last executing test programs: 1m14.53662446s ago: executing program 2 (id=944): r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) 1m14.411410402s ago: executing program 2 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000001bb80)={&(0x7f0000002840)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_xt={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x26, 'raw\x00'}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1m14.230238205s ago: executing program 2 (id=955): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ttyS3\x00', ']\x99D!/ttyS3\x00', '\xce\xb5', '\x00']}, 0x18) 1m14.125334667s ago: executing program 2 (id=960): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$eJzs3cuOHFcZB/Cvr3MJSawsomAhNEnMJYT4GowhQJIFLNiwQN4iW5NJZOEAsg1yIgtPNBskeAgQEkuEWLLiAbJgy44HwJKNBMoCpVDNnDOuabqnZ+yZrm6f308aV319qqZP+d/Vl6mqPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxPe/98NznYi48ot0w4mIz0QvohuxUtdrEbGydqK5zgux3RzPR8RgKaJef/ufZyNej4iPn4m4/+DOen3z+QP247t/+vvvf/TUD/72x8GZ//z5Vu+NScvdvv2bf//l7qNvLwAAAJSoqqqqkz7mn4yIfvpsDwA8+fLrf5Xk29VzV2/OWX/UarVavYB1UzXe3WYREZvNder3DA7HA8CC2YxP2u4CLZJ/0foR8VTbnQDmWqftDnAs7j+4s95J+XaarwdrO+35XJA9+W92dq/vmDSdZvQck1k9vraiF89N6M/KjPowT3L+3dH8r+y0D9Nyx53/rEzKf7hz6VNxcv690fxHPDn5d8fmX6qcf/9Q+ffkDwAAAAAAcyz//f9Ey8d/lx5/Uw5kv+O/azPqAwAAAAAAAAActcOO/9cfGf9vl/H/AAAAYG7Vn9Vrv33m4W2Tvoutvv1yJ+LpkeWBwqSLZVbb7gcAAAAAAAAAAAAAlKS/cw7v5U7EICKeXl2tqqr+aRqtD+tx1190pW8/lKztJ3kAANjx8TMj1/J3IpYj4nL6rr/B6upqVS2vrFar1cpSfj87XFquVhqfa/O0vm1peIA3xP1hVf+y5cZ6TdM+L09rH/199X0Nq94BOjYbLQYOABGx82p0f9Ir0n+9Xi2mqno2Wn6Tw4LYZ/9nQdn/OYi2H6cAAADA8auqquqkr/M+mY75d9vuFAAwE/n1f/S4gFqtVhde9+esP2r1kdRN1Xh3m0VEbDbXqd8zGI4fABbMZnzSdhdokfyLVn+wfaHtTgBzrdN2BzgW9x/cWe+kfDvN14M0vns+F2RP/pud7fXy+uOm04yeYzKrx9dW9OK5Cf15fkZ9mCc5/+5o/ld22odpucfPv9rzZ8K2zjGalH+9nSda6E/bcv690fxHHPf+Pytb0R2bf6ly/v1D5d+TPwAAAAAAzLH89/8Tc3X8d/iomzPVfsd/18aucXx9AQAAAAAAAICjcv/BnfV83Ws+/v+5Mcu5/vPJlPPvyL9IOf/uSP5fHlmu15i/9/bD/P/14M76H27987N5etD8l/JMJz2yOukR0Un31ElfuXvEXwyxNegN63sadLq9fjrnpxq8G9fiemzE2T3LdtP/x8P2c3va654Ottur3k77+T3t/d32vP6FPe2DdHZRtZLbT8d6/DSuxzvb7XXb0pTtX57SXk1pz/n37P9Fyvn3Gz91/qupvTMyrd37qPt/+31zOu5+3rr2+V+dPf7NmWorervb1lRv30st9Gf7/+SpYfz85saN07ev3rp141ykyZ5bz0eaHLGc/yD97D7/v7zTnp/3m/vrvY+Gh85/XmxFf2L+Lzfm6+19ZcZ9a0POf5h+cv7vpPbx+/8i5z95/3+1hf4AAAAAAAAAAAAAAADAfqqq2r5E9K2IuJiu/2nr2kwAYLby63+V5NtnVfdmfH9q9YLXnTnrz0zrT6v56o9avYh1UzXem80iIv7aXKd+z/DLcb8MAJhnn0bEP9ruBK2Rf8Hy9/3V01NtdwaYqZsffPjjq9evb9y42XZPAAAAAAAAAIBHlcf/XGuM/3yqqqq7I8vtGf/17Vh73PE/+3lmd4DRCQNV9w6/TfvZ6g573cZw4y/GpPG/B7tz+43/3Z9yf4Mp7cMp7UtT2pentI+90KMh5/9iY7zzUxFxcmT49RLGfx0d874EOf+XGo/nOv8vjSzXzL/63SLn392T/5lb7//szM0PPnzt2vtX39t4b+MnF86dO3vh4sVLly6deffa9Y2zO/+22OPjlfPPY187D7QsOf+cufzLkvP/QqrlX5ac/xdTLf+y5Pzz+z35lyXnnz/7yL8sOf9XUi3/suT8v5Jq+Zcl5/9qquVflpz/V1Mt/7Lk/F9LtfzLkvM/nWr5lyXnfybVB8x/5bj7xWzk/PMRLvt/WXL++cwG+Zcl538+1fIvS87/QqrlX5ac/+upln9Zcv5fS7X8y5Lzv5hq+Zcl5//1VMu/LDn/S6mWf1ly/t9ItfzLkvP/ZqrlX5ac/xupln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT830y1/Mvy8Pv/H2/m188eze8xU+zMYD66YWZnpu1nJgAAAAAAAAAAAABg1CxOJ257GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11vcDP7NvXjshMRDyd/I3sHaMMc4mu36JX2hdTHhteCuBUOgLtutdmwW/4bVLoJFsGiiRMCqqaBsu2gJCbW4qfMEFrQDlArVCqkTaC3qDqFC5iKqAAlIlWkG2mnOe59mZ2dmZXe94d/acz0eyf94zZ8555swzZ+e36+8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRtjdMf6aWZVn9T/7X5iy7tf7vjWOb82WvXesRAgAAACv1q/zv529PC44u4U4N6/zzK7739bm5ubns/YN/PvyFubl0w1iWDW/Isvy26PqPPlBrXCd4PButDTR8PdBl94Ndbh/qcvtwl9tHuty+ocvto11uX3AAFthY/Dwm39iO/J+bi0Oa3ZEN57ftaHOvx2sbBgbiz3Jytfw+c8OnspnsTDadTTatX6xby9f/5rb6vt6axX0NNOxra32G/Oyxk3EMtXCMdzTta36b0U9en439/GePnfzbS8/d1a52PQxN2yvGuWt7fZyfCkuKsdayDemYxHEONIxza5vnZLBpnLX8fvV/t47z+SWOc3B+mKuq9TkfzQbyfz+TH6ehxh/rpeO0NSz7xT1Zll2dH3brOgv2lQ1km5qWDMw/P6PFjKxvoz6VXpINLWueblvCPK3XqR3N87T1NRGf/23hfkOLjKHxafrJJ0canvdfzt3IPI3qj7oYw9zg/LJiDK1zsNevlX6Zg3FePJM/6CfazsEd4fE/tnPxOdh27rSZg+lxN8zB7d3m4MDIYD7m9CTU8vvMz8E9TesP5nuq5fXZnZ3n4MSlsxcmZj/+iftmzp44PX16+ty+PXsm9x04cOjQoYlTM2emJ4u/b/Bo979N2UB6HW4Pxy6+Bl7dsm7jVJ378siC8++Nvg5H0+tw4feszS3r9vp1ONT64Gqr84JcOKeL18Z76wd99NpAtshrLH9+dq/8dZged8PrcKjhddj2e0qb1+HQEl6H9XUu7F7ae5ahhj/txrD494KVzcHNDXOw9f1I6xzs9fuRfpmDo2Fe/GD34t8LtobxPjG+3PcjgwvmYHq44dxTX5Le748eyku7eXl3/YZbRrLLs9MX73/0xKVLF/dkoayKlzbMldb5uqnhMWUL5uvAsufr0ZlXPHF3m+Wbw7Eava/+1+iiz1V9nf33d36u8u9u7Y9n09K9WSg9ttrHs9138/rxHMmyL37nkw9/67EvvmHR41nvNz81sfL34qkvbTj/Di9y/o19/wvF/tKmHh8cHipev4Pp6Aw3nY+bn6qh/NxVy/f9/MTSzsfD4c9qn4/v6HA+3tKybq/Px8OtDy6ej2vdftqxMq3P52iYJ2cmO5+P6+ts2bvcOTnU8Xx8T6i1cPxfEzqF1Bc1zJ3F5m3a19DQcHhcQ3EPzfN0X9P6w6E3q+/rqb3hTWEa5dLm6a57ivUHG+4XrdY8HWtZt9fzNP3sa7F5Wuv207cb0/p8joZ5cce+zvO0vs7T+1d+7twY/9lw7hzpNgeHB0fqYx5OkzA/32dzG+McvD87mZ3PzmRT+a0j+Xyq5fsaf2Bp58qR8Ge1z5VbOszBXS3r9noOpu9ji8292tDCB98Drc/naJgXTz7QeQ7W13njwd6+d90VlqR1Gt67tv58bbGfed3dcphu1lwZCuP8zsHOP5utr3Pm0HL7zM7H6d6w5JY2x6n19bvYa2oqW53jtCWM87lDix+n+njq63zh8BLn09Esy6589MH8573h9ytXLn//602/d2n3O50rH33wpy869U/LGT8A698LRdlUfK9r+M3UUn7/DwAAAKy9bv9BPf2MezT8DlP/DwAAAGUU+/74v8IT/T8AAACURuz7h0JNytD//3H3Vba88bmZF65kKZk/F8Tb02F4qFgvZlwnw9djc/Pqyx/86vR//+OVpQ1vIMuyXz70R23X3/JQHFdhLIzz+pualy/w9fuWtO/jj1xJ+23Mr38pbD8+nqVOg3YR3Mksy755++fy/Yx94Fpen37oeF4fvvrE4/V1nj9cfB3v/+xLi/X/KvzflaOnTjTd/9lwHH4c6uTb2h+PeL+vXXvN1oPvm99fvF9t+235w37yg8V24+fkfP7xYv14nBcb/7c++9TX6us/+qr2478y0H78T4XtfjXU/3l5sX7jc1D/Ot7v02H8cX/xfvd/5dttx3/9M8X6F95crHc81Lj/XeHrHW9+bqbxeD1aO9H0uLK3FOvF/U9+/0/z2+P24vZbxz967FrT8WidH0//W7GdiZb14/K4n+gfWvZf307j/Iz7f+pPjjcd5277v/7wsy+vb7d1//e2rHfho7vz/c9vr/kTm/76059ru784nqN/f6Hp8Rx9d3gdh/0/+cEwH8Pt/3u92F7rpyscf3fz+Seu/6XNV5oeT/TWnxf7v/6603ndMLpx0y23vui2q++qH7sse2ZDsb1u+z/9N+ebxv/lO4vjEW+P/8Wsdf+LufrKYv8XPzZ+7vzs5ZmpdFQfuz3/7Jy3F+OJ4709nFtbvz52/tKHpi+OTY5NZtlYeT9C74Z9JdSfFuVq57XnFpxBdz8Sns+7//Kbm3b+62fj8n9/b7H82tuK71uvDut9PizfHJ6/5e1/oSe33Zm/vmtPhxHOLfy84JXYuuO/Di1pxfD4W98XxPl+4WUfyo9D/bb8+0Z8Xa9w/D+cKrbzjXBc58InM2+/c35/jevHz0a49p7i9b7i4xdOc/F5/bvwfL/jx8X247ji4/1heB/z7S3N57s4P75xZaB1+/mneFwN55PsanF7XCse72vP39l2ePFzSLKrd+Vf/1nazl3LepiLmf347MSZmXOXH524ND17aWL24584dvb85XOXjuWf5Xnsw93uP39+2pSfn6amD+zP8rPV+aLcZGs9/guPnJw6OLlzavrUicunLj1yYfri6ZOzsyenp2Z3njh1avpj3e4/M3Vkz97D+w7uHT89M3Xk0OHD+w6Pz5w7Xx9GMaguDkx+ZPzcxWP5XWaP7D+854EH9k+Onz0/NX3k4OTk+OVu98+/N43X7/2H4xenz5y4NHN2enx25hPTR/YcPnBgb9dPAzx74dTs2MTFy+cmLs9OX5woHsvYpXxx/Xtft/tTTrP/UbyfbVUrPogve9e9B9Lns9Z99ZOLbqpYpeUDRJ8Ln0Xz3RdfOLSUr2PfPxxqUob+HwAAAMjFvn8k1ET/DwAAAKUR+/4NoSb6fwAAACiN2PePhpr+S0BF+v/S5f+3XFnS/uX/1zL/n1/9Wf5f/n/18/8hf//Me/ot/1+cL+T/e2Ol+Xv5/0D+X/5f/l/+X/6fHui3/H/s+zdmmd//AwAAQEnFvn9TqIn+HwAAAEoj9v23hJro/wEAAKA0Yt9/a6hJRfp/+X/5f9f/l/+X/2+/f/n/9Un+vzP5/y7k/yeyauX/r/Zy/GuQ/9/Y+IX8P/2o3/L/se9/UahJRfp/AAAAqILY998WaqL/BwAAgNKIff/toSb6fwAAACiN2PdvDjWpSP8v/7+i/H/KXMn/N49f/r+Z/H+YD/L/8v+rQP6/M/n/LuT/Xf9/feX/m8j/04/6Lf8f+/4Xh5pUpP8HAACAKoh9/0tCTfT/AAAA0H+GOtzW7j9nB7Hvf2moyYL+v9MOAAAAgH4W+/47spYgeEV+/y//7/r/8v/y//L/7fe/9Pz/YCb/3z/k/zuT/+9C/l/+X/5f/p+e6rf8f973Z6PZy0JNKtL/AwAAQBXEvv/OUJMl9P8bbtqoAAAAgF6Kff//CzXx+38AAAAojdj3bwk1qUj/L/9fmvz/LxqfOvl/+f9O+5f/d/3/MpP/70z+vwv5f/l/+f8bzP9f3SP/Tzv9lv+Pff9doSYV6f8BAACgCmLff3eoif4fAAAASiP2/f8/1ET/DwAAAKUR+/6toSYV6f/l//s8/x+To67/L/8v/9+X+f9R+f++I//fmfx/F0vJ/98q/78Y+f8q5/9d/5/2+i3/H/v+l4eaVKT/BwAAgCqIff8rQk30/wAAAFAase9/ZaiJ/h8AAABKI/b9Y6EmFen/l5P/r12V/1/MTb7+/8gSrv/fRP5f/r/T/uX/Xf+/zOT/O5P/78L1/+X/5f/l/+mpfsv/x75/W6hJRfp/AAAAqILY928PNdH/AwAAQGnEvv+eUBP9PwAAAJRG7Pt3hJpUpP93/f91kf/P5P/l/+X/5f/l/5dG/r8z+f8u5P/l/+X/5f/pqX7L/8e+/1WhJhXp/wEAAKAKYt+/M9RE/w8AAAClEfv+V4ea6P8BAACgNGLfvyvUpCL9v/y//L/8v/y//H/7/cv/r0/y/53J/3ch/y//L/8v/09P9Vv+P/b9rwk1qUj/DwAAAFUQ+/7doSb6fwAAACiN2PffG2qi/wcAAIDSiH3/eKhJRfp/+X/5f/l/+X/5//b7l/9fn+T/O5P/70L+X/5f/l/+n57qt/x/7PvvCzWpSP8PAAAAVRD7/vtDTfT/AAAAUBqx758INdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8/7Ly/6+c3678f0H+v7/I/3cm/9+F/L/8/5rn/4fl/ymVfsv/x75/T6hJRfp/AAAAqILY9+8NNdH/AwAAQGnEvn9fqIn+HwAAAEoj9v37Q00q0v/L/8v/y//3NP9fazcfSpX/byD/X5D/7y/y/531Pv8fH6L8v/y//L/r/8v/s1C/5f9j3/9AqElF+n8AAACogtj3Hwg10f8DAABAacS+/2Coif4fAAAASiP2/YdCTSrS/8v/y//L/7v+v/x/+/3L/69P8v+duf5/F/L/8v/rOP9fn1vy//Sbfsv/x77/cKhJRfp/AAAAqILY97821ET/DwAAAKUR+/5fCzXR/wMAAEBpxL7/10NNKtL/y//L/8v/y//3e/5/RP5f/n8Z5P87k//vQv5f/n8d5/9d/59+1G/5/9j3Hwk1qUj/DwAAAFUQ+/7fCDXR/wMAAEBpxL7/daEm+n8AAAAojdj3Hw01qUj/L/+/Svn/uFD+X/5f/t/1/+X/byr5/87k/7uQ/5f/l/+X/6en+i3/H/v+14eaVKT/BwAAgCqIff+DoSb6fwAAACiN2Pe/IdRE/w8AAAClEfv+N4aaVKT/l/93/f+1z/8PN41d/n/+fvL/Bfl/+f/lkP/vTP6/C/l/+X/5f/l/eqrf8v+x739TqElF+n8AAACogtj3vznURP8PAAAApRH7/reEmuj/AQAAoDRi3//WUJOK9P/y//L/a5//d/1/+f+C/L/8fy/I/3cm/99F7/P/wy3bl/+/idZ6/PL/8v8s1G/5/9j3/2aoSUX6fwAAAKiC2Pc/FGqi/wcAAIDSiH3/20JN9P8AAABQGrHvf3uoSUX6f/l/+X/5f/l/+f/2+5f/X5/k/ztbZ/n/X90Wlq/j/H/r9uX/b6K1Hv9y8/9DLV/flPz/jxbL/89taL2//D83Q7/l/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18cxn16W/5f/zxfI/8v/y/+vW/L/na2z/H8Zrv/fun35/5torcfv+v/y/yzUb/n/2Pe/O9SkIv0/AAAAVEHs+x8ONdH/AwAAQGnEvv89oSb6fwAAACiN2Pe/N9SkIv2//L/r/6/X/P8tDevL/8v/y/8Tyf93Jv/fhfy//H+/5f//U/6f9a3f8v+x738k1KQi/T8AAABUQez73xdqov8HAACA0oh9/2+Hmuj/AQAAoDRi3//+UJOK9P+rlv/fvHCR/P9y8v9j8v/LvP7/SFgm/y//L/9fLfL/ncn/dyH/L//fb/l/1/9nneu3/H/s+z8QarL0/n90yWsCAAAAayL2/b8TalKR3/8DAABAFcS+/3dDTfT/AAAAUBqx7/+9UJOK9P+u/79e8v+u/58tM//v+v+L71/+v4/z/wPy/yu1evn/eOaR/5f/l/+P5P/l/+X/adVv+f/Y9/9+qElF+n8AAACogtj3fzDURP8PAAAA60K7/5PdKvb9x0JN9P8AAABQGrHvPx5qUpH+X/5f/l/+/4by//lqNzX//xfb/+UH33vn8T3y/9XK/7v+/4qt6vX/6y9+1/+X/5f/T+T/5f/l/2nVb/n/2PefCDWZb/ze7gL/AAAAsL7Fvv8PQk0q8vt/AAAAqILY958MNdH/AwAAQGnEvn8q1KQi/b/8v/y//L/r//c6/x+Px3rK/49vWEf5/3jSlf9va1Xz/++bz4nL/y83/z/Sdmlr/r8m/99E/n/Z4/9ulmXy//L/rKF+y//Hvn861KQi/T8AAABUQej7B04Vdf4G/T8AAACURuz7T4ea6P8BAACgNGLf/6FQk4r0//L/8v/y//L/rv/ffv99m/93/f+O5P8765/8f3uu/y//v57HL/8v/89C/Zb/j33/TKhJRfp/AAAAqILY93841ET/DwAAAKUR+/6PhJro/wEAAKA0Yt9/JtSkIv2//P//sXcfT5aV5x3H70AzoahyeeeFF2bvP4GFWds7b7xg44Vd5XKVwTZOODEI5YByDigLBZSQEEooJ1BCQllIQjkHlEGqUTHzPE93T58+t3v6dt9z3vfzWfhBjUa3cVFCP4bvvPp//b/+X/8//Pn6/3nS/4/T/y+h/9f/6//1/6zU1Pr/3P3/FLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/n+OWTva//l//32z//xf6/90+X/+v/2+Z/n+c/n/IJZu/qf/X/+v/9f+s1NT6/9z9/xK3dLL/AQAAoAe5+/81brH/AQAAoBm5+6+JW+x/AAAAaEbu/n+LWzrZ/+f1/8cW6+n/j+/4vo62/8+MV//fUv/v/f9dP1//r/9v2dH2/9c/9N98+v/Z9/9b6P/1//p//T8rNbX+P3f/v8ctnex/AAAA6EHu/v+IW+x/AAAAaEbu/v+MW+x/AAAAaEbu/v+KWzrZ/97/9/6//l//r/8f/nz9/zx5/39cT/3/NfdcetX9t/3p7fv5fP2//l//r/9ntabW/+fuvzZu6WT/AwAAQA9y9/933GL/AwAAQDNy9/9P3GL/AwAAwAydGvxq7v7/jVs62f/6f/2//j/6/5P6f/2//r8F+v9xPfX/F/L5+n/9v/5f/89qTa3/z93/f3FLJ/sfAAAAepC7///jFvsfAAAApmvoH8Qekbv/urjF/gcAAIBm5O4/Hbd0sv/1/4ff//9e/z+P/t/7//p//X8T9P/j9P9L6P/1//p//T8rNbX+P3f/9XFLJ/sfAAAAepC7/2Fxi/0PAAAAzcjdf0PcYv8DAABAM3L3Pzxu6WT/6/+9/6//1//r/4c/X/8/T9Pu/zeWfr7+X/8/8/7/Ev2//l//z1b77P8fGPmv7ZX0/7n7HxG3dLL/AQAAoAe5+x8Zt9j/AAAA0Izc/Y+KW+x/AAAAaEbu/kfHLZ3sf/2//l//r/+/4P5/5596Z+n/h+n/j8a0+//luun/jw3/Wgj6/9n3/97/1//r/9lmau//5+5/TNzSyf4HAACAHuTuf2zcMrL/9/038wEAAIC1yt3/uLjFz/8DAADA7GV1lrv/8XFLJ/tf/6//1//r/73/P/z5Y/3/7Vu+P/3/tOj/x02m/9+F/l//P+fvX/+v/2enqfX/ufufELd0sv8BAACgB7n7b4xb7H8AAABoRu7+J8Yt9j8AAAA0I3f/k+KWTvb/cP+/+fv1/3uj/9/+/ev/h//8WFX/n/+J+v/R/v8K7//3Sf8/Tv+/xLb+/683Fgv9v/5f/x/9/6llP17/z5Cp9f+5+58ct3Sy/wEAAKAHufufErfY/wAAANCM3P1PjVvsfwAAAGhG7v6nxS2d7H/v/+v/9f/z6/+9/3/OOt//Xxx5/7+h/98j/f84/f8S3v/X/+v/x9//H/lVAPT/DDm6/n9jT/1/7v6nxy2d7H8AAADoQe7+Z8Qt9j8AAADMw9Z/duD8f6A05O5/Ztxi/wMAAEAzcvc/K25pZ/+PvtWp/9f/6//1//r/4c+fVv/v/f+90v+Pa73/P7HQ/x/EIfXzG431/zft9uOn0P9fd9j9/wj9P0O29f93bH59Xe//5+5/dtzSzv4HAACA7uXuf07cYv8DAABAM3L3Pzdusf8BAACgGbn7nxe3dLL/D73/H/nVB/T/+n/9v/5f/6//XzX9/7jW+3/v/x/Mut/Pn/v3P4X+/9Df/x+h/2fItv5/i3X1/7n7nx+3dLL/AQAAoAe5+18Qt9j/AAAA0Izc/TfFLfY/AAAANCN3/wvjlk72v/f/9f/6f/2//n/48/X/83Sg/v4i/X/R/+v/9f/6f/0/KzC1/j93/4vilk72PwAAAPQgd/+L4xb7HwAAAObkxNjvzN3/krjF/gcAAIBm5O5/adzSyf7X/x9u/59f1//r/xf6f/2//v9IdPv+/7GhvxLttEv/f9c/nP6r7V/R/+v/9f/6f/0/e/THI79vEv3/mc3/dZm7/2VxSyf7HwAAAHqQu//lcYv9DwAAAM3I3f+KuMX+BwAAgGbk7r85btnn/h9rHqZM/+/9f/2//l//P/z5+v956rb/3yPv/y+h/9f/6//1/6zUJPr/Lf86d/8r4xY//w8AAADNyN3/qrjF/gcAAIBm5O5/ddxi/wMAAEAzcve/Jm7pZP/r//X/+n/9v/5/+PP1//Ok/x+n/19iTv3/zQfo/zeGv7zufv6g1v396//1/+w0tf4/d/8tcUsn+x8AAAB6kLv/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/+v/9f/6f/3/8Ofr/+dJ/z9O/79YLN448g0M9f9nTkyz//f+/+S+f/2//p+dptb/5+5/Q9zSyf4HAACADlx26uw5GX8r2P4HAACAFuXuvzVusf8BAACgGbn73xS3dLL/9f/6f/3/Zv9ffyT6f/2//n+29P/j9P9LzOn9f/3/5L5//b/+n52m1v/n7n9z3NLJ/gcAAIAe5O6/LW6x/wEAAKAZufvfErfY/wAAANCM3P23xy2d7H/9v/5f/+/9f/3/8Ofr/+fp8Pr/hf5f/6//X0L/r//X/3O+qfX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/9f/D3++/n+evP8/Tv+/hP5f/6//1/+zUsP9/3Vr6/9z978zbulk/wMAAEAPcvffEbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5/e/+/WOj/9f977/+v1/8frP8/udD/r5z+f5z+fwn9f5v9/0WLhvr/U7v+eP0/UzS19/9z978nbulk/wMAAEAPcve/N26x/wEAAKAZufvfF7fY/wAAANCM3P3vj1s62f/6f/2/9//1/97/H/587//Pk/5/nP5/Cf3/gfr//Ovx5Pp/7//r/1mbqfX/ufs/ELd0sv8BAACgB7n7Pxi32P8AAADQjNz9H4pb7H8AAABoRu7+D8ctnex//b/+X/+v/9f/D3++/n+e9P/j9P9L6P/bfP+/j/7/1EL/zwRNrf/P3f+RuKWT/Q8AAAA9yN1/Z9xi/wMAAEAzcvffFbfY/wAAANCM3P0fjVs62f/6f/2//n+e/f9J/b/+X/8/aCr9/+WX/+Xd+n/9v/5f/+/9f/1/76bW/+fu/1jc0sn+BwAAgB7k7v943GL/AwAAQDNy938ibrH/AQAAoBm5+z8Zt3Sy/3f2/5cszhWq5wz1/9Gozb7/P7Hl+0j6f/3/2S/MoP9f6P/1//r/QVPp/73/f2Hfv/5f/z/n739f/f9lO3+8/p8WTa3/z91/d9zSyf4HAACAHuTu/1TcYv8DAABAM3L3fzpusf8BAACgGbn774lbOtn/3v/X/+v/9f/6/+HP1//Pk/5/nP5/Cf2//t/7/1f/3cX6f1Znav1/7v7PxC2d7H8AAADoQe7+z8Yt9j8AAAA0I3f/5+IW+x8AAACakbv/83FLJ/tf/380/f8fxdf0//r/nvr/B8+cOaP/36T/Pxr6/3H6/3L+H9o5/fT/J4e+uO5+/qDW/f030/97/58Vmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+1/938/7/fce77f//Vv9/3ud7/1//3zL9f/4VfZj+f4l++v9B6+7n5/796//1/+w0tf4/d/+9cUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/3fT/99w7vvssf/3/r/+X//fE/3/OP3/Evp//X/7/f/x3X68/p/DMLX+P3f/fcc2utz/AAAAMFd/8+f/eO9e/733nf2/Jxdfj1uuWJzZ409jAwAAABP30O4/trFYfOPsv/Lz/wAAANCi3P3fjFs62f/6/776/z7f/9f/6//1/z3R/4/T/y+h/9f/t9//70r/z2GYWv+fu/9bccuW4bex7z9KAAAAYEpy9387bunk5/8BAACgB7n7vxO37Nj/fjlAAAAAmKvc/d+NWzr5+f919v8X6/+X9/+LQ+r/49+n/z9H/6//H/p8/f886f/HHbD/P3NM/6//H6H/1//r/znf1Pr/3P3fi1s62f8AAADQqG1/RyF3//fjFvsfAAAAmpG7/wdxi/0PAAAAzcjd/8O4pZP97/3/Q+7/H/oP2N7PZ6p+iO//n6rf8v5/5/3/jScHP1//r/9vmf5/3Irf/79W/6//32pC/f8J/b/+n2mYWv+fu/9HcUsn+x8AAAB6kLv/x3GL/Q8AAADNyN3/k7jF/gcAAIBm5O7/adzSyf7X/0/8/f8L6v/38P6//r+P/n+Xz2+n//+TS0/feeXf33qL/p9NR9n/558LHff/3v/X/28zof7f+//6fyZi9f3/xrYv7rf/z93/s7ilk/0PAAAAPcjdf3/cYv8DAABAM3L3/zxusf8BAACgGbn7fxG3dLL/9f/6/6n0//n/6zX0/6cvuP8/tVgs1tL/Z1Pce//v/X/9/07e/x+n/19C/6//1//r/1mp1ff/27+43/4/d/8v45ZO9j8AAAD0IHf/r+KW3P/H9v237gEAAICJyd3/67jFz/8DAABAM3L3/yZu6WT/6//1/1Pp/5P3/zd/XFvv/19Zceq5zz++4/tru///s/ot/f/h0v+P0/8vof/X/+v/9f+s1NT6/9z9v41bOtn/AAAA0IPc/Q/ELfY/AAAANCN3/4Nxi/0PAAAAzcjd/7u4pZP9r/9vtf/PIl7/r/+fSv/v/X/v/x8N/f84/f8S+n/9v/5f/89KTa3/z93/hwAAAP//3wFdTQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m13.059413943s ago: executing program 2 (id=974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0}, 0xc) 1m12.109505778s ago: executing program 2 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 1m11.875311491s ago: executing program 32 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 31.416669371s ago: executing program 4 (id=1664): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$eJzs3U1PE08cB/Dvb9pC+UP4r4Ax8aKiJHohoh6MlxrTq3dPRqUlIWwwAibKxUo8Go8evPsWfBFeNL4B9eLJF8BtzczObvdhui2xy1L8fhLIdHYefsM+zaypCyL6Z91rf/9485f+EaCGGoA7gALQBOoAzuJc8/n23uae3+0UNVQzNfSPIKwpuTLr211XVV3P1LA8/amOuWQelSMIgrs/qg6CKmfOfgcFTNvz0GxvHnNc45IdXA+4UFEolUn+DeQQh3iB+QrDISKiE8De/5W9TcyZLIFSwIq97U/0/T/rsOoAxuuWn8sKCivo+38QemVKi96//5tN/fWeWcLp2Z+KVomjBNPIfJ5CeGSl5mDiXlX+tEHZWNTMxmYdq+uv0VE4QMtKVFgyvzvhoRsZEu3y1CjDcLbWyIz0/n/haPSMciZbMQppY9PvTuuEI/7FYT2Om3yWr/JQPHxAJ57/1QPRu8n8XbzMnlINHf/1wS3Omlq6FOyyv9VqqVSRM6aT87YHa8gom+4VSbLN6AFBL47AEedBlDB9LyD9WCEc3ZqrA+k3vuiq5cWf8nVNX0upWjV7JKyuP/ULH6WUIxqivJMHsozf+IR2Yv6vdHwrSJyZRZd6MSXtkRGOZ8A5VTclvdydoxenLsYRWNNHHhsBR3xa9hZPcBvzuy/3t2q+392Zwv7WY53QOYnEs7kdsTmNN4CzTPmJGgrKoNfPCe9oQRDnyIBx2URQZvDXxtqgvn7EOfr0cRXWZ1mco457N01UIpr+FBauw7Wp/QVFB2Spieix+lga1BOtAZtKuUbRCbMr0U63GblJLJ1yet4l4frPzOTtrM5cZ/Qvr2CeXrzIRKrFtXgFl54KLrjmLkPWBrOOf13M93hjwJrRrLkuXwWuJDIFhT16Js5TQ9r4hkd8/k9ERERERERERERERERERERERERENGn+/lsEkMR3IS69D5tNlal6jEREREREREREREREREREREREREREREREk2709//O9N/U5Po/4s37f72h7/9NvQDYvkyJ7/8lqsafAAAA//+PBIIk") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 31.103204046s ago: executing program 4 (id=1669): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000080)='\x00\x00\x00\x00', 0x4}], 0x1) 30.962621578s ago: executing program 4 (id=1674): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000001380)={'broute\x00', 0x0, 0x0, 0x0, [0x5fa44d9d, 0x10a, 0x2, 0x4, 0x1]}, &(0x7f0000001400)=0x78) 30.84955656s ago: executing program 4 (id=1678): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f00000002c0)='./file0\x00', 0xe01, &(0x7f0000000600)={[{@gid_ignore}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x1}}, {@volume={'volume', 0x3d, 0x6}}, {@gid_ignore}]}, 0x1, 0x49c, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 30.541619355s ago: executing program 4 (id=1687): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 30.033226083s ago: executing program 4 (id=1695): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) 29.733434858s ago: executing program 33 (id=1695): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) 4.247463464s ago: executing program 1 (id=2107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000200002009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000000000000000000440008002001"], 0xfc}}, 0x0) 4.093596236s ago: executing program 1 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c0001800600060065580000100002800c0011"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) 3.981244279s ago: executing program 1 (id=2113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) 3.858727891s ago: executing program 1 (id=2117): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc1, 0x87, 0xe2, 0x20, 0x711, 0x200, 0x8b61, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x50, 0x4, "", [{{0x9, 0x4, 0x82, 0x3c, 0x0, 0x21, 0x3c, 0x30, 0x2}}]}}]}}, 0x0) 3.021292064s ago: executing program 3 (id=2134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 2.127618977s ago: executing program 3 (id=2144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f088a865e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 2.001532059s ago: executing program 3 (id=2145): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) 2.001258299s ago: executing program 1 (id=2146): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8600, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xe000003, 0x14, &(0x7f00000000c0), 0x2, 0x80000000}) 1.94329251s ago: executing program 1 (id=2147): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000340)=ANY=[], 0x1, 0x36f, &(0x7f0000000500)="$eJzs3c9rI2UYwPEnbZpOurSTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0+33A7vzJO/7zLxvfvG8hbw5fO+rjxs136rZbVkwVHIiIg9FSrIgqVx8KEiGfXn50p8Pnr924+bb5Url8rbqlfL1V7ZUdW39h08+Kybd7i/LQemDQzF+O3j64NnD/65/VPe17muz1VZbb7V+bdu3XEd36n7DUr3qOrbvaL3pO17c3orba25rd7erdnNndWXXc3xf7WZXG05X2y1te121P7TrTbUsS1dXsob7BDOmyKne2d62y1Ne8PaUeZi1f4IgOKHZ88r2oohVPNZSvfNYxwUAAObSUP3/TVojlGShV1CaybEQrQUGlwFh/Z/GUf0fLhaO6v+7L/zUvvTuvbWk/r9fyKr/X/0lzh+o/8Orz7z+/27o9vGK6NzbO03nR6r/MR/WB9+Rvx+t2BNh/R++G3or+i/ev7sRBdT/AAAAAAAAAAAAAAAAAAAAAACcBw+DwAyCwEyP6b+jrxAkt9NbJ33RGOfOqOd/OdlRoPd6wBPp2o2bYkRf3MuvibhfdqqdanxM2tOOG2LKv9HrIRFvOLEfNWqoJD+6e53qUpKwGP1fFlFxxZFNMaU0kB/FV96qXN7UWJwfXX+vU83lV8L8mtSj/C0x5ans/K3M/IK89GJfviWm/HxbWuLKTvI5luZ/vqn65juVofxi1C/L64/3KQEAAAAAYOYsVSNZPpcG17/x+t2yVLPaw7W89K/Pj/99oLe+3shcn+fN51bPdu4AAAAAAFwUfuHThu26jud3RwZFGddnOTnbUFNexpw5DPIT9BkIHkTB0kl9FvtmOOmZC8kvaEw6DM/vysRjToO/liXzwUy3cB1oMrIf1QmDdP4TdDZO+xR4/sLp5+54/no4Hp1qOn1BPpnZqD5yddozjwrSnXPHdX7m62//nu4SuWTX3v6m1+4ZY2YaBbmhe/bHvGj/CIKx41nK/rT4fpofmQEAAAAwJ9Kiv+in97xxtgMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOACmuk2aSOCs54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/+DwAA//8Pd/XF") syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) 1.759357623s ago: executing program 3 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.674011634s ago: executing program 3 (id=2152): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) 1.505665077s ago: executing program 3 (id=2157): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) 1.241553021s ago: executing program 0 (id=2163): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x891d, 0x0) 1.155972373s ago: executing program 0 (id=2166): r0 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 1.077278494s ago: executing program 6 (id=2167): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 923.368176ms ago: executing program 0 (id=2169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) 809.005938ms ago: executing program 6 (id=2171): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 743.116779ms ago: executing program 0 (id=2173): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 616.172801ms ago: executing program 6 (id=2175): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$dsp(r0, 0x0, 0x0) 528.069222ms ago: executing program 0 (id=2176): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000740)={0x9, @capture={0x1000, 0x0, {0x48000000, 0x4}, 0x6, 0x100}}) 484.656853ms ago: executing program 6 (id=2177): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='Y', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 426.223704ms ago: executing program 5 (id=2178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 390.046894ms ago: executing program 0 (id=2179): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000001c0)={[{@grpid}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") 296.807566ms ago: executing program 5 (id=2180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000111401002abd7000ffdbdf2508001000"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40854) 266.543376ms ago: executing program 6 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20094000}, 0x0) 96.740489ms ago: executing program 5 (id=2182): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c40)={0x344, 0x2, 0x4, {{0x500, 0x203, 0x3, 0x0, {0x20, 0x0, 0x200008000}, 0x2810000, 0x0, 0x0, 0x1754a22a, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x17b, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xd6{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xec\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x00g\xa3\x87\t\b\x80\'\x99\xe0\xa5\xa8\x81E\x05\xb2\x8f\xa49\x19I\x9d\x84\xf5\xa0\x99mR]\xc1\xedC\xfai:\b\xdb\xf70\xbb \x16\xf2\xd4\xcf\xaa\xd0\xb8\xe3%\x10\xf7\x7f\x90\x8a\x0f\xb4BZlC\xab\xebz\xf6\x02@@T=4\x9elRjS\xa4\x89\"\x8ddn\x97H\x9at\x9f\x9aKN\xcf?+\x9f\x8b\xabW,\t\xbf\xbf\xee\'\xb6Kie\x93\x19\x9d\xcb\x94\xb7>\x00\x00\x00\x00\x00\x9bT\xb9A\xb4\xf4B\xedE\x03\x1b\xed|\x988F\x8d\xeaS\x81\xf8\xa6\xf0\b\xb4\b\x00\xe3\x82@\x88W\f)\x88?\x04l,\xd1\x83\x16\x16\xfd_\x8b-\x0f\xf5\xb4\xac\x19\xe4\x13knn\x1bJ\x9aLM\xd8$\xf9g\xf6(\x10\xbb\xcb\x132\x9b!I\x1e0s\x93\x83\xfb\xd9\xc3\x9fu\x88\xbb\xd1\x03\xe3t{\xd7\xe5\x1b\xa0\xb0-\xf0\xd3\x1b\xf3\xcc\x06@I\xfc\x1c$\x1f\xcc\x06\xa9\x15t1\xb3\x18\xe9b\xff\xf8M\xc3WzX\xcff\x026_\xa9\x81:\xa4\x96\x8b\x13\x01\x00i\x9c\xab\x0f\x01u\xf6\xb7\xff\x9f/A\xd1~\xe8\x1d\x99[\x88Zgy\xbf\x1f\xe03\x17\xdb5\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g(\xe7\x17\xf2R\x93Z^\xcd\xe6\xf8\x87\xc0\x81\xa3\xe2\xd5\xa1)\x8dy,J7\xef${\xcda,\xac\xdd\x13Q\v\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.2\x19}\xfe\xe8\xa3h\x8b\x90`\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b', 0x0, 0x0, 0xee01}}, 0x344) 96.258919ms ago: executing program 5 (id=2183): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x3}, 0x20) 21.58774ms ago: executing program 5 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x808b}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6d6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 21.39573ms ago: executing program 6 (id=2185): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@delalloc}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 0s ago: executing program 5 (id=2186): r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000080)=""/11, 0xb) kernel console output (not intermixed with test programs): ready. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.014362][ T5571] Trying to free block not in datazone [ 105.019961][ T5571] Trying to free block not in datazone [ 105.028885][ T5571] Trying to free block not in datazone [ 105.034374][ T5571] Trying to free block not in datazone [ 105.043695][ T5571] Trying to free block not in datazone [ 105.049646][ T5571] Trying to free block not in datazone [ 105.056364][ T5571] Trying to free block not in datazone [ 105.062731][ T5571] Trying to free block not in datazone [ 105.068208][ T5571] Trying to free block not in datazone [ 105.074042][ T1110] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 105.077331][ T5571] Trying to free block not in datazone [ 105.089228][ T5571] Trying to free block not in datazone [ 105.094739][ T5571] Trying to free block not in datazone [ 105.109044][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 105.110924][ T5571] Trying to free block not in datazone [ 105.117176][ T1110] usb 1-1: Product: syz [ 105.138835][ T5571] Trying to free block not in datazone [ 105.147984][ T1110] usb 1-1: Manufacturer: syz [ 105.153592][ T5571] Trying to free block not in datazone [ 105.155039][ T1110] usb 1-1: SerialNumber: syz [ 105.168488][ T5571] Trying to free block not in datazone [ 105.184550][ T5571] Trying to free block not in datazone [ 105.198822][ T5571] Trying to free block not in datazone [ 105.204328][ T5571] Trying to free block not in datazone [ 105.218937][ T5571] Trying to free block not in datazone [ 105.224619][ T5571] Trying to free block not in datazone [ 105.232463][ T1110] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 105.241536][ T5571] Trying to free block not in datazone [ 105.252942][ T5571] Trying to free block not in datazone [ 105.259903][ T5571] Trying to free block not in datazone [ 105.265392][ T5571] Trying to free block not in datazone [ 105.275636][ T5571] Trying to free block not in datazone [ 105.298069][ T5571] Trying to free block not in datazone [ 105.309215][ T4266] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.315681][ T5571] Trying to free block not in datazone [ 105.318282][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.318305][ T4266] usb 4-1: Product: syz [ 105.318322][ T4266] usb 4-1: Manufacturer: syz [ 105.344603][ T5571] Trying to free block not in datazone [ 105.354955][ T5571] Trying to free block not in datazone [ 105.363179][ T5571] Trying to free block not in datazone [ 105.368667][ T5571] Trying to free block not in datazone [ 105.383700][ T4266] usb 4-1: SerialNumber: syz [ 105.393377][ T5571] Trying to free block not in datazone [ 105.401322][ T5571] Trying to free block not in datazone [ 105.406803][ T5571] Trying to free block not in datazone [ 105.417369][ T5571] Trying to free block not in datazone [ 105.424433][ T5571] Trying to free block not in datazone [ 105.437463][ T5571] Trying to free block not in datazone [ 105.442281][ T4266] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.449591][ T5571] Trying to free block not in datazone [ 105.456652][ T5571] Trying to free block not in datazone [ 105.473358][ T5571] Trying to free block not in datazone [ 105.484776][ T5571] Trying to free block not in datazone [ 105.499992][ T5571] Trying to free block not in datazone [ 105.505481][ T5571] Trying to free block not in datazone [ 105.511527][ T5571] Trying to free block not in datazone [ 105.517016][ T5571] Trying to free block not in datazone [ 105.523909][ T5571] Trying to free block not in datazone [ 105.529864][ T5571] Trying to free block not in datazone [ 105.540069][ T5571] Trying to free block not in datazone [ 105.546197][ T5571] Trying to free block not in datazone [ 105.553047][ T5571] Trying to free block not in datazone [ 105.558587][ T5571] Trying to free block not in datazone [ 105.564702][ T5571] Trying to free block not in datazone [ 105.570472][ T5571] Trying to free block not in datazone [ 105.576171][ T5571] Trying to free block not in datazone [ 105.583330][ T5571] Trying to free block not in datazone [ 105.589278][ T5571] Trying to free block not in datazone [ 105.594799][ T5571] Trying to free block not in datazone [ 105.601006][ T5571] Trying to free block not in datazone [ 105.606488][ T5571] Trying to free block not in datazone [ 105.612538][ T5571] Trying to free block not in datazone [ 105.618056][ T5571] Trying to free block not in datazone [ 105.624152][ T5571] Trying to free block not in datazone [ 105.629977][ T5571] Trying to free block not in datazone [ 105.635791][ T5571] Trying to free block not in datazone [ 105.648773][ T5571] Trying to free block not in datazone [ 105.654300][ T5571] Trying to free block not in datazone [ 105.666961][ T5571] Trying to free block not in datazone [ 105.669398][ T1110] vp7045: USB control message 'in' went wrong. [ 105.685039][ T5571] Trying to free block not in datazone [ 105.690918][ T1110] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 105.696472][ T5571] Trying to free block not in datazone [ 105.715183][ T5571] Trying to free block not in datazone [ 105.721292][ T5571] Trying to free block not in datazone [ 105.724321][ T1110] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 105.726839][ T5571] Trying to free block not in datazone [ 105.743262][ T5571] Trying to free block not in datazone [ 105.749011][ T5571] Trying to free block not in datazone [ 105.755080][ T5571] Trying to free block not in datazone [ 105.765252][ T5571] Trying to free block not in datazone [ 105.772995][ T5571] Trying to free block not in datazone [ 105.778614][ T1110] usb 1-1: USB disconnect, device number 7 [ 105.779634][ T5571] Trying to free block not in datazone [ 105.800462][ T5571] Trying to free block not in datazone [ 105.806167][ T5571] Trying to free block not in datazone [ 105.818046][ T5571] Trying to free block not in datazone [ 105.825357][ T5571] Trying to free block not in datazone [ 105.835324][ T5571] Trying to free block not in datazone [ 105.842180][ T5571] Trying to free block not in datazone [ 105.849411][ T5571] Trying to free block not in datazone [ 105.854932][ T5571] Trying to free block not in datazone [ 105.874931][ T5571] Trying to free block not in datazone [ 105.893881][ T5571] Trying to free block not in datazone [ 105.900714][ T5571] Trying to free block not in datazone [ 105.906219][ T5571] Trying to free block not in datazone [ 105.916668][ T5571] Trying to free block not in datazone [ 105.922975][ T5571] Trying to free block not in datazone [ 105.928475][ T5571] Trying to free block not in datazone [ 105.934921][ T5571] Trying to free block not in datazone [ 105.940680][ T5571] Trying to free block not in datazone [ 105.946240][ T5571] Trying to free block not in datazone [ 105.953227][ T5571] Trying to free block not in datazone [ 105.959141][ T5571] Trying to free block not in datazone [ 105.964628][ T5571] Trying to free block not in datazone [ 105.974019][ T5571] Trying to free block not in datazone [ 105.979952][ T5571] Trying to free block not in datazone [ 105.990202][ T5571] Trying to free block not in datazone [ 105.995871][ T5571] Trying to free block not in datazone [ 106.006664][ T5571] Trying to free block not in datazone [ 106.018472][ T5571] Trying to free block not in datazone [ 106.028006][ T5571] Trying to free block not in datazone [ 106.037971][ T5571] Trying to free block not in datazone [ 106.047160][ T5571] Trying to free block not in datazone [ 106.057439][ T5571] Trying to free block not in datazone [ 106.067365][ T5571] Trying to free block not in datazone [ 106.075341][ T5571] Trying to free block not in datazone [ 106.079562][ T4266] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.089201][ T5571] Trying to free block not in datazone [ 106.096122][ T5571] Trying to free block not in datazone [ 106.106579][ T5571] Trying to free block not in datazone [ 106.118604][ T5571] Trying to free block not in datazone [ 106.124391][ T5571] Trying to free block not in datazone [ 106.129995][ T5571] Trying to free block not in datazone [ 106.135511][ T5571] Trying to free block not in datazone [ 106.141408][ T5571] Trying to free block not in datazone [ 106.146887][ T5571] Trying to free block not in datazone [ 106.155706][ T5571] Trying to free block not in datazone [ 106.161273][ T5571] Trying to free block not in datazone [ 106.166834][ T5571] Trying to free block not in datazone [ 106.172747][ T5571] Trying to free block not in datazone [ 106.178333][ T5571] Trying to free block not in datazone [ 106.183976][ T5571] Trying to free block not in datazone [ 106.189699][ T5571] Trying to free block not in datazone [ 106.195198][ T5571] Trying to free block not in datazone [ 106.200840][ T5571] Trying to free block not in datazone [ 106.206317][ T5571] Trying to free block not in datazone [ 106.214126][ T5571] Trying to free block not in datazone [ 106.221303][ T5571] Trying to free block not in datazone [ 106.230743][ T5571] Trying to free block not in datazone [ 106.236679][ T5571] Trying to free block not in datazone [ 106.246358][ T5571] Trying to free block not in datazone [ 106.256283][ T5571] Trying to free block not in datazone [ 106.266117][ T5571] Trying to free block not in datazone [ 106.274973][ T5571] Trying to free block not in datazone [ 106.299048][ T5571] Trying to free block not in datazone [ 106.517070][ T4264] usb 4-1: USB disconnect, device number 4 [ 106.553593][ T5772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.697850][ T5782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 106.748666][ T5086] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 106.991078][ T5801] dlm: no locking on control device [ 107.034450][ T5086] usb 1-1: Using ep0 maxpacket: 16 [ 107.182146][ T5086] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.203343][ T5086] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.389043][ T4266] usb 4-1: Service connection timeout for: 256 [ 107.395268][ T4266] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 107.414906][ T5086] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 107.419680][ T4266] ath9k_htc: Failed to initialize the device [ 107.436210][ T5086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.458957][ T4264] usb 4-1: ath9k_htc: USB layer deinitialized [ 107.476372][ T5086] usb 1-1: Product: syz [ 107.491106][ T5086] usb 1-1: Manufacturer: syz [ 107.508969][ T5086] usb 1-1: SerialNumber: syz [ 107.568713][ T5833] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 107.716290][ T5842] NILFS (nullb0): couldn't find nilfs on the device [ 107.978986][ T5086] usbhid 1-1:1.0: can't add hid device: -71 [ 107.985200][ T5086] usbhid: probe of 1-1:1.0 failed with error -71 [ 107.989020][ T4264] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 108.026588][ T5086] usb 1-1: USB disconnect, device number 8 [ 108.156069][ T5864] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 108.379251][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 108.549030][ T4264] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 108.562681][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.598608][ T4264] usb 4-1: Product: syz [ 108.617524][ T4264] usb 4-1: Manufacturer: syz [ 108.633618][ T4264] usb 4-1: SerialNumber: syz [ 108.693711][ T4264] r8152-cfgselector 4-1: config 0 descriptor?? [ 108.788778][ T5086] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.852212][ T150] block nbd1: Attempted send on invalid socket [ 108.859558][ T150] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.871951][ T5899] VFS: unable to read V7 FS superblock on device nbd1. [ 108.879533][ T5899] VFS: could not find a valid V7 on nbd1. [ 109.046741][ T5905] netlink: 'syz.2.740': attribute type 21 has an invalid length. [ 109.063548][ T5905] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.123976][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 109.178967][ T4264] r8152-cfgselector 4-1: Unknown version 0x0000 [ 109.185495][ T4264] r8152-cfgselector 4-1: bad CDC descriptors [ 109.228944][ T5086] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.239946][ T4264] r8152-cfgselector 4-1: Unknown version 0x0000 [ 109.258027][ T5086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.269872][ T4264] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 109.290578][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 109.308754][ T5086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.347162][ T5086] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.538885][ T5086] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.577710][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.596555][ T5086] usb 5-1: Product: syz [ 109.604444][ T5931] loop0: detected capacity change from 0 to 64 [ 109.616464][ T5086] usb 5-1: Manufacturer: syz [ 109.681246][ T5086] cdc_wdm 5-1:1.0: skipping garbage [ 109.686517][ T5086] cdc_wdm 5-1:1.0: skipping garbage [ 109.728810][ T5086] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 109.927789][ T7] usb 5-1: USB disconnect, device number 7 [ 110.128916][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.368938][ T4264] usb 3-1: Using ep0 maxpacket: 32 [ 110.383430][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 110.489222][ T4264] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 110.519051][ T4264] usb 3-1: config 0 has no interface number 0 [ 110.529196][ T4264] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.545968][ T4264] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.558430][ T4264] usb 3-1: config 0 interface 85 has no altsetting 0 [ 110.618911][ T5088] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 110.728909][ T4264] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 110.738208][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.752899][ T4264] usb 3-1: Product: syz [ 110.757080][ T4264] usb 3-1: Manufacturer: syz [ 110.762708][ T4264] usb 3-1: SerialNumber: syz [ 110.770172][ T4264] usb 3-1: config 0 descriptor?? [ 110.808919][ T5086] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.878786][ T5082] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.008843][ T5088] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.017066][ T5088] usb 1-1: config 0 has no interface number 0 [ 111.023793][ T5088] usb 1-1: config 0 interface 41 has no altsetting 0 [ 111.118822][ T5082] usb 4-1: Using ep0 maxpacket: 32 [ 111.169495][ T5086] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 111.180115][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.189519][ T5088] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.198814][ T5086] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.212396][ T5088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.220741][ T5088] usb 1-1: Product: syz [ 111.225256][ T5088] usb 1-1: Manufacturer: syz [ 111.230465][ T5088] usb 1-1: SerialNumber: syz [ 111.237739][ T5088] usb 1-1: config 0 descriptor?? [ 111.268901][ T4264] appletouch 3-1:0.85: Failed to request geyser raw mode [ 111.280756][ T4264] appletouch: probe of 3-1:0.85 failed with error -5 [ 111.289208][ T5082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.332728][ T4264] usb 3-1: USB disconnect, device number 4 [ 111.379004][ T5082] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 111.387811][ T5082] usb 4-1: config 14 has no interface number 0 [ 111.394841][ T5082] usb 4-1: config 14 interface 228 has no altsetting 0 [ 111.402174][ T5086] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 111.411395][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.419588][ T5086] usb 5-1: Product: syz [ 111.423791][ T5086] usb 5-1: Manufacturer: syz [ 111.428432][ T5086] usb 5-1: SerialNumber: syz [ 111.436422][ T5086] usb 5-1: config 0 descriptor?? [ 111.499117][ T5088] CoreChips: probe of 1-1:0.41 failed with error -71 [ 111.514651][ T5088] usb 1-1: USB disconnect, device number 9 [ 111.600222][ T5082] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 111.609430][ T5082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.617442][ T5082] usb 4-1: Product: syz [ 111.621974][ T5082] usb 4-1: Manufacturer: syz [ 111.626602][ T5082] usb 4-1: SerialNumber: syz [ 111.718970][ T5086] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 111.725554][ T5086] usb 5-1: No valid video chain found. [ 111.741472][ T5086] usb 5-1: USB disconnect, device number 8 [ 111.955165][ T5082] legousbtower 4-1:14.228: interrupt endpoints not found [ 111.977996][ T5082] usb 4-1: USB disconnect, device number 6 [ 112.476654][ T6017] netlink: 'syz.4.796': attribute type 3 has an invalid length. [ 112.484549][ T2289] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.517461][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.796'. [ 112.598929][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.649179][ T6025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.799'. [ 112.741169][ T2289] usb 1-1: Using ep0 maxpacket: 16 [ 112.819072][ T6035] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 112.898925][ T2289] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.912164][ T6031] loop3: detected capacity change from 0 to 4096 [ 112.946854][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 112.964400][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 112.985528][ T6031] __ntfs_warning: 125 callbacks suppressed [ 112.985543][ T6031] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 113.079019][ T21] usb 2-1: device not accepting address 5, error -71 [ 113.149156][ T2289] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 113.158296][ T2289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.186364][ T6031] ntfs: (device loop3): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 113.201544][ T6031] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 113.223756][ T2289] usb 1-1: Product: syz [ 113.227978][ T2289] usb 1-1: Manufacturer: syz [ 113.236577][ T6031] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 113.269633][ T2289] usb 1-1: SerialNumber: syz [ 113.293113][ T6031] ntfs: (device loop3): read_ntfs_boot_sector(): Using backup boot sector. [ 113.370455][ T6031] ntfs: volume version 3.1. [ 113.594103][ T2289] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 113.641853][ T2289] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 113.677854][ T6073] netlink: 'syz.2.822': attribute type 3 has an invalid length. [ 113.687397][ T6073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.822'. [ 113.787714][ T2289] usb 1-1: USB disconnect, device number 10 [ 113.855168][ T6081] loop3: detected capacity change from 0 to 256 [ 114.000383][ T6087] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.100544][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.328451][ T6110] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 114.423321][ T6107] loop2: detected capacity change from 0 to 4096 [ 114.437594][ T6117] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 114.488190][ T6117] netlink: 'syz.0.844': attribute type 9 has an invalid length. [ 114.512257][ T6107] ntfs: (device loop2): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 114.645265][ T6107] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 114.726715][ T6107] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 114.786980][ T6107] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 114.820040][ T6107] ntfs: volume version 3.1. [ 114.831506][ T6107] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 115.057790][ T6145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.568610][ T6173] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 115.625229][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.872'. [ 116.043997][ T6209] loop2: detected capacity change from 0 to 2048 [ 116.127968][ T6209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.374199][ T6232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.898'. [ 116.609395][ T6247] Cannot find del_set index 4 as target [ 116.826532][ T6252] loop2: detected capacity change from 0 to 4096 [ 116.934474][ T6252] ntfs: volume version 3.1. [ 117.033866][ T6252] overlayfs: failed to resolve './bus': -2 [ 117.753897][ T6318] binder: Bad value for 'max' [ 118.171691][ T6346] AppArmor: change_hat: Invalid input '0x000000000000' [ 118.193732][ T6352] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 118.245279][ T6352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.958'. [ 118.433948][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.971796][ T7] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 118.994499][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.029125][ T7] usb 4-1: Product: syz [ 119.037324][ T6379] netlink: 144 bytes leftover after parsing attributes in process `syz.0.970'. [ 119.040141][ T7] usb 4-1: Manufacturer: syz [ 119.083106][ T7] usb 4-1: SerialNumber: syz [ 119.127442][ T6355] loop2: detected capacity change from 0 to 32768 [ 119.208533][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 119.234695][ T6385] loop0: detected capacity change from 0 to 16 [ 119.325203][ T6385] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 119.370516][ T6367] loop1: detected capacity change from 0 to 32768 [ 119.384098][ T7] go7007: probe of 4-1:6.0 failed with error -12 [ 119.426150][ T7] usb 4-1: USB disconnect, device number 7 [ 119.548581][ T6367] (syz.1.965,6367,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.632787][ T6367] (syz.1.965,6367,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.706723][ T6396] device ipvlan1 entered promiscuous mode [ 119.712855][ T6396] netlink: 5 bytes leftover after parsing attributes in process `syz.0.979'. [ 119.790330][ T6367] JBD2: Ignoring recovery information on journal [ 120.022227][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.050165][ T6367] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.236177][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.240347][ T6413] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 120.294569][ T6413] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 120.378539][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.486653][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 120.558041][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.136511][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1003'. [ 121.190946][ T5086] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.198800][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1003'. [ 121.618855][ T5086] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.638489][ T5086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.646763][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 121.656987][ T5086] usb 5-1: config 0 descriptor?? [ 121.752969][ T6430] loop3: detected capacity change from 0 to 40427 [ 121.967363][ T6430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.979072][ T5086] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 121.987865][ T5086] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 122.010552][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.050551][ T6430] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 122.064874][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.073181][ T6439] device bridge_slave_0 entered promiscuous mode [ 122.075224][ T6430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.138984][ T5086] [drm:udl_init] *ERROR* Selecting channel failed [ 122.161151][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.172895][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.192931][ T5086] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 122.207215][ T5086] [drm] Initialized udl on minor 2 [ 122.214626][ T6439] device bridge_slave_1 entered promiscuous mode [ 122.259383][ T5086] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.310400][ T5086] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 122.336999][ T5086] usb 5-1: USB disconnect, device number 9 [ 122.354663][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.364502][ T5088] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 122.400896][ T5088] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 122.410897][ T5088] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 122.479051][ T6494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.527133][ T6496] loop0: detected capacity change from 0 to 1024 [ 122.537113][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.700719][ T6439] team0: Port device team_slave_0 added [ 122.738607][ T6439] team0: Port device team_slave_1 added [ 122.852887][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.894459][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.011687][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.069321][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 123.234560][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.262989][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.338152][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.364079][ T6519] netlink: 'syz.1.1030': attribute type 13 has an invalid length. [ 123.503733][ T6439] device hsr_slave_0 entered promiscuous mode [ 123.531674][ T6439] device hsr_slave_1 entered promiscuous mode [ 123.572608][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.595522][ T6439] Cannot create hsr debugfs directory [ 123.855247][ T9] device hsr_slave_0 left promiscuous mode [ 123.887017][ T9] device hsr_slave_1 left promiscuous mode [ 123.926568][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.974650][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.023341][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.047020][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.065316][ T9] device bridge_slave_1 left promiscuous mode [ 124.083071][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.182042][ T6563] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 124.190084][ T6563] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 124.197909][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1043'. [ 124.212015][ T9] device bridge_slave_0 left promiscuous mode [ 124.218428][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.254063][ T6523] loop4: detected capacity change from 0 to 32768 [ 124.268901][ T6523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1031 (6523) [ 124.298389][ T6523] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 124.308014][ T6523] BTRFS info (device loop4): using free space tree [ 124.315084][ T6523] BTRFS info (device loop4): has skinny extents [ 124.325144][ T9] device veth1_macvtap left promiscuous mode [ 124.333854][ T9] device veth0_macvtap left promiscuous mode [ 124.341627][ T9] device veth1_vlan left promiscuous mode [ 124.453762][ T6523] BTRFS info (device loop4): enabling ssd optimizations [ 124.461833][ T5086] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.739041][ T5086] usb 4-1: Using ep0 maxpacket: 32 [ 124.879012][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.908800][ T5086] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 124.936595][ T5086] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 11 [ 124.968075][ T5086] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.983465][ T9] team0 (unregistering): Port device team_slave_1 removed [ 125.021085][ T9] team0 (unregistering): Port device team_slave_0 removed [ 125.042408][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.060333][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.069474][ T5086] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.078556][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.087774][ T5086] usb 4-1: SerialNumber: syz [ 125.119143][ T6561] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.126256][ T6561] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.148876][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 125.160153][ T5086] hub 4-1:1.0: bad descriptor, ignoring hub [ 125.166105][ T5086] hub: probe of 4-1:1.0 failed with error -5 [ 125.181530][ T5086] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 125.262021][ T9] bond0 (unregistering): Released all slaves [ 125.322655][ T6590] loop4: detected capacity change from 0 to 32768 [ 125.370336][ T6548] netlink: 'syz.0.1048': attribute type 41 has an invalid length. [ 125.390319][ T5086] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 125.477923][ T5086] usb 4-1: USB disconnect, device number 8 [ 125.480530][ T1167] read_mapping_page failed! [ 125.509292][ T1167] ERROR: (device loop4): txCommit: [ 125.509292][ T1167] [ 125.520224][ T1167] jfs_write_inode: jfs_commit_inode failed! [ 125.882668][ T6439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.961697][ T6439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.008452][ T6439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.056686][ T6439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.208841][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1055'. [ 126.445091][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.524208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.540770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.571828][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.604402][ T6636] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1062'. [ 126.648341][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.669836][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.709534][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.716651][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.789543][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.890826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.904162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.949366][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.956520][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.019243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.075698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.097101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.144221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.171975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.238240][ T6587] Bluetooth: hci4: command 0x040f tx timeout [ 127.244691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.262853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.279677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.297882][ T6611] loop3: detected capacity change from 0 to 32768 [ 127.307303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.337098][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.359689][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.397269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.425411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.460348][ T6661] cgroup: noprefix used incorrectly [ 127.722424][ T6676] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1079'. [ 127.787418][ T6673] loop4: detected capacity change from 0 to 4096 [ 127.949766][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.957285][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.967614][ T6673] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 128.019549][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.570655][ T6715] loop1: detected capacity change from 0 to 64 [ 128.901008][ T5086] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.033500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.091125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.194753][ T6439] device veth0_vlan entered promiscuous mode [ 129.199082][ T5086] usb 5-1: Using ep0 maxpacket: 8 [ 129.222746][ T6741] loop3: detected capacity change from 0 to 256 [ 129.234719][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.257325][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.290916][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.299617][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.309622][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 129.335592][ T6439] device veth1_vlan entered promiscuous mode [ 129.372901][ T5086] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.416280][ T6741] FAT-fs (loop3): Directory bread(block 64) failed [ 129.449126][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.454111][ T6741] FAT-fs (loop3): Directory bread(block 65) failed [ 129.492519][ T5086] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 129.498174][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.513868][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.519223][ T5086] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 129.529366][ T6741] FAT-fs (loop3): Directory bread(block 66) failed [ 129.549998][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.568618][ T6741] FAT-fs (loop3): Directory bread(block 67) failed [ 129.573376][ T5086] usb 5-1: config 4 has no interface number 0 [ 129.602748][ T6741] FAT-fs (loop3): Directory bread(block 68) failed [ 129.611101][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.624200][ T6741] FAT-fs (loop3): Directory bread(block 69) failed [ 129.649292][ T6439] device veth0_macvtap entered promiscuous mode [ 129.656826][ T6741] FAT-fs (loop3): Directory bread(block 70) failed [ 129.679397][ T6439] device veth1_macvtap entered promiscuous mode [ 129.696240][ T6741] FAT-fs (loop3): Directory bread(block 71) failed [ 129.709033][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 129.725079][ T6741] FAT-fs (loop3): Directory bread(block 72) failed [ 129.769317][ T6741] FAT-fs (loop3): Directory bread(block 73) failed [ 129.786902][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.825060][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.864573][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.879121][ T23] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 129.898868][ T5086] usb 5-1: string descriptor 0 read error: -22 [ 129.905168][ T5086] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 129.914202][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.914235][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.914251][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.914262][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.914277][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.925337][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.945474][ T23] usb 2-1: config 0 has no interface number 1 [ 130.050179][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.089318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.112243][ T5086] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 130.124315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.129188][ T5086] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 130.139382][ T5086] usb 5-1: No valid video chain found. [ 130.186873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.239584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.259063][ T23] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 130.285313][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.295333][ T23] usb 2-1: Product: syz [ 130.300979][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.318897][ T23] usb 2-1: Manufacturer: syz [ 130.323547][ T23] usb 2-1: SerialNumber: syz [ 130.347527][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.367388][ T23] usb 2-1: config 0 descriptor?? [ 130.387428][ T5086] usb 5-1: USB disconnect, device number 10 [ 130.403533][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.445234][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.492214][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.528707][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.574381][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.588858][ T23] viperboard 2-1:0.61: version 0.00 found at bus 002 address 007 [ 130.628628][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.667502][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.710693][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.729036][ T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 130.739610][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.765834][ T6439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.769470][ T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 130.829411][ T23] viperboard 2-1:0.0: version 0.00 found at bus 002 address 007 [ 130.847144][ T6439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.873729][ T6439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.888910][ T23] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 130.897638][ T23] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 130.922537][ T6439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.988179][ T23] usb 2-1: USB disconnect, device number 7 [ 131.068201][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 131.256498][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.265818][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.335092][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.365307][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.378495][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.419475][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.785335][ T6818] process 'syz.4.1127' launched './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.858938][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.945962][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.017016][ T6828] loop0: detected capacity change from 0 to 64 [ 132.056400][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 132.179412][ T6838] openvswitch: netlink: Missing key (keys=40, expected=80) [ 132.322068][ T6843] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1137'. [ 132.369122][ T6843] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 132.385494][ T6845] loop3: detected capacity change from 0 to 2048 [ 132.443948][ T6845] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.507605][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 132.567475][ T4263] udevd[4263]: incorrect nilfs2 checksum on /dev/loop3 [ 132.585501][ T6855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.599152][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 132.667263][ T6845] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 132.677783][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777935][ T6845] Remounting filesystem read-only [ 132.928937][ T23] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 132.948280][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.976344][ T6866] netlink: 'syz.0.1146': attribute type 2 has an invalid length. [ 133.008236][ T23] usb 2-1: Product: syz [ 133.034248][ T23] usb 2-1: Manufacturer: syz [ 133.040396][ T6866] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 133.071295][ T23] usb 2-1: SerialNumber: syz [ 133.090864][ T23] usb 2-1: config 0 descriptor?? [ 133.358885][ T23] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 133.376626][ T23] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 133.578113][ T5086] usb 2-1: USB disconnect, device number 8 [ 134.331284][ T6936] loop3: detected capacity change from 0 to 2048 [ 134.338104][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 134.382230][ T6936] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 134.403960][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 134.451929][ T6936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.464147][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 134.690267][ T6958] netlink: 'syz.5.1183': attribute type 1 has an invalid length. [ 134.720394][ T6958] netlink: 'syz.5.1183': attribute type 2 has an invalid length. [ 134.760668][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 134.769911][ T6961] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 135.086036][ T6979] device netdevsim0 entered promiscuous mode [ 135.221900][ T6990] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1197'. [ 135.241477][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 135.298971][ T6990] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1197'. [ 135.995877][ T7040] loop5: detected capacity change from 0 to 512 [ 136.071567][ T7046] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 136.128589][ T7050] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.147490][ T7040] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1217: bad orphan inode 13 [ 136.193940][ T7046] netlink: 'syz.1.1220': attribute type 2 has an invalid length. [ 136.222434][ T7040] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 136.349389][ T7040] EXT4-fs error (device loop5): __ext4_new_inode:1082: comm syz.5.1217: reserved inode found cleared - inode=18 [ 136.570626][ T7064] netlink: 'syz.4.1225': attribute type 2 has an invalid length. [ 136.718846][ T7064] netlink: 'syz.4.1225': attribute type 5 has an invalid length. [ 136.891704][ T7075] loop3: detected capacity change from 0 to 2048 [ 136.971682][ T7075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.212753][ T7083] loop1: detected capacity change from 0 to 4096 [ 137.312443][ T7094] loop3: detected capacity change from 0 to 512 [ 137.345581][ T7083] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 137.358793][ T23] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 137.397185][ T7094] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.491456][ T7094] __quota_error: 16 callbacks suppressed [ 137.491473][ T7094] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 137.635415][ T7094] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 137.692804][ T7094] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1239: Failed to acquire dquot type 1 [ 137.796281][ T7094] EXT4-fs (loop3): 1 truncate cleaned up [ 137.816874][ T7094] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.828500][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.889959][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 137.938410][ T7094] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 137.982283][ T7119] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 138.003112][ T7119] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 138.032341][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.042940][ T7094] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 138.054294][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.063943][ T7094] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1239: Failed to acquire dquot type 1 [ 138.109198][ T7121] xt_l2tp: invalid flags combination: c [ 138.238919][ T23] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 138.248019][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.294266][ T7130] loop4: detected capacity change from 0 to 128 [ 138.301192][ T23] usb 1-1: Product: syz [ 138.310374][ T23] usb 1-1: Manufacturer: syz [ 138.342399][ T23] usb 1-1: SerialNumber: syz [ 138.376933][ T7136] __nla_validate_parse: 2 callbacks suppressed [ 138.376951][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'. [ 138.491411][ T7130] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.504429][ T7143] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.536723][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'. [ 138.574449][ T7130] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.670717][ T7130] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1254: No space for directory leaf checksum. Please run e2fsck -D. [ 138.728891][ T23] usb 1-1: cannot find UAC_HEADER [ 138.739387][ T7130] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1254: checksumming directory block 0 [ 138.800177][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 138.835897][ T23] usb 1-1: USB disconnect, device number 11 [ 138.881982][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.241262][ T7173] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 139.251640][ T4266] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 139.293754][ T7173] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 139.390198][ T7173] overlayfs: missing 'lowerdir' [ 139.629084][ T4266] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 139.656740][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.673420][ T4266] usb 2-1: config 0 has no interface number 0 [ 139.759079][ T4264] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.839140][ T4266] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 139.861526][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.886002][ T4266] usb 2-1: Product: syz [ 139.894940][ T4266] usb 2-1: Manufacturer: syz [ 139.908743][ T4266] usb 2-1: SerialNumber: syz [ 139.920465][ T4266] usb 2-1: config 0 descriptor?? [ 139.976682][ T4266] hub 2-1:0.31: bad descriptor, ignoring hub [ 139.988000][ T4266] hub: probe of 2-1:0.31 failed with error -5 [ 140.009546][ T4266] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 140.018238][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1293'. [ 140.029785][ T4266] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 140.039539][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1293'. [ 140.050214][ T4266] usb 2-1: Failed to create links for entity 6 [ 140.056432][ T4266] usb 2-1: Failed to register entities (-22). [ 140.091712][ T7216] loop4: detected capacity change from 0 to 164 [ 140.139051][ T4264] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.161332][ T4264] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.215730][ T4264] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.245497][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.278285][ T4266] usb 2-1: USB disconnect, device number 9 [ 140.284725][ T7216] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 140.313652][ T7188] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.675132][ T4264] usb 1-1: USB disconnect, device number 12 [ 140.793430][ T7239] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1306'. [ 141.561994][ T7282] comedi: No check for data length of config insn id 6025 is implemented [ 141.589088][ T7286] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1328'. [ 141.598985][ T7282] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 141.610917][ T7288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.653234][ T7282] comedi: Assuming n=15 is correct [ 141.934319][ T7301] loop0: detected capacity change from 0 to 1024 [ 141.962304][ T7305] loop1: detected capacity change from 0 to 512 [ 142.120017][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.1346: corrupted inode contents [ 142.175323][ T7305] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.1346: mark_inode_dirty error [ 142.268409][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.1346: corrupted inode contents [ 142.305524][ T7330] loop0: detected capacity change from 0 to 64 [ 142.317952][ T7305] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1346: mark_inode_dirty error [ 142.388826][ T7305] Quota error (device loop1): write_blk: dquota write failed [ 142.429601][ T7330] MINIX-fs: mounting file system with errors, running fsck is recommended [ 142.439109][ T7305] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 142.484164][ T7305] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1346: Failed to acquire dquot type 0 [ 142.539042][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1346: corrupted inode contents [ 142.581459][ T7305] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.1346: mark_inode_dirty error [ 142.622920][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1346: corrupted inode contents [ 142.711528][ T7305] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.1346: mark_inode_dirty error [ 142.795190][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1346: corrupted inode contents [ 142.847794][ T7305] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 142.882103][ T7305] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1346: corrupted inode contents [ 142.900921][ T7305] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.1346: mark_inode_dirty error [ 142.937387][ T7305] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 142.967347][ T7305] EXT4-fs (loop1): 1 truncate cleaned up [ 142.978753][ T7305] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 143.052643][ T7305] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.113296][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.197306][ T7367] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1363'. [ 143.388967][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 143.549493][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.648965][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 143.661605][ T7389] netlink: 'syz.0.1375': attribute type 2 has an invalid length. [ 143.672021][ T7391] netlink: 'syz.5.1374': attribute type 1 has an invalid length. [ 143.680690][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 143.699103][ T7391] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1374'. [ 143.708301][ T7391] block nbd0: not configured, cannot reconfigure [ 143.859917][ T7393] loop4: detected capacity change from 0 to 4096 [ 143.879932][ T23] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 143.904626][ T7393] ntfs3: loop4: Failed to load $Volume. [ 143.908895][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.949278][ T23] usb 4-1: Product: syz [ 143.953509][ T23] usb 4-1: Manufacturer: syz [ 143.958134][ T23] usb 4-1: SerialNumber: syz [ 143.963838][ T7404] QAT: failed to copy from user. [ 144.019106][ T7353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.056926][ T7408] SET target dimension over the limit! [ 144.065776][ T7410] loop1: detected capacity change from 0 to 128 [ 144.104824][ T7410] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 144.269145][ T5086] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.384899][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 144.424245][ T23] usb 4-1: MIDIStreaming interface descriptor not found [ 144.502083][ T23] usb 4-1: USB disconnect, device number 9 [ 144.552411][ T5086] usb 6-1: Using ep0 maxpacket: 8 [ 144.583712][ T7433] x_tables: duplicate entry at hook 2 [ 144.669560][ T5086] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 144.680302][ T5086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.692454][ T5086] usb 6-1: config 0 descriptor?? [ 144.752413][ T5086] usb 6-1: Found UVC 0.00 device (2801:0201) [ 144.770477][ T5086] usb 6-1: No valid video chain found. [ 144.830567][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.917694][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 144.964887][ T23] usb 6-1: USB disconnect, device number 2 [ 145.009013][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.063397][ T263] block nbd3: Attempted send on invalid socket [ 145.070638][ T263] blk_update_request: I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.083577][ T7449] VFS: unable to read V7 FS superblock on device nbd3. [ 145.106997][ T7450] loop4: detected capacity change from 0 to 2048 [ 145.119516][ T7449] VFS: could not find a valid V7 on nbd3. [ 145.202456][ T7450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.293031][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 145.469501][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.569200][ T21] usb 1-1: config 14 has an invalid interface number: 228 but max is 0 [ 145.577641][ T21] usb 1-1: config 14 has no interface number 0 [ 145.610964][ T21] usb 1-1: config 14 interface 228 has no altsetting 0 [ 145.687354][ T7475] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 145.796797][ T7482] loop3: detected capacity change from 0 to 16 [ 145.848987][ T21] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 145.868394][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.895031][ T7482] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 145.902724][ T21] usb 1-1: Product: syz [ 145.906938][ T21] usb 1-1: Manufacturer: syz [ 145.918514][ T21] usb 1-1: SerialNumber: syz [ 145.927015][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 145.993455][ T7491] cgroup: noprefix used incorrectly [ 146.025514][ T7494] 8021q: VLANs not supported on lo [ 146.248602][ T7507] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1427'. [ 146.275475][ T21] legousbtower 1-1:14.228: interrupt endpoints not found [ 146.284862][ T21] usb 1-1: USB disconnect, device number 13 [ 146.371143][ T7516] netlink: 'syz.4.1431': attribute type 3 has an invalid length. [ 146.468758][ T7516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1431'. [ 146.878574][ T7547] loop0: detected capacity change from 0 to 128 [ 146.947005][ T7547] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.055894][ T7547] hpfs: filesystem error: improperly stopped [ 147.098933][ T7547] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.120576][ T7547] hpfs: You really don't want any checks? You are crazy... [ 147.160692][ T7547] hpfs: hpfs_map_sector(): read error [ 147.166121][ T7547] hpfs: code page support is disabled [ 147.189632][ T7547] hpfs: hpfs_map_4sectors(): unaligned read [ 147.206282][ T7547] hpfs: hpfs_map_4sectors(): unaligned read [ 147.216175][ T7547] hpfs: filesystem error: unable to find root dir [ 147.274409][ T7547] hpfs: hpfs_map_4sectors(): unaligned read [ 147.309298][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.368301][ T7573] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.468997][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.545067][ T7581] loop0: detected capacity change from 0 to 512 [ 147.568898][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 147.599294][ T7586] libceph: resolve '0..' (ret=-3): failed [ 147.714131][ T7581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.729092][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 147.796400][ T7581] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.908988][ T5086] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 147.979271][ T21] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 147.998617][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.017558][ T21] usb 6-1: Product: syz [ 148.022366][ T21] usb 6-1: Manufacturer: syz [ 148.027009][ T21] usb 6-1: SerialNumber: syz [ 148.039298][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.055758][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.097366][ T23] usb 4-1: Product: syz [ 148.102170][ T23] usb 4-1: Manufacturer: syz [ 148.115185][ T23] usb 4-1: SerialNumber: syz [ 148.129655][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 148.361521][ T5086] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 148.378753][ T5086] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 148.395014][ T21] usb 6-1: failed waiting for Axe-Fx III to boot: -71 [ 148.402826][ T21] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 148.437661][ T21] usb 6-1: USB disconnect, device number 3 [ 148.508413][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 148.629020][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 148.635715][ T23] r8152-cfgselector 4-1: bad CDC descriptors [ 148.679176][ T5086] usb 5-1: string descriptor 0 read error: -22 [ 148.685475][ T5086] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 148.698520][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.706332][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 148.730206][ T23] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 148.752230][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.753799][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.806732][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.842110][ T5086] usb 5-1: low speed audio streaming not supported [ 148.867965][ T5086] usb 5-1: low speed audio streaming not supported [ 148.913694][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 149.082756][ T4264] usb 5-1: USB disconnect, device number 11 [ 149.211751][ T7657] loop1: detected capacity change from 0 to 1024 [ 149.459054][ T7670] QAT: Stopping all acceleration devices. [ 149.524144][ T144] hfsplus: b-tree write err: -5, ino 8 [ 149.588926][ T7676] loop0: detected capacity change from 0 to 128 [ 149.772810][ T7676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.835092][ T7676] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.854811][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.903030][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 149.945880][ T7676] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.1490: No space for directory leaf checksum. Please run e2fsck -D. [ 149.965394][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.980194][ T7676] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.1490: checksumming directory block 0 [ 150.001054][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.320070][ T7703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.361521][ T7709] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1499'. [ 150.428513][ T7709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.616293][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1505'. [ 151.000117][ T7750] loop0: detected capacity change from 0 to 8 [ 151.011360][ T7748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.117733][ T7754] netlink: 'syz.5.1518': attribute type 3 has an invalid length. [ 151.186678][ T7750] cramfs: bad data blocksize 3959421443 [ 151.192963][ T7750] cramfs: bad data blocksize 4294965915 [ 151.218951][ T7750] cramfs: bad data blocksize 802397048 [ 151.238638][ T7750] cramfs: bad data blocksize 4294742353 [ 151.273611][ T7750] cramfs: bad data blocksize 3367320904 [ 151.298919][ T7750] cramfs: bad data blocksize 859179931 [ 151.322816][ T7750] cramfs: bad data blocksize 3436389781 [ 151.362364][ T7750] cramfs: bad data blocksize 4294365136 [ 151.382699][ T7750] cramfs: bad data blocksize 4294967040 [ 151.418852][ T7750] cramfs: bad data blocksize 3959421443 [ 151.432242][ T26] audit: type=1800 audit(1782302749.096:138): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1517" name="file2" dev="loop0" ino=268 res=0 errno=0 [ 151.456145][ T7765] loop1: detected capacity change from 0 to 8192 [ 151.618926][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.627013][ T7765] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 151.658584][ T7765] REISERFS (device loop1): using ordered data mode [ 151.665914][ T7765] reiserfs: using flush barriers [ 151.672683][ T7765] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.700874][ T7765] REISERFS (device loop1): checking transaction log (loop1) [ 151.919097][ T21] usb 6-1: too many configurations: 171, using maximum allowed: 8 [ 152.106695][ T7765] REISERFS (device loop1): Using tea hash to sort names [ 152.153969][ T7765] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 152.741335][ T7821] openvswitch: netlink: Missing key (keys=40, expected=100) [ 152.788912][ T21] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.802060][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.842386][ T21] usb 6-1: Product: syz [ 152.860198][ T21] usb 6-1: Manufacturer: syz [ 152.878787][ T21] usb 6-1: SerialNumber: syz [ 152.904416][ T7786] loop3: detected capacity change from 0 to 32768 [ 152.949686][ T21] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.109258][ T7837] loop0: detected capacity change from 0 to 64 [ 153.115736][ T7786] XFS (loop3): Mounting V5 Filesystem [ 153.280846][ T7786] XFS (loop3): Ending clean mount [ 153.345139][ T7786] XFS (loop3): Quotacheck needed: Please wait. [ 153.382869][ T7809] loop4: detected capacity change from 0 to 32768 [ 153.442630][ T7809] ERROR: (device loop4): diAllocAG: numfree > numinos [ 153.442630][ T7809] [ 153.506845][ T7809] ERROR: (device loop4): remounting filesystem as read-only [ 153.555681][ T7786] XFS (loop3): Quotacheck: Done. [ 153.578770][ T7809] ialloc: diAlloc returned -5! [ 153.588892][ T21] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.720008][ T4193] XFS (loop3): Unmounting Filesystem [ 153.916964][ T7869] loop0: detected capacity change from 0 to 64 [ 154.065874][ T4264] usb 6-1: USB disconnect, device number 4 [ 154.672675][ T21] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 154.700205][ T21] ath9k_htc: Failed to initialize the device [ 154.706714][ T4264] usb 6-1: ath9k_htc: USB layer deinitialized [ 154.777544][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 155.257795][ T26] audit: type=1326 audit(1782302752.916:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.1582" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6e64ce59 code=0x7ffc0000 [ 155.362038][ T26] audit: type=1326 audit(1782302752.976:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.1582" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6e6e64ce59 code=0x7ffc0000 [ 155.477202][ T26] audit: type=1326 audit(1782302752.976:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.1582" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6e64ce59 code=0x7ffc0000 [ 155.852715][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.886914][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.907560][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.360318][ T7992] SET target dimension over the limit! [ 156.368572][ T7993] netlink: 'syz.3.1605': attribute type 21 has an invalid length. [ 156.383551][ T7936] loop5: detected capacity change from 0 to 32768 [ 156.403134][ T7993] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1605'. [ 156.423144][ T7993] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 156.470474][ T7993] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1605'. [ 156.624540][ T8003] loop3: detected capacity change from 0 to 512 [ 156.791809][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.851298][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.871004][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #3: comm syz.3.1610: corrupted inode contents [ 156.903229][ T8014] overlayfs: missing 'lowerdir' [ 156.932672][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.962392][ T8016] loop5: detected capacity change from 0 to 512 [ 156.985205][ T8003] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #3: comm syz.3.1610: mark_inode_dirty error [ 156.997928][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 157.017593][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #3: comm syz.3.1610: corrupted inode contents [ 157.032514][ T8003] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1610: mark_inode_dirty error [ 157.081428][ T8003] Quota error (device loop3): write_blk: dquota write failed [ 157.122299][ T8016] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1609: ea_inode with extended attributes [ 157.142513][ T8003] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 157.153550][ T8003] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1610: Failed to acquire dquot type 0 [ 157.173248][ T8016] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1609: error while reading EA inode 11 err=-117 [ 157.189489][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.1610: corrupted inode contents [ 157.214504][ T8016] EXT4-fs (loop5): 1 orphan inode deleted [ 157.229508][ T8003] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.1610: mark_inode_dirty error [ 157.241707][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.1610: corrupted inode contents [ 157.255173][ T8003] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1610: mark_inode_dirty error [ 157.267593][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.1610: corrupted inode contents [ 157.284760][ T8016] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000004c,noload,delalloc,grpjquota=,bsdgroups,,errors=continue. Quota mode: none. [ 157.330306][ T8003] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 157.345071][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.1610: corrupted inode contents [ 157.405020][ T8003] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.1610: mark_inode_dirty error [ 157.452826][ T7997] loop4: detected capacity change from 0 to 32768 [ 157.456304][ T8003] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 157.498054][ T8003] EXT4-fs (loop3): 1 truncate cleaned up [ 157.525520][ T8003] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 157.549801][ T7997] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 157.578846][ T7997] BTRFS info (device loop4): setting nodatasum [ 157.585252][ T7997] BTRFS info (device loop4): force zlib compression, level 3 [ 157.598933][ T8003] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.616503][ T8025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.659324][ T7997] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 157.717508][ T7997] BTRFS info (device loop4): use lzo compression, level 0 [ 157.778207][ T7997] BTRFS info (device loop4): turning on flush-on-commit [ 157.808776][ T7997] BTRFS info (device loop4): enabling auto defrag [ 157.815310][ T7997] BTRFS info (device loop4): max_inline at 4096 [ 157.876487][ T7997] BTRFS info (device loop4): using free space tree [ 157.917745][ T7997] BTRFS info (device loop4): has skinny extents [ 158.097240][ T8050] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.304590][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.314471][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.326319][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.351311][ T8071] device bridge_slave_0 left promiscuous mode [ 158.358761][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.419859][ T7997] BTRFS info (device loop4): enabling ssd optimizations [ 158.447463][ T8071] device bridge_slave_1 left promiscuous mode [ 158.455382][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.505459][ T8071] bond0: (slave bond_slave_0): Releasing backup interface [ 158.518181][ T8081] loop0: detected capacity change from 0 to 512 [ 158.573675][ T8071] bond0: (slave bond_slave_1): Releasing backup interface [ 158.631209][ T8083] loop3: detected capacity change from 0 to 1024 [ 158.667710][ T8081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.694573][ T8081] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.212938][ T8071] team0: Port device team_slave_0 removed [ 159.971101][ T8071] team0: Port device team_slave_1 removed [ 159.994105][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.002208][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.013716][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.023104][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.065607][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 160.081974][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1638'. [ 160.348068][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.451682][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.491690][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.774179][ T8133] loop0: detected capacity change from 0 to 4096 [ 160.875212][ T8133] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 160.932566][ T8133] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 160.981617][ T8146] smb3: Bad value for 'uid' [ 161.005401][ T8133] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 161.027794][ T8149] loop4: detected capacity change from 0 to 64 [ 161.119537][ T8133] ntfs: volume version 3.1. [ 161.260964][ T4188] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 161.506504][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1675'. [ 161.541231][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1675'. [ 161.568322][ T8175] loop4: detected capacity change from 0 to 128 [ 161.663396][ T8175] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 161.695221][ T8175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.804948][ T8192] netlink: 'syz.0.1686': attribute type 3 has an invalid length. [ 161.833432][ T8192] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 161.874765][ T4192] UDF-fs: error (device loop4): udf_read_inode: (ino 124) failed !bh [ 161.884468][ T4192] UDF-fs: error (device loop4): udf_read_inode: (ino 124) failed !bh [ 161.908806][ T4264] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 162.083246][ T8199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1691'. [ 162.125367][ T8199] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1691'. [ 162.155294][ T8199] netlink: 'syz.3.1691': attribute type 6 has an invalid length. [ 162.186883][ T8199] netlink: 'syz.3.1691': attribute type 5 has an invalid length. [ 162.220051][ T8199] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1691'. [ 162.279412][ T4264] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.328334][ T4264] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.353669][ T4248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.366162][ T4264] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.405710][ T8209] loop0: detected capacity change from 0 to 256 [ 162.479785][ T8209] exfat: Deprecated parameter 'utf8' [ 162.496180][ T4248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.517394][ T8209] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 162.589230][ T4264] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.608044][ T4264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.631364][ T4264] usb 6-1: Product: syz [ 162.635588][ T4264] usb 6-1: Manufacturer: syz [ 162.678048][ T4264] usb 6-1: SerialNumber: syz [ 162.711011][ T4248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.773431][ T4264] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 162.802139][ T4264] cdc_ncm 6-1:1.0: bind() failure [ 162.870315][ T4248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.977976][ T8093] usb 6-1: USB disconnect, device number 5 [ 163.515504][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 163.584910][ T8258] loop1: detected capacity change from 0 to 256 [ 163.744546][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 163.751288][ T8258] exfat: Deprecated parameter 'namecase' [ 163.759807][ T8258] exfat: Deprecated parameter 'namecase' [ 163.821743][ T8258] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 163.917552][ T8258] exFAT-fs (loop1): invalid start cluster (4278190088) [ 163.930283][ T8279] loop3: detected capacity change from 0 to 128 [ 163.952622][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 164.022785][ T8279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 164.090129][ T8279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.514619][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.548858][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.580375][ T8229] device bridge_slave_0 entered promiscuous mode [ 164.640761][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.677583][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.707252][ T8229] device bridge_slave_1 entered promiscuous mode [ 164.780106][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1735'. [ 164.805847][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1735'. [ 164.892665][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.923366][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.994087][ T8322] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 165.035596][ T8229] team0: Port device team_slave_0 added [ 165.088404][ T4248] device hsr_slave_0 left promiscuous mode [ 165.105346][ T4248] device hsr_slave_1 left promiscuous mode [ 165.127972][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.166825][ T8093] Bluetooth: hci2: command 0x0409 tx timeout [ 165.176981][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.200681][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.234694][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.237128][ C0] sd 0:0:1:0: tag#5227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 165.252032][ C0] sd 0:0:1:0: tag#5227 CDB: opcode=0x2 [ 165.257537][ C0] sd 0:0:1:0: tag#5227 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 165.266675][ C0] sd 0:0:1:0: tag#5227 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 165.275799][ C0] sd 0:0:1:0: tag#5227 CDB[20]: 47 [ 165.282254][ T4248] device bridge_slave_1 left promiscuous mode [ 165.289784][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.307662][ T4248] device bridge_slave_0 left promiscuous mode [ 165.325242][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.361922][ T4248] device veth1_macvtap left promiscuous mode [ 165.384215][ T4248] device veth0_macvtap left promiscuous mode [ 165.399364][ T4248] device veth1_vlan left promiscuous mode [ 165.410892][ T4248] device veth0_vlan left promiscuous mode [ 165.474617][ T8312] loop5: detected capacity change from 0 to 32768 [ 165.501045][ T8312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1737 (8312) [ 165.562992][ T8312] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 165.596425][ T8312] BTRFS info (device loop5): setting nodatasum [ 165.618750][ T8312] BTRFS info (device loop5): force zlib compression, level 3 [ 165.642715][ T8312] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.667377][ T8312] BTRFS info (device loop5): use lzo compression, level 0 [ 165.696311][ T8312] BTRFS info (device loop5): turning on flush-on-commit [ 165.720133][ T8312] BTRFS info (device loop5): enabling auto defrag [ 165.741612][ T8312] BTRFS info (device loop5): max_inline at 4096 [ 165.766734][ T8312] BTRFS info (device loop5): using free space tree [ 165.794578][ T8312] BTRFS info (device loop5): has skinny extents [ 165.986246][ T8334] loop1: detected capacity change from 0 to 32768 [ 166.012313][ T8312] BTRFS info (device loop5): enabling ssd optimizations [ 166.114540][ T8334] XFS (loop1): Mounting V5 Filesystem [ 166.164761][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 166.182996][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 166.221758][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.296552][ T4289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4289) [ 166.370716][ T8334] XFS (loop1): Ending clean mount [ 166.498733][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.512621][ T8334] XFS (loop1): Quotacheck needed: Please wait. [ 166.642369][ T4248] bond0 (unregistering): Released all slaves [ 166.644179][ T8334] XFS (loop1): Quotacheck: Done. [ 166.760063][ T8229] team0: Port device team_slave_1 added [ 166.787148][ T8324] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 166.814086][ T4194] XFS (loop1): Unmounting Filesystem [ 166.829562][ T8364] netlink: 'syz.5.1749': attribute type 10 has an invalid length. [ 166.859653][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1749'. [ 166.904584][ T8364] device team0 entered promiscuous mode [ 166.925041][ T8364] device team_slave_0 entered promiscuous mode [ 166.931941][ T8364] device team_slave_1 entered promiscuous mode [ 166.939559][ T8366] sctp: [Deprecated]: syz.3.1751 (pid 8366) Use of int in max_burst socket option deprecated. [ 166.939559][ T8366] Use struct sctp_assoc_value instead [ 166.984942][ T8364] bridge0: port 3(team0) entered blocking state [ 167.007761][ T8364] bridge0: port 3(team0) entered disabled state [ 167.030980][ T8364] bridge0: port 3(team0) entered blocking state [ 167.037319][ T8364] bridge0: port 3(team0) entered forwarding state [ 167.064615][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.119465][ T8368] loop0: detected capacity change from 0 to 8192 [ 167.120789][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.151761][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.219069][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.230081][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 167.250600][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.257599][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.283551][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.301715][ T8368] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 167.335486][ T8368] REISERFS (device loop0): using ordered data mode [ 167.362917][ T8368] reiserfs: using flush barriers [ 167.421602][ T8368] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.448783][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.465713][ T8373] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 167.496101][ T8373] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 167.549368][ T8368] REISERFS (device loop0): checking transaction log (loop0) [ 167.559202][ T8373] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 167.657039][ T8229] device hsr_slave_0 entered promiscuous mode [ 167.695379][ T8229] device hsr_slave_1 entered promiscuous mode [ 167.898589][ T8368] REISERFS (device loop0): Using tea hash to sort names [ 167.909629][ T8368] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.965872][ T8391] loop1: detected capacity change from 0 to 1024 [ 168.090397][ T8395] mmap: syz.3.1761 (8395) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 168.391958][ T8403] loop5: detected capacity change from 0 to 2048 [ 168.418413][ T8229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.442464][ T8229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.498478][ T8410] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.529731][ T8229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.586550][ T8229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.087856][ T8433] loop0: detected capacity change from 0 to 64 [ 169.127020][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.182021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.190957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.233589][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.269910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.290253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.308891][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 169.318010][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.325288][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.381676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.414558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.443720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.479305][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.486468][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.514838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.549290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.590027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.631724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.648951][ T8444] loop5: detected capacity change from 0 to 8192 [ 169.670188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.729895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.749554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.785710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.796410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.828364][ T8229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.850582][ T8229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.871480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.881031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.096345][ T8444] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 170.148841][ T8444] REISERFS (device loop5): using ordered data mode [ 170.237372][ T8444] reiserfs: using flush barriers [ 170.257312][ T8466] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 170.271919][ T8444] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.339841][ T8444] REISERFS (device loop5): checking transaction log (loop5) [ 170.401296][ T8444] REISERFS (device loop5): Using tea hash to sort names [ 170.408912][ T8466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.450046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.514993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.522612][ T8474] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1785'. [ 170.574551][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.629008][ T8474] unsupported nla_type 65024 [ 170.859534][ T8484] device vlan0 entered promiscuous mode [ 170.894070][ T8487] netlink: set zone limit has 8 unknown bytes [ 171.323122][ T8510] netlink: 'syz.1.1797': attribute type 6 has an invalid length. [ 171.390051][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 171.440578][ T8516] loop3: detected capacity change from 0 to 256 [ 171.549293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.560925][ T8516] exfat: Deprecated parameter 'utf8' [ 171.566312][ T8516] exfat: Deprecated parameter 'namecase' [ 171.591396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.636350][ T8516] exfat: Deprecated parameter 'namecase' [ 171.681383][ T8516] exfat: Deprecated parameter 'utf8' [ 171.690687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.707904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.733224][ T8531] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1805'. [ 171.756597][ T8516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 171.806167][ T8229] device veth0_vlan entered promiscuous mode [ 171.824214][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.848091][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.914733][ T8229] device veth1_vlan entered promiscuous mode [ 171.946208][ T26] audit: type=1800 audit(1782302769.606:142): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1799" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 172.031519][ T8540] tmpfs: Bad value for 'mpol' [ 172.101061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.129408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.161875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.224865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.281474][ T8229] device veth0_macvtap entered promiscuous mode [ 172.321054][ T8229] device veth1_macvtap entered promiscuous mode [ 172.406903][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.478815][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.520130][ T8565] tmpfs: Bad value for 'mpol' [ 172.528767][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.568910][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.612995][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.648781][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.686540][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.714320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.755959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.793096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.828477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.871147][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.917502][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.949997][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.978209][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.028727][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.065369][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.095983][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.139479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.200255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.276771][ T8598] loop1: detected capacity change from 0 to 2048 [ 173.290030][ T8229] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.325479][ T8598] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 173.346720][ T8229] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.385176][ T8229] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.410536][ T8598] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 173.427187][ T8229] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.453603][ T8598] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 173.488849][ T8598] UDF-fs: Scanning with blocksize 512 failed [ 173.585632][ T8598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.695237][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.714450][ T8612] loop5: detected capacity change from 0 to 256 [ 173.732404][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.764041][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.817350][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.843328][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.889906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.956366][ T8613] loop3: detected capacity change from 0 to 4096 [ 173.959395][ T4264] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 174.201809][ T8613] ntfs: (device loop3): parse_options(): NLS character set is not found. Using previous one default. [ 174.228802][ T8613] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 174.239147][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 174.388868][ T8613] ntfs: volume version 3.1. [ 174.410549][ T8632] loop6: detected capacity change from 0 to 1024 [ 174.519064][ T4264] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 174.538430][ T8632] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 174.558800][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.566856][ T4264] usb 1-1: Product: syz [ 174.588828][ T4264] usb 1-1: Manufacturer: syz [ 174.593599][ T4264] usb 1-1: SerialNumber: syz [ 174.629750][ T4264] usb 1-1: config 0 descriptor?? [ 174.665938][ T8632] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,barrier,nomblk_io_submit,journal_dev=0x0000000000000004,nombcache,noquota,,errors=continue. Quota mode: none. [ 174.674928][ T4264] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 174.693283][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.139131][ T4264] ssu100: probe of 1-1:0.0 failed with error -71 [ 175.186928][ T4264] usb 1-1: USB disconnect, device number 14 [ 175.729253][ T8700] dlm: dev_write: no op 0 74000000000000 [ 175.793175][ T8703] device sit0 entered promiscuous mode [ 175.842336][ T8703] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 175.954264][ T8703] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1870'. [ 176.228749][ T4264] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 176.469979][ T4264] usb 7-1: Using ep0 maxpacket: 16 [ 176.582419][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1885'. [ 176.599011][ T4264] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.635164][ T4264] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.655809][ T8743] netlink: 'syz.0.1887': attribute type 3 has an invalid length. [ 176.728751][ T8743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1887'. [ 176.765006][ T4264] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 176.779351][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.806343][ T8708] loop3: detected capacity change from 0 to 32768 [ 176.818781][ T4264] usb 7-1: SerialNumber: syz [ 176.872522][ T4264] usb 7-1: 0:2 : does not exist [ 177.094705][ T21] usb 7-1: USB disconnect, device number 2 [ 177.283937][ T8778] netlink: 'syz.3.1899': attribute type 3 has an invalid length. [ 177.318945][ T8778] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 177.337943][ T8782] loop1: detected capacity change from 0 to 512 [ 177.360091][ T8783] xt_hashlimit: size too large, truncated to 1048576 [ 177.400578][ T4289] udevd[4289]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.531687][ T8782] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.1900: invalid block [ 177.620807][ T8782] EXT4-fs (loop1): Remounting filesystem read-only [ 177.695627][ T8782] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1900: invalid indirect mapped block 1024 (level 0) [ 177.809392][ T8782] EXT4-fs (loop1): Remounting filesystem read-only [ 177.816058][ T8782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1900: bg 0: block 35: padding at end of block bitmap is not set [ 177.870648][ T8782] EXT4-fs (loop1): Remounting filesystem read-only [ 177.917799][ T8782] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 177.968813][ T8782] EXT4-fs (loop1): Remounting filesystem read-only [ 177.975549][ T8782] EXT4-fs (loop1): 1 truncate cleaned up [ 178.006458][ T8782] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nombcache,bsddf,. Quota mode: none. [ 178.114017][ T8817] loop5: detected capacity change from 0 to 2048 [ 178.238870][ T8828] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.292884][ T26] audit: type=1800 audit(1782302775.956:143): pid=8817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1912" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 178.321431][ T8817] attempt to access beyond end of device [ 178.321431][ T8817] loop5: rw=0, want=281474976710724, limit=2048 [ 178.369176][ T8817] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15) [ 178.387416][ T8836] ip6t_srh: unknown srh invflags 4000 [ 178.398864][ T8817] NILFS (loop5): error -5 truncating bmap (ino=16) [ 178.584167][ T26] audit: type=1400 audit(1782302776.236:144): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=8843 comm="syz.0.1922" [ 178.637595][ T8846] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.689876][ T8852] loop0: detected capacity change from 0 to 8 [ 178.815445][ T8852] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 179.174948][ T26] audit: type=1400 audit(1782302776.836:145): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=8874 comm="syz.1.1936" [ 179.337447][ T8887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1939'. [ 179.392593][ T8887] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1939'. [ 179.723592][ T8906] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1948'. [ 179.763384][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'. [ 179.778165][ T8905] 9pnet: p9_fd_create_unix (8905): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.830965][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'. [ 179.861791][ T8914] loop1: detected capacity change from 0 to 256 [ 179.868432][ T8906] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1948'. [ 179.994885][ T8914] FAT-fs (loop1): Directory bread(block 64) failed [ 180.004837][ T8914] FAT-fs (loop1): Directory bread(block 65) failed [ 180.050927][ T8914] FAT-fs (loop1): Directory bread(block 66) failed [ 180.057564][ T8914] FAT-fs (loop1): Directory bread(block 67) failed [ 180.083571][ T8924] lo speed is unknown, defaulting to 1000 [ 180.118937][ T8914] FAT-fs (loop1): Directory bread(block 68) failed [ 180.125553][ T8914] FAT-fs (loop1): Directory bread(block 69) failed [ 180.165597][ T8924] lo speed is unknown, defaulting to 1000 [ 180.172414][ T8914] FAT-fs (loop1): Directory bread(block 70) failed [ 180.194949][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 180.234082][ T8914] FAT-fs (loop1): Directory bread(block 71) failed [ 180.246821][ T8924] lo speed is unknown, defaulting to 1000 [ 180.262385][ T8914] FAT-fs (loop1): Directory bread(block 72) failed [ 180.329893][ T8914] FAT-fs (loop1): Directory bread(block 73) failed [ 180.824413][ T8953] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 181.030160][ T4704] lo speed is unknown, defaulting to 1000 [ 181.028166][ T8924] infiniband syz1: set down [ 181.069156][ T8924] infiniband syz1: added lo [ 181.113847][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 181.169465][ T8967] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.280849][ T8924] RDS/IB: syz1: added [ 181.286191][ T8924] smc: adding ib device syz1 with port count 1 [ 181.339333][ T8924] smc: ib device syz1 port 1 has pnetid [ 181.359237][ T23] lo speed is unknown, defaulting to 1000 [ 181.374663][ T8924] lo speed is unknown, defaulting to 1000 [ 181.504392][ T8982] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 181.909166][ T8969] loop5: detected capacity change from 0 to 32768 [ 181.916922][ T8924] lo speed is unknown, defaulting to 1000 [ 182.028575][ T9000] xt_hashlimit: max too large, truncated to 1048576 [ 182.073121][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.142311][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.174678][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.199513][ T26] audit: type=1107 audit(1782302779.856:146): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 182.204863][ T9002] device bridge_slave_0 left promiscuous mode [ 182.397297][ T9005] loop1: detected capacity change from 0 to 4096 [ 182.522628][ T9005] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 182.556909][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.624564][ T9002] device bridge_slave_1 left promiscuous mode [ 182.678381][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.763219][ T9002] bond0: (slave bond_slave_0): Releasing backup interface [ 182.832432][ T8995] loop6: detected capacity change from 0 to 32768 [ 182.874419][ T9002] bond0: (slave bond_slave_1): Releasing backup interface [ 182.886860][ T9016] __nla_validate_parse: 2 callbacks suppressed [ 182.886876][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1994'. [ 183.162634][ T9002] team0: Port device team_slave_0 removed [ 183.227664][ T9025] cgroup: No subsys list or none specified [ 183.264585][ T9002] team0: Port device team_slave_1 removed [ 183.293527][ T9002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.312038][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.342170][ T9002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.381602][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.403189][ T9026] loop5: detected capacity change from 0 to 4096 [ 183.467606][ T8924] lo speed is unknown, defaulting to 1000 [ 183.496186][ T9026] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 183.657951][ T9035] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 183.777913][ T9043] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 183.845052][ T9043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.054132][ T8924] lo speed is unknown, defaulting to 1000 [ 184.069498][ T9054] netlink: 'syz.5.2011': attribute type 3 has an invalid length. [ 184.070078][ T9056] ipt_REJECT: TCP_RESET invalid for non-tcp [ 184.446530][ T8924] lo speed is unknown, defaulting to 1000 [ 184.520180][ T2289] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.548634][ T9081] tmpfs: Bad value for 'mpol' [ 184.798901][ T2289] usb 4-1: Using ep0 maxpacket: 16 [ 184.919252][ T2289] usb 4-1: config 0 has no interfaces? [ 184.969999][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 184.977725][ T9101] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 185.079111][ T2289] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.088210][ T2289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.126250][ T2289] usb 4-1: Product: syz [ 185.134794][ T2289] usb 4-1: Manufacturer: syz [ 185.169681][ T2289] usb 4-1: SerialNumber: syz [ 185.210404][ T2289] r8152-cfgselector 4-1: config 0 descriptor?? [ 185.327829][ T9124] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 185.397378][ T9120] loop6: detected capacity change from 0 to 4096 [ 185.413967][ T9128] loop1: detected capacity change from 0 to 512 [ 185.475974][ T9120] ntfs: volume version 3.1. [ 185.500879][ T2289] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 185.521160][ T9128] EXT4-fs (loop1): Ignoring removed orlov option [ 185.527578][ T9128] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 185.568889][ T9128] EXT4-fs (loop1): Ignoring removed nobh option [ 185.614512][ T9128] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.2050: corrupted in-inode xattr [ 185.648825][ T9128] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2050: couldn't read orphan inode 15 (err -117) [ 185.686050][ T9128] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,nobh,user_xattr,nogrpid,init_itable=0x0000000000400fff,,errors=continue. Quota mode: none. [ 185.725667][ T23] usb 4-1: USB disconnect, device number 11 [ 185.997457][ T9163] loop5: detected capacity change from 0 to 1024 [ 186.105561][ T9163] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 186.118482][ T9160] loop1: detected capacity change from 0 to 8192 [ 186.128771][ T5086] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 186.139250][ T9163] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 186.189731][ T9160] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 186.211218][ T9160] REISERFS (device loop1): using ordered data mode [ 186.215758][ T9168] loop0: detected capacity change from 0 to 2048 [ 186.218100][ T9160] reiserfs: using flush barriers [ 186.243197][ T9160] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.260099][ T9160] REISERFS (device loop1): checking transaction log (loop1) [ 186.335979][ T9168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.489488][ T9160] REISERFS (device loop1): Using tea hash to sort names [ 186.496784][ T9160] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 186.548960][ T5086] usb 7-1: config 0 has an invalid interface number: 229 but max is 0 [ 186.572691][ T9182] loop3: detected capacity change from 0 to 128 [ 186.579256][ T5086] usb 7-1: config 0 has no interface number 0 [ 186.585381][ T5086] usb 7-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 186.687391][ T9182] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 186.808865][ T5086] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 186.821661][ T5086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.853070][ T5086] usb 7-1: Product: syz [ 186.857304][ T5086] usb 7-1: Manufacturer: syz [ 186.871540][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2074'. [ 186.894135][ T5086] usb 7-1: SerialNumber: syz [ 186.916027][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2074'. [ 186.926474][ T5086] usb 7-1: config 0 descriptor?? [ 187.243507][ T5086] usb 7-1: USB disconnect, device number 3 [ 187.369276][ T9211] xt_TCPMSS: Only works on TCP SYN packets [ 187.928125][ T9239] netlink: del zone limit has 4 unknown bytes [ 188.155771][ T9250] libceph: resolve '400' (ret=-3): failed [ 188.262351][ T9259] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.529357][ T9223] loop3: detected capacity change from 0 to 32768 [ 188.566866][ T9276] autofs4:pid:9276:autofs_fill_super: called with bogus options [ 188.716046][ T9223] XFS (loop3): Mounting V5 Filesystem [ 188.800163][ T9292] 9pnet: Insufficient options for proto=fd [ 188.858856][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.954122][ T9299] loop5: detected capacity change from 0 to 1764 [ 188.962223][ T9223] XFS (loop3): Ending clean mount [ 188.980819][ T9223] XFS (loop3): Quotacheck needed: Please wait. [ 189.053720][ T9223] XFS (loop3): Quotacheck: Done. [ 189.099781][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 189.130579][ T9299] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 189.150123][ T2289] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 189.229238][ T23] usb 2-1: config 5 has an invalid interface number: 130 but max is 0 [ 189.240078][ T23] usb 2-1: config 5 has no interface number 0 [ 189.246252][ T23] usb 2-1: config 5 interface 130 has no altsetting 0 [ 189.351441][ T4193] XFS (loop3): Unmounting Filesystem [ 189.360546][ T9313] device bridge1 entered promiscuous mode [ 189.377905][ T9315] Zero length message leads to an empty skb [ 189.448971][ T23] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 189.458080][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.493885][ T23] usb 2-1: Product: syz [ 189.498151][ T23] usb 2-1: Manufacturer: syz [ 189.514457][ T23] usb 2-1: SerialNumber: syz [ 189.523395][ T2289] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 189.553630][ T2289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.568777][ T2289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.587942][ T2289] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.631780][ T2289] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.665808][ T2289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.739926][ T2289] hub 1-1:1.0: bad descriptor, ignoring hub [ 189.746261][ T2289] hub: probe of 1-1:1.0 failed with error -5 [ 189.753327][ T2289] cdc_wdm 1-1:1.0: skipping garbage [ 189.758731][ T2289] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 189.765367][ T2289] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 189.832179][ T9330] loop6: detected capacity change from 0 to 64 [ 189.853382][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.865167][ T9331] bridge0: port 3(team0) entered disabled state [ 189.871785][ T23] mct_u232 2-1:5.130: MCT U232 converter detected [ 189.882640][ T23] mct_u232 ttyUSB0: expected endpoint missing [ 189.894658][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.907230][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.936565][ T9331] device bridge_slave_0 left promiscuous mode [ 189.946111][ T23] usb 2-1: USB disconnect, device number 10 [ 189.966352][ T23] mct_u232 2-1:5.130: device disconnected [ 189.972747][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.001613][ T9331] device bridge_slave_1 left promiscuous mode [ 190.017551][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.045328][ T9331] bond0: (slave bond_slave_0): Releasing backup interface [ 190.066578][ T9331] bond0: (slave bond_slave_1): Releasing backup interface [ 190.101192][ T4264] usb 1-1: USB disconnect, device number 15 [ 190.138049][ T9331] device team_slave_0 left promiscuous mode [ 190.258563][ T9331] team0: Port device team_slave_0 removed [ 190.266487][ T9331] device team_slave_1 left promiscuous mode [ 190.342097][ T9331] team0: Port device team_slave_1 removed [ 190.360826][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.368547][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.385212][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.395853][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.449747][ T9343] loop1: detected capacity change from 0 to 128 [ 190.464119][ T9334] bridge0: port 3(veth0_to_bond) entered blocking state [ 190.471850][ T9334] bridge0: port 3(veth0_to_bond) entered disabled state [ 190.485165][ T9334] device veth0_to_bond entered promiscuous mode [ 190.494016][ T9334] bridge0: port 3(veth0_to_bond) entered blocking state [ 190.501526][ T9334] bridge0: port 3(veth0_to_bond) entered forwarding state [ 190.899001][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.068924][ T2289] Bluetooth: hci0: command 0x0406 tx timeout [ 191.075158][ T2289] Bluetooth: hci3: command 0x0406 tx timeout [ 191.108774][ T2289] Bluetooth: hci1: command 0x0406 tx timeout [ 191.158726][ T4704] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.309110][ T21] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 191.318077][ T21] usb 2-1: config 220 has an invalid interface number: 218 but max is 183 [ 191.352228][ T9394] netlink: 209820 bytes leftover after parsing attributes in process `syz.6.2167'. [ 191.368357][ T21] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 191.389324][ T21] usb 2-1: config 220 has no interface number 0 [ 191.395693][ T21] usb 2-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 191.407422][ T4704] usb 4-1: Using ep0 maxpacket: 8 [ 191.462948][ T21] usb 2-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 191.533557][ T21] usb 2-1: config 220 interface 218 has no altsetting 0 [ 191.549560][ T4704] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 191.557901][ T4704] usb 4-1: config 179 has no interface number 0 [ 191.570644][ T21] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 191.627929][ T4704] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 191.640237][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.671556][ T4704] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 191.690701][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 191.701575][ T4704] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.738759][ T4704] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 191.776936][ T4704] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 191.833166][ T4704] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 191.860710][ T4704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.911165][ T9370] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.929233][ T21] usb 2-1: string descriptor 0 read error: -71 [ 191.952334][ T21] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 192.018937][ T21] gspca_sn9c2028: read1 error -71 [ 192.027139][ T9425] loop0: detected capacity change from 0 to 512 [ 192.040039][ T21] gspca_sn9c2028: read1 error -71 [ 192.079112][ T21] gspca_sn9c2028: read1 error -71 [ 192.084256][ T21] sn9c2028: probe of 2-1:220.218 failed with error -71 [ 192.133433][ T21] usb 2-1: USB disconnect, device number 11 [ 192.159973][ T9425] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 192.178934][ T9425] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.347294][ T2289] usb 4-1: USB disconnect, device number 12 [ 192.358716][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 192.367837][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 192.377121][ C1] ================================================================== [ 192.385222][ C1] BUG: KASAN: use-after-free in register_lock_class+0x7f0/0x880 [ 192.392894][ C1] Read of size 1 at addr ffff888029064091 by task sed/9445 [ 192.400125][ C1] [ 192.402492][ C1] CPU: 1 PID: 9445 Comm: sed Not tainted syzkaller #0 [ 192.409285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.419372][ C1] Call Trace: [ 192.422654][ C1] [ 192.425781][ C1] dump_stack_lvl+0x188/0x250 [ 192.430478][ C1] ? show_regs_print_info+0x20/0x20 [ 192.435714][ C1] ? load_image+0x410/0x410 [ 192.440219][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 192.445683][ C1] print_address_description+0x60/0x2d0 [ 192.451232][ C1] ? register_lock_class+0x7f0/0x880 [ 192.456517][ C1] kasan_report+0xdf/0x130 [ 192.460933][ C1] ? register_lock_class+0x7f0/0x880 [ 192.466415][ C1] register_lock_class+0x7f0/0x880 [ 192.471637][ C1] ? is_dynamic_key+0x1f0/0x1f0 [ 192.476529][ C1] ? vprintk_emit+0xa7/0x150 [ 192.481125][ C1] ? printk_parse_prefix+0x310/0x310 [ 192.486413][ C1] ? vprintk_emit+0xa7/0x150 [ 192.491002][ C1] ? console_trylock+0x70/0x70 [ 192.495769][ C1] __lock_acquire+0x16f/0x7b50 [ 192.500537][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 192.505562][ C1] ? mark_lock+0x94/0x320 [ 192.509889][ C1] ? verify_lock_unused+0x140/0x140 [ 192.515098][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 192.520142][ C1] ? verify_lock_unused+0x140/0x140 [ 192.525356][ C1] ? _dev_info+0x170/0x170 [ 192.529932][ C1] lock_acquire+0x19e/0x400 [ 192.534448][ C1] ? __wake_up+0xf4/0x180 [ 192.538797][ C1] ? read_lock_is_recursive+0x10/0x10 [ 192.544184][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 192.549473][ C1] ? __wake_up+0xf4/0x180 [ 192.553804][ C1] ? _raw_spin_lock+0x40/0x40 [ 192.558484][ C1] ? kcov_remote_stop+0x3c9/0x4c0 [ 192.563540][ C1] __wake_up+0xf4/0x180 [ 192.567701][ C1] ? remove_wait_queue+0x120/0x120 [ 192.572834][ C1] ? _raw_spin_unlock+0x24/0x40 [ 192.577688][ C1] __usb_hcd_giveback_urb+0x394/0x520 [ 192.583155][ C1] dummy_timer+0xa41/0x33c0 [ 192.587678][ C1] ? dummy_free_streams+0x520/0x520 [ 192.592881][ C1] ? dummy_free_streams+0x520/0x520 [ 192.598084][ C1] call_timer_fn+0x17b/0x540 [ 192.602681][ C1] ? dummy_free_streams+0x520/0x520 [ 192.607877][ C1] ? __run_timers+0x810/0x810 [ 192.612561][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 192.617757][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 192.622983][ C1] ? dummy_free_streams+0x520/0x520 [ 192.628182][ C1] __run_timers+0x56c/0x810 [ 192.632707][ C1] ? ktime_get+0x7b/0x270 [ 192.637039][ C1] ? detach_timer+0x2b0/0x2b0 [ 192.641715][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 192.647716][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 192.652566][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 192.657851][ C1] run_timer_softirq+0x63/0xf0 [ 192.662622][ C1] handle_softirqs+0x336/0x830 [ 192.667391][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 192.672253][ C1] ? do_softirq+0x210/0x210 [ 192.676762][ C1] __irq_exit_rcu+0x13b/0x230 [ 192.681438][ C1] ? irq_exit_rcu+0x20/0x20 [ 192.685945][ C1] irq_exit_rcu+0x5/0x20 [ 192.690186][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 192.695843][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.701842][ C1] RIP: 0033:0x7fd4184b275b [ 192.706629][ C1] Code: f5 01 00 00 00 02 00 c7 84 24 90 00 00 00 00 00 00 00 c7 84 24 94 00 00 00 00 00 00 00 c7 84 24 98 00 00 00 00 00 00 00 0f a2 <89> 05 93 f3 01 00 81 fb 47 65 6e 75 0f 85 ab 06 00 00 81 f9 6e 74 [ 192.726613][ C1] RSP: 002b:00007ffdfed89540 EFLAGS: 00000206 [ 192.732699][ C1] RAX: 000000000000000d RBX: 00000000756e6547 RCX: 000000006c65746e [ 192.740682][ C1] RDX: 0000000049656e69 RSI: 0000000000001430 RDI: 0000000000000000 [ 192.748791][ C1] RBP: 00007ffdfed89730 R08: 00007fd4184d1730 R09: 0000000000000000 [ 192.756773][ C1] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000025 [ 192.764755][ C1] R13: 00007fd4184d2da0 R14: 0000000000000000 R15: 00007fd41849d000 [ 192.772901][ C1] [ 192.775926][ C1] [ 192.778253][ C1] Allocated by task 4704: [ 192.782690][ C1] __kasan_kmalloc+0xaf/0xe0 [ 192.787300][ C1] xpad_probe+0x408/0x1980 [ 192.791730][ C1] usb_probe_interface+0x5be/0xae0 [ 192.796848][ C1] really_probe+0x276/0xc70 [ 192.801359][ C1] __driver_probe_device+0x1f5/0x390 [ 192.806649][ C1] driver_probe_device+0x4f/0x420 [ 192.811673][ C1] __device_attach_driver+0x2b0/0x500 [ 192.817063][ C1] bus_for_each_drv+0x184/0x210 [ 192.821914][ C1] __device_attach+0x2a7/0x480 [ 192.826677][ C1] bus_probe_device+0xba/0x1d0 [ 192.831486][ C1] device_add+0xbcf/0x1050 [ 192.835899][ C1] usb_set_configuration+0x19d5/0x2030 [ 192.841357][ C1] usb_generic_driver_probe+0x89/0x150 [ 192.846831][ C1] usb_probe_device+0x126/0x250 [ 192.851680][ C1] really_probe+0x276/0xc70 [ 192.856178][ C1] __driver_probe_device+0x1f5/0x390 [ 192.861461][ C1] driver_probe_device+0x4f/0x420 [ 192.866482][ C1] __device_attach_driver+0x2b0/0x500 [ 192.871855][ C1] bus_for_each_drv+0x184/0x210 [ 192.876708][ C1] __device_attach+0x2a7/0x480 [ 192.881489][ C1] bus_probe_device+0xba/0x1d0 [ 192.886262][ C1] device_add+0xbcf/0x1050 [ 192.890677][ C1] usb_new_device+0x9f6/0x15d0 [ 192.895437][ C1] hub_event+0x2b8d/0x5260 [ 192.899861][ C1] process_one_work+0x867/0xff0 [ 192.904714][ C1] worker_thread+0xad7/0x12a0 [ 192.909388][ C1] kthread+0x42e/0x520 [ 192.913457][ C1] ret_from_fork+0x1f/0x30 [ 192.917879][ C1] [ 192.920199][ C1] Freed by task 2289: [ 192.924172][ C1] kasan_set_track+0x4b/0x70 [ 192.928758][ C1] kasan_set_free_info+0x1f/0x40 [ 192.933698][ C1] ____kasan_slab_free+0xd5/0x110 [ 192.938748][ C1] slab_free_freelist_hook+0xec/0x170 [ 192.944120][ C1] kfree+0xef/0x2a0 [ 192.947948][ C1] xpad_disconnect+0x31f/0x440 [ 192.952711][ C1] usb_unbind_interface+0x203/0x870 [ 192.957907][ C1] device_release_driver_internal+0x487/0x710 [ 192.963972][ C1] bus_remove_device+0x2dd/0x400 [ 192.968908][ C1] device_del+0x63f/0xa80 [ 192.973237][ C1] usb_disable_device+0x3e7/0x8a0 [ 192.978257][ C1] usb_disconnect+0x33c/0x8a0 [ 192.982930][ C1] hub_event+0x1d64/0x5260 [ 192.987371][ C1] process_one_work+0x867/0xff0 [ 192.992218][ C1] worker_thread+0xad7/0x12a0 [ 192.996891][ C1] kthread+0x42e/0x520 [ 193.000955][ C1] ret_from_fork+0x1f/0x30 [ 193.005369][ C1] [ 193.007693][ C1] Last potentially related work creation: [ 193.013399][ C1] kasan_save_stack+0x35/0x60 [ 193.018078][ C1] kasan_record_aux_stack+0xb8/0x100 [ 193.023372][ C1] insert_work+0x54/0x3d0 [ 193.027701][ C1] __queue_work+0x90b/0xc80 [ 193.032211][ C1] queue_work_on+0x124/0x1f0 [ 193.036796][ C1] blk_update_request+0x85a/0x1180 [ 193.041913][ C1] blk_mq_end_request+0x3a/0x70 [ 193.046759][ C1] blk_flush_complete_seq+0x5cc/0xc80 [ 193.052129][ C1] flush_end_io+0x81a/0xa90 [ 193.056642][ C1] blk_done_softirq+0xfa/0x140 [ 193.061405][ C1] handle_softirqs+0x336/0x830 [ 193.066167][ C1] run_ksoftirqd+0xa4/0x100 [ 193.070667][ C1] smpboot_thread_fn+0x520/0x990 [ 193.075607][ C1] kthread+0x42e/0x520 [ 193.079670][ C1] ret_from_fork+0x1f/0x30 [ 193.084088][ C1] [ 193.086408][ C1] The buggy address belongs to the object at ffff888029064000 [ 193.086408][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 193.100458][ C1] The buggy address is located 145 bytes inside of [ 193.100458][ C1] 1024-byte region [ffff888029064000, ffff888029064400) [ 193.113842][ C1] The buggy address belongs to the page: [ 193.119480][ C1] page:ffffea0000a41800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29060 [ 193.129632][ C1] head:ffffea0000a41800 order:3 compound_mapcount:0 compound_pincount:0 [ 193.137950][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 193.145951][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 193.154531][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 193.163111][ C1] page dumped because: kasan: bad access detected [ 193.169527][ C1] page_owner tracks the page as allocated [ 193.175231][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4238, ts 71292583096, free_ts 70200461022 [ 193.193721][ C1] get_page_from_freelist+0x24f6/0x2670 [ 193.199273][ C1] __alloc_pages+0x1ee/0x480 [ 193.203867][ C1] new_slab+0xc0/0x4b0 [ 193.207936][ C1] ___slab_alloc+0x807/0xdd0 [ 193.212524][ C1] __kmalloc_node_track_caller+0x13d/0x3a0 [ 193.218335][ C1] __alloc_skb+0x22c/0x750 [ 193.222754][ C1] wg_socket_send_buffer_to_peer+0x34/0x170 [ 193.228643][ C1] wg_packet_handshake_send_worker+0x203/0x360 [ 193.234800][ C1] process_one_work+0x867/0xff0 [ 193.239647][ C1] worker_thread+0xad7/0x12a0 [ 193.244320][ C1] kthread+0x42e/0x520 [ 193.248386][ C1] ret_from_fork+0x1f/0x30 [ 193.252805][ C1] page last free stack trace: [ 193.257495][ C1] free_unref_page_prepare+0x637/0x6c0 [ 193.263037][ C1] free_unref_page+0x8f/0x2a0 [ 193.267711][ C1] __unfreeze_partials+0x188/0x1e0 [ 193.272820][ C1] put_cpu_partial+0x12d/0x190 [ 193.277584][ C1] qlist_free_all+0x35/0x90 [ 193.282085][ C1] kasan_quarantine_reduce+0x150/0x160 [ 193.287540][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 193.292390][ C1] slab_post_alloc_hook+0x4c/0x380 [ 193.297594][ C1] kmem_cache_alloc_node+0x184/0x2c0 [ 193.302878][ C1] __alloc_skb+0xf4/0x750 [ 193.307206][ C1] mld_newpack+0x12f/0xba0 [ 193.311621][ C1] add_grec+0x12de/0x1780 [ 193.315951][ C1] mld_ifc_work+0x6eb/0xde0 [ 193.320472][ C1] process_one_work+0x867/0xff0 [ 193.325330][ C1] worker_thread+0xad7/0x12a0 [ 193.330004][ C1] kthread+0x42e/0x520 [ 193.334074][ C1] [ 193.336393][ C1] Memory state around the buggy address: [ 193.342025][ C1] ffff888029063f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.350084][ C1] ffff888029064000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.358145][ C1] >ffff888029064080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.366549][ C1] ^ [ 193.371133][ C1] ffff888029064100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.379185][ C1] ffff888029064180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.387239][ C1] ================================================================== [ 193.395466][ C1] Disabling lock debugging due to kernel taint [ 193.401624][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.408809][ C1] CPU: 1 PID: 9445 Comm: sed Tainted: G B syzkaller #0 [ 193.416961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.427011][ C1] Call Trace: [ 193.430291][ C1] [ 193.433226][ C1] dump_stack_lvl+0x188/0x250 [ 193.440944][ C1] ? show_regs_print_info+0x20/0x20 [ 193.446153][ C1] ? load_image+0x410/0x410 [ 193.450661][ C1] panic+0x2f8/0x850 [ 193.454556][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 193.459060][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.464976][ C1] ? _raw_spin_unlock+0x40/0x40 [ 193.469826][ C1] ? register_lock_class+0x7f0/0x880 [ 193.475113][ C1] check_panic_on_warn+0x80/0xa0 [ 193.480054][ C1] ? register_lock_class+0x7f0/0x880 [ 193.485343][ C1] end_report+0x6d/0xf0 [ 193.489507][ C1] kasan_report+0x102/0x130 [ 193.494013][ C1] ? register_lock_class+0x7f0/0x880 [ 193.499298][ C1] register_lock_class+0x7f0/0x880 [ 193.504417][ C1] ? is_dynamic_key+0x1f0/0x1f0 [ 193.509401][ C1] ? vprintk_emit+0xa7/0x150 [ 193.514018][ C1] ? printk_parse_prefix+0x310/0x310 [ 193.519314][ C1] ? vprintk_emit+0xa7/0x150 [ 193.524887][ C1] ? console_trylock+0x70/0x70 [ 193.529653][ C1] __lock_acquire+0x16f/0x7b50 [ 193.534421][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 193.539446][ C1] ? mark_lock+0x94/0x320 [ 193.543807][ C1] ? verify_lock_unused+0x140/0x140 [ 193.549008][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 193.554044][ C1] ? verify_lock_unused+0x140/0x140 [ 193.559269][ C1] ? _dev_info+0x170/0x170 [ 193.563695][ C1] lock_acquire+0x19e/0x400 [ 193.568200][ C1] ? __wake_up+0xf4/0x180 [ 193.572537][ C1] ? read_lock_is_recursive+0x10/0x10 [ 193.577915][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 193.583208][ C1] ? __wake_up+0xf4/0x180 [ 193.587559][ C1] ? _raw_spin_lock+0x40/0x40 [ 193.592260][ C1] ? kcov_remote_stop+0x3c9/0x4c0 [ 193.597299][ C1] __wake_up+0xf4/0x180 [ 193.601475][ C1] ? remove_wait_queue+0x120/0x120 [ 193.606607][ C1] ? _raw_spin_unlock+0x24/0x40 [ 193.611467][ C1] __usb_hcd_giveback_urb+0x394/0x520 [ 193.616856][ C1] dummy_timer+0xa41/0x33c0 [ 193.621380][ C1] ? dummy_free_streams+0x520/0x520 [ 193.626581][ C1] ? dummy_free_streams+0x520/0x520 [ 193.631781][ C1] call_timer_fn+0x17b/0x540 [ 193.636375][ C1] ? dummy_free_streams+0x520/0x520 [ 193.641572][ C1] ? __run_timers+0x810/0x810 [ 193.646255][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 193.651454][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 193.656655][ C1] ? dummy_free_streams+0x520/0x520 [ 193.661859][ C1] __run_timers+0x56c/0x810 [ 193.666384][ C1] ? ktime_get+0x7b/0x270 [ 193.670713][ C1] ? detach_timer+0x2b0/0x2b0 [ 193.675391][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 193.681374][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 193.686267][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 193.691558][ C1] run_timer_softirq+0x63/0xf0 [ 193.696321][ C1] handle_softirqs+0x336/0x830 [ 193.701090][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 193.705944][ C1] ? do_softirq+0x210/0x210 [ 193.710447][ C1] __irq_exit_rcu+0x13b/0x230 [ 193.715127][ C1] ? irq_exit_rcu+0x20/0x20 [ 193.719636][ C1] irq_exit_rcu+0x5/0x20 [ 193.723927][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 193.729568][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 193.735649][ C1] RIP: 0033:0x7fd4184b275b [ 193.740211][ C1] Code: f5 01 00 00 00 02 00 c7 84 24 90 00 00 00 00 00 00 00 c7 84 24 94 00 00 00 00 00 00 00 c7 84 24 98 00 00 00 00 00 00 00 0f a2 <89> 05 93 f3 01 00 81 fb 47 65 6e 75 0f 85 ab 06 00 00 81 f9 6e 74 [ 193.759822][ C1] RSP: 002b:00007ffdfed89540 EFLAGS: 00000206 [ 193.765896][ C1] RAX: 000000000000000d RBX: 00000000756e6547 RCX: 000000006c65746e [ 193.773968][ C1] RDX: 0000000049656e69 RSI: 0000000000001430 RDI: 0000000000000000 [ 193.781936][ C1] RBP: 00007ffdfed89730 R08: 00007fd4184d1730 R09: 0000000000000000 [ 193.789907][ C1] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000025 [ 193.797869][ C1] R13: 00007fd4184d2da0 R14: 0000000000000000 R15: 00007fd41849d000 [ 193.806052][ C1] [ 194.916653][ C1] Shutting down cpus with NMI [ 194.921506][ C1] Kernel Offset: disabled [ 194.926487][ C1] Rebooting in 86400 seconds..