last executing test programs: 11m53.09307496s ago: executing program 4 (id=3628): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) 11m52.932089537s ago: executing program 4 (id=3633): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe2, &(0x7f0000000000), &(0x7f0000000080)=0x4) 11m52.707832549s ago: executing program 4 (id=3637): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xa1, 0xef, 0x40, 0x5ac, 0x245, 0xa3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x4a, 0x2}}]}}]}}, 0x0) 11m51.0864862s ago: executing program 4 (id=3660): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 11m50.598558268s ago: executing program 4 (id=3668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x0) 11m50.071949931s ago: executing program 4 (id=3673): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11m49.588656799s ago: executing program 32 (id=3673): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m22.086789288s ago: executing program 3 (id=11838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) times(0xffffffffffffffff) 2m21.848288561s ago: executing program 3 (id=11842): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) eventfd2(0x39, 0x80800) 2m21.613980464s ago: executing program 3 (id=11845): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@metacopy_off}]}) 2m21.373693628s ago: executing program 3 (id=11849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300005c89249261b651240008050001"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) 2m21.003303755s ago: executing program 3 (id=11853): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m19.876723767s ago: executing program 3 (id=11870): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000240)=[{0x7, 0x801, 0x0, 0xfffffffffffffffe}], 0x1}) 2m5.483142218s ago: executing program 33 (id=11870): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000240)=[{0x7, 0x801, 0x0, 0xfffffffffffffffe}], 0x1}) 3.189538713s ago: executing program 6 (id=13836): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x8, &(0x7f0000000100)=[{0x3d, '\x00', @st={0x4, [{0x1, @svalue=0x4455}, {0x1, @svalue=0x2}, {0x2, @uvalue=0xb}, {0x0, @uvalue=0x8}]}, 0x7}]}) 2.870893415s ago: executing program 6 (id=13840): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) 2.666287295s ago: executing program 2 (id=13843): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r0, 0x0) 2.584858203s ago: executing program 6 (id=13845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.433940918s ago: executing program 2 (id=13846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f3080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2.194997052s ago: executing program 6 (id=13849): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x18) 2.122923739s ago: executing program 2 (id=13851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T4'], 0x5c}}, 0x4004040) 1.794048952s ago: executing program 6 (id=13855): r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000005c0), 0x20040, 0x2) read$FUSE(r0, 0x0, 0x0) 1.781093113s ago: executing program 2 (id=13856): socket$nl_netfilter(0x10, 0x3, 0xc) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.723755989s ago: executing program 5 (id=13858): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x1, "fd5a44512b7e1b0020ed2abb4301002700"}}) 1.505079581s ago: executing program 2 (id=13860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff66, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 1.476530733s ago: executing program 6 (id=13861): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfe, 0x6178, &(0x7f000000ca40)="$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") symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.419931819s ago: executing program 5 (id=13862): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000780)={0x2a, 0x1, 0xfffffffe}, 0xc) 1.360072565s ago: executing program 0 (id=13863): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000002040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x118) 1.338234297s ago: executing program 1 (id=13864): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file2\x00', 0x8002, &(0x7f0000000040)=ANY=[], 0x1, 0x1f3, &(0x7f0000000700)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.216131329s ago: executing program 5 (id=13865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfa}, @NFULA_CFG_MODE={0xa, 0x2, {0x8f2a, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x48}}, 0x20000000) 1.181442753s ago: executing program 2 (id=13866): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4437, &(0x7f0000004480)="$eJzs3b9PHFceAPA3Az6Dz/aBz4VPOulWOkt3ujshcHV3WDrA2BhszpETW1Ga9QJrm2RhLViiFC5IZylVpBRRCiuR0lFZFGmdPyFNqsipLcVFmkiRrBDt7iwww67YYBZi5/MpmJ33G74zb98Uw4sTlbvzy7n55VxhMVeevb18LvduubSyUAzxAWna/5GD65/2dOI6Oexr77fs2oVLr988F8KXc18/3djY2AhV3aGpoW2ff/j+/uz2Y0OcqVNtt3lr++WtEMLpHeOq6gohvPlFCFEIYTRJG0uOvSGEE6Ged/P+B7dyLzSGbzY/PXpSPJ9/Pv1gffjs1NrD9da/exTCJ6U//evOwnd/7Rr+9h8v1D0AAAAAAAAAAAAAAAAAAK+MievXbrw2OBQeR6F7Ldr5vu5Ecmz1fuzGvvlL539ZAAAAAAAAAAAAAAAAAAAA+JXaev8/F51q8v7/eHIcaVF/43+dHyOdM/n/a+MXB4eS/d+jHfn/TpKejYbQ32Tf9+z+76OZ+s33f9/Zz141xtfoty9E8UDqPI4HBkL4LNn4/Ux0LC6Vlyv/vF1eWZzbt2G8tNLxr+/en4pOsqH/s9GutuI/lmm/8/v//3HH1VQ9v7V/l9grLR3/rpblPn8/aiv+FzL1DiL+7F06/t21tN7tBUbqE0A1/h927x7/8Uz7nYr/yRBCLqqONZeaAaprmGp6q/UKaen4H6mlpabO5A/Z6v7/MRP/i5n2D2v+X81+EdFUOv6/q6X1pEps3f/98e73/6VM+4cR/+r4V33/tyUd/6P1xO5Ukdpfst35fyLTfqfifyNOxnkySl0Ba1E9vdX/qyMtHf+eHflbz39xW+u/y5n6B/X81+i38fzXmP7/HtWf/2guHf/eluXavf8nM/U6Pf+P1NZ/7FU6/sdqaem1c1/tZ1vxPxrCVKb9TsW/tirpacR/az756Wg9/VPrv7ak4//7emK8vcRq7Wdt/Rftvv6/kmn/MNZ/1fGvxp3t9VWRjv/xluWq8f+qje//q5l6nY9/CIPW+nuWjv+JluVq93/P7vGfztTrdPz/1snGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4CY8mxL0TxQOo8jgcGQriQnJ8Jx6KZwlx+plSefWc5hPEkPRdORXdK5ZlCKT+/WJ4r5gulUnk2hItJ/unQEy2XypX8QuHepc22eqO7xcJSZaZYqIQQJpL0P4cTjbZm5isLhXshhMubeX+Iy0v37hYW83PzS/8dHBwcDJObY+iPiu9ViouVeu/13BCmNuv2RdsGV8u+sjmW49Hb5ZWlxUKpln51W51SebZQ2lZnOsn7KPRHlaWVxdlCpZgvle80+jtMI8lxfPL6G9evDu3IvxXVj2MHOywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfqHHw//5OITQXT+LQwgjjQ9Rs/KPnhTP559PP1gfPju19nD9aatyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkZpIIjCAPxmLNTOY1gtu53tiiJauCJ4Aj2Gh9GjeAnvkCJF2hQhkMxC2OzCNkn1fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDP03v38VY3ESmuNpcRf1//i8P8pdSf+/H7F2eYkdN5fu0eHuum/Hs6yu/K0bLNu3S9+v6Mkdr7HezJcJ/2+j7Xk3NN7dvUfH3fm0i5ioi25Lcp56qa9xYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//8Oph/w") symlink(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='./file1\x00') 1.090759702s ago: executing program 0 (id=13867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x306, @remote}, 0x38, {0x2, 0x4e22, @empty}}) 944.979926ms ago: executing program 1 (id=13868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040)="a2", &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6, r0}, 0x38) 904.586461ms ago: executing program 5 (id=13869): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 838.404607ms ago: executing program 0 (id=13870): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) connect$ax25(r0, &(0x7f0000000240)={{0x3, @null, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @null]}, 0x48) 665.301874ms ago: executing program 1 (id=13871): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 591.972721ms ago: executing program 5 (id=13872): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) clock_settime(0x0, &(0x7f0000000080)) 580.948342ms ago: executing program 0 (id=13873): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x27}, 0x14) 457.198315ms ago: executing program 1 (id=13874): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f0000000180)) 367.940743ms ago: executing program 5 (id=13875): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) 277.490683ms ago: executing program 0 (id=13876): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xf7ff, 0x3}, 0x6) 276.962223ms ago: executing program 1 (id=13877): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80380000, @local}, 0x1c) 539.57µs ago: executing program 1 (id=13878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000040000000000000007000000850000002c00000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 0 (id=13879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xe4, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x48, 0x1, {0xa2d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xe265}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0xef8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf03b, 0x15}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x48, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xe4}}, 0x0) kernel console output (not intermixed with test programs): ipping remainder of the config [ 1074.514339][ T22] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1074.523925][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.532287][ T22] usb 6-1: Product: syz [ 1074.542954][ T22] usb 6-1: Manufacturer: syz [ 1074.547820][ T22] usb 6-1: SerialNumber: syz [ 1074.567691][ T22] usb 6-1: config 0 descriptor?? [ 1074.591221][ T22] cdc_ether 6-1:0.0: skipping garbage [ 1074.634508][ T22] cdc_ether 6-1:0.0: skipping garbage [ 1074.639965][ T22] usb 6-1: bad CDC descriptors [ 1074.649033][ T22] usb 6-1: unsupported MDLM descriptors [ 1074.778462][T10788] usb 6-1: USB disconnect, device number 39 [ 1074.983229][T31918] unsupported nlmsg_type 40 [ 1075.479836][T31946] CIFS mount error: No usable UNC path provided in device string! [ 1075.479836][T31946] [ 1075.507328][T31949] netlink: 'syz.1.12062': attribute type 7 has an invalid length. [ 1075.540349][T31949] netlink: 'syz.1.12062': attribute type 8 has an invalid length. [ 1075.557630][T31946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1075.913189][T31962] loop2: detected capacity change from 0 to 4096 [ 1076.282096][T10788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1076.477944][T10788] usb 2-1: Using ep0 maxpacket: 16 [ 1076.486589][T10788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.519599][T10788] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1076.552250][T10788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.612464][T10788] usb 2-1: config 0 descriptor?? [ 1076.651101][T10788] xbox_remote_probe: Unexpected endpoint_in [ 1076.663549][T10788] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1076.813212][T31995] loop0: detected capacity change from 0 to 4096 [ 1076.866095][ T22] usb 2-1: USB disconnect, device number 6 [ 1076.889655][T31995] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 1077.086455][T32006] netlink: 188 bytes leftover after parsing attributes in process `syz.5.12075'. [ 1077.196998][T32008] netlink: 'syz.0.12076': attribute type 2 has an invalid length. [ 1077.221076][T32008] netlink: 504 bytes leftover after parsing attributes in process `syz.0.12076'. [ 1077.302080][T31984] loop2: detected capacity change from 0 to 32768 [ 1077.489131][T31984] XFS (loop2): Mounting V5 Filesystem [ 1077.771683][ T27] audit: type=1326 audit(1771373980.156:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32031 comm="syz.5.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1077.853591][ T27] audit: type=1326 audit(1771373980.187:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32031 comm="syz.5.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1077.876995][T31984] XFS (loop2): Ending clean mount [ 1077.906751][T32035] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1077.969930][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1077.987998][T32035] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1078.012046][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1078.024150][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1078.032057][ T27] audit: type=1326 audit(1771373980.187:3620): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=32031 comm="syz.5.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1078.058945][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1078.060759][T32035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1078.083180][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1078.090548][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1078.267334][ T27] audit: type=1326 audit(1771373980.187:3621): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=32031 comm="syz.5.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1078.302089][ T4282] XFS (loop2): Unmounting Filesystem [ 1078.706904][T32036] lo speed is unknown, defaulting to 1000 [ 1078.709837][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12088'. [ 1078.725024][T32036] wg1 speed is unknown, defaulting to 1000 [ 1078.920584][ T27] audit: type=1326 audit(1771373981.363:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1078.996678][ T27] audit: type=1326 audit(1771373981.384:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1079.082756][ T27] audit: type=1326 audit(1771373981.384:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1079.127401][T32029] loop1: detected capacity change from 0 to 32768 [ 1079.223839][T32029] JBD2: Ignoring recovery information on journal [ 1079.234207][ T27] audit: type=1326 audit(1771373981.384:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1079.325038][ T27] audit: type=1326 audit(1771373981.384:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1079.359361][T32029] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1079.396727][ T27] audit: type=1326 audit(1771373981.384:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.12089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1079.610223][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 1079.933022][T32143] netlink: 'syz.2.12096': attribute type 4 has an invalid length. [ 1079.978319][T32036] chnl_net:caif_netlink_parms(): no params data found [ 1080.025613][T27304] Bluetooth: hci5: command 0x0409 tx timeout [ 1080.361658][T32036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.397130][T32036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.405471][T32036] device bridge_slave_0 entered promiscuous mode [ 1080.456984][T32036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.491841][T32036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.512536][T32036] device bridge_slave_1 entered promiscuous mode [ 1080.634226][T32036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.670095][T32036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.787012][T32036] team0: Port device team_slave_0 added [ 1080.884832][T32036] team0: Port device team_slave_1 added [ 1080.945167][T32036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.968942][T32036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.062560][T32036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.133780][T32036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.160313][T32036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.283450][T32036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.483331][T32036] device hsr_slave_0 entered promiscuous mode [ 1081.523728][T32036] device hsr_slave_1 entered promiscuous mode [ 1081.544509][T32036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.564266][T32036] Cannot create hsr debugfs directory [ 1081.997553][T27304] Bluetooth: hci5: command 0x041b tx timeout [ 1082.272057][T32460] device sit0 left promiscuous mode [ 1082.345585][T32036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1082.359003][T32470] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1082.427773][T32036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1082.441884][T32474] netlink: 340 bytes leftover after parsing attributes in process `syz.1.12123'. [ 1082.476848][T32036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1082.500137][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12123'. [ 1082.513050][T32036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1082.597627][T32486] overlayfs: missing 'lowerdir' [ 1082.829811][T32498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12130'. [ 1082.890996][T32036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.933263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1082.978852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.047455][T32036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.078408][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1083.112459][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1083.149794][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.156999][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.197791][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1083.234972][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1083.254119][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1083.278455][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.285680][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.332134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1083.360413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1083.462495][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1083.496361][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1083.509949][T32522] loop1: detected capacity change from 0 to 1764 [ 1083.524584][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1083.550949][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1083.598601][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1083.619721][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1083.638293][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1083.666561][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1083.709363][T32036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1083.732277][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1083.978447][T27304] Bluetooth: hci5: command 0x040f tx timeout [ 1084.095315][T32544] binder: 32543:32544 ioctl 400c620e 0 returned -14 [ 1084.741492][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1084.749102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1084.788489][T32036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.982646][T32584] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1085.223171][T32583] loop2: detected capacity change from 0 to 4096 [ 1085.229927][T32589] netlink: 'syz.5.12154': attribute type 9 has an invalid length. [ 1085.247433][T32589] netlink: 399 bytes leftover after parsing attributes in process `syz.5.12154'. [ 1085.333469][T32583] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1085.857952][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1085.857969][ T27] audit: type=1326 audit(1771373988.639:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1085.959650][T27304] Bluetooth: hci5: command 0x0419 tx timeout [ 1085.966222][ T27] audit: type=1326 audit(1771373988.649:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1085.990442][ T27] audit: type=1326 audit(1771373988.649:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.025767][ T27] audit: type=1326 audit(1771373988.649:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.098749][ T27] audit: type=1326 audit(1771373988.649:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.165588][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.169352][ T27] audit: type=1326 audit(1771373988.649:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.204043][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.313693][ T27] audit: type=1326 audit(1771373988.649:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.342930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1086.380624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.388322][ T27] audit: type=1326 audit(1771373988.649:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.1.12161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0ba779c629 code=0x7ffc0000 [ 1086.533899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.583973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.648157][T32036] device veth0_vlan entered promiscuous mode [ 1086.697437][T32036] device veth1_vlan entered promiscuous mode [ 1086.805311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.837247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1086.863402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.868354][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12171'. [ 1086.926997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.951223][T32036] device veth0_macvtap entered promiscuous mode [ 1086.969653][T32654] IPv6: sit1: Disabled Multicast RS [ 1086.988751][T32036] device veth1_macvtap entered promiscuous mode [ 1087.074496][T32036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.085180][T10788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1087.106874][T32663] vivid-007: ================= START STATUS ================= [ 1087.115729][T32036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.145732][T32663] vivid-007: Generate PTS: true [ 1087.153909][T32036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.168959][T32663] vivid-007: Generate SCR: true [ 1087.173919][T32663] tpg source WxH: 640x360 (Y'CbCr) [ 1087.188161][T32663] tpg field: 1 [ 1087.191704][T32663] tpg crop: 640x360@0x0 [ 1087.195932][T32036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.206421][T32663] tpg compose: 640x360@0x0 [ 1087.216395][T32663] tpg colorspace: 8 [ 1087.221810][T32036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.229609][T32663] tpg transfer function: 0/0 [ 1087.234544][T32663] tpg Y'CbCr encoding: 0/0 [ 1087.248356][T32036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.259747][T32663] tpg quantization: 0/0 [ 1087.272304][T32663] tpg RGB range: 0/2 [ 1087.276982][T32663] vivid-007: ================== END STATUS ================== [ 1087.285722][T32036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.296625][T10788] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1087.305216][T32036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.329252][T10788] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.345789][T32036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.358314][T10788] usb 2-1: config 220 has no interface number 2 [ 1087.365069][T10788] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1087.379106][T32036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.390205][T10788] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1087.397028][T10788] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1087.404403][T32036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.426665][T32036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.434359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1087.451978][T10788] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1087.460059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1087.471628][T10788] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1087.494195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1087.511070][T10788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.524300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1087.537415][T10788] usb 2-1: Product: syz [ 1087.554020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1087.563425][T10788] usb 2-1: Manufacturer: syz [ 1087.568070][T10788] usb 2-1: SerialNumber: syz [ 1087.574164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1087.616093][T32036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.634992][T32036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.659565][T32036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.733066][T32036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.806266][T10788] usb 2-1: selecting invalid altsetting 0 [ 1087.823077][T10788] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1087.854857][T10788] usb 2-1: No valid video chain found. [ 1087.907087][T10788] usb 2-1: selecting invalid altsetting 0 [ 1087.931201][T10788] usbtest: probe of 2-1:220.1 failed with error -22 [ 1087.956676][T10788] usb 2-1: USB disconnect, device number 7 [ 1088.136417][T32668] loop0: detected capacity change from 0 to 32768 [ 1088.149658][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.174918][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.188414][T32668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12176 (32668) [ 1088.212916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1088.251481][T32668] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.273136][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.296176][T32668] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1088.314133][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.343778][T32668] BTRFS info (device loop0): using free space tree [ 1088.346734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1088.677023][T32753] loop6: detected capacity change from 0 to 256 [ 1088.677806][T32753] exfat: Deprecated parameter 'utf8' [ 1088.677862][T32753] exfat: Deprecated parameter 'namecase' [ 1088.691934][T32753] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1088.703676][T32753] kAFS: unable to lookup cell 's@z0' [ 1088.730324][ T27] audit: type=1326 audit(1771373991.652:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32759 comm="syz.2.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1088.735081][ T27] audit: type=1326 audit(1771373991.662:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32759 comm="syz.2.12188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1088.765434][T32668] BTRFS info (device loop0): enabling ssd optimizations [ 1088.926742][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1089.135717][ T307] loop6: detected capacity change from 0 to 16 [ 1089.154308][ T307] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1089.402147][ T312] device ip6gre2 entered promiscuous mode [ 1090.157887][ T351] libceph: resolve 'c0' (ret=-3): failed [ 1090.245567][ T354] IPv6: NLM_F_CREATE should be specified when creating new route [ 1090.253466][ T354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.260765][ T354] IPv6: NLM_F_CREATE should be set when creating new route [ 1090.309864][ T362] loop6: detected capacity change from 0 to 64 [ 1090.394468][ T365] xt_TCPMSS: Only works on TCP SYN packets [ 1090.413797][ T362] Bad inode number on dev loop6: 6 is out of range [ 1090.489310][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12208'. [ 1090.802297][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1090.824806][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1090.865022][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1090.899174][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1090.928585][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1090.956785][ T396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12216'. [ 1090.957112][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1090.989585][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1091.033687][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1091.055894][ T402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12218'. [ 1091.060760][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1091.136346][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1091.187088][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 1091.347077][ T412] netlink: 'syz.2.12221': attribute type 5 has an invalid length. [ 1091.560950][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1091.750959][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 1091.758892][ T22] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1091.799308][ T22] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1091.827173][ T4256] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1091.849525][ T22] usb 7-1: config 0 has no interface number 0 [ 1091.877520][ T22] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1091.888792][ T445] loop1: detected capacity change from 0 to 2048 [ 1091.889697][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.916932][ T22] usb 7-1: Product: syz [ 1091.921161][ T22] usb 7-1: Manufacturer: syz [ 1091.938825][ T22] usb 7-1: SerialNumber: syz [ 1091.959319][ T22] usb 7-1: config 0 descriptor?? [ 1092.036148][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 1092.043781][ T4256] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 1092.061894][ T4256] usb 3-1: config 0 has no interface number 0 [ 1092.075959][ T4256] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 1092.101790][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.114894][ T4256] usb 3-1: Product: syz [ 1092.134326][ T4256] usb 3-1: Manufacturer: syz [ 1092.139016][ T4256] usb 3-1: SerialNumber: syz [ 1092.173970][ T4256] usb 3-1: config 0 descriptor?? [ 1092.187451][ T22] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1092.197675][ T22] usb 7-1: No valid video chain found. [ 1092.247272][ T22] usb 7-1: USB disconnect, device number 2 [ 1092.400223][ T4256] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 1092.427649][ T4256] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input69 [ 1092.464451][ C1] powermate: config urb returned -71 [ 1092.470380][ C1] powermate: config urb returned -71 [ 1092.475950][ C1] powermate: config urb returned -71 [ 1092.481473][ C1] powermate: config urb returned -71 [ 1092.522383][ T4256] usb 3-1: USB disconnect, device number 123 [ 1092.919222][ T515] loop1: detected capacity change from 0 to 512 [ 1092.989333][ T518] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1093.222632][ T515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1093.294112][ T515] ext4 filesystem being mounted at /2479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.369685][ T515] EXT4-fs error (device loop1): ext4_xattr_block_list:713: inode #12: comm syz.1.12243: corrupted xattr block 6 [ 1093.422877][ T545] device geneve3 entered promiscuous mode [ 1093.476893][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 1093.511130][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1093.712240][ T565] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1093.748159][ T566] loop6: detected capacity change from 0 to 256 [ 1093.828393][ T566] FAT-fs (loop6): Directory bread(block 64) failed [ 1093.849089][ T566] FAT-fs (loop6): Directory bread(block 65) failed [ 1093.886700][ T566] FAT-fs (loop6): Directory bread(block 66) failed [ 1093.922688][ T566] FAT-fs (loop6): Directory bread(block 67) failed [ 1093.929386][ T566] FAT-fs (loop6): Directory bread(block 68) failed [ 1093.997491][ T580] loop2: detected capacity change from 0 to 256 [ 1093.998896][ T566] FAT-fs (loop6): Directory bread(block 69) failed [ 1094.047767][ T566] FAT-fs (loop6): Directory bread(block 70) failed [ 1094.054605][ T566] FAT-fs (loop6): Directory bread(block 71) failed [ 1094.128460][ T566] FAT-fs (loop6): Directory bread(block 72) failed [ 1094.163449][ T566] FAT-fs (loop6): Directory bread(block 73) failed [ 1094.240082][ T587] 9pnet_fd: Insufficient options for proto=fd [ 1094.654692][ T611] loop2: detected capacity change from 0 to 256 [ 1095.878060][ T680] __nla_validate_parse: 97 callbacks suppressed [ 1095.878079][ T680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12290'. [ 1095.939313][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12290'. [ 1096.516231][ T719] libceph: resolve '4.' (ret=-3): failed [ 1096.648961][T29985] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1096.879465][T29985] usb 2-1: Using ep0 maxpacket: 16 [ 1096.890595][T29985] usb 2-1: config 0 has no interfaces? [ 1096.924900][T29985] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1096.971144][T29985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.979214][T29985] usb 2-1: Product: syz [ 1097.001688][T29985] usb 2-1: Manufacturer: syz [ 1097.018403][T29985] usb 2-1: SerialNumber: syz [ 1097.054002][T29985] r8152-cfgselector 2-1: config 0 descriptor?? [ 1097.149836][ T757] loop0: detected capacity change from 0 to 1024 [ 1097.156624][ T22] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1097.265459][ T757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1097.275243][T29985] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1097.291722][ T757] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.12314: inode #12: comm syz.0.12314: iget: illegal inode # [ 1097.313802][ T757] EXT4-fs (loop0): Remounting filesystem read-only [ 1097.361084][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1097.368680][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1097.379424][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1097.390740][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1097.410427][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1097.425106][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1097.435443][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1097.445988][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1097.456058][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1097.468784][ T22] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1097.484834][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.500788][T29985] usb 2-1: USB disconnect, device number 8 [ 1097.522592][ T22] usb 3-1: Product: syz [ 1097.527211][ T22] usb 3-1: Manufacturer: syz [ 1097.542888][ T22] usb 3-1: SerialNumber: syz [ 1097.553029][ T22] usb 3-1: config 0 descriptor?? [ 1097.559647][ T740] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1097.575210][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 1097.795573][ T22] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 1097.828932][ T22] usb 3-1: USB disconnect, device number 124 [ 1098.038081][ T7481] udevd[7481]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.460850][ T843] netlink: 'syz.2.12329': attribute type 1 has an invalid length. [ 1098.518722][ T843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12329'. [ 1099.145095][ T890] netlink: 'syz.1.12344': attribute type 5 has an invalid length. [ 1099.237323][ T893] printk: syz.6.12345 (893): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 1099.468877][ T908] xt_cgroup: xt_cgroup: no path or classid specified [ 1099.771027][ T934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12354'. [ 1099.838307][ T934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12354'. [ 1099.913319][ T934] netlink: 7 bytes leftover after parsing attributes in process `syz.6.12354'. [ 1099.959722][ T945] loop1: detected capacity change from 0 to 128 [ 1100.013673][ T945] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1100.751724][ T4342] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1100.952128][ T4342] usb 6-1: Using ep0 maxpacket: 8 [ 1100.959867][ T4342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1100.993226][ T4342] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1101.018725][ T4342] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1101.044588][ T4342] usb 6-1: Product: syz [ 1101.060410][ T4342] usb 6-1: Manufacturer: syz [ 1101.076752][ T4342] usb 6-1: SerialNumber: syz [ 1101.293339][ T4342] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1101.312476][ T4342] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1101.332035][ T4342] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1101.484245][ T4342] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1101.515063][ T4342] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1101.534445][ T4342] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1101.542982][ T4342] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1101.551326][ T4342] usb 6-1: USB disconnect, device number 40 [ 1101.628870][ T4342] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1101.683756][ T4342] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1101.733939][ T4342] visor 6-1:1.0: device disconnected [ 1102.580497][ T22] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1102.741048][ T1124] xt_CT: No such helper "syz0" [ 1102.763854][ T22] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.801655][ T22] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1102.840837][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.870085][ T22] usb 2-1: Product: syz [ 1102.874309][ T22] usb 2-1: Manufacturer: syz [ 1102.915497][ T22] usb 2-1: SerialNumber: syz [ 1102.959220][ T22] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1103.360067][ T22] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1103.376555][ T1170] netlink: 'syz.0.12413': attribute type 8 has an invalid length. [ 1103.450772][ T22] usb 2-1: USB disconnect, device number 9 [ 1103.544654][ T1185] netlink: 'syz.6.12414': attribute type 6 has an invalid length. [ 1103.565714][ T1186] netlink: 'syz.2.12415': attribute type 11 has an invalid length. [ 1103.601405][ T1186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12415'. [ 1103.672784][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12417'. [ 1103.712832][ T1188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12417'. [ 1104.289102][ T1206] loop1: detected capacity change from 0 to 4096 [ 1104.371504][ T1206] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1104.447713][ T1206] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1104.534378][ T1206] ntfs3: loop1: ino=21, "memory.events" The size of extended attributes must not exceed 64KiB [ 1104.832092][ T1235] netlink: 'syz.6.12431': attribute type 17 has an invalid length. [ 1104.898855][ T1235] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12431'. [ 1105.524014][ T1305] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1105.995430][ T1334] loop6: detected capacity change from 0 to 256 [ 1106.125874][ T1334] FAT-fs (loop6): Directory bread(block 64) failed [ 1106.135918][ T1334] FAT-fs (loop6): Directory bread(block 65) failed [ 1106.179643][ T1334] FAT-fs (loop6): Directory bread(block 66) failed [ 1106.202138][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12453'. [ 1106.209573][ T1334] FAT-fs (loop6): Directory bread(block 67) failed [ 1106.234099][ T1334] FAT-fs (loop6): Directory bread(block 68) failed [ 1106.260275][ T1334] FAT-fs (loop6): Directory bread(block 69) failed [ 1106.282639][ T1334] FAT-fs (loop6): Directory bread(block 70) failed [ 1106.309555][ T1334] FAT-fs (loop6): Directory bread(block 71) failed [ 1106.326995][ T1334] FAT-fs (loop6): Directory bread(block 72) failed [ 1106.353087][ T1334] FAT-fs (loop6): Directory bread(block 73) failed [ 1106.690772][ T1372] netlink: 'syz.2.12461': attribute type 1 has an invalid length. [ 1106.714238][ T4342] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1106.798881][ T1379] netlink: 'syz.1.12463': attribute type 6 has an invalid length. [ 1106.914969][ T4342] usb 6-1: Using ep0 maxpacket: 8 [ 1106.932137][ T4342] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1106.971624][ T4342] usb 6-1: config 179 has no interface number 0 [ 1106.978000][ T4342] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1107.019229][ T4342] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1107.058235][ T4342] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1107.104769][ T4342] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1107.142857][ T4342] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1107.188484][ T4342] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1107.213584][ T4342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.269541][ T1355] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.517574][ T1403] loop0: detected capacity change from 0 to 4096 [ 1107.538523][ T1403] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1107.605547][ T1403] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1107.644124][ T22] usb 6-1: USB disconnect, device number 41 [ 1107.644133][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1107.644264][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1107.702830][ T1429] netlink: 'syz.1.12474': attribute type 1 has an invalid length. [ 1107.710965][ T1429] netlink: 'syz.1.12474': attribute type 3 has an invalid length. [ 1107.753075][ T1429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12474'. [ 1107.778755][ T1429] NCSI netlink: No device for ifindex 52229 [ 1108.789186][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12493'. [ 1108.830003][ T1486] device netdevsim0 entered promiscuous mode [ 1109.001232][ T1499] loop1: detected capacity change from 0 to 64 [ 1109.029058][ T1499] hfs: unable to change iocharset [ 1109.034172][ T1499] hfs: unable to parse mount options [ 1109.283312][ T1515] netlink: 'syz.5.12502': attribute type 21 has an invalid length. [ 1109.312393][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12502'. [ 1109.318373][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12504'. [ 1109.514971][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1109.571444][ T1535] trusted_key: encrypted_key: keyword 'ryptfs' not recognized [ 1109.724827][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 1109.731912][ T22] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1109.759998][ T22] usb 1-1: config 254 has no interface number 0 [ 1109.799492][ T22] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1109.821254][ T22] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1109.862601][ T22] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1109.882241][ T1550] QAT: Stopping all acceleration devices. [ 1109.917805][ T22] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1109.956321][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1109.991086][ T22] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1110.039948][ T22] usb 1-1: Product: syz [ 1110.044178][ T22] usb 1-1: Manufacturer: syz [ 1110.078418][ T22] usb 1-1: SerialNumber: syz [ 1110.097682][ T1512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1110.319573][ T22] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 1110.332257][ T22] usbtest: probe of 1-1:254.235 failed with error -71 [ 1110.372498][ T22] usb 1-1: USB disconnect, device number 9 [ 1110.817698][ T1603] loop6: detected capacity change from 0 to 512 [ 1110.856322][ T1603] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1110.869055][ T1603] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1110.918093][ T1603] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1110.962512][ T1603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1110.988205][ T1603] System zones: 0-2, 18-18, 34-35 [ 1111.032555][ T1603] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1111.095264][ T1603] fscrypt (loop6, inode 12): Error -61 getting encryption context [ 1111.220000][ T1617] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1111.344753][T32036] EXT4-fs (loop6): unmounting filesystem. [ 1111.810429][ T4420] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1112.022355][ T4420] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1112.048841][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1112.096474][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1112.122389][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1112.122405][ T27] audit: type=1326 audit(1771374016.208:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1675 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1112.129530][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1112.201106][ T27] audit: type=1326 audit(1771374016.250:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1675 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1112.277077][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1112.278550][ T1682] MPI: mpi too large (107144 bits) [ 1112.304808][ T27] audit: type=1326 audit(1771374016.271:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1675 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1112.355035][ T4420] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1112.362502][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1112.372764][ T27] audit: type=1326 audit(1771374016.271:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1675 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1112.444493][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1112.477039][ T27] audit: type=1326 audit(1771374016.271:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1675 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1112.486870][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1112.589785][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1112.631351][ T4420] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1112.658603][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1112.696321][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1112.734245][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1112.767842][ T4420] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1112.821603][ T4420] usb 3-1: string descriptor 0 read error: -22 [ 1112.827913][ T4420] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1112.860166][ T4420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.903588][ T4420] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1113.323324][ T4420] usb 3-1: USB disconnect, device number 125 [ 1113.391624][T28088] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1113.563201][ T4342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1113.595548][T28088] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1113.610720][T28088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.639390][T28088] usb 1-1: Product: syz [ 1113.643627][T28088] usb 1-1: Manufacturer: syz [ 1113.648254][T28088] usb 1-1: SerialNumber: syz [ 1113.682460][T28088] usb 1-1: config 0 descriptor?? [ 1113.708414][T28088] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1113.795550][ T4342] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1113.813131][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.848341][ T4342] usb 2-1: Product: syz [ 1113.860146][ T4342] usb 2-1: Manufacturer: syz [ 1113.864879][ T4342] usb 2-1: SerialNumber: syz [ 1113.894080][ T4342] r8152-cfgselector 2-1: config 0 descriptor?? [ 1114.101610][T28088] gspca_sq930x: ucbus_write failed -71 [ 1114.237105][ T1792] device netdevsim0 left promiscuous mode [ 1114.246731][ T1793] netlink: 92 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1114.266084][ T1793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1114.285438][ T1793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1114.305580][ T4342] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1114.325439][ T1793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1114.334859][T28088] gspca_sq930x: Sensor ov9630 not yet treated [ 1114.341009][T28088] sq930x: probe of 1-1:0.0 failed with error -22 [ 1114.349497][ T4342] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 1114.374505][T28088] usb 1-1: USB disconnect, device number 10 [ 1114.859450][ T1828] loop0: detected capacity change from 0 to 1024 [ 1116.146756][ T1903] netlink: 'syz.1.12610': attribute type 21 has an invalid length. [ 1116.155923][ T1903] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12610'. [ 1116.644901][ T1925] loop2: detected capacity change from 0 to 2048 [ 1116.779694][ T1925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1116.833839][ T1925] ext4 filesystem being mounted at /2553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.838895][ T1940] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1116.890805][ T1925] fscrypt (loop2, inode 14): Error -61 getting encryption context [ 1116.978671][ T1884] loop6: detected capacity change from 0 to 32768 [ 1117.013452][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1117.116720][ T1954] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1117.128858][ T1043] block nbd1: Attempted send on invalid socket [ 1117.135313][ T1043] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1117.218930][ T1884] XFS (loop6): Mounting V5 Filesystem [ 1117.460729][ T1884] XFS (loop6): Ending clean mount [ 1117.695538][T32036] XFS (loop6): Unmounting Filesystem [ 1118.382926][T28088] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1118.383381][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12642'. [ 1118.566154][T28088] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.600206][ T27] audit: type=1326 audit(1771374023.011:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2028 comm="syz.2.12646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1118.604768][T28088] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1118.671577][ T27] audit: type=1326 audit(1771374023.053:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2028 comm="syz.2.12646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1118.738874][T28088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.754275][ T27] audit: type=1326 audit(1771374023.053:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2028 comm="syz.2.12646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1118.783484][T28088] usb 2-1: Product: syz [ 1118.797752][T28088] usb 2-1: Manufacturer: syz [ 1118.816604][T28088] usb 2-1: SerialNumber: syz [ 1118.847861][T28088] usb 2-1: config 0 descriptor?? [ 1118.852997][ T27] audit: type=1326 audit(1771374023.053:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2028 comm="syz.2.12646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1118.891920][T28088] asix: probe of 2-1:0.0 failed with error -22 [ 1119.230778][T28088] usb 2-1: USB disconnect, device number 11 [ 1119.641313][ T4317] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1119.842466][ T4317] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1119.861159][ T4317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1119.917281][ T4317] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1119.948267][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1119.982854][ T4317] usb 3-1: Product: syz [ 1119.997823][ T4317] usb 3-1: Manufacturer: syz [ 1120.008899][ T2104] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 1120.017158][ T4317] usb 3-1: SerialNumber: syz [ 1120.072542][ T4317] usb 3-1: config 0 descriptor?? [ 1120.087404][ T4317] usb 3-1: selecting invalid altsetting 0 [ 1120.371732][ T4317] usb 3-1: USB disconnect, device number 126 [ 1120.545440][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12672'. [ 1120.560024][ T2150] netlink: 'syz.1.12672': attribute type 1 has an invalid length. [ 1120.592497][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12672'. [ 1121.319219][ T2187] loop1: detected capacity change from 0 to 65 [ 1121.370057][ T2187] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1121.639409][ T2200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12685'. [ 1122.450379][ T2234] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1122.459000][ T2237] loop1: detected capacity change from 0 to 128 [ 1122.512665][ T2237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1122.579536][ T2237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.972853][ T2258] loop6: detected capacity change from 0 to 1024 [ 1123.085363][ T2157] loop0: detected capacity change from 0 to 65536 [ 1123.143159][ T46] hfsplus: b-tree write err: -5, ino 4 [ 1123.328053][ T2157] XFS (loop0): Mounting V5 Filesystem [ 1123.435986][ T2157] XFS (loop0): Ending clean mount [ 1123.534514][ T2288] loop1: detected capacity change from 0 to 2048 [ 1123.602988][ T4270] XFS (loop0): Unmounting Filesystem [ 1123.683526][ T2288] loop1: p2 < > [ 1124.260063][ T4420] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1124.288734][ T22] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1124.372912][ T2339] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1124.460020][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1124.465221][ T4420] usb 6-1: Using ep0 maxpacket: 16 [ 1124.473206][ T22] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1124.482312][ T4420] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1124.496506][ T22] usb 3-1: config 179 has no interface number 0 [ 1124.507359][ T4420] usb 6-1: config 0 has no interface number 0 [ 1124.513511][ T4420] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1124.545698][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1124.583778][ T4420] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1124.594043][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1124.614287][ T4420] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1124.621157][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1124.633850][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1124.645135][ T22] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1124.670099][ T4420] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1124.687013][ T4420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.712956][ T22] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1124.720294][ T4420] usb 6-1: Product: syz [ 1124.724491][ T4420] usb 6-1: Manufacturer: syz [ 1124.736522][ T22] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1124.746418][ T4420] usb 6-1: SerialNumber: syz [ 1124.752021][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.761364][ T4420] usb 6-1: config 0 descriptor?? [ 1124.782545][ T2315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1124.813505][ T2315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1124.860758][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input70 [ 1124.892844][ T2369] loop6: detected capacity change from 0 to 1024 [ 1125.042056][ T2369] hfsplus: extend alloc file! (8192,512,17039360) [ 1125.073231][ T2315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1125.122792][ T2315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1125.133681][ T2384] IPv6: Can't replace route, no match found [ 1125.143824][ T4317] usb 3-1: USB disconnect, device number 127 [ 1125.143914][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1125.159877][ T4317] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1125.367823][ T4420] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1125.397050][ T4420] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1125.429425][ T4420] usb 6-1: USB disconnect, device number 42 [ 1125.830788][ T2439] binder: 2438:2439 ioctl c018620c 200000000700 returned -22 [ 1126.186769][ T2465] loop1: detected capacity change from 0 to 64 [ 1126.285480][ T2465] Trying to free block not in datazone [ 1126.306114][ T2465] Trying to free block not in datazone [ 1126.362478][ T2465] Trying to free block not in datazone [ 1126.794058][ T2500] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1127.135187][ T2535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12762'. [ 1127.185091][ T2535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12762'. [ 1127.546012][ T27] audit: type=1326 audit(1771374032.397:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2564 comm="syz.0.12770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1127.648371][ T27] audit: type=1326 audit(1771374032.407:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2564 comm="syz.0.12770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1127.755848][ T27] audit: type=1326 audit(2000000000.000:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2564 comm="syz.0.12770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1127.831961][ T27] audit: type=1326 audit(2000000000.000:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2564 comm="syz.0.12770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1127.898439][T10723] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1128.017148][ T2604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12778'. [ 1128.028885][ T2603] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12777'. [ 1128.056234][ T2604] tc_dump_action: action bad kind [ 1128.088589][T10723] usb 7-1: Using ep0 maxpacket: 16 [ 1128.099246][T10723] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1128.130816][T10723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.164258][T10723] usb 7-1: Product: syz [ 1128.178663][T10723] usb 7-1: Manufacturer: syz [ 1128.203422][T10723] usb 7-1: SerialNumber: syz [ 1128.248523][T10723] r8152-cfgselector 7-1: config 0 descriptor?? [ 1128.469938][ T2627] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1128.629605][ T2637] loop0: detected capacity change from 0 to 256 [ 1128.691036][T10723] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1128.697450][T10723] r8152-cfgselector 7-1: bad CDC descriptors [ 1128.732072][T10723] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1128.753640][T10723] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 1128.840748][ T2637] FAT-fs (loop0): Directory bread(block 64) failed [ 1128.847983][ T2637] FAT-fs (loop0): Directory bread(block 65) failed [ 1128.860771][ T2637] FAT-fs (loop0): Directory bread(block 66) failed [ 1128.914909][ T2637] FAT-fs (loop0): Directory bread(block 67) failed [ 1128.932027][ T2637] FAT-fs (loop0): Directory bread(block 68) failed [ 1128.965563][ T2637] FAT-fs (loop0): Directory bread(block 69) failed [ 1128.972229][ T2637] FAT-fs (loop0): Directory bread(block 70) failed [ 1129.006775][ T2661] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.12792'. [ 1129.060644][ T2637] FAT-fs (loop0): Directory bread(block 71) failed [ 1129.067379][ T2637] FAT-fs (loop0): Directory bread(block 72) failed [ 1129.100670][ T2637] FAT-fs (loop0): Directory bread(block 73) failed [ 1129.700237][ T2701] comedi comedi2: fl512: I/O port conflict (0x100009e1,16) [ 1129.837611][ T2715] comedi comedi2: dt2814: I/O port conflict (0xcf7,2) [ 1130.169119][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1130.210013][ T2740]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1131.194675][ T2813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12829'. [ 1131.530908][ T2841] netlink: 788 bytes leftover after parsing attributes in process `syz.2.12836'. [ 1131.594558][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1131.713299][ T27] audit: type=1326 audit(2000000004.356:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2848 comm="syz.5.12839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1131.772860][ T27] audit: type=1326 audit(2000000004.356:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2848 comm="syz.5.12839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1131.804139][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 1131.820857][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.841720][ T27] audit: type=1326 audit(2000000004.388:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2848 comm="syz.5.12839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1131.890407][ T4317] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 1131.917272][ T4317] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1131.943383][ T27] audit: type=1326 audit(2000000004.388:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2848 comm="syz.5.12839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1131.956281][ T2859] netlink: 'syz.5.12843': attribute type 10 has an invalid length. [ 1132.004226][ T4317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1132.022733][ T2859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12843'. [ 1132.032392][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1132.040421][ T4317] usb 1-1: SerialNumber: syz [ 1132.047588][ T27] audit: type=1326 audit(2000000004.388:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2848 comm="syz.5.12839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1132.056319][ T2859] device dummy0 entered promiscuous mode [ 1132.085314][ T2824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1132.101256][ T4317] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1132.107710][ T2859] bridge0: port 1(dummy0) entered blocking state [ 1132.142743][ T2859] bridge0: port 1(dummy0) entered disabled state [ 1132.147354][ T2866] loop2: detected capacity change from 0 to 2048 [ 1132.173151][ T2859] bridge0: port 1(dummy0) entered blocking state [ 1132.179667][ T2859] bridge0: port 1(dummy0) entered listening state [ 1132.193786][ T2874] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1132.254945][ T2866] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1132.274884][ T2866] UDF-fs: Scanning with blocksize 512 failed [ 1132.320089][ T4317] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1132.344780][ T2866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.377366][ T4317] usb 1-1: USB disconnect, device number 11 [ 1132.499935][ T2892] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12848'. [ 1132.582363][ T2897] netlink: 'syz.6.12850': attribute type 2 has an invalid length. [ 1132.590906][ T2897] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12850'. [ 1133.594098][ T2956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12868'. [ 1133.620411][ T2956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12868'. [ 1133.640106][ T2956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12868'. [ 1133.840351][ T2972] netlink: 'syz.0.12872': attribute type 10 has an invalid length. [ 1133.888446][ T2972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12872'. [ 1133.925609][ T2972] bridge0: port 1(ipvlan1) entered blocking state [ 1133.942496][T10723] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1133.951573][ T2972] bridge0: port 1(ipvlan1) entered disabled state [ 1133.963335][ T2972] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1134.120652][T10723] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1134.138751][T10723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.178420][T10723] usb 7-1: config 0 has no interface number 0 [ 1134.198054][T10723] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1134.224129][T10723] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.287593][T10723] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1134.349380][T10723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.404457][T10723] usb 7-1: Product: syz [ 1134.408687][T10723] usb 7-1: Manufacturer: syz [ 1134.413319][T10723] usb 7-1: SerialNumber: syz [ 1134.448449][T10723] usb 7-1: config 0 descriptor?? [ 1134.890576][T10723] usbtouchscreen: probe of 7-1:0.117 failed with error -71 [ 1134.909717][T10723] usb 7-1: USB disconnect, device number 4 [ 1135.589594][ T3047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12894'. [ 1135.890207][ T3065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12900'. [ 1135.977170][ T3065] device vlan0 entered promiscuous mode [ 1136.107313][ T27] audit: type=1326 audit(2000000008.965:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3070 comm="syz.1.12902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ba779c629 code=0x0 [ 1136.472131][ T3091] loop0: detected capacity change from 0 to 16 [ 1136.559449][ T3095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12910'. [ 1136.567010][ T3091] erofs: (device loop0): mounted with root inode @ nid 36. [ 1136.622271][ T3091] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1136.670175][ T3091] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1136.741227][ T3102] kAFS: unable to lookup cell '@mTsyz0' [ 1137.163280][ T3124] netlink: 'syz.5.12919': attribute type 4 has an invalid length. [ 1137.191619][ T3124] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12919'. [ 1137.458127][ T3137] netlink: 'syz.1.12921': attribute type 39 has an invalid length. [ 1137.529582][ T3137] netlink: 'syz.1.12921': attribute type 33 has an invalid length. [ 1137.537547][ T3137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12921'. [ 1137.956985][ T3162] netlink: set zone limit has 4 unknown bytes [ 1138.218979][ T3178] snd_dummy snd_dummy.0: control 4:9:6:syz1:6 is already present [ 1138.436429][ T3185] tmpfs: Bad value for 'mpol' [ 1139.311135][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.376082][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.399690][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.417024][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.451259][ T3237] xt_ecn: cannot match TCP bits for non-tcp packets [ 1139.458714][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.487882][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.537612][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.575995][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12952'. [ 1139.751572][ T3248] loop2: detected capacity change from 0 to 1024 [ 1139.789172][ T3248] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62564!=20869) [ 1139.874979][ T3248] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.12956: Invalid inode table block 0 in block_group 0 [ 1139.967201][ T3248] EXT4-fs (loop2): no journal found [ 1140.779040][ T3302] netlink: 'syz.6.12972': attribute type 21 has an invalid length. [ 1140.804788][ T3302] netlink: 'syz.6.12972': attribute type 5 has an invalid length. [ 1140.833982][ T3302] netlink: 'syz.6.12972': attribute type 6 has an invalid length. [ 1141.414853][ T4420] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1141.528825][T10723] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1141.595917][ T4420] usb 1-1: Using ep0 maxpacket: 8 [ 1141.606158][ T4420] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1141.614302][ T4420] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.681317][ T4420] usb 1-1: config 0 has no interface number 0 [ 1141.687540][ T4420] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1141.719749][T10723] usb 2-1: Using ep0 maxpacket: 16 [ 1141.741405][T10723] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1141.767089][T10723] usb 2-1: config 1 has no interface number 0 [ 1141.785320][ T4420] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.799088][T10723] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1141.825836][T10723] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1141.837786][ T4420] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1141.863575][ T4420] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1141.881450][T10723] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1141.929294][ T4420] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1141.942205][T10723] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1141.957589][ T4420] usb 1-1: Manufacturer: syz [ 1141.967329][T10723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.978292][ T4420] usb 1-1: config 0 descriptor?? [ 1141.988807][T10723] usb 2-1: Product: syz [ 1141.993013][T10723] usb 2-1: Manufacturer: syz [ 1142.007086][ T4420] hub 1-1:0.52: bad descriptor, ignoring hub [ 1142.013121][ T4420] hub: probe of 1-1:0.52 failed with error -5 [ 1142.024000][T10723] usb 2-1: SerialNumber: syz [ 1142.045264][ T3329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1142.066667][ T3329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1142.189898][ T4420] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input72 [ 1142.308064][T10723] aqc111: probe of 2-1:1.105 failed with error -71 [ 1142.353775][T10723] usb 2-1: USB disconnect, device number 12 [ 1142.558854][ T4420] usb 1-1: USB disconnect, device number 12 [ 1142.657943][ T3417] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1143.164140][T28088] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1143.369497][T28088] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.395947][T28088] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1143.405082][T28088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.466757][T28088] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1143.541549][ T3504] loop0: detected capacity change from 0 to 256 [ 1143.717399][ T3512] __nla_validate_parse: 48 callbacks suppressed [ 1143.717417][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13011'. [ 1143.914319][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13014'. [ 1144.482567][T28088] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1144.571496][ T3560] loop1: detected capacity change from 0 to 64 [ 1144.620233][ T3562] loop6: detected capacity change from 0 to 1024 [ 1144.648631][ T3562] EXT4-fs: Ignoring removed orlov option [ 1144.681752][T28088] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1144.689969][T28088] stv0680 6-1:4.0: last error: 86, command = 0x17 [ 1144.747306][T28088] usb 6-1: USB disconnect, device number 43 [ 1144.800231][ T3576] bond0: (slave gretap0): Error -99 calling set_mac_address [ 1144.816248][ T3562] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1144.832525][ T3562] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.928865][T32036] EXT4-fs (loop6): unmounting filesystem. [ 1145.432581][ T3616] netlink: 'syz.2.13039': attribute type 10 has an invalid length. [ 1145.469556][ T3616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13039'. [ 1145.602751][ T3629] --map-set only usable from mangle table [ 1146.471159][ T3678] delete_channel: no stack [ 1146.619259][ C1] bridge0: port 1(dummy0) entered learning state [ 1146.958711][ T3709] loop2: detected capacity change from 0 to 256 [ 1146.993363][ T3709] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1147.006269][ T4317] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1147.039438][ T3709] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1147.217035][ T4317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64 [ 1147.260844][ T4317] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1147.276801][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.340318][ T4317] usb 7-1: config 0 descriptor?? [ 1147.542115][ T4317] ath6kl: Failed to submit usb control message: -71 [ 1147.562409][ T4317] ath6kl: unable to send the bmi data to the device: -71 [ 1147.573670][ T3745] loop1: detected capacity change from 0 to 128 [ 1147.615451][ T4317] ath6kl: Unable to send get target info: -71 [ 1147.631927][ T4317] ath6kl: Failed to init ath6kl core: -71 [ 1147.776280][ T4317] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 1147.813408][ T4317] usb 7-1: USB disconnect, device number 5 [ 1148.225188][ T4420] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1148.270997][ T3787] loop0: detected capacity change from 0 to 8 [ 1148.320451][ T3787] SQUASHFS error: Unable to read inode 0xa7 [ 1148.416767][ T4420] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1148.434725][ T4420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.465473][ T4420] usb 2-1: config 0 descriptor?? [ 1148.475536][ T4420] cp210x 2-1:0.0: cp210x converter detected [ 1148.648092][ T3805] loop0: detected capacity change from 0 to 1024 [ 1148.679362][ T3805] EXT4-fs: Ignoring removed bh option [ 1148.829903][ T3805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1148.870523][ T4420] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1148.913501][ T3805] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz.0.13089: directory missing '.' [ 1148.925465][ T4420] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1148.962875][ T4420] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1148.999255][ T4420] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1149.002786][ T3784] loop6: detected capacity change from 0 to 32768 [ 1149.029440][ T4420] usb 2-1: USB disconnect, device number 13 [ 1149.068546][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 1149.100421][ T4420] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1149.132214][ T4420] cp210x 2-1:0.0: device disconnected [ 1149.152559][ T3784] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1149.277276][ T3784] (syz.6.13084,3784,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1149.315697][ T3784] (syz.6.13084,3784,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1149.357702][ T3784] (syz.6.13084,3784,0):ocfs2_mknod:298 ERROR: status = -2 [ 1149.395403][ T3784] (syz.6.13084,3784,0):ocfs2_mknod:502 ERROR: status = -2 [ 1149.424676][ T3784] (syz.6.13084,3784,0):ocfs2_create:676 ERROR: status = -2 [ 1149.621667][T32036] ocfs2: Unmounting device (7,6) on (node local) [ 1149.650009][ T3851] netlink: 196 bytes leftover after parsing attributes in process `syz.1.13097'. [ 1150.208537][ T3874] overlayfs: missing 'lowerdir' [ 1150.509292][ T3889] netlink: 144 bytes leftover after parsing attributes in process `syz.6.13110'. [ 1150.822613][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13115'. [ 1151.045796][ T3917] loop2: detected capacity change from 0 to 1024 [ 1151.310175][ T3917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1151.414377][ T3917] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #11: comm syz.2.13118: directory missing '.' [ 1151.482349][T29985] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1151.619326][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1151.707082][T29985] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1151.723805][T29985] usb 1-1: config 8 has no interface number 0 [ 1151.729945][T29985] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1151.755253][ T3956] loop1: detected capacity change from 0 to 512 [ 1151.795168][T29985] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1151.820088][ T3961] netlink: 'syz.6.13129': attribute type 49 has an invalid length. [ 1151.835198][T29985] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1151.873167][T29985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.875634][ T3956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1151.891990][ T3956] ext4 filesystem being mounted at /2641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.929198][ T3918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1152.140981][ T3956] EXT4-fs error (device loop1): ext4_xattr_block_find:1826: inode #15: comm syz.1.13128: corrupted xattr block 33 [ 1152.192584][T29985] usb 1-1: string descriptor 0 read error: -71 [ 1152.215715][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 1152.272245][ T3956] EXT4-fs (loop1): Remounting filesystem read-only [ 1152.445824][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1152.591988][ T4004] netlink: 'syz.1.13139': attribute type 1 has an invalid length. [ 1152.721113][T29985] ir_toy 1-1:8.177: could not write reset command: -110 [ 1152.736135][T29985] ir_toy: probe of 1-1:8.177 failed with error -110 [ 1152.764643][T29985] usb 1-1: USB disconnect, device number 13 [ 1153.448625][ T4056] loop1: detected capacity change from 0 to 164 [ 1153.873409][T29985] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1154.075952][T29985] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1154.111802][T29985] usb 3-1: config 0 has no interface number 0 [ 1154.140908][T29985] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1154.178949][T29985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.216639][T29985] usb 3-1: Product: syz [ 1154.220885][T29985] usb 3-1: Manufacturer: syz [ 1154.225513][T29985] usb 3-1: SerialNumber: syz [ 1154.260782][T29985] usb 3-1: config 0 descriptor?? [ 1154.289628][ T4041] loop0: detected capacity change from 0 to 32768 [ 1154.301196][T29985] hub 3-1:0.132: bad descriptor, ignoring hub [ 1154.329153][T29985] hub: probe of 3-1:0.132 failed with error -5 [ 1154.366646][T29985] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input75 [ 1154.473637][ T4122] tmpfs: Unknown parameter 'no' [ 1154.524690][ T4041] XFS (loop0): Mounting V5 Filesystem [ 1154.542070][T29985] usb 3-1: USB disconnect, device number 2 [ 1154.762113][ T4041] XFS (loop0): Ending clean mount [ 1154.948845][ T4270] XFS (loop0): Unmounting Filesystem [ 1155.722971][ T4185] loop1: detected capacity change from 0 to 1024 [ 1155.826484][ T4185] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1155.843860][ T4185] hfsplus: xattr searching failed [ 1155.858663][ T4185] syz.1.13183: attempt to access beyond end of device [ 1155.858663][ T4185] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1155.899770][ T4185] Buffer I/O error on dev loop1, logical block 458752, async page read [ 1155.914295][ T4185] hfsplus: unable to mark blocks free: error -5 [ 1155.920787][ T4185] hfsplus: can't free extent [ 1156.168840][T29985] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1156.397771][T29985] usb 3-1: Using ep0 maxpacket: 32 [ 1156.404879][T29985] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1156.453868][T29985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.483282][T29985] usb 3-1: config 0 has no interface number 0 [ 1156.515402][T29985] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1156.580381][T29985] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1156.593199][T29985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.607017][T29985] usb 3-1: Product: syz [ 1156.611279][T29985] usb 3-1: Manufacturer: syz [ 1156.615974][T29985] usb 3-1: SerialNumber: syz [ 1156.631331][T29985] usb 3-1: config 0 descriptor?? [ 1157.106881][ T27] audit: type=1326 audit(2000000031.012:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.6.13204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x0 [ 1157.150754][T29985] usb 3-1: USB disconnect, device number 3 [ 1157.378982][ T4348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1157.388008][ T4348] netlink: 'syz.1.13209': attribute type 2 has an invalid length. [ 1157.398335][ T5003] udevd[5003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1157.807946][ T4377] loop2: detected capacity change from 0 to 136 [ 1157.863223][ T27] audit: type=1326 audit(2000000031.810:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.0.13216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1157.939573][ T4377] Symlink component flag not implemented [ 1157.959669][ T4377] syz.2.13215: attempt to access beyond end of device [ 1157.959669][ T4377] loop2: rw=524288, sector=136, nr_sectors = 4 limit=136 [ 1157.985103][ T27] audit: type=1326 audit(2000000031.842:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.0.13216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1158.043985][ T4377] syz.2.13215: attempt to access beyond end of device [ 1158.043985][ T4377] loop2: rw=0, sector=136, nr_sectors = 4 limit=136 [ 1158.064426][ T27] audit: type=1326 audit(2000000031.842:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.0.13216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1158.135458][ T4392] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1158.150124][ T27] audit: type=1326 audit(2000000031.842:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.0.13216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1158.264743][ T27] audit: type=1800 audit(2000000032.083:3666): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13215" name="file1" dev="loop2" ino=1546 res=0 errno=0 [ 1159.871323][ T4492] loop1: detected capacity change from 0 to 164 [ 1159.935792][ T4496] ieee802154 phy1 wpan1: encryption failed: -22 [ 1159.980854][ T4492] isofs: Unable to find the ".." directory for NFS. [ 1160.571026][ T4472] loop2: detected capacity change from 0 to 32768 [ 1160.618457][ T4472] [ 1160.618457][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.618457][ T4472] [ 1160.700709][ T4472] [ 1160.700709][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.700709][ T4472] [ 1160.779705][ T4472] [ 1160.779705][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.779705][ T4472] [ 1160.845045][ T4472] [ 1160.845045][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.845045][ T4472] [ 1160.849209][ T4544] loop0: detected capacity change from 0 to 256 [ 1160.873104][ T4472] [ 1160.873104][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.873104][ T4472] [ 1160.883189][ T4543] netlink: 'syz.6.13263': attribute type 10 has an invalid length. [ 1160.912587][ T4472] [ 1160.912587][ T4472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.912587][ T4472] [ 1160.962153][ T4544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1160.996781][ T107] [ 1160.996781][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.996781][ T107] [ 1161.031945][ T4543] team0: Port device macvlan0 added [ 1161.064950][T29985] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1161.113103][ T46] [ 1161.113103][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1161.113103][ T46] [ 1161.160395][ T46] [ 1161.160395][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1161.160395][ T46] [ 1161.217865][ T4282] [ 1161.217865][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1161.217865][ T4282] [ 1161.245915][ C1] bridge0: port 1(dummy0) entered forwarding state [ 1161.252479][ C1] bridge0: topology change detected, propagating [ 1161.271177][ T4282] [ 1161.271177][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1161.271177][ T4282] [ 1161.282059][T29985] usb 2-1: Using ep0 maxpacket: 16 [ 1161.296680][T29985] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1161.325129][ T107] [ 1161.325129][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1161.325129][ T107] [ 1161.342946][T29985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.372086][T29985] usb 2-1: Product: syz [ 1161.376294][T29985] usb 2-1: Manufacturer: syz [ 1161.427378][T29985] usb 2-1: SerialNumber: syz [ 1161.452537][T29985] r8152-cfgselector 2-1: config 0 descriptor?? [ 1161.740437][ T4570] loop0: detected capacity change from 0 to 4096 [ 1161.771427][ T4570] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1161.809094][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13266'. [ 1161.881245][T29985] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1161.889837][T29985] r8152-cfgselector 2-1: bad CDC descriptors [ 1161.916554][T29985] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1161.969756][T29985] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 1162.601509][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1163.325981][ T27] audit: type=1400 audit(2000000037.542:3667): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=4662 comm="syz.5.13296" [ 1163.483900][ T4676] loop6: detected capacity change from 0 to 64 [ 1163.491038][ T4675] netlink: 'syz.2.13300': attribute type 1 has an invalid length. [ 1163.542628][ T4675] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13300'. [ 1163.713159][T28088] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1163.895378][ T4696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13306'. [ 1163.913004][T28088] usb 2-1: Using ep0 maxpacket: 32 [ 1163.919908][T28088] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.961942][T28088] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.000460][T28088] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1164.031444][T28088] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1164.048752][T28088] usb 2-1: Product: syz [ 1164.060741][T28088] usb 2-1: Manufacturer: syz [ 1164.090118][T28088] hub 2-1:4.0: USB hub found [ 1164.305510][T28088] hub 2-1:4.0: 2 ports detected [ 1164.323709][ T4724] loop2: detected capacity change from 0 to 4096 [ 1164.366759][ T4724] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1164.379558][ T4317] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1164.513923][T28088] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1164.529616][T28088] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1164.573182][ T4317] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1164.599150][T28088] usb 2-1: USB disconnect, device number 15 [ 1164.606793][ T4317] usb 7-1: not running at top speed; connect to a high speed hub [ 1164.648069][ T4317] usb 7-1: config 97 has an invalid interface number: 135 but max is 0 [ 1164.674865][ T4317] usb 7-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.713128][ T4317] usb 7-1: config 97 has no interface number 0 [ 1164.722050][ T4317] usb 7-1: config 97 interface 135 has no altsetting 0 [ 1164.752249][ T4317] usb 7-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=8b.d4 [ 1164.789209][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.825689][ T4317] usb 7-1: Product: syz [ 1164.831339][ T4317] usb 7-1: Manufacturer: syz [ 1164.835978][ T4317] usb 7-1: SerialNumber: syz [ 1165.093194][ T4317] usb 7-1: USB disconnect, device number 6 [ 1165.198747][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13322'. [ 1166.083429][ T4317] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1166.237755][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13339'. [ 1166.276503][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13339'. [ 1166.286184][ T4317] usb 7-1: Using ep0 maxpacket: 8 [ 1166.305338][ T4317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1166.335539][ T4317] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1166.368650][ T4317] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1166.396820][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.417890][ T4317] usb 7-1: Product: syz [ 1166.422381][ T4317] usb 7-1: Manufacturer: syz [ 1166.465425][ T4317] usb 7-1: SerialNumber: syz [ 1166.473317][ T4317] usb 7-1: config 0 descriptor?? [ 1166.801639][ T4859] netlink: 'syz.1.13349': attribute type 5 has an invalid length. [ 1166.934732][ T4317] usb 7-1: USB disconnect, device number 7 [ 1167.526608][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13362'. [ 1167.551926][ T4906] loop0: detected capacity change from 0 to 256 [ 1167.579013][ T4906] exfat: Deprecated parameter 'namecase' [ 1167.625982][ T4906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1167.805070][ T4921] loop2: detected capacity change from 0 to 64 [ 1167.924569][ T4921] Trying to free block not in datazone [ 1168.612288][ T4958] dlm: non-version read from control device 36 [ 1168.887851][ T4973] netlink: 296 bytes leftover after parsing attributes in process `syz.5.13382'. [ 1169.365510][ T4996] loop6: detected capacity change from 0 to 512 [ 1169.373016][ T5000] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13391'. [ 1169.468676][ T4996] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 1169.479628][ T4996] System zones: 0-2, 18-18, 34-34 [ 1169.520101][ T4996] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #3: comm syz.6.13390: corrupted inode contents [ 1169.585485][ T4996] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #3: comm syz.6.13390: mark_inode_dirty error [ 1169.620807][ T4996] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #3: comm syz.6.13390: corrupted inode contents [ 1169.731966][ T4996] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.13390: mark_inode_dirty error [ 1169.888853][ T4996] Quota error (device loop6): write_blk: dquota write failed [ 1169.920720][ T4996] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1169.962043][ T4996] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.13390: Failed to acquire dquot type 0 [ 1169.997248][ T4996] EXT4-fs (loop6): 1 orphan inode deleted [ 1170.008245][ T46] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1170.037679][ T4996] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1170.058632][ T46] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 1 [ 1170.113214][ T4996] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.174053][ T5048] libceph: resolve '0' (ret=-3): failed [ 1170.436249][T32036] EXT4-fs (loop6): unmounting filesystem. [ 1171.484053][ T5110] loop6: detected capacity change from 0 to 1024 [ 1171.552250][ T5110] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0) [ 1171.699974][ T4342] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1171.914697][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 1171.926019][ T4342] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1171.947908][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.019083][ T4342] usb 1-1: Product: syz [ 1172.023307][ T4342] usb 1-1: Manufacturer: syz [ 1172.027934][ T4342] usb 1-1: SerialNumber: syz [ 1172.067677][ T4342] usb 1-1: config 0 descriptor?? [ 1172.302389][ T4342] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1172.314713][ T4342] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1172.359961][ T5156] loop2: detected capacity change from 0 to 256 [ 1172.366423][ T5099] loop1: detected capacity change from 0 to 40427 [ 1172.418439][ T5099] F2FS-fs (loop1): invalid crc value [ 1172.455595][ T5099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1172.517912][T28088] usb 1-1: USB disconnect, device number 14 [ 1172.611731][ T5099] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1172.642093][ T5099] F2FS-fs (loop1): Start checkpoint disabled! [ 1172.669582][ T5099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1172.695130][ T4342] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1172.904453][ T4342] usb 3-1: Using ep0 maxpacket: 32 [ 1172.913056][ T4342] usb 3-1: config 4 has an invalid interface number: 228 but max is 0 [ 1172.921903][ T4342] usb 3-1: config 4 has no interface number 0 [ 1172.929295][ T4342] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 1172.952763][ T4342] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 1173.038775][ T4342] usb 3-1: config 4 interface 228 has no altsetting 0 [ 1173.098476][ T4342] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1173.133129][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1173.181539][ T4342] usb 3-1: Product: syz [ 1173.185762][ T4342] usb 3-1: Manufacturer: syz [ 1173.209609][ T4342] usb 3-1: SerialNumber: syz [ 1173.293069][ T5203] afs: Bad value for 'source' [ 1173.441684][ T4342] usb 3-1: invalid MIDI in EP 0 [ 1173.550274][ T4342] snd-usb-audio: probe of 3-1:4.228 failed with error -22 [ 1173.583700][ T4342] usb 3-1: USB disconnect, device number 4 [ 1173.610729][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.792575][ T27] audit: type=1326 audit(2000000048.534:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.5.13454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1173.885246][ T27] audit: type=1326 audit(2000000048.576:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.5.13454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1173.933347][T28088] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1173.937391][ T27] audit: type=1326 audit(2000000048.576:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.5.13454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1174.101984][ T27] audit: type=1326 audit(2000000048.576:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.5.13454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ccf9c629 code=0x7ffc0000 [ 1174.152573][T28088] usb 2-1: Using ep0 maxpacket: 32 [ 1174.160134][T28088] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1174.189353][T28088] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1174.211847][ T5269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13459'. [ 1174.213498][T28088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.269040][T28088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1174.290855][T28088] usb 2-1: string descriptor 0 read error: -22 [ 1174.314372][T28088] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1174.343360][T28088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.368606][ T5276] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13462'. [ 1174.402305][T28088] usb 2-1: 0:2 : does not exist [ 1174.700554][T28088] usb 2-1: USB disconnect, device number 16 [ 1174.787693][ T5313] overlayfs: empty lowerdir [ 1175.105454][ T5330] Lens A: ================= START STATUS ================= [ 1175.117755][ T5330] Lens A: Focus, Absolute: 0 [ 1175.150176][ T5330] Lens A: ================== END STATUS ================== [ 1175.193639][ T27] audit: type=1326 audit(2000000050.004:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.13474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1175.295617][ T27] audit: type=1326 audit(2000000050.057:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.13474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1175.362006][ T27] audit: type=1326 audit(2000000050.057:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.13474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1175.456027][ T27] audit: type=1326 audit(2000000050.057:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.13474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1175.566881][ T27] audit: type=1326 audit(2000000050.057:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.13474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9399c629 code=0x7ffc0000 [ 1175.605359][ T5354] netlink: 'syz.6.13481': attribute type 16 has an invalid length. [ 1175.623500][ T5354] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.13481'. [ 1175.941734][ T5375] loop1: detected capacity change from 0 to 47 [ 1176.146586][ T5386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13490'. [ 1176.345908][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13504'. [ 1176.414078][ T5401] QAT: failed to copy from user. [ 1176.661236][ T5414] ufs: Invalid option: "0(eLd9(@ 8L)uH\dKzLVR<%5rƌze ~I2~ [ 1176.661236][ T5414] r0Rpyh:Y [ 1176.661236][ T5414] O\zY" or missing value [ 1176.781818][ T5414] ufs: wrong mount options [ 1176.966770][ T5434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13506'. [ 1177.496054][ T4418] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1177.606651][ T5421] loop0: detected capacity change from 0 to 32768 [ 1177.657679][ T5421] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1177.679022][ T5421] JBD2: Ignoring recovery information on journal [ 1177.698264][ T4418] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1177.724504][ T4418] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.762451][ T4418] usb 7-1: config 0 has no interface number 0 [ 1177.782321][ T4418] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1177.795014][ T5421] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1177.807546][ T4418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.817563][ T4418] usb 7-1: Product: syz [ 1177.822034][ T4418] usb 7-1: Manufacturer: syz [ 1177.826659][ T4418] usb 7-1: SerialNumber: syz [ 1177.834399][ T4418] usb 7-1: config 0 descriptor?? [ 1177.894462][ T5421] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 1177.952158][ T5421] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1177.989333][ T5421] OCFS2: File system is now read-only. [ 1178.018311][ T5421] (syz.0.13502,5421,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1178.050645][ T4418] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1178.057044][ T4418] usb 7-1: No valid video chain found. [ 1178.102770][ T4418] usb 7-1: USB disconnect, device number 8 [ 1178.110096][ T5421] (syz.0.13502,5421,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1178.143947][ T5421] (syz.0.13502,5421,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1178.163638][ T5421] (syz.0.13502,5421,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1178.184761][ T5421] (syz.0.13502,5421,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 1178.209594][ T5421] (syz.0.13502,5421,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 1178.226902][ T5421] (syz.0.13502,5421,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1178.236600][ T5421] (syz.0.13502,5421,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1178.256744][ T5421] (syz.0.13502,5421,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1178.285307][ T5421] (syz.0.13502,5421,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1178.309460][ T5421] (syz.0.13502,5421,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1178.332235][ T5421] (syz.0.13502,5421,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1178.366666][ T5421] (syz.0.13502,5421,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1178.388454][ T5421] (syz.0.13502,5421,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1178.405587][ T5421] (syz.0.13502,5421,1):ocfs2_mknod:357 ERROR: status = -30 [ 1178.418360][ T5421] (syz.0.13502,5421,1):ocfs2_mknod:502 ERROR: status = -30 [ 1178.443492][ T5421] (syz.0.13502,5421,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1178.470849][ T5493] netlink: 'syz.1.13520': attribute type 21 has an invalid length. [ 1178.495986][ T5493] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13520'. [ 1178.586284][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 1180.673411][ T5608] loop0: detected capacity change from 0 to 164 [ 1181.226855][ T5636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13567'. [ 1181.514720][ T5653] delete_channel: no stack [ 1181.703326][ T5661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13577'. [ 1181.763294][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13579'. [ 1182.507749][ T5707] loop0: detected capacity change from 0 to 1024 [ 1182.551555][ T5710] loop1: detected capacity change from 0 to 1764 [ 1182.592569][ T5707] hfsplus: invalid length 256 has been corrected to 255 [ 1182.611389][ T5707] hfsplus: invalid length 256 has been corrected to 255 [ 1182.860903][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 1182.867383][ T4339] hfsplus: invalid length 256 has been corrected to 255 [ 1183.220706][ T4342] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1183.308900][ T4342] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1183.615331][ T4342] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1183.839325][T28088] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1183.959849][ T5792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13619'. [ 1184.069954][T28088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.089301][T28088] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1184.139094][T28088] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1184.168055][T28088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1184.186385][T28088] usb 3-1: SerialNumber: syz [ 1184.247482][T28088] usb 3-1: 0:2 : does not exist [ 1184.268157][T28088] usb 3-1: unit 64 not found! [ 1184.345980][T28088] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1184.363498][T28088] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1184.405374][ T5820] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 1184.448896][ T5820] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 1184.469825][T10723] usb 3-1: USB disconnect, device number 5 [ 1184.507315][ T5834] netlink: 'syz.6.13629': attribute type 11 has an invalid length. [ 1184.540283][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13629'. [ 1184.773506][ T5847] loop6: detected capacity change from 0 to 512 [ 1184.802271][ T5847] EXT4-fs error (device loop6): __ext4_fill_super:5423: inode #2: comm syz.6.13633: casefold flag without casefold feature [ 1184.817749][ T5847] EXT4-fs (loop6): get root inode failed [ 1184.823956][ T5847] EXT4-fs (loop6): mount failed [ 1185.178984][ T4342] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1185.860000][ T5852] loop0: detected capacity change from 0 to 32768 [ 1185.878083][ T4342] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1185.942932][ T5852] [ 1185.942932][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1185.942932][ T5852] [ 1185.992745][ T5905] loop2: detected capacity change from 0 to 64 [ 1186.068023][ T4342] usb 6-1: Using ep0 maxpacket: 32 [ 1186.078072][ T4342] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1186.086252][ T4342] usb 6-1: config 0 has no interface number 0 [ 1186.118373][ T4342] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1186.146080][ T4270] [ 1186.146080][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1186.146080][ T4270] [ 1186.148069][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.166205][ T4270] [ 1186.166205][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1186.166205][ T4270] [ 1186.232862][ T4342] usb 6-1: Product: syz [ 1186.251245][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13651'. [ 1186.262791][ T4342] usb 6-1: Manufacturer: syz [ 1186.267439][ T4342] usb 6-1: SerialNumber: syz [ 1186.271007][ T5914] loop2: detected capacity change from 0 to 512 [ 1186.298604][ T4342] usb 6-1: config 0 descriptor?? [ 1186.335486][ T5914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1186.420709][ T5914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1186.468806][ T5914] System zones: 1-12 [ 1186.500846][ T4342] radio-si470x 6-1:0.35: this is not a si470x device. [ 1186.511774][ T5914] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.13653: Directory hole found for htree index block 0 [ 1186.579953][ T5914] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1186.602552][ T5914] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.13653: Directory hole found for htree index block 0 [ 1186.619210][ T5914] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1186.638549][ T5914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1186.699671][ T4342] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1186.735845][ T5914] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1186.742910][ T4342] usb 6-1: USB disconnect, device number 44 [ 1186.875361][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1186.938604][ T5884] loop6: detected capacity change from 0 to 32768 [ 1187.021964][ T5884] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1187.071852][ T5884] JBD2: Ignoring recovery information on journal [ 1187.304149][ T5884] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1187.449942][ T5884] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 1187.513680][ T5884] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1187.556806][ T5884] OCFS2: File system is now read-only. [ 1187.581489][ T5884] (syz.6.13643,5884,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1187.601781][ T5884] (syz.6.13643,5884,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1187.641302][ T5884] (syz.6.13643,5884,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1187.661379][ T5884] (syz.6.13643,5884,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1187.710064][ T5884] (syz.6.13643,5884,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 1187.754520][ T5884] (syz.6.13643,5884,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 1187.762820][ T5884] (syz.6.13643,5884,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1187.821341][ T5884] (syz.6.13643,5884,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1187.831006][ T5884] (syz.6.13643,5884,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1187.878035][ T5884] (syz.6.13643,5884,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1187.938364][ T5884] (syz.6.13643,5884,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1187.974021][ T5884] (syz.6.13643,5884,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1188.010975][ T5884] (syz.6.13643,5884,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1188.078406][ T5884] (syz.6.13643,5884,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1188.116555][ T5884] (syz.6.13643,5884,1):ocfs2_mknod:357 ERROR: status = -30 [ 1188.144135][ T5884] (syz.6.13643,5884,1):ocfs2_mknod:502 ERROR: status = -30 [ 1188.201954][ T5884] (syz.6.13643,5884,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1188.336192][T32036] ocfs2: Unmounting device (7,6) on (node local) [ 1188.383099][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1188.681327][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.649956][ T4418] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1189.672542][ T27] audit: type=1326 audit(2000000065.206:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.6.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1189.735828][ T27] audit: type=1326 audit(2000000065.206:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.6.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1189.830795][ T4418] usb 2-1: Using ep0 maxpacket: 32 [ 1189.837791][ T4418] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1189.859890][ T27] audit: type=1326 audit(2000000065.206:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.6.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1189.894572][ T4418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.929038][ T4418] usb 2-1: config 0 has no interface number 0 [ 1189.935183][ T4418] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1189.955312][ T27] audit: type=1326 audit(2000000065.206:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.6.13703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1189.995662][ T4418] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1190.030686][ T4418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.088621][ T4418] usb 2-1: Product: syz [ 1190.092832][ T4418] usb 2-1: Manufacturer: syz [ 1190.126344][ T4418] usb 2-1: SerialNumber: syz [ 1190.170258][ T4418] usb 2-1: config 0 descriptor?? [ 1190.205019][ T4418] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1190.222061][ T4418] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1190.271916][ T6060] loop2: detected capacity change from 0 to 32768 [ 1190.338390][ T6060] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1190.379817][ T6060] JBD2: Ignoring recovery information on journal [ 1190.408114][ T4418] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1190.421404][ T4418] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 1190.493406][ T6130] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13711'. [ 1190.557404][ T6060] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1190.615283][ T6134] loop0: detected capacity change from 0 to 512 [ 1190.625420][ T4317] usb 2-1: USB disconnect, device number 17 [ 1190.734629][ T6060] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 1190.761199][ T6134] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1190.771740][ T6060] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1190.850129][ T6060] OCFS2: File system is now read-only. [ 1190.888094][ T6060] (syz.2.13694,6060,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1190.922316][ T6060] (syz.2.13694,6060,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1190.959726][ T6060] (syz.2.13694,6060,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1191.001756][ T6060] (syz.2.13694,6060,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1191.048609][ T6060] (syz.2.13694,6060,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 1191.098698][ T6155] netlink: 920 bytes leftover after parsing attributes in process `syz.6.13718'. [ 1191.102960][ T6060] (syz.2.13694,6060,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 1191.174042][ T6060] (syz.2.13694,6060,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1191.182876][ T6060] (syz.2.13694,6060,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1191.228241][ T6060] (syz.2.13694,6060,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1191.259729][ T6060] (syz.2.13694,6060,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1191.268730][ T6060] (syz.2.13694,6060,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1191.361578][ T6060] (syz.2.13694,6060,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1191.391762][ T6060] (syz.2.13694,6060,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1191.440322][ T6060] (syz.2.13694,6060,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1191.467740][ T6060] (syz.2.13694,6060,1):ocfs2_mknod:357 ERROR: status = -30 [ 1191.516097][ T6060] (syz.2.13694,6060,1):ocfs2_mknod:502 ERROR: status = -30 [ 1191.539764][ T6060] (syz.2.13694,6060,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1191.737604][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 1192.411931][ T4342] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1192.530305][ T6229] netlink: 'syz.6.13741': attribute type 30 has an invalid length. [ 1192.628265][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 1192.639033][ T4342] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1192.667880][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.696580][ T4342] usb 1-1: Product: syz [ 1192.734922][ T4342] usb 1-1: Manufacturer: syz [ 1192.751016][ T4342] usb 1-1: SerialNumber: syz [ 1192.753420][ T6237] loop2: detected capacity change from 0 to 1024 [ 1192.766555][ T4342] r8152-cfgselector 1-1: config 0 descriptor?? [ 1192.799978][ T27] audit: type=1326 audit(2000000068.482:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.6.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1192.835030][ T6237] EXT4-fs: inline encryption not supported [ 1192.882632][ T6237] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.13745: lblock 2 mapped to illegal pblock 2 (length 1) [ 1192.897695][ T6252] loop1: detected capacity change from 0 to 1024 [ 1192.956168][ T27] audit: type=1326 audit(2000000068.513:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.6.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1192.989059][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.032078][ T6237] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1193.089702][ T6237] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.13745: lblock 0 mapped to illegal pblock 48 (length 1) [ 1193.117589][ T27] audit: type=1326 audit(2000000068.513:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.6.13746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68459c629 code=0x7ffc0000 [ 1193.155283][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.161856][ T6237] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1193.184722][ T4342] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1193.191731][ T4342] r8152-cfgselector 1-1: bad CDC descriptors [ 1193.221528][ T6237] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.13745: Failed to acquire dquot type 0 [ 1193.225462][ T4342] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1193.249536][ T4342] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 1193.264656][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.279457][ T65] hfsplus: b-tree write err: -5, ino 4 [ 1193.332905][ T6237] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1193.421805][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.444009][ T6237] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.13745: mark_inode_dirty error [ 1193.507199][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.532633][ T6237] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1193.553618][ T6237] EXT4-fs (loop2): 1 orphan inode deleted [ 1193.584360][ T65] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1193.590713][ T6237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1193.707742][ T65] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.714317][ T65] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1193.720586][ T6283] netlink: 'syz.5.13754': attribute type 1 has an invalid length. [ 1193.783397][ T65] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 1193.800358][ T6237] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm syz.2.13745: lblock 1 mapped to illegal pblock 1 (length 1) [ 1193.846465][ T65] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.904138][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 1194.114258][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 1194.147983][ T4282] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1194.249246][ T4282] EXT4-fs (loop2): Remounting filesystem read-only [ 1194.279318][ T4282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1194.290277][ T6304] netlink: 'syz.0.13761': attribute type 1 has an invalid length. [ 1194.326972][ T4282] EXT4-fs (loop2): Remounting filesystem read-only [ 1194.343902][ T4282] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1194.384011][ T4282] EXT4-fs (loop2): Remounting filesystem read-only [ 1194.594216][ T6320] tipc: Can't bind to reserved service type 2 [ 1194.898519][ T6331] netlink: 264 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1194.908602][ T6331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1195.554059][T27304] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.564940][ T6358] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13776'. [ 1195.981737][ T6379] netlink: 'syz.6.13784': attribute type 21 has an invalid length. [ 1196.013040][ T6379] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13784'. [ 1196.053138][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1196.053155][ T27] audit: type=1326 audit(2000000071.904:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1196.099826][ T6379] netlink: 'syz.6.13784': attribute type 4 has an invalid length. [ 1196.127672][ T6379] netlink: 'syz.6.13784': attribute type 5 has an invalid length. [ 1196.155987][ T6379] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13784'. [ 1196.166676][ T27] audit: type=1326 audit(2000000071.925:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1196.277248][ T27] audit: type=1326 audit(2000000071.936:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f416119c392 code=0x7ffc0000 [ 1196.307781][ T4420] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1196.327079][ T27] audit: type=1326 audit(2000000071.936:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f416119c392 code=0x7ffc0000 [ 1196.417630][ T27] audit: type=1326 audit(2000000071.936:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416119c629 code=0x7ffc0000 [ 1196.488854][ T4420] usb 1-1: Using ep0 maxpacket: 32 [ 1196.496140][ T4420] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1196.549042][ T4420] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 1196.593865][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.603197][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1196.631912][ T4420] usb 1-1: Product: syz [ 1196.636132][ T4420] usb 1-1: Manufacturer: syz [ 1196.640764][ T4420] usb 1-1: SerialNumber: syz [ 1196.686089][ T4420] usb 1-1: config 0 descriptor?? [ 1196.731188][ T6387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1196.822753][ T6428] netlink: 'syz.2.13798': attribute type 9 has an invalid length. [ 1196.842187][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13798'. [ 1196.948398][ T6387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1196.988335][ T4420] net1080 1-1:0.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, f2:f1:be:51:8f:f0 [ 1197.020897][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13801'. [ 1197.096207][ T4342] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1197.165830][ T6447] kAFS: unable to lookup cell '(,c' [ 1197.198211][ T4317] usb 1-1: USB disconnect, device number 16 [ 1197.214493][ T4317] net1080 1-1:0.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 1197.307430][ T4342] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1197.331623][ T4342] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1197.374312][ T4342] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1197.396327][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.422526][ T4342] usb 6-1: Product: syz [ 1197.441956][ T4342] usb 6-1: Manufacturer: syz [ 1197.456565][ T4342] usb 6-1: SerialNumber: syz [ 1197.654143][ T6480] netlink: 'syz.2.13808': attribute type 2 has an invalid length. [ 1197.681221][ T4342] usb 6-1: USB disconnect, device number 45 [ 1197.965114][ T4420] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1198.142050][ T4420] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1198.156459][ T4420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.174216][ T4420] usb 2-1: Product: syz [ 1198.184048][ T4420] usb 2-1: Manufacturer: syz [ 1198.208622][ T4420] usb 2-1: SerialNumber: syz [ 1198.237303][ T4420] usb 2-1: config 0 descriptor?? [ 1198.281013][ T4420] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1198.667368][ T4420] gspca_sunplus: reg_r err -71 [ 1198.672601][ T4420] sunplus: probe of 2-1:0.0 failed with error -71 [ 1198.708264][ T4420] usb 2-1: USB disconnect, device number 18 [ 1198.727940][ T6547] Cannot find add_set index 0 as target [ 1198.743017][ T6548] Cannot find del_set index 1 as target [ 1199.075598][ T6568] netlink: 'syz.2.13826': attribute type 29 has an invalid length. [ 1199.117564][ T6568] netlink: 'syz.2.13826': attribute type 29 has an invalid length. [ 1200.419691][ T6642] bond0: option arp_validate: invalid value (18446744073491447809) [ 1200.419765][ T41] bond0: (slave bond_slave_0): interface is now down [ 1200.438694][ T6645] netlink: 220 bytes leftover after parsing attributes in process `syz.5.13848'. [ 1200.517698][ T41] bond0: (slave bond_slave_1): interface is now down [ 1200.627658][ T41] bond0: now running without any active interface! [ 1200.728046][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13851'. [ 1200.785517][ T6658] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.13852'. [ 1201.518390][ T6698] loop1: detected capacity change from 0 to 16 [ 1201.571954][ T6698] erofs: (device loop1): mounted with root inode @ nid 36. [ 1201.971680][ T6719] ax25_connect(): syz.0.13870 uses autobind, please contact jreuter@yaina.de [ 1202.500329][ T6690] loop6: detected capacity change from 0 to 32768 [ 1202.578861][ T6690] ERROR: (device loop6): dbAlloc: unable to allocate blocks [ 1202.578861][ T6690] [ 1202.589240][ T6735] ALSA: mixer_oss: invalid OSS volume 'u' [ 1202.628919][ T6690] ERROR: (device loop6): remounting filesystem as read-only [ 1202.699195][ T28] INFO: task syz-executor:4272 blocked for more than 143 seconds. [ 1202.707077][ T28] Not tainted syzkaller #0 [ 1202.734305][ T6707] loop2: detected capacity change from 0 to 32768 [ 1202.743383][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.794671][ T28] task:syz-executor state:D stack:22064 pid:4272 ppid:1 flags:0x00004004 [ 1202.823756][ T28] Call Trace: [ 1202.847226][ T6707] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1202.855598][ T28] [ 1202.872639][ T28] __schedule+0x11d1/0x40e0 [ 1202.885450][ T28] ? mark_lock+0x94/0x320 [ 1202.899375][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13879'. [ 1202.910135][ T28] ? __sched_text_start+0x8/0x8 [ 1202.915802][ T6707] (syz.2.13866,6707,1):ocfs2_symlink:2065 ERROR: status = -2 [ 1202.925354][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1202.945090][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13879'. [ 1202.952808][ T28] ? lock_chain_count+0x20/0x20 [ 1202.959713][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1202.975089][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1202.981025][ T28] schedule+0xb9/0x180 [ 1202.990423][ T28] io_schedule+0x7c/0xd0 [ 1202.997150][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 1203.003876][ T28] ? folio_wait_bit+0x30/0x30 [ 1203.008610][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 1203.016463][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1203.022423][ T28] truncate_inode_pages_range+0x9fe/0x1090 [ 1203.042105][ T28] ? mapping_evict_folio+0x520/0x520 [ 1203.047441][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1203.053522][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1203.058904][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.064467][ T28] evict+0x4dc/0x8d0 [ 1203.068422][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1203.073361][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1203.078726][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1203.084385][ T28] evict_inodes+0x60c/0x6a0 [ 1203.088922][ T28] ? clear_inode+0x150/0x150 [ 1203.108843][ T28] generic_shutdown_super+0x93/0x340 [ 1203.114158][ T28] kill_block_super+0x7c/0xe0 [ 1203.120168][ T28] deactivate_locked_super+0x93/0xf0 [ 1203.125487][ T28] cleanup_mnt+0x42c/0x4b0 [ 1203.129978][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.135281][ T28] task_work_run+0x1d0/0x260 [ 1203.139952][ T28] ? task_work_cancel+0x220/0x220 [ 1203.145069][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1203.150585][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1203.156005][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1203.161797][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1203.167516][ T28] do_syscall_64+0x58/0xa0 [ 1203.171961][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1203.176719][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1203.181560][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.187541][ T28] RIP: 0033:0x7f14d959d897 [ 1203.192042][ T28] RSP: 002b:00007ffd367bb548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1203.200529][ T28] RAX: 0000000000000000 RBX: 00007f14d9631ef0 RCX: 00007f14d959d897 [ 1203.208666][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd367bb600 [ 1203.216744][ T28] RBP: 00007ffd367bb600 R08: 00007ffd367bc600 R09: 00000000ffffffff [ 1203.225521][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd367bc690 [ 1203.234228][ T28] R13: 00007f14d9631ef0 R14: 000000000010e15e R15: 00007ffd367bc6d0 [ 1203.242331][ T28] [ 1203.245546][ T28] [ 1203.245546][ T28] Showing all locks held in the system: [ 1203.263776][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1203.276838][ T4282] (syz-executor,4282,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 1203.288351][ T6750] device vlan0 entered promiscuous mode [ 1203.304401][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 1203.316918][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1203.338038][ T28] 1 lock held by rcu_tasks_trace/13: [ 1203.343371][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1203.423098][ T28] 1 lock held by khungtaskd/28: [ 1203.428025][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1203.496917][ T28] 1 lock held by udevd/3637: [ 1203.510473][ T28] 2 locks held by getty/4027: [ 1203.517079][ T28] #0: ffff88814ca7d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1203.527150][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1203.543495][ T28] 1 lock held by syz-executor/4272: [ 1203.551156][ T28] #0: ffff88802750c0e0 (&type->s_umount_key#89){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1203.579336][ T28] 1 lock held by kworker/0:3/4317: [ 1203.584486][ T28] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1203.596386][ T28] 3 locks held by kworker/0:5/4342: [ 1203.601592][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1203.612010][ T28] #1: ffffc90004befd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1203.625459][ T28] #2: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1203.636478][ T28] 3 locks held by kworker/u4:7/4536: [ 1203.641774][ T28] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1203.651767][ T28] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x312/0x6d0 [ 1203.663304][ T28] #2: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: batadv_nc_process_nc_paths+0xba/0x390 [ 1203.673798][ T28] 2 locks held by kworker/1:18/10723: [ 1203.679190][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1203.689609][ T28] #1: ffffc9000cfe7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1203.701224][ T28] 2 locks held by syz.1.13878/6752: [ 1203.706446][ T28] #0: ffffffff8dd48848 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1203.727883][ T28] #1: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1203.751800][ T28] [ 1203.754175][ T28] ============================================= [ 1203.754175][ T28] [ 1203.762926][ T28] NMI backtrace for cpu 1 [ 1203.767281][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1203.774504][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.784589][ T28] Call Trace: [ 1203.787893][ T28] [ 1203.790856][ T28] dump_stack_lvl+0x188/0x24e [ 1203.795579][ T28] ? irq_work_queue+0xb8/0x140 [ 1203.800378][ T28] ? show_regs_print_info+0x12/0x12 [ 1203.805581][ T28] ? load_image+0x400/0x400 [ 1203.810082][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1203.814782][ T28] ? printk_sprint+0x460/0x460 [ 1203.819592][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1203.824554][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1203.830709][ T28] ? _printk+0xda/0x130 [ 1203.834867][ T28] ? load_image+0x400/0x400 [ 1203.839394][ T28] ? load_image+0x400/0x400 [ 1203.843908][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1203.849976][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1203.856054][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1203.862054][ T28] watchdog+0xeee/0xf30 [ 1203.866225][ T28] ? watchdog+0x1ed/0xf30 [ 1203.870572][ T28] kthread+0x29d/0x330 [ 1203.874650][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1203.879681][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1203.884279][ T28] ret_from_fork+0x1f/0x30 [ 1203.888719][ T28] [ 1203.892301][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1203.897547][ C0] NMI backtrace for cpu 0 [ 1203.897558][ C0] CPU: 0 PID: 4345 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1203.897574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.897584][ C0] Workqueue: bat_events batadv_nc_worker [ 1203.897603][ C0] RIP: 0010:lock_acquire+0xdc/0x4a0 [ 1203.897626][ C0] Code: 8e bb 0c 0f 83 a2 01 00 00 45 89 f4 41 c1 ee 06 4a 8d 3c f5 28 cc 1f 8e be 08 00 00 00 e8 ac 21 6f 00 4c 0f a3 25 bc 8c bb 0c <73> 0d e8 9d 32 08 00 84 c0 0f 84 2e 02 00 00 48 c7 c0 e4 00 20 8e [ 1203.897639][ C0] RSP: 0018:ffffc90004c1fac0 EFLAGS: 00000257 [ 1203.897652][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81643f64 [ 1203.897662][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e1fcc28 [ 1203.897672][ C0] RBP: ffffc90004c1fbc8 R08: ffffffff8e1fcc2f R09: 1ffffffff1c3f985 [ 1203.897683][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f986 R12: 0000000000000000 [ 1203.897693][ C0] R13: 1ffff92000983f64 R14: 0000000000000000 R15: dffffc0000000000 [ 1203.897703][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1203.897717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.897727][ C0] CR2: 00007ffdaeb683d0 CR3: 0000000078f1b000 CR4: 00000000003506f0 [ 1203.897743][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1203.897753][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1203.897763][ C0] Call Trace: [ 1203.897768][ C0] [ 1203.897778][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1203.897798][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1203.897821][ C0] ? batadv_nc_worker+0xce/0x600 [ 1203.897836][ C0] batadv_nc_worker+0xeb/0x600 [ 1203.897851][ C0] ? batadv_nc_worker+0xce/0x600 [ 1203.897868][ C0] ? process_one_work+0x7b0/0x1160 [ 1203.897884][ C0] process_one_work+0x8a2/0x1160 [ 1203.897907][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1203.897925][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1203.897940][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1203.897954][ C0] ? kthread_data+0x4b/0xc0 [ 1203.897976][ C0] worker_thread+0xaa2/0x1270 [ 1203.898007][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1203.898029][ C0] kthread+0x29d/0x330 [ 1203.898040][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1203.898056][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1203.898070][ C0] ret_from_fork+0x1f/0x30 [ 1203.898094][ C0] [ 1203.904679][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1203.904690][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1203.904708][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.904717][ T28] Call Trace: [ 1203.904723][ T28] [ 1203.904730][ T28] dump_stack_lvl+0x188/0x24e [ 1203.904763][ T28] ? memcpy+0x3c/0x60 [ 1203.904781][ T28] ? show_regs_print_info+0x12/0x12 [ 1203.904804][ T28] ? load_image+0x400/0x400 [ 1203.904834][ T28] panic+0x2e5/0x730 [ 1203.904850][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1203.904876][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1203.904891][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1203.904920][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1203.904946][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1203.904971][ T28] watchdog+0xf2d/0xf30 [ 1203.904996][ T28] ? watchdog+0x1ed/0xf30 [ 1203.905020][ T28] kthread+0x29d/0x330 [ 1203.905035][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1203.905054][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1203.905072][ T28] ret_from_fork+0x1f/0x30 [ 1203.905106][ T28] [ 1203.911230][ T28] Kernel Offset: disabled [ 1204.243913][ T28] Rebooting in 86400 seconds..