5-1: USB disconnect, device number 13 [ 600.021983][T22143] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 600.077418][T22143] syz.1.7316: attempt to access beyond end of device [ 600.077418][T22143] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 600.091931][T22148] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 600.171413][T22143] syz.1.7316: attempt to access beyond end of device [ 600.171413][T22143] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 600.254807][T22143] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 600.282758][T22150] netlink: 'syz.0.7320': attribute type 1 has an invalid length. [ 600.310349][T22150] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7320'. [ 600.320473][T22152] loop3: detected capacity change from 0 to 1024 [ 600.553190][T22154] loop0: detected capacity change from 0 to 2048 [ 600.580701][T22154] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 600.631539][T22154] syz.0.7323: attempt to access beyond end of device [ 600.631539][T22154] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 600.648432][T22159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 600.749040][T22154] syz.0.7323: attempt to access beyond end of device [ 600.749040][T22154] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 600.790885][T22154] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 601.010340][T22171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7330'. [ 601.206442][T22179] loop1: detected capacity change from 0 to 64 [ 601.295461][T22183] loop3: detected capacity change from 0 to 512 [ 601.405049][T22183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.482646][T22183] ext4 filesystem being mounted at /1825/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.567087][T22196] netlink: 'syz.0.7341': attribute type 2 has an invalid length. [ 601.587350][T22196] netlink: 723 bytes leftover after parsing attributes in process `syz.0.7341'. [ 601.695883][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.275383][T22226] netlink: 'syz.4.7356': attribute type 2 has an invalid length. [ 602.547965][T22238] loop0: detected capacity change from 0 to 16 [ 602.597406][T22238] erofs: (device loop0): mounted with root inode @ nid 36. [ 603.346417][T22276] loop4: detected capacity change from 0 to 64 [ 603.371394][T22276] hfs: bad allocation block size 0 [ 603.437313][ T5758] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 603.717410][T22287] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 604.207826][T22274] loop3: detected capacity change from 0 to 32768 [ 604.229136][T22274] [ 604.229136][T22274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 604.229136][T22274] [ 604.341536][ T5770] [ 604.341536][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 604.341536][ T5770] [ 604.395194][ T5770] [ 604.395194][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 604.395194][ T5770] [ 604.770576][ T1188] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 604.971211][ T1188] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 605.000314][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.017326][ T1188] usb 2-1: config 0 descriptor?? [ 605.023135][ T5890] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 605.039095][ T1188] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 605.053525][ T1188] dvb-usb: bulk message failed: -22 (3/0) [ 605.071503][ T1188] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 605.086265][ T1188] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 605.110487][ T1188] usb 2-1: media controller created [ 605.115817][ T1188] dvb-usb: bulk message failed: -22 (5/0) [ 605.131057][ T1188] dvb-usb: MAC address reading failed. [ 605.145836][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.169837][ T1188] dvb-usb: bulk message failed: -22 (6/0) [ 605.190667][ T1188] dvb-usb: bulk message failed: -22 (6/0) [ 605.196702][ T1188] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 605.211705][ T1188] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 605.229189][ T1188] dvb-usb: schedule remote query interval to 100 msecs. [ 605.250323][ T5890] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 605.258549][ T5890] usb 4-1: config 0 has no interface number 0 [ 605.268913][ T1188] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 605.284132][ T5890] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 605.298156][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.313552][ T1188] usb 2-1: USB disconnect, device number 45 [ 605.323118][ T5890] usb 4-1: config 0 descriptor?? [ 605.365923][ T1188] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 605.548569][ T5890] usb 4-1: string descriptor 0 read error: -71 [ 605.559120][ T5890] usb-storage 4-1:0.168: USB Mass Storage device detected [ 605.591409][ T5890] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 605.811839][ T5890] usb 4-1: USB disconnect, device number 40 [ 606.115789][ T28] audit: type=1326 audit(2000000158.940:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.176824][ T28] audit: type=1326 audit(2000000158.940:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.252455][ T28] audit: type=1326 audit(2000000158.960:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.327475][ T28] audit: type=1326 audit(2000000158.960:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.400937][ T28] audit: type=1326 audit(2000000158.960:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.439974][T22366] netlink: 'syz.1.7423': attribute type 26 has an invalid length. [ 606.462338][ T28] audit: type=1326 audit(2000000158.970:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.510672][ T28] audit: type=1326 audit(2000000158.970:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.560500][ T23] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 606.602245][ T28] audit: type=1326 audit(2000000158.970:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.650459][ T28] audit: type=1326 audit(2000000158.970:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.4.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 606.760342][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 606.769879][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 606.778390][ T23] usb 4-1: config 0 has no interface number 0 [ 606.786909][ T23] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 606.798220][ T23] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 606.814301][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 606.823879][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.833147][ T23] usb 4-1: Product: syz [ 606.837559][ T23] usb 4-1: Manufacturer: syz [ 606.842352][ T23] usb 4-1: SerialNumber: syz [ 606.853072][ T23] usb 4-1: config 0 descriptor?? [ 606.866690][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 606.977273][ T5890] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 607.001975][T22370] loop0: detected capacity change from 0 to 32768 [ 607.025224][T22370] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 607.040436][T22370] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 607.049261][T22370] BTRFS info (device loop0): using free space tree [ 607.074334][ T23] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 607.085216][ T23] quatech2: probe of 4-1:0.51 failed with error -90 [ 607.133827][T22370] BTRFS info (device loop0): enabling ssd optimizations [ 607.141440][T22370] BTRFS info (device loop0): auto enabling async discard [ 607.166644][ T5890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 607.175850][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.188425][ T5890] usb 5-1: Product: syz [ 607.192849][ T5890] usb 5-1: Manufacturer: syz [ 607.197487][ T5890] usb 5-1: SerialNumber: syz [ 607.211695][ T5890] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 607.249289][ T5757] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 607.262383][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 607.289426][ T5890] usb 4-1: USB disconnect, device number 41 [ 607.682046][ T5818] usb 5-1: USB disconnect, device number 14 [ 607.756568][T22400] delete_channel: no stack [ 608.338858][ T5757] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 608.369052][ T5757] ath9k_htc: Failed to initialize the device [ 608.402369][ T5818] usb 5-1: ath9k_htc: USB layer deinitialized [ 608.481437][ T28] audit: type=1326 audit(2000000161.310:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.1.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 608.735463][ C1] sd 0:0:1:0: [sda] tag#4358 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 608.745995][ C1] sd 0:0:1:0: [sda] tag#4358 CDB: Read(6) 08 00 00 00 03 44 [ 609.092701][T22455] loop4: detected capacity change from 0 to 4096 [ 609.163368][T22462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 609.629843][T22481] netlink: 'syz.4.7469': attribute type 10 has an invalid length. [ 609.683182][T22481] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.724968][T22481] bond0: (slave team0): Enslaving as an active interface with an up link [ 610.290788][T22510] loop4: detected capacity change from 0 to 1024 [ 610.377577][T22510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.437717][T22510] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.7483: reserved inode found cleared - inode=18 [ 610.561645][T15538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.968425][T22539] loop3: detected capacity change from 0 to 4096 [ 610.994778][T22539] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 611.033089][T22547] loop1: detected capacity change from 0 to 256 [ 611.077039][T22547] FAT-fs (loop1): Directory bread(block 64) failed [ 611.089797][T22547] FAT-fs (loop1): Directory bread(block 65) failed [ 611.101891][T22547] FAT-fs (loop1): Directory bread(block 66) failed [ 611.119124][T22547] FAT-fs (loop1): Directory bread(block 67) failed [ 611.129351][T22547] FAT-fs (loop1): Directory bread(block 68) failed [ 611.145245][T22547] FAT-fs (loop1): Directory bread(block 69) failed [ 611.170845][T22547] FAT-fs (loop1): Directory bread(block 70) failed [ 611.207580][T22547] FAT-fs (loop1): Directory bread(block 71) failed [ 611.240570][T22547] FAT-fs (loop1): Directory bread(block 72) failed [ 611.256787][T22547] FAT-fs (loop1): Directory bread(block 73) failed [ 611.343469][T22553] 9pnet: Found fid 0 not clunked [ 611.606564][T22561] autofs4:pid:22561:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 612.034347][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7516'. [ 612.067871][T22577] loop4: detected capacity change from 0 to 4096 [ 612.084664][T22577] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 612.150625][T22577] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 612.214567][T22577] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 612.469937][T22592] loop0: detected capacity change from 0 to 512 [ 612.494999][T22592] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 612.567748][T22592] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 612.587428][T22563] loop3: detected capacity change from 0 to 32768 [ 612.596731][T22592] __quota_error: 4 callbacks suppressed [ 612.596747][T22592] Quota error (device loop0): write_blk: dquota write failed [ 612.611230][T22592] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 612.621325][T22592] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.7521: Failed to acquire dquot type 0 [ 612.642306][T22592] EXT4-fs (loop0): 1 truncate cleaned up [ 612.649421][T22592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.895217][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.173618][T22608] loop0: detected capacity change from 0 to 4096 [ 613.262671][T22616] netlink: 'syz.3.7532': attribute type 32 has an invalid length. [ 613.318532][T22608] ntfs3: loop0: ino=9, attr_set_size [ 613.680113][T22631] loop0: detected capacity change from 0 to 8 [ 613.726283][T22631] SQUASHFS error: Corrupted symlink [ 613.761214][ T1188] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 613.930045][T22642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7545'. [ 613.972581][ T1188] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 613.992246][ T1188] usb 4-1: config 3 has no interface number 0 [ 613.998482][ T1188] usb 4-1: config 3 interface 106 altsetting 243 endpoint 0xD has invalid wMaxPacketSize 0 [ 614.039623][ T1188] usb 4-1: config 3 interface 106 altsetting 243 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 614.056525][ T1188] usb 4-1: config 3 interface 106 has no altsetting 0 [ 614.081592][ T1188] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=b7.6a [ 614.081950][T22645] ieee802154 phy1 wpan1: encryption failed: -22 [ 614.101547][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.110650][ T1188] usb 4-1: Product: syz [ 614.114866][ T1188] usb 4-1: Manufacturer: syz [ 614.119496][ T1188] usb 4-1: SerialNumber: syz [ 614.356479][ T1188] usbtest 4-1:3.106: usb test device [ 614.386945][ T1188] usbtest 4-1:3.106: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 614.422281][T22657] loop0: detected capacity change from 0 to 256 [ 614.437818][T22657] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 614.489312][T22659] netlink: 'syz.1.7554': attribute type 6 has an invalid length. [ 614.559155][ T1188] usb 4-1: USB disconnect, device number 42 [ 614.649995][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7555'. [ 614.660670][T22664] netlink: 660 bytes leftover after parsing attributes in process `syz.4.7555'. [ 614.903590][T22674] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7561'. [ 615.188385][T22688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7568'. [ 615.260371][ T5851] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 615.419760][T22700] loop4: detected capacity change from 0 to 1024 [ 615.433881][T22700] EXT4-fs: Ignoring removed orlov option [ 615.441467][T22700] EXT4-fs: inline encryption not supported [ 615.449635][T22700] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 615.460851][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 615.467530][T22700] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 615.480306][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.491937][T22700] EXT4-fs (loop4): invalid journal inode [ 615.497681][T22700] EXT4-fs (loop4): can't get journal size [ 615.503595][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 615.518090][T22700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 615.531090][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.541947][ T5851] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.551914][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.558740][T22700] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.565219][ T5851] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 615.583137][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.614987][ T5851] usb 2-1: config 0 descriptor?? [ 615.620386][ T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 615.707908][T22707] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7577'. [ 615.851803][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 615.865220][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 615.890350][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.898836][ T23] usb 4-1: Product: syz [ 615.910204][ T23] usb 4-1: Manufacturer: syz [ 615.914895][ T23] usb 4-1: SerialNumber: syz [ 615.933427][ T1188] usb 2-1: USB disconnect, device number 46 [ 615.942162][ T23] usb 4-1: config 0 descriptor?? [ 616.087110][T22719] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 616.168324][ T23] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 616.198289][T22723] loop4: detected capacity change from 0 to 8 [ 616.200544][ T23] airspy 4-1:0.0: Could not detect board [ 616.213791][ T23] airspy: probe of 4-1:0.0 failed with error -71 [ 616.227223][ T23] usb 4-1: USB disconnect, device number 43 [ 616.257048][T22723] SQUASHFS error: Corrupted symlink [ 616.448789][T22727] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.471365][T22727] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.491507][T22727] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.528843][T22727] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.544823][T22727] geneve2: entered promiscuous mode [ 616.551572][T22727] geneve2: entered allmulticast mode [ 616.559848][T22727] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 616.571888][T22727] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 616.581005][T22727] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 616.591441][T22727] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 616.698241][T22721] loop0: detected capacity change from 0 to 32768 [ 616.743457][T22721] syz.0.7585: attempt to access beyond end of device [ 616.743457][T22721] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 616.800214][T22721] metapage_write_end_io: I/O error [ 616.842639][T22721] blkno = 8ed2c, nblocks = 1 [ 616.847398][T22721] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 616.847398][T22721] [ 616.900750][T22721] ERROR: (device loop0): remounting filesystem as read-only [ 616.928133][T22721] UFO tlock:0xffffc9000280a168 [ 617.041316][ T111] blkno = 8ed2c, nblocks = 4 [ 617.046071][ T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 617.046071][ T111] [ 617.068574][ T5768] syz-executor: attempt to access beyond end of device [ 617.068574][ T5768] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 617.092812][ T5768] metapage_write_end_io: I/O error [ 617.102778][ T5768] JFS: metapage_get_blocks failed [ 617.107911][ T5768] JFS: metapage_get_blocks failed [ 617.116271][ T5768] JFS: metapage_get_blocks failed [ 617.122878][ T5768] JFS: metapage_get_blocks failed [ 617.258111][T22747] loop3: detected capacity change from 0 to 256 [ 617.315267][T22747] FAT-fs (loop3): Directory bread(block 64) failed [ 617.325215][T22747] FAT-fs (loop3): Directory bread(block 65) failed [ 617.332750][T22747] FAT-fs (loop3): Directory bread(block 66) failed [ 617.339427][T22747] FAT-fs (loop3): Directory bread(block 67) failed [ 617.347313][T22747] FAT-fs (loop3): Directory bread(block 68) failed [ 617.355120][T22747] FAT-fs (loop3): Directory bread(block 69) failed [ 617.360718][ T23] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 617.366053][T22747] FAT-fs (loop3): Directory bread(block 70) failed [ 617.400775][T22747] FAT-fs (loop3): Directory bread(block 71) failed [ 617.407473][T22747] FAT-fs (loop3): Directory bread(block 72) failed [ 617.414143][T22747] FAT-fs (loop3): Directory bread(block 73) failed [ 617.422166][ T28] audit: type=1326 audit(2000000170.250:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.1.7599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 617.444576][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.464342][T22751] loop0: detected capacity change from 0 to 16 [ 617.485431][T22751] erofs: (device loop0): mounted with root inode @ nid 36. [ 617.504134][ T28] audit: type=1326 audit(2000000170.250:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.1.7599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 617.569257][ T28] audit: type=1326 audit(2000000170.290:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.1.7599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 617.570590][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 617.653647][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.663711][ T28] audit: type=1326 audit(2000000170.290:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.1.7599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 617.693568][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 617.721474][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.740992][ T23] hub 5-1:4.0: USB hub found [ 617.760823][ T28] audit: type=1326 audit(2000000170.290:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.1.7599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 617.935179][T22755] loop0: detected capacity change from 0 to 4096 [ 617.984932][ T23] hub 5-1:4.0: 9 ports detected [ 617.991627][T22755] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 618.002559][ T23] usb 5-1: selecting invalid altsetting 1 [ 618.008350][ T23] hub 5-1:4.0: Using single TT (err -22) [ 618.026584][ T23] hub 5-1:4.0: insufficient power available to use all downstream ports [ 618.031984][T22755] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 618.155245][T22755] ntfs3: loop0: ino=5, "/" directory corrupted [ 618.179182][ T23] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 618.191206][ T23] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 618.244058][ T23] usb 5-1: USB disconnect, device number 15 [ 618.370321][ T1188] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 618.553545][ T1188] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 618.570354][ T1188] usb 2-1: config 8 has no interface number 0 [ 618.576613][ T1188] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 618.603375][ T1188] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 618.616717][ T1188] usb 2-1: config 8 interface 177 has no altsetting 0 [ 618.623683][ T1188] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 618.650272][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.661616][T22765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 618.874254][ T1188] usb 2-1: string descriptor 0 read error: -71 [ 618.887692][ T1188] ir_toy 2-1:8.177: required endpoints not found [ 618.920524][ T1188] usb 2-1: USB disconnect, device number 47 [ 619.650879][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 619.712473][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7634'. [ 619.853519][ T23] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 619.870977][ T23] usb 5-1: config 0 has no interface number 0 [ 619.877247][ T23] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.904783][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 619.920258][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.938689][ T23] usb 5-1: Product: syz [ 619.943911][ T23] usb 5-1: Manufacturer: syz [ 619.948555][ T23] usb 5-1: SerialNumber: syz [ 619.964793][ T23] usb 5-1: config 0 descriptor?? [ 620.013204][ T23] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 620.214415][T22840] netlink: 'syz.1.7643': attribute type 1 has an invalid length. [ 620.264209][ C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 620.367870][T22847] program syz.0.7647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.393831][T22848] openvswitch: netlink: Actions may not be safe on all matching packets [ 620.476614][ T23] usb 5-1: USB disconnect, device number 16 [ 620.495219][ T23] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 620.678862][T22860] IPVS: set_ctl: invalid protocol: 233 172.30.1.2:20001 [ 620.770557][T22862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7654'. [ 620.779799][T22862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7654'. [ 620.795650][T22862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7654'. [ 621.039833][T22874] loop1: detected capacity change from 0 to 256 [ 621.154771][T22871] loop0: detected capacity change from 0 to 4096 [ 621.187020][T22871] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 621.342620][ T28] audit: type=1326 audit(2000000174.170:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.3.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 621.395071][ T28] audit: type=1326 audit(2000000174.170:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.3.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 621.478785][ T28] audit: type=1326 audit(2000000174.260:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.3.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 621.569396][ T28] audit: type=1326 audit(2000000174.260:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.3.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 621.648724][ T28] audit: type=1326 audit(2000000174.260:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.3.7663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 622.278631][T22918] loop1: detected capacity change from 0 to 1764 [ 622.762265][T22939] loop3: detected capacity change from 0 to 16 [ 622.777456][T22939] erofs: (device loop3): mounted with root inode @ nid 36. [ 622.957635][T22945] loop0: detected capacity change from 0 to 1764 [ 623.027469][T22945] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 623.265469][T22959] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7700'. [ 623.739191][T22979] netlink: 'syz.3.7711': attribute type 3 has an invalid length. [ 623.765978][T22979] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7711'. [ 623.995301][T22994] netlink: 'syz.4.7719': attribute type 8 has an invalid length. [ 624.030561][T22994] bridge2: entered promiscuous mode [ 624.225860][T23000] loop3: detected capacity change from 0 to 2048 [ 624.270294][T23000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.402911][T23005] loop1: detected capacity change from 0 to 4096 [ 624.417068][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.438931][T23005] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 624.462627][T23005] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 624.480129][T23005] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 624.496151][T23005] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 624.511226][T23005] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 624.525253][T23005] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 624.546017][T23005] ntfs: volume version 3.1. [ 624.570429][T23005] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 624.610978][T23005] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 624.649670][T23005] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 624.706012][T23005] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 625.072944][T23026] loop4: detected capacity change from 0 to 512 [ 625.169867][T23026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.240845][T23026] ext4 filesystem being mounted at /836/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.312632][T23038] loop3: detected capacity change from 0 to 4096 [ 625.321738][T23038] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 625.488374][T15538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.505161][T23038] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 625.733896][T23050] loop3: detected capacity change from 0 to 256 [ 626.123358][T23067] netlink: 115 bytes leftover after parsing attributes in process `syz.4.7752'. [ 626.400987][T23078] loop3: detected capacity change from 0 to 736 [ 626.463044][T23078] rock: directory entry would overflow storage [ 626.480439][T23078] rock: sig=0x3b10, size=4, remaining=3 [ 626.526324][T23083] loop0: detected capacity change from 0 to 64 [ 626.590742][T23085] loop1: detected capacity change from 0 to 64 [ 627.030241][ T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 627.220898][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 627.229164][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 627.245743][ T23] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 627.264354][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.290672][ T23] usb 4-1: Product: syz [ 627.295004][ T23] usb 4-1: Manufacturer: syz [ 627.299645][ T23] usb 4-1: SerialNumber: syz [ 627.349038][ T23] usb 4-1: config 0 descriptor?? [ 627.381301][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 627.387583][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 627.419423][ T23] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 627.472033][T23115] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 627.680331][ T5757] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 627.694679][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7780'. [ 627.873020][ T5757] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 627.891674][ T5757] usb 2-1: config 0 has no interface number 0 [ 627.897865][ T5757] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 627.929153][ T5757] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.957152][ T5757] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 627.966473][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.975164][ T5757] usb 2-1: Product: syz [ 627.979444][ T5757] usb 2-1: Manufacturer: syz [ 627.984265][ T5757] usb 2-1: SerialNumber: syz [ 627.999980][ T5757] usb 2-1: config 0 descriptor?? [ 628.006990][T23111] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 628.023313][ T5757] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 628.073298][ T5757] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 628.104687][T23133] loop4: detected capacity change from 0 to 256 [ 628.149137][T23133] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 628.165645][T23133] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 628.253047][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 628.454465][ T967] usb 2-1: USB disconnect, device number 48 [ 628.492614][ T967] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 628.534680][ T967] cyberjack 2-1:0.69: device disconnected [ 628.875344][ T5122] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 628.912965][ T5122] usb 4-1: device reset changed ep0 maxpacket size! [ 628.918505][T23159] loop4: detected capacity change from 0 to 1024 [ 628.932307][ T23] usb 4-1: USB disconnect, device number 44 [ 628.942029][T23159] EXT4-fs: Ignoring removed mblk_io_submit option [ 628.951653][T23159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 628.967962][T23159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.002509][T23161] AppArmor: change_hat: Invalid input '0' [ 629.125253][T15538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.230282][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 629.420805][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 629.447141][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 629.472871][ T23] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 629.485278][T23183] ip6tnl4: entered allmulticast mode [ 629.490821][ T23] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 629.514906][ T23] usb 4-1: config 4 has no interface number 0 [ 629.543763][ T23] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 629.590258][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.598397][ T23] usb 4-1: Product: syz [ 629.619257][ T23] usb 4-1: Manufacturer: syz [ 629.629254][ T23] usb 4-1: SerialNumber: syz [ 629.881574][ T23] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 629.888384][ T23] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 629.924770][ T23] usb 4-1: No valid video chain found. [ 629.951793][ T23] usb 4-1: USB disconnect, device number 45 [ 630.023385][T23199] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7816'. [ 630.035107][T23203] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 630.065164][T23199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7816'. [ 630.800586][ T1188] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 631.011135][ T1188] usb 4-1: Using ep0 maxpacket: 32 [ 631.024701][ T1188] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 631.051310][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.065359][T23227] loop4: detected capacity change from 0 to 32768 [ 631.075622][ T1188] usb 4-1: config 0 descriptor?? [ 631.092841][T23227] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.7829 (23227) [ 631.113244][ T1188] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 631.188546][T23227] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 631.210897][T23227] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 631.234408][T23227] BTRFS info (device loop4): force zlib compression, level 3 [ 631.254872][T23227] BTRFS info (device loop4): force clearing of disk cache [ 631.265095][T23227] BTRFS info (device loop4): setting nodatasum [ 631.272862][T23227] BTRFS info (device loop4): allowing degraded mounts [ 631.279820][T23227] BTRFS info (device loop4): enabling disk space caching [ 631.289024][T23227] BTRFS info (device loop4): disk space caching is enabled [ 631.438888][T23227] BTRFS info (device loop4): auto enabling async discard [ 631.457233][T23227] BTRFS info (device loop4): rebuilding free space tree [ 631.527919][ T1188] gspca_nw80x: reg_r err -71 [ 631.537280][ T1188] nw80x: probe of 4-1:0.0 failed with error -71 [ 631.544123][T23227] BTRFS info (device loop4): disabling free space tree [ 631.558928][T23227] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 631.569878][T23227] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 631.586136][ T1188] usb 4-1: USB disconnect, device number 46 [ 631.708405][T23227] BTRFS info (device loop4): balance: start -f [ 631.717305][T23227] BTRFS info (device loop4): balance: ended with status: 0 [ 631.808297][T15538] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 632.270568][T23276] IPv6: NLM_F_REPLACE set, but no existing node found! [ 632.730407][ T5818] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 632.861979][T23270] loop0: detected capacity change from 0 to 40427 [ 632.887833][T23270] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 632.910257][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 632.916534][T23270] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 632.926665][ T5818] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 632.937988][T23270] F2FS-fs (loop0): invalid crc value [ 632.944504][ T5818] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 632.955500][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 632.965466][ T5818] usb 2-1: config 1 has no interface number 0 [ 632.976014][T23270] F2FS-fs (loop0): Found nat_bits in checkpoint [ 632.982442][ T5818] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 633.011056][ T5818] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 633.050369][ T5818] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 633.084178][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.111823][ T5818] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 633.131335][T23270] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 633.138417][T23270] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 633.306734][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 633.306751][ T28] audit: type=1326 audit(2000000186.120:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.343271][ T5818] snd_usb_pod 2-1:1.1: invalid control EP [ 633.349058][ T5818] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 633.380818][ T5818] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 633.388444][ T28] audit: type=1326 audit(2000000186.120:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.417688][ T5818] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 633.481652][ T28] audit: type=1326 audit(2000000186.130:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.530294][ T28] audit: type=1326 audit(2000000186.170:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.558617][T23314] loop4: detected capacity change from 0 to 1764 [ 633.567285][ T5818] usb 2-1: USB disconnect, device number 49 [ 633.614773][ T28] audit: type=1326 audit(2000000186.170:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.676320][ T28] audit: type=1326 audit(2000000186.170:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.707845][ T28] audit: type=1326 audit(2000000186.170:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.739257][ T28] audit: type=1326 audit(2000000186.170:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 633.773903][ T28] audit: type=1326 audit(2000000186.170:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.4.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 634.592706][T23353] ubi31: attaching mtd0 [ 634.608885][T23353] ubi31: scanning is finished [ 634.617811][T23351] loop0: detected capacity change from 0 to 4096 [ 634.626057][T23353] ubi31: empty MTD device detected [ 634.690487][T23354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 634.849408][T23353] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 634.866660][T23353] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 634.900256][T23353] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 634.907353][T23353] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 634.950298][T23353] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 634.977839][T23353] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 635.030300][T23353] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1151681188 [ 635.070371][T23353] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 635.131016][T23357] ubi31: background thread "ubi_bgt31d" started, PID 23357 [ 635.221358][T23363] netlink: 'syz.3.7885': attribute type 21 has an invalid length. [ 635.244166][T23363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7885'. [ 635.314224][T23345] loop1: detected capacity change from 0 to 32768 [ 635.354555][T23345] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7877 (23345) [ 635.428249][T23345] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 635.514846][T23345] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 635.544955][T23345] BTRFS info (device loop1): force zlib compression, level 3 [ 635.590446][T23345] BTRFS info (device loop1): force clearing of disk cache [ 635.597637][T23345] BTRFS info (device loop1): setting nodatasum [ 635.637917][T23345] BTRFS info (device loop1): allowing degraded mounts [ 635.691016][T23345] BTRFS info (device loop1): enabling disk space caching [ 635.698118][T23345] BTRFS info (device loop1): disk space caching is enabled [ 635.962299][T23345] BTRFS info (device loop1): auto enabling async discard [ 635.975150][T23345] BTRFS info (device loop1): rebuilding free space tree [ 636.075331][T23345] BTRFS info (device loop1): disabling free space tree [ 636.090486][T23345] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 636.112772][T23345] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 636.235949][T23345] BTRFS info (device loop1): balance: start -f [ 636.252850][T23345] BTRFS info (device loop1): balance: ended with status: 0 [ 636.304123][T23398] loop0: detected capacity change from 0 to 1764 [ 636.346070][ T5766] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 636.545884][T23403] netlink: 'syz.4.7897': attribute type 11 has an invalid length. [ 637.354061][T23372] loop3: detected capacity change from 0 to 65536 [ 637.412738][T23372] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 637.544033][T23372] XFS (loop3): Ending clean mount [ 637.552029][T23427] loop0: detected capacity change from 0 to 4096 [ 637.612270][T23420] loop4: detected capacity change from 0 to 32768 [ 637.617367][T23427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.666530][T23420] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.754712][ T5770] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 637.834192][T23427] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.7908: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 637.867250][T23427] EXT4-fs (loop0): Remounting filesystem read-only [ 637.878996][T23420] XFS (loop4): Ending clean mount [ 637.940076][T23427] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.7908: directory missing '..' [ 637.982226][T23420] XFS (loop4): Quotacheck needed: Please wait. [ 638.113276][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.132011][T23420] XFS (loop4): Quotacheck: Done. [ 638.309070][ T28] audit: type=1326 audit(2000000191.120:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.345301][T15538] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 638.383153][ T28] audit: type=1326 audit(2000000191.120:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.440509][ T28] audit: type=1326 audit(2000000191.130:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.474113][ T28] audit: type=1326 audit(2000000191.130:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.498928][ T28] audit: type=1326 audit(2000000191.130:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.560448][ T28] audit: type=1326 audit(2000000191.130:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.610280][ T28] audit: type=1326 audit(2000000191.130:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 638.709365][ T28] audit: type=1326 audit(2000000191.130:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6751b9c629 code=0x7ffc0000 [ 639.016678][T23471] program syz.3.7922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.172870][T23479] cgroup: noprefix used incorrectly [ 639.212617][T23481] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7927'. [ 639.338923][T23485] loop1: detected capacity change from 0 to 1024 [ 639.395509][T23490] netlink: 'syz.3.7931': attribute type 21 has an invalid length. [ 639.413202][T23490] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7931'. [ 639.432044][T23490] netlink: 'syz.3.7931': attribute type 4 has an invalid length. [ 639.439993][T23490] netlink: 'syz.3.7931': attribute type 5 has an invalid length. [ 639.450365][T23490] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7931'. [ 639.453580][T23485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.475729][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7932'. [ 639.487142][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7932'. [ 639.575076][T23485] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.7928: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 639.620624][T23485] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 639.659852][T23485] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.7928: Deleting old file: nlink 1, error=-117 [ 639.852153][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.368781][T23532] Cannot find add_set index 3 as target [ 640.391673][T23534] netlink: 'syz.4.7950': attribute type 25 has an invalid length. [ 640.560314][ T5854] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 640.750256][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 640.759867][ T5854] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 640.776376][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.796188][ T5854] usb 1-1: Product: syz [ 640.800726][ T5854] usb 1-1: Manufacturer: syz [ 640.814204][ T5854] usb 1-1: SerialNumber: syz [ 640.832696][ T5854] usb 1-1: config 0 descriptor?? [ 640.841705][ T5854] gspca_main: sq930x-2.14.0 probing 2770:930c [ 641.163694][T23567] netlink: 'syz.4.7968': attribute type 2 has an invalid length. [ 641.247858][ T5854] gspca_sq930x: ucbus_write failed -71 [ 641.275961][T23571] loop3: detected capacity change from 0 to 8 [ 641.305163][T23571] SQUASHFS error: Failed to read block 0x2d7: -5 [ 641.313320][T23571] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 641.340260][ T23] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 641.490238][ T5854] gspca_sq930x: Sensor ov9630 not yet treated [ 641.499147][ T5854] sq930x: probe of 1-1:0.0 failed with error -22 [ 641.519662][ T5854] usb 1-1: USB disconnect, device number 42 [ 641.520893][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 641.547252][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 641.575088][ T23] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 641.591104][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.601820][ T23] usb 2-1: Product: syz [ 641.606051][ T23] usb 2-1: Manufacturer: syz [ 641.629405][ T23] usb 2-1: SerialNumber: syz [ 641.644994][ T23] usb 2-1: config 0 descriptor?? [ 641.658260][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 641.664981][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 641.677530][ T23] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 641.890305][T23588] x_tables: unsorted underflow at hook 3 [ 642.012069][ T28] audit: type=1326 audit(2000000194.840:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.4.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 642.060460][ T28] audit: type=1326 audit(2000000194.840:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.4.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 642.125651][ T28] audit: type=1326 audit(2000000194.860:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.4.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 642.316069][T23606] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 642.343771][T23605] netlink: 'syz.0.7988': attribute type 4 has an invalid length. [ 642.471662][T23611] loop3: detected capacity change from 0 to 1024 [ 642.503883][T23611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.563967][T23611] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.7989: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 642.572241][T23619] netlink: 'syz.4.7992': attribute type 46 has an invalid length. [ 642.593834][T23611] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 642.603539][T23611] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.7989: Deleting old file: nlink 1, error=-117 [ 642.666039][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.730468][ T5818] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 642.931484][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 642.942647][ T5818] usb 1-1: config 0 has no interfaces? [ 642.954717][ T5818] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 642.976450][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.994826][ T5818] usb 1-1: Product: syz [ 643.003209][ T5818] usb 1-1: Manufacturer: syz [ 643.019409][ T5818] usb 1-1: SerialNumber: syz [ 643.031752][ T5818] r8152-cfgselector 1-1: config 0 descriptor?? [ 643.262456][ T5818] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 643.488866][ T5854] usb 1-1: USB disconnect, device number 43 [ 643.515969][T23653] usb usb9: usbfs: process 23653 (syz.1.8009) did not claim interface 0 before use [ 643.559603][T23655] loop3: detected capacity change from 0 to 1024 [ 643.577683][T23655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.624319][T23655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 643.633123][T23655] System zones: 0-1, 3-36 [ 643.654385][T23655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.746709][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.905200][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8015'. [ 644.006102][T23670] loop4: detected capacity change from 0 to 4096 [ 644.014623][ T5122] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 644.100622][ T5122] usb 2-1: device reset changed ep0 maxpacket size! [ 644.128196][T23670] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 644.253228][ T1188] usb 2-1: USB disconnect, device number 50 [ 644.394853][T23670] ntfs3: loop4: failed to convert "c46c" to ascii [ 644.450275][ T1188] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 644.654750][ T1188] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 644.665420][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.678239][ T1188] usb 2-1: Product: syz [ 644.683972][ T1188] usb 2-1: Manufacturer: syz [ 644.688787][ T1188] usb 2-1: SerialNumber: syz [ 644.709176][ T1188] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 644.744980][ T5854] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 644.878300][T23693] loop4: detected capacity change from 0 to 1024 [ 644.923070][ T1188] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 644.961486][ T7473] hfsplus: b-tree write err: -5, ino 4 [ 645.054674][T23695] loop0: detected capacity change from 0 to 4096 [ 645.067844][T23697] loop4: detected capacity change from 0 to 256 [ 645.067921][T23695] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 645.117673][T23697] FAT-fs (loop4): Directory bread(block 64) failed [ 645.131919][ T1188] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 645.134066][T23697] FAT-fs (loop4): Directory bread(block 65) failed [ 645.149166][T23697] FAT-fs (loop4): Directory bread(block 66) failed [ 645.156060][T23697] FAT-fs (loop4): Directory bread(block 67) failed [ 645.165307][ T1188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.205375][ T5890] usb 2-1: USB disconnect, device number 51 [ 645.209525][T23697] FAT-fs (loop4): Directory bread(block 68) failed [ 645.223742][ T1188] usb 4-1: config 0 has no interface number 0 [ 645.229905][ T1188] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 645.238811][T23697] FAT-fs (loop4): Directory bread(block 69) failed [ 645.255367][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.263611][T23697] FAT-fs (loop4): Directory bread(block 70) failed [ 645.280630][T23697] FAT-fs (loop4): Directory bread(block 71) failed [ 645.282923][ T1188] usb 4-1: config 0 descriptor?? [ 645.296094][T23695] ntfs3: loop0: failed to convert "c46c" to macroman [ 645.321277][T23697] FAT-fs (loop4): Directory bread(block 72) failed [ 645.326940][ T1188] ttusbir 4-1:0.83: cannot find expected altsetting [ 645.344758][T23697] FAT-fs (loop4): Directory bread(block 73) failed [ 645.526367][T23701] loop0: detected capacity change from 0 to 2048 [ 645.539431][T23701] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 645.574348][ T1188] usb 4-1: USB disconnect, device number 47 [ 645.593609][T23702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.858848][ T5854] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 645.882279][ T5854] ath9k_htc: Failed to initialize the device [ 645.902827][ T5890] usb 2-1: ath9k_htc: USB layer deinitialized [ 646.404429][T23734] loop3: detected capacity change from 0 to 256 [ 646.455686][T23734] FAT-fs (loop3): Directory bread(block 64) failed [ 646.483274][T23734] FAT-fs (loop3): Directory bread(block 65) failed [ 646.493474][T23734] FAT-fs (loop3): Directory bread(block 66) failed [ 646.500082][T23734] FAT-fs (loop3): Directory bread(block 67) failed [ 646.539628][T23734] FAT-fs (loop3): Directory bread(block 68) failed [ 646.552349][T23734] FAT-fs (loop3): Directory bread(block 69) failed [ 646.559093][T23734] FAT-fs (loop3): Directory bread(block 70) failed [ 646.566550][T23734] FAT-fs (loop3): Directory bread(block 71) failed [ 646.583114][T23734] FAT-fs (loop3): Directory bread(block 72) failed [ 646.589725][T23734] FAT-fs (loop3): Directory bread(block 73) failed [ 646.639062][T23742] loop0: detected capacity change from 0 to 256 [ 646.653814][T23742] exfat: Deprecated parameter 'namecase' [ 646.703122][T23742] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 646.813980][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 646.813996][ T28] audit: type=1800 audit(2000000199.640:349): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8049" name="file1" dev="loop3" ino=1048703 res=0 errno=0 [ 647.565678][T23780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8078'. [ 647.604889][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8078'. [ 647.641684][T23780] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8078'. [ 647.668423][T23780] netlink: 'syz.1.8078': attribute type 2 has an invalid length. [ 647.701423][T23780] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8078'. [ 647.971442][ T28] audit: type=1326 audit(2000000200.800:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 648.050811][ T28] audit: type=1326 audit(2000000200.800:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 648.113956][ T28] audit: type=1326 audit(2000000200.850:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 648.175997][ T28] audit: type=1326 audit(2000000200.920:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 648.215186][ T28] audit: type=1326 audit(2000000200.920:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23797 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 648.320938][ T28] audit: type=1326 audit(2000000200.960:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23804 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6bcf5cece code=0x7ffc0000 [ 648.385965][ T28] audit: type=1326 audit(2000000201.110:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23804 comm="syz.3.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff6bcf9c629 code=0x7ffc0000 [ 649.276643][T23850] kAFS: unable to lookup cell ' [ 649.276643][T23850] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 649.276643][T23850] ' [ 649.414796][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8106'. [ 649.452924][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8106'. [ 649.841051][T23866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8113'. [ 649.860422][T23866] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 650.023110][T23870] loop4: detected capacity change from 0 to 8192 [ 650.039200][T23870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 650.053528][T23870] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 650.063985][T23870] REISERFS (device loop4): using journaled data mode [ 650.071134][T23870] reiserfs: using flush barriers [ 650.076709][T23874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8117'. [ 650.090601][T23870] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.108789][T23870] REISERFS (device loop4): checking transaction log (loop4) [ 650.118286][T23870] REISERFS (device loop4): Using r5 hash to sort names [ 650.125729][T23870] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 650.135638][T23874] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8117'. [ 650.149399][T23870] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 650.162565][T23874] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8117'. [ 650.180448][ T967] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 650.321365][T23879] netlink: 'syz.3.8119': attribute type 11 has an invalid length. [ 650.329250][T23879] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.8119'. [ 650.332639][ T28] audit: type=1326 audit(2000000203.160:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.4.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 650.403745][ T967] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 650.406938][ T28] audit: type=1326 audit(2000000203.190:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.4.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd799c629 code=0x7ffc0000 [ 650.423992][ T967] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 650.506233][ T967] usb 1-1: config 8 has no interface number 0 [ 650.530993][ T967] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 650.589131][ T967] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.622193][ T967] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 650.635261][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.643682][ T967] usb 1-1: Product: syz [ 650.648286][ T967] usb 1-1: Manufacturer: syz [ 650.664615][ T967] usb 1-1: SerialNumber: syz [ 650.896292][ T967] usb 1-1: USB disconnect, device number 44 [ 651.290422][ T23] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 651.352334][T23901] loop1: detected capacity change from 0 to 32768 [ 651.399504][T23901] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 651.476001][ T23] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 651.513046][ T23] usb 4-1: config 0 has no interface number 0 [ 651.519216][ T23] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 651.561523][ T23] usb 4-1: config 0 interface 110 has no altsetting 0 [ 651.574408][ T23] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 651.597849][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.634240][ T23] usb 4-1: Product: syz [ 651.638899][ T23] usb 4-1: Manufacturer: syz [ 651.672710][ T23] usb 4-1: SerialNumber: syz [ 651.692818][ T23] usb 4-1: config 0 descriptor?? [ 651.698688][T23903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.714593][T23901] XFS (loop1): Ending clean mount [ 651.828009][T23901] XFS (loop1): Quotacheck needed: Please wait. [ 651.898716][T23901] XFS (loop1): Quotacheck: Done. [ 651.950609][T23903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.959564][ T23] cdc_subset: probe of 4-1:0.110 failed with error -22 [ 652.126913][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 652.172454][ T5854] usb 4-1: USB disconnect, device number 48 [ 652.545885][T23949] netlink: 'syz.4.8150': attribute type 5 has an invalid length. [ 652.653417][T23953] Sensor A: ================= START STATUS ================= [ 652.669920][T23955] loop4: detected capacity change from 0 to 136 [ 652.672046][T23953] Sensor A: Test Pattern: 75% Colorbar [ 652.697961][T23953] Sensor A: Show Information: All [ 652.705172][T23953] Sensor A: Vertical Flip: false [ 652.721313][T23953] Sensor A: Horizontal Flip: true [ 652.726450][T23953] Sensor A: Brightness: 128 [ 652.742029][T23953] Sensor A: Contrast: 128 [ 652.746451][T23953] Sensor A: Hue: 0 [ 652.772916][T23953] Sensor A: Saturation: 128 [ 652.777570][T23953] Sensor A: ================== END STATUS ================== [ 652.913005][T23959] usb usb7: usbfs: process 23959 (syz.3.8155) did not claim interface 0 before use [ 652.989283][T23965] loop4: detected capacity change from 0 to 2048 [ 653.026995][T23966] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.100195][T23965] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 653.179323][T23970] loop1: detected capacity change from 0 to 8 [ 653.188477][T23965] Remounting filesystem read-only [ 653.227453][T23972] loop3: detected capacity change from 0 to 512 [ 653.287955][T23972] EXT4-fs (loop3): Test dummy encryption mode enabled [ 653.366566][T23972] EXT4-fs (loop3): 1 truncate cleaned up [ 653.378648][T23972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.459026][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.545167][T23980] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.8163'. [ 653.897582][T23994] netlink: 'syz.1.8172': attribute type 10 has an invalid length. [ 653.921274][T23994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8172'. [ 653.929646][T23995] loop3: detected capacity change from 0 to 1024 [ 653.966322][T23994] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 654.077429][ T7473] hfsplus: b-tree write err: -5, ino 4 [ 654.221201][T24006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8177'. [ 654.487891][T24020] netlink: 'syz.3.8184': attribute type 4 has an invalid length. [ 654.496322][T24020] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.8184'. [ 654.814309][T24032] loop3: detected capacity change from 0 to 764 [ 654.842061][T24032] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 654.879073][T24032] Symlink component flag not implemented [ 654.898332][T24032] Symlink component flag not implemented [ 654.908546][T24032] Symlink component flag not implemented (128) [ 654.930428][T24032] Symlink component flag not implemented (122) [ 655.292358][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 655.480442][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 655.491704][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.536094][ T5890] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 655.557195][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.572460][ T5890] usb 5-1: Product: syz [ 655.576706][ T5890] usb 5-1: Manufacturer: syz [ 655.583934][ T5890] usb 5-1: SerialNumber: syz [ 655.591192][ T5890] usb 5-1: config 0 descriptor?? [ 655.600904][ T5890] cdc_phonet 5-1:0.0: invalid descriptor buffer length [ 655.620013][ T5890] cdc_phonet: probe of 5-1:0.0 failed with error -22 [ 655.841878][ T5854] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 655.857474][ T1188] usb 5-1: USB disconnect, device number 17 [ 656.071404][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 656.078480][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 656.090277][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 656.111013][ T5854] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 656.120502][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.128561][ T5854] usb 4-1: Product: syz [ 656.144343][ T5854] usb 4-1: Manufacturer: syz [ 656.148996][ T5854] usb 4-1: SerialNumber: syz [ 656.173841][ T5854] usb 4-1: config 0 descriptor?? [ 656.402343][ T23] usb 4-1: USB disconnect, device number 49 [ 656.450427][ T5854] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 656.546545][T24103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8225'. [ 656.640479][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 656.650421][ T5818] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 656.670624][ T5854] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 656.679754][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.690409][T24107] loop4: detected capacity change from 0 to 512 [ 656.701134][T24107] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 656.709212][T24107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c09c, mo2=0002] [ 656.719406][T24107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 656.723127][ T5854] usb 1-1: Product: syz [ 656.731801][T24107] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #13: comm syz.4.8227: iget: bad i_size value: 12154761577498 [ 656.745626][ T5854] usb 1-1: Manufacturer: syz [ 656.752065][T24107] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.8227: couldn't read orphan inode 13 (err -117) [ 656.754743][ T5854] usb 1-1: SerialNumber: syz [ 656.773808][ T5854] usb 1-1: config 0 descriptor?? [ 656.774794][T24107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 656.788093][ T5854] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 656.814294][T24107] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.8227: dx entry: limit 65535 != root limit 120 [ 656.829493][T24107] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8227: Corrupt directory, running e2fsck is recommended [ 656.852639][ T5818] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 656.871136][ T5818] usb 2-1: config 0 has no interface number 1 [ 656.887596][ T5818] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 656.901029][T15538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.911372][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 656.929651][ T5818] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 656.941908][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 656.951911][ T5818] usb 2-1: SerialNumber: syz [ 656.958997][ T5818] usb 2-1: config 0 descriptor?? [ 656.991838][ T5818] usb 2-1: Found UVC 0.00 device (0002:0000) [ 656.998775][ T5818] usb 2-1: No valid video chain found. [ 657.217401][ T5818] usb 2-1: USB disconnect, device number 52 [ 657.224544][ T5854] ssu100: probe of 1-1:0.0 failed with error -71 [ 657.262989][ T5854] usb 1-1: USB disconnect, device number 45 [ 657.479240][T24122] loop3: detected capacity change from 0 to 8192 [ 657.500891][T24122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 657.545848][T24122] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 657.571739][T24122] REISERFS (device loop3): using journaled data mode [ 657.578905][T24122] reiserfs: using flush barriers [ 657.626411][T24122] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 657.643680][T24122] REISERFS (device loop3): checking transaction log (loop3) [ 657.654387][T24122] REISERFS (device loop3): Using r5 hash to sort names [ 657.670766][T24122] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 657.689161][T24122] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 657.768344][T24131] syz.4.8237: attempt to access beyond end of device [ 657.768344][T24131] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 657.984828][T24135] loop0: detected capacity change from 0 to 4096 [ 658.040856][T24135] EXT4-fs: Ignoring removed mblk_io_submit option [ 658.116000][T24135] EXT4-fs (loop0): Test dummy encryption mode enabled [ 658.166079][T24135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.271857][T24146] loop1: detected capacity change from 0 to 8 [ 658.284374][T24146] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 658.348356][T24146] cramfs: Error -3 while decompressing! [ 658.372154][ T5760] udevd[5760]: incorrect cramfs checksum on /dev/loop1 [ 658.381591][T24146] cramfs: ffffffff973f4368(26)->ffff8880532b8000(4096) [ 658.388522][T24146] cramfs: Error -3 while decompressing! [ 658.434594][T24146] cramfs: ffffffff973f4382(26)->ffff8880532bb000(4096) [ 658.460674][ T5760] udevd[5760]: incorrect cramfs checksum on /dev/loop1 [ 658.468057][T24146] cramfs: Error -3 while decompressing! [ 658.476074][T24135] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 658.478774][T24146] cramfs: ffffffff973f439c(16)->ffff8880532a0000(4096) [ 658.502173][T24146] cramfs: Error -3 while decompressing! [ 658.507921][T24146] cramfs: ffffffff973f4368(26)->ffff8880532b8000(4096) [ 658.539257][T24151] loop3: detected capacity change from 0 to 2048 [ 658.584136][T24151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.605935][ T5758] udevd[5758]: incorrect cramfs checksum on /dev/loop1 [ 658.667278][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 658.667294][ T28] audit: type=1800 audit(2000000211.490:371): pid=24151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8246" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 658.767992][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.889632][T24160] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8251'. [ 658.922994][T24160] openvswitch: netlink: Key type 2832 is out of range max 32 [ 659.146336][T24168] loop3: detected capacity change from 0 to 1024 [ 659.160111][T24172] loop0: detected capacity change from 0 to 256 [ 659.322999][T24177] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 659.591367][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8263'. [ 660.361564][T24217] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.8278'. [ 660.362339][T24215] netlink: 'syz.1.8277': attribute type 4 has an invalid length. [ 660.389593][T24183] loop0: detected capacity change from 0 to 40427 [ 660.413747][T24219] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8279'. [ 660.442209][T24183] F2FS-fs (loop0): invalid crc value [ 660.495510][T24183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 660.665910][T24183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 661.678929][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8300'. [ 661.701947][T24265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8300'. [ 662.243282][T24277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.271726][T24277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 662.440010][T24273] loop0: detected capacity change from 0 to 32768 [ 662.506397][ T5758] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 662.731935][T24292] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 662.791397][T24280] loop1: detected capacity change from 0 to 32768 [ 662.846514][T24280] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 662.908211][T24273] loop0: detected capacity change from 0 to 16 [ 662.925247][T24273] erofs: Unknown parameter 'nossd' [ 662.974897][ T5758] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 663.093997][T24280] XFS (loop1): Ending clean mount [ 663.110352][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 663.128985][T24280] XFS (loop1): Quotacheck needed: Please wait. [ 663.202827][T24309] Non-string source [ 663.230406][T24280] XFS (loop1): Quotacheck: Done. [ 663.321888][T24313] loop3: detected capacity change from 0 to 256 [ 663.342886][ T23] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 663.370688][ T23] usb 5-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 663.390547][ T23] usb 5-1: config 160 has no interface number 0 [ 663.391586][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 663.396861][ T23] usb 5-1: config 160 interface 200 has no altsetting 0 [ 663.474224][ T23] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 663.486121][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.497392][ T23] usb 5-1: Product: syz [ 663.516031][ T23] usb 5-1: Manufacturer: syz [ 663.533206][ T23] usb 5-1: SerialNumber: syz [ 663.825651][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 663.843568][ T23] usb 5-1: MIDIStreaming interface descriptor not found [ 663.851343][T24322] loop0: detected capacity change from 0 to 512 [ 663.882105][T24323] netlink: 'syz.3.8323': attribute type 3 has an invalid length. [ 663.889974][T24323] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.8323'. [ 663.924723][ T23] usb 5-1: USB disconnect, device number 18 [ 663.951575][T24322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.002406][T24322] ext4 filesystem being mounted at /2110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.059939][T24326] loop1: detected capacity change from 0 to 128 [ 664.070315][T24329] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 18: invalid block bitmap [ 664.122839][T24326] FAT-fs (loop1): Directory bread(block 414) failed [ 664.166096][T24326] FAT-fs (loop1): Directory bread(block 415) failed [ 664.193151][T24326] FAT-fs (loop1): Directory bread(block 416) failed [ 664.220314][T24326] FAT-fs (loop1): Directory bread(block 417) failed [ 664.238279][T24326] FAT-fs (loop1): Directory bread(block 418) failed [ 664.245421][T24326] FAT-fs (loop1): Directory bread(block 419) failed [ 664.253094][T24326] FAT-fs (loop1): Directory bread(block 420) failed [ 664.259854][T24326] FAT-fs (loop1): Directory bread(block 421) failed [ 664.264368][T15539] Bluetooth: hci3: command 0x0406 tx timeout [ 664.310881][T24326] FAT-fs (loop1): Directory bread(block 414) failed [ 664.318246][T24326] FAT-fs (loop1): Directory bread(block 415) failed [ 664.326506][T24326] syz.1.8320: attempt to access beyond end of device [ 664.326506][T24326] loop1: rw=3, sector=478, nr_sectors = 2 limit=128 [ 664.347353][T24326] syz.1.8320: attempt to access beyond end of device [ 664.347353][T24326] loop1: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 664.446424][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.575635][T24341] loop3: detected capacity change from 0 to 128 [ 664.641813][T24341] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 664.676315][T24345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8331'. [ 664.712177][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8331'. [ 664.733060][T24341] ext4 filesystem being mounted at /2044/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.894500][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8335'. [ 664.906563][T24354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8335'. [ 664.930482][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.032038][T24357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8337'. [ 665.061213][ T28] audit: type=1326 audit(2000000217.890:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24359 comm="syz.1.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 665.086459][ T28] audit: type=1326 audit(2000000217.890:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24359 comm="syz.1.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 665.111870][ T28] audit: type=1326 audit(2000000217.900:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24359 comm="syz.1.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 665.150292][ T28] audit: type=1326 audit(2000000217.900:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24359 comm="syz.1.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 665.211454][ T1188] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 665.274355][T24368] netlink: 'syz.4.8340': attribute type 3 has an invalid length. [ 665.398848][T24370] netlink: 'syz.1.8342': attribute type 1 has an invalid length. [ 665.408394][T24370] netlink: 'syz.1.8342': attribute type 3 has an invalid length. [ 665.417984][T24370] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8342'. [ 665.433418][ T1188] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 665.441871][ T1188] usb 1-1: config 0 has no interface number 0 [ 665.448004][ T1188] usb 1-1: config 0 interface 170 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.469841][ T1188] usb 1-1: config 0 interface 170 has no altsetting 0 [ 665.510341][ T1188] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 665.519461][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.545863][ T1188] usb 1-1: config 0 descriptor?? [ 665.653700][T24379] netlink: 'syz.4.8346': attribute type 7 has an invalid length. [ 665.661878][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8345'. [ 665.669079][T24379] netlink: 'syz.4.8346': attribute type 8 has an invalid length. [ 665.681165][T24379] netlink: 'syz.4.8346': attribute type 9 has an invalid length. [ 665.770317][ T1188] usb 1-1: string descriptor 0 read error: -71 [ 665.777390][ T1188] ums-realtek 1-1:0.170: USB Mass Storage device detected [ 665.842441][ T1188] usb 1-1: unknown interface protocol 0x83, assuming v1 [ 665.849464][ T1188] usb 1-1: cannot find UAC_HEADER [ 665.930330][ T23] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 665.942425][ T1188] snd-usb-audio: probe of 1-1:0.170 failed with error -22 [ 665.961829][ T1188] usb 1-1: USB disconnect, device number 46 [ 665.989725][T24388] loop1: detected capacity change from 0 to 4096 [ 666.026957][T24388] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 666.103142][T24388] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 666.120992][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 666.143050][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 666.161664][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.179937][ T23] usb 4-1: Product: syz [ 666.187024][ T23] usb 4-1: Manufacturer: syz [ 666.202353][ T23] usb 4-1: SerialNumber: syz [ 666.221433][ T23] usb 4-1: config 0 descriptor?? [ 666.331891][T15539] Bluetooth: hci3: command 0x0406 tx timeout [ 666.402671][T24399] loop4: detected capacity change from 0 to 1024 [ 666.676794][T24407] loop4: detected capacity change from 0 to 256 [ 666.700968][ T23] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 666.708182][ T23] airspy 4-1:0.0: Could not detect board [ 666.729458][ T23] airspy: probe of 4-1:0.0 failed with error -71 [ 666.767808][ T23] usb 4-1: USB disconnect, device number 50 [ 666.862219][T24413] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8362'. [ 667.371890][T24429] netlink: 'syz.3.8370': attribute type 7 has an invalid length. [ 667.435084][T24411] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 667.635798][T24411] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 667.678235][T24411] XFS (loop0): Starting recovery (logdev: internal) [ 667.748399][T24411] XFS (loop0): Ending recovery (logdev: internal) [ 667.772073][T24411] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 667.796394][T24411] XFS (loop0): Failed to initialize disk quotas. [ 667.956157][T24411] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 668.026877][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 668.247565][T24457] set_capacity_and_notify: 1 callbacks suppressed [ 668.247581][T24457] loop3: detected capacity change from 0 to 8192 [ 668.358339][T24436] loop1: detected capacity change from 0 to 32768 [ 668.430488][T24436] [ 668.430488][T24436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.430488][T24436] [ 668.491213][T24436] jfs_rename: dtInsert returned -EIO [ 668.566661][ T5766] [ 668.566661][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.566661][ T5766] [ 668.592047][ T5766] [ 668.592047][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.592047][ T5766] [ 668.907786][T24455] loop4: detected capacity change from 0 to 32768 [ 668.991876][T24455] JBD2: Ignoring recovery information on journal [ 669.093267][T24455] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 669.210439][ T5818] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 669.351992][T15538] ocfs2: Unmounting device (7,4) on (node local) [ 669.429231][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 669.442617][ T5818] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 669.467043][ T5818] usb 1-1: config 0 has no interface number 0 [ 669.480301][ T5818] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 669.500991][ T5818] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 669.530289][ T5818] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 669.553844][ T5818] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 669.570373][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.588682][ T5818] usb 1-1: Product: syz [ 669.593303][ T5818] usb 1-1: Manufacturer: syz [ 669.608943][ T5818] usb 1-1: SerialNumber: syz [ 669.620359][ T5818] usb 1-1: config 0 descriptor?? [ 669.628590][T24468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 669.638297][T24468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 669.671889][T24466] loop3: detected capacity change from 0 to 32768 [ 669.743513][T24480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8390'. [ 669.757137][T24466] ea_get: invalid extended attribute [ 669.772486][T24466] ffff888076ac0c70: 04 00 00 00 .... [ 669.783929][T24480] veth2: entered promiscuous mode [ 669.789024][T24480] veth2: entered allmulticast mode [ 669.896308][T24478] loop1: detected capacity change from 0 to 32768 [ 669.905139][T24468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 669.960095][T24478] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.8389 (24478) [ 669.978568][T24468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 670.029655][T24478] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 670.067200][T24478] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 670.121484][T24478] BTRFS info (device loop1): setting nodatasum [ 670.127736][T24478] BTRFS info (device loop1): using free space tree [ 670.204506][T24491] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 670.228006][T24491] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 670.230715][ T5818] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 670.317725][ T5818] asix: probe of 1-1:0.34 failed with error -71 [ 670.351136][T24478] BTRFS info (device loop1): enabling ssd optimizations [ 670.358165][T24478] BTRFS info (device loop1): auto enabling async discard [ 670.382377][ T5818] usb 1-1: USB disconnect, device number 47 [ 670.470821][T24506] SET target dimension over the limit! [ 670.665104][ T5766] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 671.066791][T24517] netlink: 'syz.0.8399': attribute type 6 has an invalid length. [ 671.151743][T24519] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 671.229608][T24499] loop3: detected capacity change from 0 to 40427 [ 671.278619][T24499] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 671.298306][T24499] F2FS-fs (loop3): Image doesn't support compression [ 671.313490][T24499] F2FS-fs (loop3): Image doesn't support compression [ 671.335323][T24499] F2FS-fs (loop3): invalid crc value [ 671.353235][T24499] F2FS-fs (loop3): Found nat_bits in checkpoint [ 671.497152][T24529] netlink: 'syz.0.8405': attribute type 21 has an invalid length. [ 671.503279][T24499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 671.505956][ T1188] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 671.529092][T24529] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8405'. [ 671.579309][T24529] netlink: 'syz.0.8405': attribute type 5 has an invalid length. [ 671.597448][T24529] netlink: 'syz.0.8405': attribute type 6 has an invalid length. [ 671.609272][T24529] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8405'. [ 671.659347][T24533] loop1: detected capacity change from 0 to 64 [ 671.703406][ T1188] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 671.713194][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.742547][ T1188] usb 5-1: config 0 descriptor?? [ 671.761290][ T1188] cp210x 5-1:0.0: cp210x converter detected [ 671.817301][T24535] loop0: detected capacity change from 0 to 4096 [ 672.129050][ T28] audit: type=1326 audit(2000000224.950:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.189016][ T28] audit: type=1326 audit(2000000224.950:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.228873][ T1188] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 672.249586][ T1188] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 672.259326][ T28] audit: type=1326 audit(2000000224.980:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.288121][ T1188] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 672.310024][ T1188] usb 5-1: cp210x converter now attached to ttyUSB0 [ 672.329503][ T28] audit: type=1326 audit(2000000224.980:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.358065][ T1188] usb 5-1: USB disconnect, device number 19 [ 672.396284][ T1188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 672.405351][ T28] audit: type=1326 audit(2000000224.980:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.448482][ T1188] cp210x 5-1:0.0: device disconnected [ 672.584584][T24551] loop0: detected capacity change from 0 to 128 [ 672.592814][T24551] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.647014][T24551] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 672.674367][T24551] FAT-fs (loop0): Filesystem has been set read-only [ 672.688045][ T28] audit: type=1326 audit(2000000225.510:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.741481][ T28] audit: type=1326 audit(2000000225.540:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.802166][ T28] audit: type=1326 audit(2000000225.550:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.825024][ T5768] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00005106) [ 672.891053][ T28] audit: type=1326 audit(2000000225.550:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.955493][ T28] audit: type=1326 audit(2000000225.550:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 672.964927][T24555] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 673.007712][T24555] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 673.139332][T24545] loop3: detected capacity change from 0 to 32768 [ 673.200632][T24545] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.212813][T24570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8421'. [ 673.240282][T24570] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8421'. [ 673.290740][ T5890] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 673.387685][T24545] XFS (loop3): Ending clean mount [ 673.407202][T24579] loop4: detected capacity change from 0 to 512 [ 673.414227][T24545] XFS (loop3): Quotacheck needed: Please wait. [ 673.438800][T24579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 673.456825][T24579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 673.473594][ T5890] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 673.483951][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.493547][T24579] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 673.505200][T24579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 673.515128][ T5890] usb 1-1: config 0 descriptor?? [ 673.523900][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 673.548777][T24579] System zones: 0-1, 15-15, 18-18, 34-34 [ 673.559745][T24545] XFS (loop3): Quotacheck: Done. [ 673.568283][T24579] EXT4-fs (loop4): orphan cleanup on readonly fs [ 673.592797][T24579] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 673.661492][T24579] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 673.690902][T24579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.8425: bg 0: block 40: padding at end of block bitmap is not set [ 673.744162][T24579] EXT4-fs (loop4): Remounting filesystem read-only [ 673.752028][T24579] EXT4-fs (loop4): 1 truncate cleaned up [ 673.759635][T24579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.836435][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.902157][T24585] loop1: detected capacity change from 0 to 4096 [ 673.907469][T15538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.925308][T24585] ntfs: volume version 3.1. [ 673.976231][ T5890] gspca_sunplus: reg_w_riv err -71 [ 674.001670][ T5890] sunplus: probe of 1-1:0.0 failed with error -71 [ 674.047160][ T5890] usb 1-1: USB disconnect, device number 48 [ 674.417032][T24598] loop4: detected capacity change from 0 to 512 [ 674.682397][T24606] netlink: 'syz.0.8438': attribute type 5 has an invalid length. [ 674.819121][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8440'. [ 674.828343][T24612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8440'. [ 674.838550][T24612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8440'. [ 674.980616][ T5818] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 675.168319][T24630] netlink: 'syz.1.8449': attribute type 32 has an invalid length. [ 675.184298][ T5818] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 675.200616][ T5818] usb 5-1: config 0 has no interface number 0 [ 675.206776][ T5818] usb 5-1: config 0 interface 170 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.240213][ T5818] usb 5-1: config 0 interface 170 has no altsetting 0 [ 675.247107][ T5818] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 675.292028][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.326324][ T5818] usb 5-1: config 0 descriptor?? [ 675.550355][ T5818] usb 5-1: string descriptor 0 read error: -71 [ 675.575528][ T5818] ums-realtek 5-1:0.170: USB Mass Storage device detected [ 675.621263][T24645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8455'. [ 675.642550][ T5818] usb 5-1: unknown interface protocol 0x83, assuming v1 [ 675.652071][T24645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8455'. [ 675.661579][ T5818] usb 5-1: cannot find UAC_HEADER [ 675.713849][ T5818] snd-usb-audio: probe of 5-1:0.170 failed with error -22 [ 675.724492][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.170/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.769807][ T5818] usb 5-1: USB disconnect, device number 20 [ 675.915035][T24626] loop3: detected capacity change from 0 to 40427 [ 675.935186][T24626] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 675.965073][T24626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 676.000697][T24626] F2FS-fs (loop3): heap/no_heap options were deprecated [ 676.018281][T24626] F2FS-fs (loop3): invalid crc value [ 676.027160][T24626] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 676.071394][T24626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 676.220591][T24626] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 676.227880][T24626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 676.287864][T24663] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967167 out of range (51000000..2150000000) [ 676.571746][ T5818] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 676.790520][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 676.806984][ T5818] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 676.837290][ T5818] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 676.866268][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 676.883527][ T5818] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 676.900235][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.918427][ T5818] usb 1-1: Product: syz [ 676.930581][ T5818] usb 1-1: Manufacturer: syz [ 676.935260][ T5818] usb 1-1: SerialNumber: syz [ 676.952370][ T5818] usb 1-1: config 0 descriptor?? [ 677.000284][ T23] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 677.084647][T24687] SET target dimension over the limit! [ 677.213438][ T23] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 677.221674][ T23] usb 5-1: config 0 has no interface number 0 [ 677.240212][ T23] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 677.251654][ T23] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 677.270263][ T23] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 677.279343][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.311239][ T23] usb 5-1: config 0 descriptor?? [ 677.327572][ T23] ttusbir 5-1:0.83: cannot find expected altsetting [ 677.376768][ T5854] usb 1-1: USB disconnect, device number 49 [ 677.549759][ T23] usb 5-1: USB disconnect, device number 21 [ 677.702130][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8478'. [ 677.821813][T24705] ip6gre1: entered allmulticast mode [ 678.191970][ T5854] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 678.217625][T24723] netlink: 'syz.4.8489': attribute type 10 has an invalid length. [ 678.258001][T24723] veth1_macvtap: left promiscuous mode [ 678.327133][T24727] netlink: 'syz.0.8490': attribute type 2 has an invalid length. [ 678.345314][T24729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8492'. [ 678.390602][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 678.397922][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 678.418113][ T5854] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 678.438984][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.482332][ T5854] usb 2-1: config 0 descriptor?? [ 678.494789][ T5854] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 678.724861][ T5854] usb 2-1: USB disconnect, device number 53 [ 678.990797][T24751] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 679.382231][T24768] xt_hashlimit: max too large, truncated to 1048576 [ 679.389892][T24768] No such timeout policy "syz1" [ 679.551310][T24777] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8514'. [ 679.574372][T24772] bond5: entered allmulticast mode [ 679.600700][T24772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 679.937331][T24787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8520'. [ 680.162505][T24779] loop0: detected capacity change from 0 to 32768 [ 680.203840][T24779] [ 680.203840][T24779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 680.203840][T24779] [ 680.225092][T24775] loop1: detected capacity change from 0 to 32768 [ 680.288956][T24775] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 680.302539][T24779] jfs_rename: dtInsert returned -EIO [ 680.313375][T24793] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 680.414306][ T5768] [ 680.414306][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 680.414306][ T5768] [ 680.433129][T24775] XFS (loop1): Ending clean mount [ 680.438451][ T5768] [ 680.438451][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 680.438451][ T5768] [ 680.655362][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 680.776124][T24812] netlink: 'syz.4.8531': attribute type 4 has an invalid length. [ 680.788809][T24812] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8531'. [ 680.951924][T24812] .`: renamed from bond0 (while UP) [ 681.206485][T24824] infiniband syz0: set active [ 681.216908][T24824] netlink: 'syz.1.8529': attribute type 2 has an invalid length. [ 681.248049][T24824] infiniband syz0: set active [ 681.258134][T24824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.292933][ T5890] lo speed is unknown, defaulting to 1000 [ 681.307426][T24827] SET target dimension over the limit! [ 681.323222][ T5854] lo speed is unknown, defaulting to 1000 [ 682.000792][T24861] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 682.096687][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8552'. [ 682.340280][T15539] Bluetooth: hci0: command tx timeout [ 682.385596][T24875] loop3: detected capacity change from 0 to 512 [ 682.395445][T24872] bond6: entered allmulticast mode [ 682.418046][T24850] loop0: detected capacity change from 0 to 32768 [ 682.425253][T24872] 8021q: adding VLAN 0 to HW filter on device bond6 [ 682.432963][T24850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8545 (24850) [ 682.473014][T24875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.493040][T24850] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.519693][T24875] ext4 filesystem being mounted at /2099/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.531151][T24850] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 682.539927][T24850] BTRFS info (device loop0): using free space tree [ 682.638169][T24875] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.8558: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 682.662633][T24875] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.8558: directory missing '.' [ 682.731969][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.754252][T24850] BTRFS info (device loop0): enabling ssd optimizations [ 682.763428][T24850] BTRFS info (device loop0): auto enabling async discard [ 683.039490][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 683.097115][T24909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8565'. [ 683.194188][T24905] loop1: detected capacity change from 0 to 8192 [ 683.228186][T24905] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 683.260397][T24905] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 683.300536][T24905] REISERFS (device loop1): using ordered data mode [ 683.307124][T24905] reiserfs: using flush barriers [ 683.373124][T24905] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 683.391730][T24905] REISERFS (device loop1): checking transaction log (loop1) [ 683.401577][T24905] REISERFS (device loop1): Using r5 hash to sort names [ 683.411136][T24905] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 683.707594][T24926] netlink: 'syz.4.8573': attribute type 2 has an invalid length. [ 684.116536][T24941] loop4: detected capacity change from 0 to 16 [ 684.158504][T24941] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 684.525995][T24957] netlink: 'syz.3.8588': attribute type 4 has an invalid length. [ 684.576976][T24957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8588'. [ 684.626927][T24957] .`: renamed from bond0 (while UP) [ 685.070783][ T5854] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 685.280366][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 685.287823][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.311340][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.337911][ T5854] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 685.364198][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.386689][ T5854] usb 2-1: config 0 descriptor?? [ 685.400988][ T5854] hub 2-1:0.0: USB hub found [ 685.581924][T24988] netlink: 'syz.0.8602': attribute type 4 has an invalid length. [ 685.589952][T24988] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8602'. [ 685.617924][ T5854] hub 2-1:0.0: 1 port detected [ 685.644898][T24988] .`: renamed from bond0 (while UP) [ 685.764991][T24988] bridge0: port 3(.`) entered disabled state [ 685.816620][T24990] loop4: detected capacity change from 0 to 1024 [ 685.831648][ T5854] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 685.847084][ T5854] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 685.868454][T24990] EXT4-fs: Ignoring removed bh option [ 685.875558][ T5854] usbhid 2-1:0.0: can't add hid device: -71 [ 685.879246][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.890687][T24990] EXT4-fs: inline encryption not supported [ 685.906985][T24990] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 685.917407][ T5854] usbhid: probe of 2-1:0.0 failed with error -71 [ 685.930581][T24990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce028, mo2=0000] [ 685.962205][T24990] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.8604: lblock 2 mapped to illegal pblock 2 (length 1) [ 685.977403][ T5854] usb 2-1: USB disconnect, device number 54 [ 685.990182][T24990] EXT4-fs (loop4): Remounting filesystem read-only [ 686.000386][T24990] __quota_error: 10 callbacks suppressed [ 686.000401][T24990] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 686.072001][T24990] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 686.100552][T24990] EXT4-fs (loop4): 1 orphan inode deleted [ 686.124149][T24990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.159084][T24990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.321879][T25003] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8610'. [ 686.484745][T25008] loop3: detected capacity change from 0 to 64 [ 686.561942][T25008] Trying to free block not in datazone [ 686.568483][T25008] Trying to free block not in datazone [ 686.614906][T25008] Trying to free block not in datazone [ 686.626172][T25010] loop4: detected capacity change from 0 to 4096 [ 686.638006][T25008] Trying to free block not in datazone [ 686.641961][T25010] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 686.658630][T25008] Trying to free block not in datazone [ 686.697357][T25008] minix_free_block (loop3:6): bit already cleared [ 686.705083][T25008] Trying to free block not in datazone [ 686.772008][T25010] ntfs: volume version 3.1. [ 687.045987][T25025] loop0: detected capacity change from 0 to 512 [ 687.092746][T25025] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 687.109712][T25025] EXT4-fs (loop0): orphan cleanup on readonly fs [ 687.117608][T25025] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 687.131415][T25025] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 687.136298][T25029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8622'. [ 687.140955][T25025] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.8621: Failed to acquire dquot type 1 [ 687.170179][T25025] EXT4-fs (loop0): Remounting filesystem read-only [ 687.176802][T25025] EXT4-fs (loop0): 1 truncate cleaned up [ 687.185789][T25025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.247784][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.466914][T25038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8627'. [ 687.770589][T25052] netlink: 'syz.1.8633': attribute type 4 has an invalid length. [ 687.778384][T25052] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8633'. [ 687.800862][T25052] .`: renamed from bond0 (while UP) [ 688.260564][T25080] loop3: detected capacity change from 0 to 512 [ 688.277747][T25080] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 688.286239][T25080] EXT4-fs (loop3): orphan cleanup on readonly fs [ 688.303886][T25080] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 688.322582][T25080] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 688.329625][T25080] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.8647: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 688.356376][T25080] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.8647: couldn't read orphan inode 13 (err -117) [ 688.371448][T25080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 688.400113][T25080] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.8647: inode #15: comm syz.3.8647: iget: illegal inode # [ 688.446536][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.530911][T25086] loop0: detected capacity change from 0 to 256 [ 688.551582][T25086] exfat: Deprecated parameter 'utf8' [ 688.556987][T25086] exfat: Deprecated parameter 'namecase' [ 688.609879][T25086] exfat: Deprecated parameter 'namecase' [ 688.660342][T25086] exfat: Deprecated parameter 'utf8' [ 688.669771][T25089] loop3: detected capacity change from 0 to 4096 [ 688.704501][T25086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 688.726328][T25089] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 688.740014][T25089] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 688.772980][T25089] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 688.792301][T25089] ntfs: volume version 3.1. [ 689.108770][T25101] bridge4: entered promiscuous mode [ 689.125117][T25101] bridge4: entered allmulticast mode [ 689.218607][T25107] loop4: detected capacity change from 0 to 64 [ 689.309725][T25111] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 689.511099][ T28] audit: type=1326 audit(2000000242.330:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.1.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 689.580710][T25117] xt_HMARK: spi-set and port-set can't be combined [ 689.580710][ T28] audit: type=1326 audit(2000000242.330:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.1.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8c39c629 code=0x7ffc0000 [ 689.614500][T25121] loop3: detected capacity change from 0 to 256 [ 689.692801][T25121] FAT-fs (loop3): Directory bread(block 64) failed [ 689.712246][T25121] FAT-fs (loop3): Directory bread(block 65) failed [ 689.718935][T25121] FAT-fs (loop3): Directory bread(block 66) failed [ 689.734789][T25123] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8668'. [ 689.746115][T25121] FAT-fs (loop3): Directory bread(block 67) failed [ 689.758668][T25121] FAT-fs (loop3): Directory bread(block 68) failed [ 689.784602][T25121] FAT-fs (loop3): Directory bread(block 69) failed [ 689.799232][T25121] FAT-fs (loop3): Directory bread(block 70) failed [ 689.826149][T25121] FAT-fs (loop3): Directory bread(block 71) failed [ 689.845651][T25121] FAT-fs (loop3): Directory bread(block 72) failed [ 689.853730][T25121] FAT-fs (loop3): Directory bread(block 73) failed [ 690.202734][T25115] loop0: detected capacity change from 0 to 32768 [ 690.273154][T25115] [ 690.273154][T25115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.273154][T25115] [ 690.317664][T25115] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 690.435097][ T7486] [ 690.435097][ T7486] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.435097][ T7486] [ 690.465440][ T7486] [ 690.465440][ T7486] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.465440][ T7486] [ 690.490786][ T5768] [ 690.490786][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.490786][ T5768] [ 690.530668][ T5768] [ 690.530668][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.530668][ T5768] [ 690.551146][ T111] [ 690.551146][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 690.551146][ T111] [ 690.575461][T25146] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 690.590777][ T111] ================================================================== [ 690.598892][ T111] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 690.605789][ T111] Write of size 8 at addr ffff88807c83b040 by task jfsCommit/111 [ 690.613540][ T111] [ 690.615893][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 690.623138][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.633235][ T111] Call Trace: [ 690.636552][ T111] [ 690.639508][ T111] dump_stack_lvl+0x18c/0x250 [ 690.644226][ T111] ? __lock_acquire+0x7d40/0x7d40 [ 690.649284][ T111] ? show_regs_print_info+0x20/0x20 [ 690.652168][ T23] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 690.654502][ T111] ? load_image+0x400/0x400 [ 690.654529][ T111] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 690.654550][ T111] ? __virt_addr_valid+0x18c/0x540 [ 690.654574][ T111] ? __virt_addr_valid+0x469/0x540 [ 690.654597][ T111] print_report+0xa8/0x210 [ 690.654619][ T111] ? txEnd+0x32d/0x520 [ 690.654638][ T111] kasan_report+0x117/0x150 [ 690.654660][ T111] ? txEnd+0x32d/0x520 [ 690.654682][ T111] kasan_check_range+0x241/0x290 [ 690.654706][ T111] txEnd+0x32d/0x520 [ 690.654728][ T111] jfs_lazycommit+0x5a4/0xa70 [ 690.654753][ T111] ? txFreelock+0x5a0/0x5a0 [ 690.654773][ T111] ? do_task_dead+0xd0/0xd0 [ 690.654792][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 690.654812][ T111] kthread+0x2fa/0x390 [ 690.654830][ T111] ? txFreelock+0x5a0/0x5a0 [ 690.654850][ T111] ? kthread_blkcg+0xd0/0xd0 [ 690.654868][ T111] ret_from_fork+0x48/0x80 [ 690.654889][ T111] ? kthread_blkcg+0xd0/0xd0 [ 690.654907][ T111] ret_from_fork_asm+0x11/0x20 [ 690.654939][ T111] [ 690.757431][ T111] [ 690.759778][ T111] Allocated by task 25115: [ 690.764215][ T111] kasan_set_track+0x4e/0x70 [ 690.768836][ T111] __kasan_kmalloc+0x8f/0xa0 [ 690.773455][ T111] lmLogOpen+0x2df/0xfb0 [ 690.777725][ T111] jfs_mount_rw+0xef/0x670 [ 690.782175][ T111] jfs_fill_super+0x598/0xad0 [ 690.786892][ T111] mount_bdev+0x221/0x2d0 [ 690.791286][ T111] legacy_get_tree+0xea/0x180 [ 690.796003][ T111] vfs_get_tree+0x8c/0x280 [ 690.800468][ T111] do_new_mount+0x24b/0xa40 [ 690.805000][ T111] __se_sys_mount+0x2e7/0x3d0 [ 690.809734][ T111] do_syscall_64+0x55/0xa0 [ 690.814191][ T111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.820122][ T111] [ 690.822473][ T111] Freed by task 5768: [ 690.826478][ T111] kasan_set_track+0x4e/0x70 [ 690.831110][ T111] kasan_save_free_info+0x2e/0x50 [ 690.836190][ T111] ____kasan_slab_free+0x126/0x1e0 [ 690.841347][ T111] slab_free_freelist_hook+0x130/0x1a0 [ 690.846841][ T111] __kmem_cache_free+0xba/0x1e0 [ 690.851738][ T111] lmLogClose+0x297/0x520 [ 690.856102][ T111] jfs_umount+0x2ef/0x3c0 [ 690.860472][ T111] jfs_put_super+0x8c/0x190 [ 690.865012][ T111] generic_shutdown_super+0x134/0x2b0 [ 690.870416][ T111] kill_block_super+0x44/0x90 [ 690.875126][ T111] deactivate_locked_super+0x97/0x100 [ 690.880524][ T111] cleanup_mnt+0x43b/0x4d0 [ 690.884979][ T111] task_work_run+0x1d4/0x260 [ 690.889608][ T111] exit_to_user_mode_loop+0xe6/0x110 [ 690.894956][ T111] exit_to_user_mode_prepare+0xee/0x180 [ 690.900556][ T111] syscall_exit_to_user_mode+0x1a/0x50 [ 690.906075][ T111] do_syscall_64+0x61/0xa0 [ 690.910532][ T111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.912512][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 690.916445][ T111] [ 690.916452][ T111] Last potentially related work creation: [ 690.916459][ T111] kasan_save_stack+0x3e/0x60 [ 690.934362][ T111] __kasan_record_aux_stack+0xaf/0xc0 [ 690.939773][ T111] kvfree_call_rcu+0xee/0x790 [ 690.944493][ T111] neigh_periodic_work+0x3f7/0xd70 [ 690.949644][ T111] process_scheduled_works+0xa5d/0x15d0 [ 690.955230][ T111] worker_thread+0xa55/0xfc0 [ 690.959945][ T111] kthread+0x2fa/0x390 [ 690.964046][ T111] ret_from_fork+0x48/0x80 [ 690.968499][ T111] ret_from_fork_asm+0x11/0x20 [ 690.973303][ T111] [ 690.975648][ T111] Second to last potentially related work creation: [ 690.982268][ T111] kasan_save_stack+0x3e/0x60 [ 690.985738][ T23] usb 4-1: config 3 has an invalid interface number: 12 but max is 0 [ 690.986978][ T111] __kasan_record_aux_stack+0xaf/0xc0 [ 691.000496][ T111] kvfree_call_rcu+0xee/0x790 [ 691.005209][ T111] neigh_periodic_work+0x3f7/0xd70 [ 691.010359][ T111] process_scheduled_works+0xa5d/0x15d0 [ 691.015972][ T111] worker_thread+0xa55/0xfc0 [ 691.020610][ T111] kthread+0x2fa/0x390 [ 691.024785][ T111] ret_from_fork+0x48/0x80 [ 691.029228][ T111] ret_from_fork_asm+0x11/0x20 [ 691.034040][ T111] [ 691.036392][ T111] The buggy address belongs to the object at ffff88807c83b000 [ 691.036392][ T111] which belongs to the cache kmalloc-1k of size 1024 [ 691.050476][ T111] The buggy address is located 64 bytes inside of [ 691.050476][ T111] freed 1024-byte region [ffff88807c83b000, ffff88807c83b400) [ 691.064312][ T111] [ 691.066670][ T111] The buggy address belongs to the physical page: [ 691.069341][ T23] usb 4-1: config 3 has no interface number 0 [ 691.073102][ T111] page:ffffea0001f20e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c838 [ 691.073124][ T111] head:ffffea0001f20e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 691.073140][ T111] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 691.073157][ T111] page_type: 0xffffffff() [ 691.073174][ T111] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122 [ 691.073189][ T111] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 691.073198][ T111] page dumped because: kasan: bad access detected [ 691.073213][ T111] page_owner tracks the page as allocated [ 691.094820][ T23] usb 4-1: config 3 interface 12 has no altsetting 0 [ 691.098372][ T111] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5818, tgid 5818 (kworker/1:3), ts 78800731009, free_ts 78794831242 [ 691.098409][ T111] post_alloc_hook+0x1c1/0x200 [ 691.170819][ T111] get_page_from_freelist+0x1951/0x19e0 [ 691.176410][ T111] __alloc_pages+0x1f0/0x460 [ 691.180921][ T23] usb 4-1: string descriptor 0 read error: -22 [ 691.181019][ T111] alloc_slab_page+0x5d/0x160 [ 691.188017][ T23] usb 4-1: New USB device found, idVendor=a156, idProduct=e35a, bcdDevice=74.ff [ 691.191954][ T111] new_slab+0x87/0x2d0 [ 691.191985][ T111] ___slab_alloc+0xc5d/0x12f0 [ 691.192011][ T111] __kmem_cache_alloc_node+0x19e/0x250 [ 691.192036][ T111] __kmalloc+0xa4/0x230 [ 691.192059][ T111] ___neigh_create+0x6d2/0x2440 [ 691.224394][ T111] ip6_finish_output2+0x1581/0x1630 [ 691.229639][ T111] NF_HOOK+0x167/0x4a0 [ 691.231090][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.233736][ T111] mld_sendpack+0x7f5/0xd50 [ 691.233767][ T111] mld_ifc_work+0x835/0xb40 [ 691.250794][ T111] process_scheduled_works+0xa5d/0x15d0 [ 691.256383][ T111] worker_thread+0xa55/0xfc0 [ 691.261010][ T111] kthread+0x2fa/0x390 [ 691.265104][ T111] page last free stack trace: [ 691.269796][ T111] free_unref_page_prepare+0x7b2/0x8c0 [ 691.275321][ T111] free_unref_page+0x32/0x2e0 [ 691.280045][ T111] __slab_free+0x35a/0x400 [ 691.284492][ T111] qlist_free_all+0x75/0xd0 [ 691.289031][ T111] kasan_quarantine_reduce+0x143/0x160 [ 691.294523][ T111] __kasan_slab_alloc+0x22/0x80 [ 691.299415][ T111] slab_post_alloc_hook+0x6e/0x4b0 [ 691.304559][ T111] kmem_cache_alloc_node+0x14c/0x320 [ 691.309889][ T111] dup_task_struct+0x57/0x7c0 [ 691.314597][ T111] copy_process+0x586/0x3d80 [ 691.319222][ T111] kernel_clone+0x24b/0x8a0 [ 691.323757][ T111] user_mode_thread+0x111/0x180 [ 691.324620][ T23] usb-storage 4-1:3.12: USB Mass Storage device detected [ 691.328629][ T111] call_usermodehelper_exec_work+0x97/0x220 [ 691.328659][ T111] process_scheduled_works+0xa5d/0x15d0 [ 691.347247][ T111] worker_thread+0xa55/0xfc0 [ 691.351875][ T111] kthread+0x2fa/0x390 [ 691.355990][ T111] [ 691.358344][ T111] Memory state around the buggy address: [ 691.364000][ T111] ffff88807c83af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.372082][ T111] ffff88807c83af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.380171][ T111] >ffff88807c83b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.388259][ T111] ^ [ 691.394434][ T111] ffff88807c83b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.402531][ T111] ffff88807c83b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 691.410625][ T111] ================================================================== [ 691.477486][ T111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 691.484761][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 691.491987][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.502075][ T111] Call Trace: [ 691.505390][ T111] [ 691.508349][ T111] dump_stack_lvl+0x18c/0x250 [ 691.513063][ T111] ? show_regs_print_info+0x20/0x20 [ 691.518299][ T111] ? load_image+0x400/0x400 [ 691.522843][ T111] panic+0x2dc/0x730 [ 691.526772][ T111] ? bpf_jit_dump+0xd0/0xd0 [ 691.531305][ T111] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 691.537321][ T111] ? _raw_spin_unlock+0x40/0x40 [ 691.542203][ T111] ? print_memory_metadata+0x314/0x400 [ 691.547702][ T111] ? txEnd+0x32d/0x520 [ 691.551807][ T111] check_panic_on_warn+0x84/0xa0 [ 691.556798][ T111] ? txEnd+0x32d/0x520 [ 691.560904][ T111] end_report+0x6f/0x130 [ 691.565182][ T111] kasan_report+0x128/0x150 [ 691.569720][ T111] ? txEnd+0x32d/0x520 [ 691.573830][ T111] kasan_check_range+0x241/0x290 [ 691.578808][ T111] txEnd+0x32d/0x520 [ 691.582740][ T111] jfs_lazycommit+0x5a4/0xa70 [ 691.587454][ T111] ? txFreelock+0x5a0/0x5a0 [ 691.591997][ T111] ? do_task_dead+0xd0/0xd0 [ 691.596528][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 691.601517][ T111] kthread+0x2fa/0x390 [ 691.605627][ T111] ? txFreelock+0x5a0/0x5a0 [ 691.610168][ T111] ? kthread_blkcg+0xd0/0xd0 [ 691.614794][ T111] ret_from_fork+0x48/0x80 [ 691.619256][ T111] ? kthread_blkcg+0xd0/0xd0 [ 691.623886][ T111] ret_from_fork_asm+0x11/0x20 [ 691.628700][ T111] [ 691.632310][ T111] Kernel Offset: disabled [ 691.636642][ T111] Rebooting in 86400 seconds..