last executing test programs: 3m29.951229559s ago: executing program 0 (id=2652): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@overlay={0x6, 0xb, 0x4, 0x80, 0x7a9, {}, {0x1, 0x1, 0x7f, 0x81, 0x3, 0x2, "df4b3c0a"}, 0x0, 0x3, {}, 0x3ff}) 3m29.777335893s ago: executing program 0 (id=2655): r0 = socket(0x1d, 0x2, 0x6) bind$rose(r0, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) 3m29.594258969s ago: executing program 0 (id=2658): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 3m29.296357557s ago: executing program 0 (id=2664): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m28.972284056s ago: executing program 0 (id=2671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 3m28.46059706s ago: executing program 0 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000020000000008000d"], 0x38}}, 0x0) 3m28.181811698s ago: executing program 32 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000020000000008000d"], 0x38}}, 0x0) 2.598658738s ago: executing program 4 (id=6094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_FILTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x24000014) 2.400650333s ago: executing program 4 (id=6096): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) 2.388349684s ago: executing program 3 (id=6097): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x403e0000, 0x40000000}], 0x0) 2.135113481s ago: executing program 4 (id=6103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 1.903107627s ago: executing program 1 (id=6105): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) 1.878370498s ago: executing program 4 (id=6107): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.636909595s ago: executing program 1 (id=6109): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.624068425s ago: executing program 4 (id=6111): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[], 0x1, 0x62a7, &(0x7f0000012f40)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIW2bBA3qJYk0lk4QCyDXIiC0/kDQsuAoTEEhBLVlxAFmzZcQFYspGAbEihnjlnXN10u8fjdFfPnN9PmlQ9daqmT+XfNd3tquoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC89d3vn60i4u2fpQXHI/4vuhGdiLVhvRERaxvH8/q9iHg2dprjmYjor0RUufGpiFcj4uNjEffu39ocLjq3z3585w9//c0PnvjeX37XP/2vP97ovjZtvZs3f/nPP90++P4CAABAieq6rqv0Mf9E+nzfabtTAMBC5Nf/OsnL1UtXby9Zf9RqtVp9COumerLbzSIitpvbDN8zOB0PAIfMdnzSdhdokfyL1ouIJ9ruBLDUqrY7wFzcu39rs0r5Vs3Xg43d9nwtyEj+29Xe/R3TprOMX2OyqOfXnejG01P6s7agPiyTnH9nLP+V1D5I03nnvyjT8h/s3vpUnJx/d/z4H3N08u9MzL9UOf/eI+XflT8AAAAAACyx/O//x1s+/7vy+LuyLw87/7uxoD4AAAAAAAAAwGftccf/21MZ/w8AAACW1fCz+tCvjj1YNu272IbLL1URT46tD5TiPyMjiKy33R0AAAAAAAAAAAAAKElv9xreS1VEPyKeXF+v63q9HjVeP6rH3f6wK33/oWRt/5EHAIBdHx8bu5e/iliNiEvpu/766+vrdb26tl6v12sr+f3sYGW1Xmt8rs3T4bKVwT7eEPcG9fCXrTa2a5r1eXlW+/jvGz7WoO7uo2OL0WLgABARu69G97wiHTF1/VS0/S6Hw8Hxf/Q4/tmPtp+nAAAAwPzVdV1XaZi/E+mcf6ftTgEAC5Ff/8fPC6jVarVarT56dVM92e1mERHbzW2G7xkMxw8Ah8x2fNJ2F2iR/IvWi4hn2+4EsNSqtjvAXNy7f2uzSvlWzdeDjd32fC3ISP7b1c52eftJ01nGrzFZ1PPrTnTj6Sn9eWZBfVgmOf/OeP5v77YP0nrzzn9RpuU/3M/jLfSnbTn/7nj+Y45O/p2J+Zcq5997pPy78gcAAAAAgCWW//3/+FKd/x0cdHdmetj53425PSoAAAAAAAAAzNe9+7c2832v+fz/5yas5/7PoynnX8m/SDn/dP//3oU3L46t123M333zQf7/uH9r87c3/v7/ebrf/FfyTJWeWVV6RlTpkapemh5wx6a40+8Oho/UrzrdXrrmp+6/G1fiamzFmZF1O+l4eNB+dqR92NP+Tnvd3W0/N9Le22vP258fae+nK53qtdx+Kjbjx3E13tlpH7atzNj/1Rnt9Yz2nH/X8V+knH+v8TPMfz21V2PTobsfdf7nuG9OJz3OG1c+/4sz89+dme5Ed2/fmob793wL/dn5f/LEIH56fevaqZuXb9y4djbSZGTpuUiTz1jOv59+cv4vvrDbnv/uN4/Xux8NHjn/ZXEnelPzf6ExP9zflxbctzbk/AfpJ+f/TmqffPwf5vynH/8vt9AfAAAAAAAAAAAAAAAAeJi6rnduEX0jIi6k+3/aujcTAFis/PpfJ3n5ouruQbf//eh+tNV/tXrBdbVk/Vlo/Wk978d7a6n2V32g+t9L1p+lq5vqyV5vFhHx5+Y2w/cMP5/0ywCAZfZpRPyt7U7QGvkXLH/f33B6su3OAAt1/YMPf3j56tWta9fb7gkAAAAAAAAAcFB5/M+NxvjPJ+u6vj223sj4r2/GxuOO/9nLM3sDjE4ZqLr76Pv0MJ2Ibqcx3PhzMW387/7e3MPG/+7NeLz+jPbBjPaVGe2rM9on3ujRkPN/rjHe+cmIODE2/HoJ47+Oj3lfgpz/843n8zD/L42t18y//vVhzr8zkv/pG+//5PT1Dz585cr7l9/bem/rR+fPnj1z/sKFixcvnn73ytWtM7v/bbHH85Xzz2Nfuw60LDn/nLn8y5Lz/0Kq5V+WnP8XUy3/suT88/s9+Zcl558/+8i/LDn/l1It/7Lk/L+cavmXJef/cqrlX5ac/1dSLf+y5PxfSbX8y5LzP5Vq+Zcl53861fvMf23e/WIxcv75DJfjvyw5/3xlg/zLkvM/l2r5lyXnfz7V8i9Lzv/VVMu/LDn/r6Za/mXJ+V9ItfzLkvP/WqrlX5ac/8VUy78sOf+vp1r+Zcn5fyPV8i9Lzv+1VMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5lefD9/2bMmDGTZ9r+ywQAAAAAAAAAAAAAjFvE5cRt7yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkausz4D+Jn98tqBxEBIndQJG8ckIdlk13biD9oUEz4bvkpCUugHtutdmwXHNl67BBrVjgIlEkZFFW3DRVtAqM1NhVVxQStAuUCtKlWC9oLeICpULqIqoIBUlVbAVjPnfd+dOTs7s+sdb86e8/tJyT87c2bOmTPvzO5j59kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh38xtmP9nIsqzRaOQXbM2ylzTn5omtrUte++IeHwAAALB2P2/9+4Vr0gUHV3Cjtm3+6aZvfWVhYWEhe+/wn45+dmEhXTGRZaObsqx1XXTp++9rtG8TPJmNN4bavh7qs/vhPteP9Ll+tM/1Y32u39Tn+vE+1y85AUtszhrpzna2/nNrfkqza7PR1nU7u9zqycamoea5S7fNGq3bLIwey+ayE9lsNt2xfb5to7X9125u7uutWdzXUNu+tjdXyI8fPxqPoRHO8c6OfS3eZ/TD12cTP/nx40f/+uzz13ebfU9Dx/3lx3n7juZxfjxckh9rI9uUzkk8zqG249ze5TkZ7jjORut2zf8uHucLKzzO4cXDXFfF53w8G2r997db52mkkXU5T9vDZT+9JcuyC4uHXdxmyb6yoWxLxyVDi8/PeL4im/fRXEovz0ZWtU5vXsE6bc6ZnZ3rtPiaiM//zeF2I8scQ/vT9MMnxtqe958tXM46jZqPernXSnENDvq1UpY1GNfFt1sP+qmua3BnePyP37r8Guy6drqswfS429bgjn5rcGhsuHXM6UlotG6zuAZ3dWw/3NpTozWfu7X3Gpw6++jpqfmPfuyuuUePHJ89Pntyz65d03v27t2/f//UsbkTs9P5vy/zbJfflmwovQZ2hHMXXwO3FbZtX6oLXxhb8v57ua/D8R6vw62FbQf9OhwpPrjG+rwgl67p/LXxnuZJH784lC3zGms9P3es/XWYHnfb63Ck7XXY9XtKl9fhyApeh81tTt+xsp9ZRtr+6XYMy38vWNsa3Nq2Bos/jxTX4KB/HinLGhwP6+K7dyz/vWB7ON6nJlf788jwkjWYHm5472lekn7eH9/fGt3W5Q3NK64ay87Nz565+7EjZ8+e2ZWFsS5e0bZWiut1S9tjypas16FVr9eDczc9dUOXy7eGczV+V/Nf48s+V81t7rm793PV+u7W/Xx2XLo7C2PA1vt8dvtu3jyfY1n2uW8+8eDXH//cG5Y9n828+fGptf8snnJp2/vv6DLvvzH3/yLfX7qrJ4dHR/LX73A6O6Md78edT9VI672r0dr3C1Mrez8eDf+s9/vxtT3ej7cVth30+/Fo8cHF9+NGvz/tWJvi8zke1smJ6d7vx81ttu1e7Zoc6fl+fEuYjXD+XxOSQspFbWtnuXWb9jUyMhoe10jcQ+c63dOx/WjIZs19PbP78tbp7bfk9zWcHt2i9VqnE4VtB71O0599LbdOG/3+9O3yFJ/P8bAurt3Te502t3n2nrW/d26O/9n23jnWbw2ODo81j3k0LcLW+322sDmuwbuzo9mp7EQ207p2rLWeGq19Td67sjU4Fv5Z7/fKbT3W4O2FbQe9BtP3seXWXmNk6YMfgOLzOR7WxdP39l6DzW3euG+wP7veHi5J27T97Fr887Xl/szrhsJpulJrZSQc5zf39f6z2eY2J/avNmf2Pk93hkuu6nKeiq/f5V5TM9n6nKdt4Tif37/8eWoeT3Obzx5Y4Xo6mGXZ+Q/f3/rz3vD3K3937jtf6fh7l25/p3P+w/f/6KXH/nE1xw/AxveLfGzJv9e1/c3USv7+HwAAANgQYu4fCjOR/wEAAKAyYu6P/1d4Iv8DAABAZcTcPxJmUpP8v+2Nz8/94nyWmvkLQbw+nYYH8u1ix3U6fD2xsKh5+f1fmv3vfzi/sn0PZVn2swf+oOv22x6Ix5WbCMd56U2dly/xlbtWtO/DD59P+23vr38+3H98PCtdBt0quNNZln3tmk+39jPxvout+ewDh1vzwQtPPdnc5oUD+dfx9s+9It/+L0L59+CxIx23fy6chx+EOf227ucj3u7LF1+zfd8ji/uLt2vsuLr1sJ9+f36/8ffkfObJfPt4npc7/q9/6pkvN7d/7NXdj//8UPfjfybc75fC/N8b8+3bn4Pm1/F2nwjHH/cXb3f3F7/R9fgvfTLf/vSb8+0Ohxn3f3v4euebn59rP1+PNY50PK7sLfl2cf/T3/nj1vXx/uL9F49//NDFjvNRXB/P/lt+P1OF7ePlcT/R3xf237yf9vUZ9//MHx3uOM/99n/pwedubN5vcf93FrY7/eE7WvtfvL/O39j0l5/4dNf9xeM5+LenOx7PwXeH13HY/9PvD+sxXP9/l/L7K/52hcPv7nz/idt/fuv5jscTvfUn+f4vve54a24a37zlqpe89OoLr2qeuyz79qb8/vrt//hfneo4/i9cl5+PeH3s6Bf3v5y4/zMfmTx5av7c3Ew6q49f0/rdOW/Pjyce7zXhvbX49aFTZz8we2ZiemI6yyaq+yv0LtsXw/xRPi703nphyTvoHQ+H5/OGP//allv/9VPx8n9/T375xbfl37due/i5G8ceybLPhMu3hudvdftf6umbr2u9vhvPhiNcWPr7gtdi+87/2r+iDcPjL/5cENf76Vd+oHUemte1vm/E1/Uaj/97M/n9fDWc14Xwm5l3XLe4v/bt4+9GuPhQ/npf8/kLb3Pxef2b8Hy/4wf5/cfjio/3e+HnmG9s63y/uy2so6+eHyref+u3eFwI7yfZhfz6uFU83xdfuK7r4cXfQ5JduL719Z+k+7l+VQ9zOfMfnZ86MXfy3GNTZ2fnz07Nf/Rjhx49de7k2UOt3+V56IP9br/4/rSl9f40M7v3nqz1bnUqH1fESGmO//TDR2f2Td86M3vsyLljZx8+PXvm+NH5+aOzM/O3Hjl2bPYj/W4/N3Pfrt0H9uzbPXl8bua+/QcO7DkwOXfyVPMw8oPqY+/0hyZPnjnUusn8ffcc2HXvvfdMTz56amb2vn3T05Pn+t2+9b1psnnr3588M3viyNm5R2cn5+c+NnvfrgN79+7u+9sAHz19bH5i6sy5k1Pn5mfPTOWPZeJs6+Lm975+t6ea5v8j/3m2qJH/Ir7sXXfuTb+ftelLTyx7V/kmhV8g+nz4XTT//LLT+1fydcz9o2EmNcn/AAAAUAcx94+Fmcj/AAAAUBkx928KM5H/AQAAoDJi7h8PM6lJ/q9c/3/b+RXtX/9f/7/9fOn/16z//1DZ+v/5+4X+/2CstX+/mv7/Pv1//X/9/w4vTv+/PMev/6//z1Jl6//H3L85y2qZ/wEAAKAOYu7fEmYi/wMAAEBlxNx/VZiJ/A8AAACVEXP/S8JMapL/9f/1//X/9f/1/7vvX/9/Y9L/703/vw/9/6msXv3/C4M8fv1//X+WKlv/P+b+l4aZ1CT/AwAAQB3E3H91mIn8DwAAAJURc/81YSbyPwAAAFRGzP1bw0xqkv/1/7NsqK28rP+v/9+6QP9f/1//f8PS/+9N/78P/X+f/6//r//PQJWt/x9z/8vCTGqS/wEAAKAOYu5/eZiJ/A8AAADlM3J5N4u5/xVhJkvy/2XuAAAAAHjRxdx/bVb4IPia/P2//r/P/y9//39Tuk7/X/8/K2X/fzjT/y8P/f/e9P/70P/X/9f/1/9noMrW/2/l/mw8e2WYSU3yPwAAANRBzP3XhZnI/wAAAFAZMff/UpiJ/A8AAACVEXP/tjCTmuR//X/9//L3/33+v/5/2fv/Pv+/TPT/e9P/70P/X/9f/39N/f/hTP+fTmXr/8fcf32YSU3yPwAAANRBzP03hJnI/wAAAFAZMff/cpiJ/A8AAACVEXP/9jCTmuR//f+S9/9jc1T/X/9f/1//X/9/RfT/e9P/70P/X/9f/9/n/zNQZev/x9x/Y5hJTfI/AAAA1EHM/TeFmcj/AAAAUBkx978qzET+BwAAgMqIuX8izKQm+V//v+T9/7wHP+bz//X/9f/1//X/V0b/vzf9/z70//X/B9L/Xziv/6//T65s/f+Y+28OM6lJ/gcAAIA6iLl/R5iJ/A8AAACVEXP/LWEm8j8AAABURsz9O8NMapL/9f83RP8/0//X/9f/1//X/18Z/f/e9P/70P/X//f5//r/DFTZ+v8x9786zKQm+R8AAADqIOb+W8NM5H8AAACojJj7bwszkf8BAACgMmLuvz3MpCb5X/9f/1//X/9f/7/7/vX/Nyb9/970//vQ/9f/1//X/2egytb/j7n/NWEmNcn/AAAAUAcx998RZiL/AwAAQGXE3H9nmIn8DwAAAJURc/9kmElN8r/+v/6//r/+v/5/9/3r/29M+v+96f/3of+v/6//r//PQJWt/x9z/11hJjXJ/wAAAFAHMfffHWYi/wMAAEBlxNw/FWYi/wMAAEBlxNw/HWZSk/yv/6//r/+v/7+q/v+rFu9X/z+n/18u+v+96f/3of+v//+i9/9H9f+plLL1/2Pu3xVmUpP8DwAAAHUQc//uMBP5HwAAACoj5v49YSbyPwAAAFRGzP33hJnUJP/r/+v/6//r//v8/+771//fmPT/ext8/z8+RP1//X/9f5//r//PUmXr/8fcf2+YSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf7X/9f/1//X/9f/775//f+NSf+/N5//34f+v/6//r/+P2v00B+2f1W2/n/M/QfCTGqS/wEAAKAOYu5/bZiJ/A8AAACVEXP/r4SZyP8AAABQGTH3/2qYSU3yv/5/R/e8+XD1//X/9f/1/1v0/zcm/f/e9P/70P9fXX9+tPNL/X/9f/1/ipbt/4fovd79/5j77wszqUn+BwAAgDqIuf/XwkzkfwAAAKiMmPtfF2Yi/wMAAEBlxNx/MMykJvlf/9/n/+v/6//r/3ff/3r3/8fi/er/r4n+f2/6/33o//v8f/1//X8Gqmyf/x9z/+vDTGqS/wEAAKAOYu6/P8xE/gcAAIDKiLn/DWEm8j8AAABURsz9bwwzqUn+1//X/98o/f+r9P/1/wuPp2r9f5//Pxj6/73p//eh/6//r/+v/89Ala3/H3P/m8JMapL/AQAAoA5i7n9zmIn8DwAAAJURc/9bwkzkfwAAAKiMmPvfGmZSk/yv/6//v1H6/5n+v/5/4fHo/+v/d6P/35v+fx/6//r/+v/6/wxU2fr/Mff/ephJTfI/AAAA1EHM/Q+Emcj/AAAAUBkx978tzET+BwAAgMqIuf/tYSY1yf/6//r/+v/6/2vq/2/W/9f/Lxf9/942WP//51eHy/X/c/r/5T7+1fb/RwpfX5H+//eX6/8vbCreXv+fK6Fs/f+Y+98RZlKT/A8AAAB1EHP/O8NM5H8AAACojJj73xVmIv8DAABAZcTc/xthJjXJ//r/zeNYbC/r/1e1/z+k/+/z//X/a0L/v7cN1v/3+f8F+v/lPn6f/6//z1Jl6//H3P/uMJOa5H8AAACog5j7Hwwzkf8BAACgMmLufyjMRP4HAACAyoi5/z1hJjXJ//r/Pv+/Hv1/n/+f6f/r/9fE2vr3o/r/kf6//r/+fzn6//+p/8/GVrb+f8z9D4eZ1CT/AwAAQB3E3P9ImIn8DwAAAJURc/9vhpnI/wAAAFAZMfe/N8ykJvlf/3+j9P8nNmj//wn9/yvY/7/p6nw7/X/9fxb5/P/e9P/70P/X/y9b/9/n/7PBla3/H3P/+8JMVp7/x1e8JQAAAHBlFP8iqSDm/t8KM6nJ3/8DAABAHcTc/9thJvI/AAAAVEbM/b8TZlKT/K//v1H6/z7/P9P/9/n/hcej/6//38369f/jO4/+v/6//n+k/6//r/9PUdn6/zH3/26YSU3yPwAAANRBzP3vDzOR/wEAAGBD6Pb/ZBfF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/tuNfvvutdx7epf+v/6//vyrr+vn/zRe/z//X/9f/T/T/9f/1/ykqW/8/5v4jYSY1yf8AAABQBzH3/16YifwPAAAAlRFz/9EwE/kfAAAAKiPm/pkwk5rkf/1//X/9/5L2/zfw5//H86H/32lg/f/4pqv/31Xev0+r6Mr2/x9Z7Inr/6+2/z/W9VL9f/3/jXz8+v/6/yxVtv5/zP2zYSY1yf8AAABQByH3Dx3L5+IV8j8AAABURsz9x8NM5H8AAACojJj7PxBmUpP8r/+v/6//r//v8/+7779X/78x4vP/yyr173/aeqHo/xeUp//fnf6//v9GPn79f/1/lipb/z/m/rkwk5rkfwAAAKiDmPs/GGYi/wMAAEBlxNz/oTAT+R8AAAAqI+b+E2EmNcn/+v/6//r/+v/6/933X9rP/9f/72mt/Xv9/0D/v979///R/9f/1/9nMP6fvTtpsqxO6zh+UgsqM9qFCyNcuDHCpS+hF7rWF+DCjRsjDCNstVtt5652Hlu7tZ21BecBVBBEVHAeQEUUZ1BxngdURJSojrr5PE9OJ8/N4ea95/z/n8+iHkkquVeizOJH8vXMrf/P3f8pcUsn+x8AAAB6kLv/LXGL/Q8AAADNyN3/qXGL/Q8AAADNyN3/aXFLJ/tf/3+d/v+oUtb/n3z/6/v/fMUb7P8/Sv9/3uvr//X/LdP/T9P/rzHe/98/DENf/b/n/+v/9f9syNz6/9z9nx63dLL/AQAAoAe5+986HNj/AAAA0Ki3rn7cH94Wt9j/AAAA0Izc/Z8Rt3Sy/0/1/3tDn/1/Zrye/+/5//r/8/r/1Q/6f/3//G23/3/nva98+v8L9/8Pv2fdy860/2/x+f/3j31w1/38de36/V+w/7993ufr/2nR3Pr/3P2fGbd0sv8BAACgB7n7Pytusf8BAACgGbn73x632P8AAADQjNz9nx23dLL/N/f8/4PVxxfa/xf9v/5/9QH9v+f/6/8Xy/P/p/X0/P+3vfCmt7zy+Ic9cZnX76j/H7Xrfn7p79/z//X/nDW3/j93/+fELZ3sfwAAAOhB7v7PjVvsfwAAAGhG7v7Pi1vsfwAAAGhG7v7Pj1s62f+b6/8X/fz/ov/X/68+sKj+/47+X//PMfr/aT31/1d5ff2//l//r/9ns+bW/+fu/4K4pZP9DwAAAD3I3f+FcYv9DwAAAM3I3f+OuMX+BwAAgGbk7r8Tt3Sy//X/N9//v6H/1//H9fx//b/+/+bp/6fp/9fQ/+v/9f/6fzZqbv1/7v53xi2d7H8AAADoQe7+L4pb7H8AAABoRu7+L45b7H8AAABoRu7+L4lbOtn/+n/P/9f/6//1/+Ovr/9fJv3/NP3/Gvr/6/bz9+n/9f/6f467ZP//+sSX7Y30/7n7vzRu6WT/AwAAQA9y939Z3GL/AwAAQDNy93953GL/AwAAQDNy939F3NLJ/tf/6//1//r/K/f/Z3/prej/x+n/t0P/P202/f/erdEP6/8X3/97/r/+X//PCXN7/n/u/q+MWzrZ/wAAANCD3P1fFbdM7P9L/8t8AAAAYKdy93913OL7/wAAALB4WZ3l7v+auKWT/a//1//r//X/nv8//vpT/f8Tx96f/n9e9P/TZtP/n0P/r/9f8vvX/+v/OWtu/X/u/q+NWzrZ/wAAANCD3P3vilvsfwAAAGhG7v6vi1vsfwAAAGhG7v6vj1s62f/j/f/Rn9f/X4z+/+T71/+P//rYVP+ff0X9/2T//9Ge/98n/f+07ff/t/X/J//6+v8btOv333j/f7Du8/X/jJlb/5+7/91xSyf7HwAAAHqQu/89cYv9DwAAAM3I3f8NcYv9DwAAAM3I3f+NcUsn+9/z//X/+v/l9f+e/39ol8//H7be/9/S/1+Q/n+a5/+vof/X/+v/Pf+fjZpb/5+7/71xSyf7HwAAAHrw3teG1e7/pmGw/wEAAGCJjv+3A6f/g9KQu/+b4xb7HwAAAJqRu/9b4pZO9r/+X/+v/9f/6//HX/+y/f+6ByN7/v926P+n6f/X0P/fRD9/q7H+/33nff4c+v936P+ZmRP9/1NHH99V/5+7/1vjlk72PwAAAPQgd/+3xS32PwAAADQjd/+3xy32PwAAADQjd/93xC2d7P8b7/8nglj9v/5f/6//b6n/X0f/vx36/2n6/zX0/57/7/n/+n826qj/P/n1cFf9f+7+74xbOtn/AAAA0IPc/d8Vt9j/AAAA0Izc/e+LW+x/AAAAaEbu/u+OWzrZ/57/r//X/+v/9f/jr6//Xyb9/zT9/xr6f/2//l//z0adeP7/Mbvq/3P3PxC3dLL/AQAAoAe5+x+MW+x/AAAAaEbu/u+JW+x/AAAAaEbu/u+NWzrZ//r/m+3/8+P6f/3/oP/X/+v/t6Lb/n9v7Heis87p/5/9pDsfe/Ij+n/9v/5f/6//ZwNm0f/fPfqny9z93xe3dLL/AQAAoAe5+78/brH/AQAAoBm5+38gbrH/AQAAoBm5+38wbrnk/v/gjb6r7dH/e/6//l//r/8ff339/zJ12/9fkOf/r6H/1//r//X/bNQs+v9jf5y7/4fiFt//BwAAgGbk7v/huMX+BwAAgGbk7v+RuMX+BwAAgGbk7v/RuKWT/a//1//r//X/+v/x179q/78/jNP/b4f+f5r+fw39v/5f/6//Z6Pm1v/n7n8obulk/wMAAEAPcvc/HLfY/wAAANCM3P0/FrfY/wAAANCM3P0/Hrd0sv/1//p//b/+X/8//vqe/79M+v9p+v9hGB6ZeANj/f/d2/p//b/+X//PFc2t/8/d/xNxSyf7HwAAAHqQu/+RuMX+BwAAgGbk7n80brH/AQAAoBm5+38ybulk/+v/9f/6f/2//n/89fX/y6T/n6b/X8Pz//X/+n/9Pxs1t/4/d/9jcUsn+x8AAAB6kLv/8bjF/gcAAIBm5O7/qbjF/gcAAIBm5O5/Im7pZP/r//X/+n/9/430/3f0/6fp/7fj5vr/Qf/fXv9/+suN/l//r//X/7Nh2+r/X4+v9+v6/9z9Px23dLL/AQAAoAe5+5+MW+x/AAAAaEbu/p+JW+x/AAAAaEbu/p+NWzrZ//p//b/+X//v+f/jr6//XybP/5+m/19D/6//v9T7/5ATf6T/1/9z1rb6//N6/9N/nLv/5+KWTvY/AAAA9CB3/1Nxi/0PAAAAzcjd/3TcYv8DAABAM3L3/3zc0sn+1//r/0/2/8Og/9f/6/8PbaH/3x/0/xun/5+m/19D/99m//8Bw5Kf/38Qfzp+uR+c+/n6f+Zobv1/7v5fiFs62f8AAADQg9z9vxi32P8AAADQjNz9vxS32P8AAADQjNz9vxy3tLT/3zg/fVt+/3/71Cfq/4dhePHtnv+v/594ff3/bPr/+ruq/98c/f+0Rvv/V4Zh0P9vQLP9/5bev+f/6/85a279f+7+X4lbWtr/AAAA0Lnc/b8at9j/AAAA0Izc/b8Wt9j/AAAA0Izc/b8et3Sy/5ff/5/+RP3/cK3n/+v/Vx/Q/+v/9f+Ldd3+/oH9+D1N/7+k/n/Lz/8/uPc7Xrf9/945/9wz6P/1//p/Rsyt/8/d/xtxSyf7HwAAAHqQu/+ZuMX+BwAAgGbk7n82brH/AQAAoBm5+38zbulk/+v/9f/6/2X2//v6f/2//n/UXJ7//+Y3f8zz+v9W+3/P/z+P/l//r//ntLn1/7n7fytu6WT/AwAAQA9y9/923GL/AwAAQDNy9z8Xt9j/AAAA0IznViHn/vA7w9Dl/j/b/983HBaqh8b6/2jU9P/H6P9Pvn/9//ivD8//1//r/2/eXPp/z/+/2vvX/+v/l/z+L9X/f/jZz9f/06K59f+5+5+PWzrZ/wAAANCD3P2/G7fY/wAAANCM3P2/F7fY/wAAANCM3P0vxC2d7H/P/7/h/v8+/b/+X/9fvy71//r/LdD/T9P/r6H/v34/n19V9f/Lff7/B+r/2Zy59f+5+38/blkNv4/4oCv+rwkAAADMSO7+P4hbOvn+PwAAAPQgd/8fxi32PwAAADQjd/8fxS2d7H/9v+f/6//1//r/8dfX/y+T/n+a/n+Nfvr//bEP7rqfv65dv/8d9v+rXxae/88cza3/z93/x3FLJ/sfAAAA2vba6sfc/X8St9j/AAAA0Izc/X8at9j/AAAA0Izc/S/GLZ3s/yX2/wf6f/3/pfr/T9D/n3p9/b/+v2X6//wdfZz+f41++v9Ru+7nN/b+7/0fQV/9/4r+nzmaW/+fu/+luKWT/Q8AAAA9yN3/Z3GL/Q8AAADNyN3/53GL/Q8AAAALdfvMR3L3/0Xc0sT+v7X2Zyyx//f8/6v3/3tDj/2/5//r//X/PVlO///g6G/Snv+v/9f/L/f96//1/5w1t/4/d//Le7ca3P8AAADQro/7yE9+6aI/9+XVj/vDX8Yt9j8AAAA0I3f/X8Ut9j8AAAA0I3f/X8ctnex//X9f/X+fz//X/+v/9f89WU7/P07/r//X/y/3/ev/9f+cNbf+P3f/38Qtx4bf+v8vegAAAMBW3X+5n567/2/jlk6+/w8AAAA9yN3/d3HLmf1/94L/VTsAAAAwN7n7/z5u6eT7//r/mff/ww31//Hz9P+Htt3/7536+fr/Q/p//f8m6P+nXbP/v7un/9f/T9D/6//1/5w2t/4/d/+Tjw1d7n8AAABo1Il/o/APqx/3h3+MWy66/09/owoAAACYndz9/xS3+P4/AAAANCN3/z/HLZ3sf/3/zPv/Kz3//6D+J8//n2f/v7Xn/79rf/T19f/6/5bp/6d5/v8a+n/9v/7/8v3/q4dH/8+YS/T/q0F60/1/7v5/iVs62f8AAADQg9z9/xq32P8AAADQjNz9/xa32P8AAADQjNz9/x63dLL/9f876P/ffXsYbrT/v8Dz//X/ffT/57x+O/3/h77pzjMf/4mPPqT/58g2+//8taD/1//r/w/p/zvt/4P+nzFze/5/7v7/iFs62f8AAADQg9z9r8Qt9j8AAAA0I3f/f8Yt9/b/07t6VwAAAMAm5e7/r7ilk+//6/9bfP7/Mvv//Hu9g/7/zvL6/2yKe+//Pf9f/3+W5/9P0/+vof/X/+v/9f9s1Nz6/9z9/x23dLL/AQAAoAe5+1+NW3L/7136X90DAAAAM5O7/3/iFt//BwAAgGbk7n8tbulk/+v/9f9z6f+T5/8ffZ7n/x/S/+v/L0P/P03/v4b+X/+v/9f/s1Fz6/9z9/9v3NLJ/gcAAIAe5O5/PW6x/wEAAKAZufv/L26x/wEAAKAZufv/P27pZP/r//X/+n/9//b7/8Ovtfr/o7+r+v/N0f9P0/+vof/X/+v/9f9s1Nz6/9z97w8AAP//9wRuTQ==") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 1.484667869s ago: executing program 5 (id=6112): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @empty, @empty, 0x700, 0x8000, 0x9}}) 1.395152181s ago: executing program 2 (id=6113): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) 1.272822535s ago: executing program 5 (id=6114): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x5b, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) 1.148699748s ago: executing program 2 (id=6115): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000841000/0x4000)=nil], 0x0, &(0x7f0000000000), 0x0) 1.148409639s ago: executing program 1 (id=6116): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) 1.035439822s ago: executing program 3 (id=6117): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x8008af26, &(0x7f0000000400)=0x200000000) 1.017320032s ago: executing program 1 (id=6118): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000020940)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x17e, &(0x7f0000020980)="$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") open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) 1.007024912s ago: executing program 5 (id=6119): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 920.578494ms ago: executing program 2 (id=6120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@dellinkprop={0x3c, 0x12, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10433}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) 788.655158ms ago: executing program 3 (id=6121): unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 737.63538ms ago: executing program 2 (id=6122): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 674.918782ms ago: executing program 5 (id=6123): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) 577.795894ms ago: executing program 3 (id=6124): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@loopback, @in=@local, 0x4e20, 0xc36, 0x4e22, 0x7, 0xa, 0x20, 0x80, 0x32}, {0x23bd, 0xfffffffffffffffb, 0xc, 0x4, 0xfffffffffffffff3, 0x11f3, 0x80000000, 0x1}, {0x80000000, 0x3, 0x1}, 0x8, 0x6e6bb1, 0x1, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x6, 0x1, 0x4, 0x16614bab, 0x9, 0x4}}, 0xe8) 575.105034ms ago: executing program 1 (id=6125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0xfffffffffffffd4c, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0) 521.118236ms ago: executing program 2 (id=6126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x200000bb) 430.562808ms ago: executing program 5 (id=6127): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000cc0)=@ethtool_eeprom={0xb, 0x9, 0x10000}}) 340.00361ms ago: executing program 4 (id=6128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 267.895153ms ago: executing program 3 (id=6129): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 264.292253ms ago: executing program 2 (id=6130): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x7f) 218.296924ms ago: executing program 5 (id=6131): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00', 0x1}, {0x0, 0x13}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) 210.280234ms ago: executing program 1 (id=6132): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="3504000039000563d25a80258c63940d0324fc60100000000c0009000200002037153e370c040a80060410074500", 0x2e}, {&(0x7f00000001c0)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68465cdf4d5b8d995d6e6a000000003d139c6a616232eb4efd1a50d0e6db3388a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af090068d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dea3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f000000", 0x407}], 0x2}, 0x0) 0s ago: executing program 3 (id=6133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bc29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): f277f79df99 code=0x7ffc0000 [ 320.879622][T13625] loop3: detected capacity change from 0 to 164 [ 320.920660][T13627] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 320.958126][ T26] audit: type=1326 audit(1785346638.607:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.4243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 320.991668][ T53] block nbd1: Attempted send on invalid socket [ 320.997918][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.112272][T13633] netlink: 392 bytes leftover after parsing attributes in process `syz.2.4250'. [ 321.193973][T13637] loop5: detected capacity change from 0 to 512 [ 321.373621][T13649] loop4: detected capacity change from 0 to 256 [ 321.391764][T13637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 321.425183][T13637] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.467725][T13649] FAT-fs (loop4): Directory bread(block 64) failed [ 321.478352][T13649] FAT-fs (loop4): Directory bread(block 65) failed [ 321.508110][T13649] FAT-fs (loop4): Directory bread(block 66) failed [ 321.518181][T13637] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.4252: unexpected EA_INODE flag [ 321.527445][T13649] FAT-fs (loop4): Directory bread(block 67) failed [ 321.536292][T13649] FAT-fs (loop4): Directory bread(block 68) failed [ 321.558119][T13649] FAT-fs (loop4): Directory bread(block 69) failed [ 321.579468][T13649] FAT-fs (loop4): Directory bread(block 70) failed [ 321.618132][T13649] FAT-fs (loop4): Directory bread(block 71) failed [ 321.636229][T13655] loop2: detected capacity change from 0 to 64 [ 321.648146][T13649] FAT-fs (loop4): Directory bread(block 72) failed [ 321.664091][T13649] FAT-fs (loop4): Directory bread(block 73) failed [ 321.706904][T10094] EXT4-fs (loop5): unmounting filesystem. [ 322.308080][ T128] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 322.518010][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 322.524862][ T128] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 322.525413][T13689] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 322.563228][ T128] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 322.589182][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.610525][ T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 322.647044][ T128] usb 5-1: config 1 has no interface number 0 [ 322.664806][ T128] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 322.693246][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.748823][ T128] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 322.948096][ T128] snd_usb_pod 5-1:1.1: set_interface failed [ 322.954247][ T128] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 322.981942][ T128] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 323.023902][ T128] usb 5-1: USB disconnect, device number 22 [ 323.333530][T13693] loop5: detected capacity change from 0 to 32768 [ 323.371309][T13693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4279 (13693) [ 323.454982][T13693] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.500278][T13693] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 323.526211][T13693] BTRFS info (device loop5): using free space tree [ 323.862706][T13693] BTRFS info (device loop5): enabling ssd optimizations [ 323.914426][T13742] tmpfs: Bad value for 'mpol' [ 323.947987][ T128] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 324.092341][T10094] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.154498][ T128] usb 5-1: config 5 has an invalid interface number: 211 but max is 0 [ 324.173478][ T128] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 324.216064][ T128] usb 5-1: config 5 has no interface number 0 [ 324.244093][ T128] usb 5-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 324.263623][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.314557][ T128] usb 5-1: Product: syz [ 324.331662][ T128] usb 5-1: Manufacturer: syz [ 324.346118][ T128] usb 5-1: SerialNumber: syz [ 324.391654][ T128] usb 5-1: bad CDC descriptors [ 324.408443][ T128] usb 5-1: bad CDC descriptors [ 324.580688][ T128] usb 5-1: USB disconnect, device number 23 [ 325.488224][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4317'. [ 325.508810][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4317'. [ 325.537882][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4317'. [ 325.594823][T13796] loop3: detected capacity change from 0 to 736 [ 325.846737][T13806] loop3: detected capacity change from 0 to 256 [ 325.919037][T13806] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 326.052091][T13806] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 326.199030][T13819] loop2: detected capacity change from 0 to 256 [ 326.281795][T13819] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 326.383845][T13819] exFAT-fs (loop2): invalid start cluster (17) [ 326.828646][ T26] audit: type=1326 audit(1785346644.677:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.3.4341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde0279df99 code=0x0 [ 326.852220][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.029556][T13848] loop3: detected capacity change from 0 to 512 [ 327.050388][T13848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 327.091378][T13850] loop2: detected capacity change from 0 to 1024 [ 327.126245][T13848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 327.143197][T13848] ext4 filesystem being mounted at /887/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.307802][T13850] hfsplus: xattr searching failed [ 327.415721][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 327.572232][ T26] audit: type=1326 audit(1785346645.417:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.4355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 327.607516][T13864] x_tables: duplicate underflow at hook 4 [ 327.633811][T13871] x_tables: unsorted underflow at hook 3 [ 327.639747][ T26] audit: type=1326 audit(1785346645.447:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.4355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 327.646937][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4356'. [ 327.736566][ T26] audit: type=1326 audit(1785346645.447:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.4355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 327.812065][ T26] audit: type=1326 audit(1785346645.447:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.4355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 327.836159][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.873512][T13878] loop3: detected capacity change from 0 to 256 [ 329.348496][T13942] loop1: detected capacity change from 0 to 2048 [ 329.391556][T13942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.587755][ T128] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 329.674047][T13920] loop2: detected capacity change from 0 to 32768 [ 329.810491][ T128] usb 6-1: Using ep0 maxpacket: 8 [ 329.822174][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.895533][ T128] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 329.910957][T13960] No such timeout policy "syz1" [ 329.920012][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.929472][T13956] loop3: detected capacity change from 0 to 4096 [ 329.956613][T13956] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 329.957658][ T128] usb 6-1: Product: syz [ 330.020719][ T128] usb 6-1: Manufacturer: syz [ 330.036700][T13956] ntfs: volume version 3.1. [ 330.038202][ T128] usb 6-1: SerialNumber: syz [ 330.076560][ T128] usb 6-1: config 0 descriptor?? [ 330.098893][ T128] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 330.117077][ T128] usb 6-1: selecting invalid altsetting 1 [ 330.246502][T13968] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4406'. [ 330.293619][ T128] gspca_stk014: init reg: 0x00 [ 330.298584][ T128] stk014: probe of 6-1:0.0 failed with error -5 [ 330.593485][ T128] usb 6-1: USB disconnect, device number 8 [ 330.974447][T13988] xt_CT: No such helper "snmp" [ 331.480220][ T26] audit: type=1326 audit(1785346649.317:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.5.4428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 331.504321][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.607050][T14018] loop1: detected capacity change from 0 to 4096 [ 331.620981][ T26] audit: type=1326 audit(1785346649.357:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.5.4428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 331.675002][T14018] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 331.708031][ T26] audit: type=1326 audit(1785346649.357:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.5.4428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277f79df99 code=0x7ffc0000 [ 331.804344][T14018] ntfs: volume version 3.1. [ 331.899281][T14026] wg1 speed is unknown, defaulting to 1000 [ 332.251563][T14043] loop2: detected capacity change from 0 to 256 [ 332.303281][T14043] exfat: Deprecated parameter 'namecase' [ 332.353066][T14043] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 333.638799][T14088] loop2: detected capacity change from 0 to 4096 [ 333.663444][T14092] loop5: detected capacity change from 0 to 4096 [ 333.700904][T14092] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 333.980563][T10094] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 334.013039][T10094] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 334.054722][T10094] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 335.579651][T14173] kAFS: unable to lookup cell '@mTsyz0' [ 335.787263][ T8941] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 335.977299][ T8941] usb 2-1: Using ep0 maxpacket: 32 [ 335.999379][ T8941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.033045][ T8941] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 336.057189][ T8941] usb 2-1: config 7 has no interface number 0 [ 336.063385][ T8941] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x8A has invalid wMaxPacketSize 0 [ 336.099879][ T8941] usb 2-1: config 7 interface 187 has no altsetting 0 [ 336.120675][ T8941] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 336.147145][ T8941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.173926][ T8941] usb 2-1: Product: syz [ 336.188271][ T8941] usb 2-1: Manufacturer: syz [ 336.205419][ T8941] usb 2-1: SerialNumber: syz [ 336.442960][ T8941] usb 2-1: Unknown endpoint type found, address 0x07 [ 336.477148][ T8941] usb 2-1: Unknown endpoint type found, address 0x8a [ 336.483919][ T8941] usb 2-1: Not enough endpoints found in device, aborting! [ 336.681137][ T1172] usb 2-1: USB disconnect, device number 16 [ 337.715444][T14249] netlink: 'syz.4.4538': attribute type 7 has an invalid length. [ 338.141922][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4544'. [ 338.208970][T14268] loop3: detected capacity change from 0 to 512 [ 338.217322][ T1172] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 338.304880][T14268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 338.346227][T14268] ext4 filesystem being mounted at /930/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.430682][ T1172] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 338.454614][T14268] __quota_error: 6 callbacks suppressed [ 338.454631][T14268] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 338.464337][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4550'. [ 338.480043][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.480069][ T1172] usb 5-1: Product: syz [ 338.480083][ T1172] usb 5-1: Manufacturer: syz [ 338.488393][T14268] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 338.517152][T14268] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4546: Failed to acquire dquot type 0 [ 338.527434][ T1172] usb 5-1: SerialNumber: syz [ 338.574969][ T1172] usb 5-1: config 0 descriptor?? [ 338.604247][ T1172] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached [ 338.696578][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 338.864103][ T1172] usb 5-1: USB disconnect, device number 24 [ 338.873924][ T1172] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected [ 339.180760][T14303] netlink: 'syz.1.4562': attribute type 1 has an invalid length. [ 339.245219][T14307] device veth0_vlan left promiscuous mode [ 339.284331][T14307] device veth0_vlan entered promiscuous mode [ 340.283735][T14349] loop3: detected capacity change from 0 to 1024 [ 340.290717][T14355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4588'. [ 340.401982][T14349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 340.563528][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 340.665841][ T26] audit: type=1326 audit(1785346658.498:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 340.752089][ T26] audit: type=1326 audit(1785346658.508:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46da55e7ce code=0x7ffc0000 [ 340.802976][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4598'. [ 340.809242][ T26] audit: type=1326 audit(1785346658.508:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 340.815210][T14380] loop1: detected capacity change from 0 to 256 [ 340.842063][ T26] audit: type=1326 audit(1785346658.508:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 340.871557][ T26] audit: type=1326 audit(1785346658.518:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 340.896664][ T26] audit: type=1326 audit(1785346658.518:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 340.936945][ T1172] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 340.948645][ T26] audit: type=1326 audit(1785346658.788:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 340.973628][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 341.001965][ T26] audit: type=1326 audit(1785346658.828:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14371 comm="syz.2.4596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46da59dc2b code=0x7ffc0000 [ 341.184937][ T1172] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.198678][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.236394][ T1172] usb 3-1: Product: syz [ 341.245174][ T1172] usb 3-1: Manufacturer: syz [ 341.276845][ T1172] usb 3-1: SerialNumber: syz [ 341.308638][ T1172] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.391113][ T1172] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.451941][T14396] loop5: detected capacity change from 0 to 1024 [ 341.522147][T14396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 341.645447][ T8941] usb 3-1: USB disconnect, device number 17 [ 341.688565][T10094] EXT4-fs (loop5): unmounting filesystem. [ 341.694599][T14386] loop1: detected capacity change from 0 to 32768 [ 341.752559][T14386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4601 (14386) [ 341.812721][T14386] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.860138][T14386] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 341.899551][T14386] BTRFS info (device loop1): using free space tree [ 342.005890][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4614'. [ 342.057159][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4614'. [ 342.066156][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4614'. [ 342.180783][T14386] BTRFS info (device loop1): enabling ssd optimizations [ 342.273199][T14438] loop2: detected capacity change from 0 to 8 [ 342.330266][T14438] SQUASHFS error: Failed to read block 0x6fc: -5 [ 342.347512][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.359727][T14438] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 342.501800][ T1172] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 342.510129][ T1172] ath9k_htc: Failed to initialize the device [ 342.516675][ T8941] usb 3-1: ath9k_htc: USB layer deinitialized [ 343.105536][T14466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4631'. [ 343.162285][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4631'. [ 343.198271][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4631'. [ 343.244603][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4633'. [ 343.254087][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.498666][T14485] autofs4:pid:14485:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 343.635964][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'. [ 343.802276][T14499] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 343.835145][T14499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4645'. [ 343.915925][T14497] loop3: detected capacity change from 0 to 4096 [ 344.143507][T14497] Cannot load nls cp857¬ [ 344.323030][T14518] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 344.418942][T14525] loop4: detected capacity change from 0 to 1024 [ 344.511575][T14525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.778954][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 344.881810][T14544] loop5: detected capacity change from 0 to 1024 [ 344.976778][T14544] hfsplus: xattr searching failed [ 345.524544][T14572] loop1: detected capacity change from 0 to 2048 [ 345.541986][T14576] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.582435][T14572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.145299][T14603] loop4: detected capacity change from 0 to 256 [ 346.206595][ T4317] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 346.219304][T14603] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 346.303504][T14603] exFAT-fs (loop4): invalid start cluster (17) [ 346.386842][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 346.395174][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.428738][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.479333][ T4317] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 346.529168][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.539533][T14620] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 346.559784][ T4317] usb 2-1: config 0 descriptor?? [ 346.582373][ T4317] xbox_remote_probe: endpoint_in message size==0? [ 346.781559][ T4317] usbhid 2-1:0.0: can't add hid device: -71 [ 346.794684][ T4317] usbhid: probe of 2-1:0.0 failed with error -71 [ 346.818409][ T4317] usb 2-1: USB disconnect, device number 17 [ 346.955394][T14641] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 347.156441][T14649] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4716'. [ 347.176815][ T8948] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 347.372772][ T8948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.395744][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 347.405345][ T8948] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 347.445234][ T8948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 347.476498][ T8948] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.497606][ T8948] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.522417][ T8948] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.551142][ T8948] usb 3-1: Manufacturer: syz [ 347.570802][ T8948] usb 3-1: config 0 descriptor?? [ 347.800099][ T4317] usb 3-1: USB disconnect, device number 18 [ 348.465542][T14702] loop1: detected capacity change from 0 to 164 [ 348.469191][T14677] loop4: detected capacity change from 0 to 32768 [ 348.484107][T14701] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4743'. [ 348.507553][T14677] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.4730 (14677) [ 348.575434][T14677] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 348.646088][T14677] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 348.687072][T14677] BTRFS info (device loop4): enabling ssd optimizations [ 348.694079][T14677] BTRFS info (device loop4): not using ssd optimizations [ 348.748380][T14677] BTRFS info (device loop4): turning off barriers [ 348.754859][T14677] BTRFS info (device loop4): use no compression [ 348.810664][T14677] BTRFS info (device loop4): using free space tree [ 349.030414][T14729] usb usb9: usbfs: process 14729 (syz.1.4752) did not claim interface 1 before use [ 349.089379][T14738] netlink: 'syz.5.4753': attribute type 30 has an invalid length. [ 349.325097][ T4279] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 349.506490][ T4317] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 349.712802][ T4263] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (4263) [ 349.716434][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 349.769605][T14764] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 349.795199][ T4317] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.832635][ T4317] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.846641][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 349.894177][ T4317] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 349.946449][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 349.985701][ T4317] usb 6-1: Product: syz [ 350.005949][ T4317] usb 6-1: Manufacturer: syz [ 350.040321][ T4317] usb 6-1: SerialNumber: syz [ 350.062278][ T4317] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input19 [ 350.242967][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 350.242982][ T26] audit: type=1326 audit(1785346668.078:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0279df99 code=0x7ffc0000 [ 350.273313][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.382605][ T26] audit: type=1326 audit(1785346668.138:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde0275e7ce code=0x7ffc0000 [ 350.420241][ T26] audit: type=1326 audit(1785346668.138:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.427855][T14765] usb 6-1: USB disconnect, device number 9 [ 350.444415][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 350.491705][ T26] audit: type=1326 audit(1785346668.138:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.543774][T14785] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4772'. [ 350.567382][T14765] appletouch 6-1:1.0: input: appletouch disconnected [ 350.581407][ T26] audit: type=1326 audit(1785346668.168:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.608398][ T8948] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 350.642433][ T26] audit: type=1326 audit(1785346668.168:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.681105][ T26] audit: type=1326 audit(1785346668.458:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.712495][ T26] audit: type=1326 audit(1785346668.458:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.805471][T14775] loop4: detected capacity change from 0 to 32768 [ 350.811197][T14774] loop2: detected capacity change from 0 to 32768 [ 350.812762][ T26] audit: type=1326 audit(1785346668.658:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.852295][ T8948] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.863369][T14774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4766 (14774) [ 350.866337][ T8948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.914513][ T8948] usb 4-1: Product: syz [ 350.924156][ T26] audit: type=1326 audit(1785346668.688:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.3.4770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde0279dc2b code=0x7ffc0000 [ 350.954666][ T8948] usb 4-1: Manufacturer: syz [ 350.961349][T14775] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.4769 (14775) [ 350.982996][ T8948] usb 4-1: SerialNumber: syz [ 351.010465][T14774] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.013256][ T8948] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.046928][T14774] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 351.086147][T14774] BTRFS info (device loop2): using free space tree [ 351.123731][ T8948] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.318770][ T4265] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4265) [ 351.481295][T14774] BTRFS info (device loop2): enabling ssd optimizations [ 351.618800][ T9544] usb 4-1: USB disconnect, device number 22 [ 351.703496][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.915753][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4263) [ 352.046068][T14830] loop4: detected capacity change from 0 to 4096 [ 352.073866][T14830] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.150245][T14830] EXT4-fs (loop4): Test dummy encryption mode enabled [ 352.167270][ T8948] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 352.184692][ T8948] ath9k_htc: Failed to initialize the device [ 352.248691][ T9544] usb 4-1: ath9k_htc: USB layer deinitialized [ 352.337578][T14830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.342040][T14849] netlink: 'syz.1.4790': attribute type 12 has an invalid length. [ 352.354465][T14849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4790'. [ 352.764028][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 353.019349][T14868] netlink: 'syz.3.4808': attribute type 9 has an invalid length. [ 353.031969][T14869] program syz.1.4798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.064189][T14869] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.190386][T14873] cgroup: none used incorrectly [ 353.375322][T14880] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4804'. [ 353.386307][ T8946] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 353.409920][T14880] bridge_slave_1: default FDB implementation only supports local addresses [ 353.433400][T14885] sctp: [Deprecated]: syz.3.4806 (pid 14885) Use of int in max_burst socket option deprecated. [ 353.433400][T14885] Use struct sctp_assoc_value instead [ 353.590952][ T8946] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.610516][ T8946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.625225][ T8946] usb 6-1: Product: syz [ 353.652589][ T8946] usb 6-1: Manufacturer: syz [ 353.657731][ T8946] usb 6-1: SerialNumber: syz [ 353.727077][ T8946] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 353.765787][ T8946] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.041299][ T4317] usb 6-1: USB disconnect, device number 10 [ 354.416507][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4827'. [ 354.743470][T14940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4835'. [ 354.763506][T14938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4833'. [ 354.839298][T14938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4833'. [ 354.886431][ T8946] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 354.894042][ T8946] ath9k_htc: Failed to initialize the device [ 354.936613][ T4317] usb 6-1: ath9k_htc: USB layer deinitialized [ 354.994013][T14943] loop3: detected capacity change from 0 to 4096 [ 355.045198][T14943] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 355.212126][T14943] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 355.456102][ T9544] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 355.472298][ T26] kauditd_printk_skb: 130 callbacks suppressed [ 355.472311][ T26] audit: type=1326 audit(1785346673.309:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 355.480518][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 355.502630][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.596080][ T26] audit: type=1326 audit(1785346673.369:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 355.697200][ T26] audit: type=1326 audit(1785346673.539:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 355.735821][ T9544] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.771255][ T9544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.775011][ T26] audit: type=1326 audit(1785346673.569:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 355.793868][ T9544] usb 2-1: Product: syz [ 355.856325][ T9544] usb 2-1: Manufacturer: syz [ 355.866077][ T9544] usb 2-1: SerialNumber: syz [ 355.892172][ T9544] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.901364][ T26] audit: type=1326 audit(1785346673.569:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 355.967967][ T9544] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.016548][ T26] audit: type=1326 audit(1785346673.569:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 356.058246][T14984] loop3: detected capacity change from 0 to 1764 [ 356.059205][T14988] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 356.081286][ T26] audit: type=1326 audit(1785346673.569:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 356.249843][T14840] usb 2-1: USB disconnect, device number 18 [ 356.264225][ T26] audit: type=1326 audit(1785346673.569:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 356.406756][ T26] audit: type=1326 audit(1785346673.569:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 356.472192][ T26] audit: type=1326 audit(1785346673.569:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.1.4842" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f794e99dc2b code=0x7ffc0000 [ 356.647564][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4866'. [ 356.807482][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'. [ 357.005633][T15021] netlink: 'syz.1.4874': attribute type 7 has an invalid length. [ 357.046098][ T9544] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 357.053168][ T9544] ath9k_htc: Failed to initialize the device [ 357.093468][T14840] usb 2-1: ath9k_htc: USB layer deinitialized [ 357.219825][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4879'. [ 357.259298][T15033] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4880'. [ 357.318121][T15033] bridge_slave_1: default FDB implementation only supports local addresses [ 357.473599][T15045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4885'. [ 357.636223][T15049] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 357.701225][T15056] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.287172][T15086] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 358.362010][T15090] netlink: 'syz.5.4906': attribute type 3 has an invalid length. [ 358.576299][T15100] netlink: 'syz.5.4911': attribute type 1 has an invalid length. [ 358.979492][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.016621][T15118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 359.322295][T15130] loop5: detected capacity change from 0 to 512 [ 359.438063][T15130] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.4927: bad orphan inode 13 [ 359.486533][T15130] ext4_test_bit(bit=12, block=4) = 1 [ 359.491980][T15130] is_bad_inode(inode)=0 [ 359.496277][T15130] NEXT_ORPHAN(inode)=0 [ 359.500947][T15130] max_ino=32 [ 359.504258][T15130] i_nlink=1 [ 359.507791][T15130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 359.534518][T15130] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.4927: Hash code is SIPHASH, but hash not in dirent [ 359.574484][T15120] loop4: detected capacity change from 0 to 32768 [ 359.595961][T15130] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4927: Corrupt directory, running e2fsck is recommended [ 359.611680][T15120] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 359.664141][T15130] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.4927: Hash code is SIPHASH, but hash not in dirent [ 359.733282][T15130] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4927: Corrupt directory, running e2fsck is recommended [ 359.827114][T15144] netlink: 'syz.3.4933': attribute type 3 has an invalid length. [ 359.861649][T15144] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4933'. [ 359.879575][T10094] EXT4-fs (loop5): unmounting filesystem. [ 359.944865][ T4265] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 360.185852][ T8946] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 360.367033][ T8946] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 360.375170][ T8946] usb 5-1: config 0 has no interface number 0 [ 360.381778][ T8946] usb 5-1: too many endpoints for config 0 interface 49 altsetting 53: 255, using maximum allowed: 30 [ 360.392820][ T8946] usb 5-1: config 0 interface 49 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 360.406134][ T8946] usb 5-1: config 0 interface 49 has no altsetting 0 [ 360.415289][ T8946] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 360.426716][ T8946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.434746][ T8946] usb 5-1: Product: syz [ 360.438989][ T8946] usb 5-1: Manufacturer: syz [ 360.443592][ T8946] usb 5-1: SerialNumber: syz [ 360.454298][ T8946] usb 5-1: config 0 descriptor?? [ 360.672480][T14836] usb 5-1: USB disconnect, device number 25 [ 361.271541][T15156] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 361.272922][T15157] kAFS: No cell specified [ 361.298181][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 361.298194][ T26] audit: type=1326 audit(1785346679.139:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe78f9df99 code=0x7ffc0000 [ 361.385494][ T26] audit: type=1326 audit(1785346679.139:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe78f9df99 code=0x7ffc0000 [ 361.456942][ T26] audit: type=1326 audit(1785346679.169:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe78f5e7ce code=0x7ffc0000 [ 361.538614][ T26] audit: type=1326 audit(1785346679.169:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.595730][ T8948] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 361.634869][ T26] audit: type=1326 audit(1785346679.169:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.669536][T15171] loop3: detected capacity change from 0 to 256 [ 361.686990][ T26] audit: type=1326 audit(1785346679.179:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.702773][T15171] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.755803][ T26] audit: type=1326 audit(1785346679.179:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.795498][ T26] audit: type=1326 audit(1785346679.439:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.834954][ T26] audit: type=1326 audit(1785346679.439:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.841326][ T8948] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.872838][ T26] audit: type=1326 audit(1785346679.669:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.4.4935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe78f9dc2b code=0x7ffc0000 [ 361.898990][ T8948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.907262][ T8948] usb 5-1: Product: syz [ 361.911571][ T8948] usb 5-1: Manufacturer: syz [ 361.916319][ T8948] usb 5-1: SerialNumber: syz [ 361.929254][ T8948] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.935936][T14840] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 361.954232][ T8948] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.159719][T15185] xt_hashlimit: size too large, truncated to 1048576 [ 362.167567][T14840] usb 6-1: Using ep0 maxpacket: 32 [ 362.174765][T14840] usb 6-1: config 2 has an invalid interface number: 157 but max is 0 [ 362.205520][T14840] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 362.228087][T14840] usb 6-1: config 2 has no interface number 0 [ 362.265776][T14840] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 362.303630][T14840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.329304][T14840] usb 6-1: Product: syz [ 362.348611][T14840] usb 6-1: Manufacturer: syz [ 362.364583][T14840] usb 6-1: SerialNumber: syz [ 362.384216][ T4317] usb 5-1: USB disconnect, device number 26 [ 362.425438][T14840] imon 6-1:2.157: unable to register, err -19 [ 362.638172][T14836] usb 6-1: USB disconnect, device number 11 [ 363.045832][ T8948] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 363.055037][ T8948] ath9k_htc: Failed to initialize the device [ 363.096993][ T4317] usb 5-1: ath9k_htc: USB layer deinitialized [ 363.384241][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 363.413491][T15233] loop4: detected capacity change from 0 to 256 [ 363.489888][T15235] kAFS: Can only specify source 'none' with -o dyn [ 363.517724][T15233] FAT-fs (loop4): Directory bread(block 64) failed [ 363.524321][T15233] FAT-fs (loop4): Directory bread(block 65) failed [ 363.611141][T15233] FAT-fs (loop4): Directory bread(block 66) failed [ 363.654601][T15233] FAT-fs (loop4): Directory bread(block 67) failed [ 363.689061][T15233] FAT-fs (loop4): Directory bread(block 68) failed [ 363.710653][T15233] FAT-fs (loop4): Directory bread(block 69) failed [ 363.732546][T15233] FAT-fs (loop4): Directory bread(block 70) failed [ 363.758915][T15233] FAT-fs (loop4): Directory bread(block 71) failed [ 363.778208][T15233] FAT-fs (loop4): Directory bread(block 72) failed [ 363.804309][T15233] FAT-fs (loop4): Directory bread(block 73) failed [ 363.884644][T15233] syz.4.4975: attempt to access beyond end of device [ 363.884644][T15233] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 363.949647][T15233] syz.4.4975: attempt to access beyond end of device [ 363.949647][T15233] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 364.766273][T15280] loop1: detected capacity change from 0 to 4096 [ 364.817470][T15280] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 364.948262][T15280] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 365.137068][ T4318] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 365.143920][ T4271] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 365.155517][ T4271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 365.162554][ T4271] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 365.212065][ T11] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 365.236977][ T4271] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 365.243853][ T4271] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 365.360407][T15309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 365.465623][T14836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 365.662999][T14836] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 365.691115][T14836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.729045][T14836] usb 3-1: config 0 descriptor?? [ 365.874755][T15334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5025'. [ 365.915981][T15335] loop3: detected capacity change from 0 to 512 [ 366.002149][T15335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 366.034986][T15335] ext4 filesystem being mounted at /1035/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.045528][ T9544] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 366.139147][T15346] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[10094] was attempted by ""[15346] [ 366.144802][T14836] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 366.170660][T14836] hackrf 3-1:0.0: Could not detect board [ 366.180902][T14836] hackrf: probe of 3-1:0.0 failed with error -71 [ 366.196855][T14836] usb 3-1: USB disconnect, device number 19 [ 366.225572][ T9544] usb 2-1: Using ep0 maxpacket: 16 [ 366.232600][ T9544] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 366.271906][ T9544] usb 2-1: config 254 has no interface number 0 [ 366.281652][ T9544] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 366.294026][ T9544] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.322740][ T9544] usb 2-1: config 254 interface 235 has no altsetting 0 [ 366.338217][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 366.372655][ T9544] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 366.385521][ T9544] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 366.415879][ T9544] usb 2-1: Product: syz [ 366.420110][ T9544] usb 2-1: Manufacturer: syz [ 366.434976][ T9544] usb 2-1: SerialNumber: syz [ 366.457982][T15329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.702506][T15329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.743070][ T9544] usbtest 2-1:254.235: Linux gadget zero [ 366.751787][ T9544] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 366.980253][ T8948] usb 2-1: USB disconnect, device number 19 [ 367.006056][T15368] loop3: detected capacity change from 0 to 4096 [ 367.070981][T15368] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 367.248519][T15382] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 367.266198][ T4283] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 367.584269][T15396] device bridge_slave_1 left promiscuous mode [ 367.600381][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.636430][T15396] netlink: 'syz.5.5054': attribute type 3 has an invalid length. [ 367.638375][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5056'. [ 367.653721][T15396] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 367.706069][T15402] loop2: detected capacity change from 0 to 256 [ 368.212261][T15419] loop5: detected capacity change from 0 to 4096 [ 368.356542][T15419] NILFS (loop5): the device already has a read-only mount. [ 368.498089][T15431] device bridge_slave_1 left promiscuous mode [ 368.501096][T15433] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 368.525874][T15431] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.544788][T15431] netlink: 'syz.4.5071': attribute type 3 has an invalid length. [ 368.573435][T15431] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 368.625638][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5074'. [ 369.067510][T15454] loop4: detected capacity change from 0 to 4096 [ 369.107112][T15454] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 369.216102][T15454] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 369.379273][ T4318] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 369.408024][ T4279] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 369.422012][ T4279] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 369.439495][ T4279] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 369.467745][ T4346] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 369.484683][ T4279] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 369.496962][ T4279] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 369.591860][T15448] loop1: detected capacity change from 0 to 32768 [ 369.595356][T15444] loop5: detected capacity change from 0 to 32768 [ 369.620195][T15448] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 369.657636][ T9544] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 369.718000][T15444] XFS (loop5): Mounting V5 Filesystem [ 369.885447][ T9544] usb 3-1: Using ep0 maxpacket: 32 [ 369.892475][ T9544] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 369.934607][ T9544] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 369.964840][ T9544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.969153][T15444] XFS (loop5): Ending clean mount [ 369.995269][ T9544] usb 3-1: Product: syz [ 369.999529][ T9544] usb 3-1: Manufacturer: syz [ 370.029101][ T9544] usb 3-1: SerialNumber: syz [ 370.046983][ T9544] usb 3-1: config 0 descriptor?? [ 370.052624][T15462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.080734][ T9544] hub 3-1:0.0: bad descriptor, ignoring hub [ 370.099431][ T4263] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 370.099530][ T9544] hub: probe of 3-1:0.0 failed with error -5 [ 370.178888][ T9544] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 370.196148][T15490] xt_bpf: check failed: parse error [ 370.246097][T15492] netlink: 'syz.3.5098': attribute type 2 has an invalid length. [ 370.279688][T10094] XFS (loop5): Unmounting Filesystem [ 370.349442][T15492] netlink: 'syz.3.5098': attribute type 1 has an invalid length. [ 370.386252][T15492] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5098'. [ 370.461788][T14841] usb 3-1: USB disconnect, device number 20 [ 370.467862][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 371.640788][T15510] loop1: detected capacity change from 0 to 32768 [ 371.716617][T15510] (syz.1.5107,15510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 371.776374][T15510] (syz.1.5107,15510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 371.839959][T15510] (syz.1.5107,15510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 371.934935][T15510] JBD2: Ignoring recovery information on journal [ 371.977926][T15554] dns_resolver: Unsupported content type (254) [ 372.106270][T15510] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 372.129824][T15559] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.5131'. [ 372.143875][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5130'. [ 372.195443][T15560] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5130'. [ 372.220101][T15563] device bridge_slave_1 left promiscuous mode [ 372.235811][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5130'. [ 372.259678][T15563] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.289982][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5130'. [ 372.308598][T15563] netlink: 'syz.2.5132': attribute type 3 has an invalid length. [ 372.325635][T15563] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 372.442291][T15568] MPI: mpi too large (107144 bits) [ 372.462005][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 373.078193][T15596] loop2: detected capacity change from 0 to 64 [ 373.202693][T15596] Bad inode number on dev loop2: 150994946 is out of range [ 373.338934][T15602] device bridge_slave_1 left promiscuous mode [ 373.385745][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.427658][T15602] netlink: 'syz.1.5151': attribute type 3 has an invalid length. [ 373.479469][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5154'. [ 373.489690][T15602] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 373.494385][T15580] loop4: detected capacity change from 0 to 32768 [ 373.539946][T15580] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 373.543646][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5154'. [ 373.579567][T15580] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 373.583627][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5154'. [ 373.624789][T15580] BTRFS info (device loop4): enabling ssd optimizations [ 373.676989][T15580] BTRFS info (device loop4): not using ssd optimizations [ 373.684096][T15580] BTRFS info (device loop4): turning off barriers [ 373.745295][T15580] BTRFS info (device loop4): using free space tree [ 374.162925][T15644] dns_resolver: Unsupported content type (254) [ 374.335941][ T4279] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 374.478333][T15656] device bridge_slave_1 left promiscuous mode [ 374.535284][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.650150][T15656] netlink: 'syz.3.5169': attribute type 3 has an invalid length. [ 374.669231][T15656] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 375.077619][T15676] x_tables: unsorted underflow at hook 4 [ 375.175149][ T8942] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 375.365191][ T8942] usb 4-1: Using ep0 maxpacket: 16 [ 375.372480][ T8942] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 375.394914][ T8942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.435032][ T8942] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 375.444163][ T8942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.485787][ T8942] usb 4-1: config 0 descriptor?? [ 375.507057][ T8942] pxrc 4-1:0.0: Could not find endpoint [ 375.605058][T15696] netlink: 'syz.1.5188': attribute type 3 has an invalid length. [ 375.612892][T15696] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 375.740083][ T4313] usb 4-1: USB disconnect, device number 23 [ 375.803467][T15679] loop2: detected capacity change from 0 to 32768 [ 375.857965][T15679] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.5181 (15679) [ 375.933391][T15707] loop5: detected capacity change from 0 to 1024 [ 375.946630][T15707] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 375.976615][T15679] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 376.019635][T15707] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 376.023322][T15679] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 376.053948][T15679] BTRFS info (device loop2): enabling ssd optimizations [ 376.068528][T15707] EXT4-fs (loop5): orphan cleanup on readonly fs [ 376.077581][T15679] BTRFS info (device loop2): not using ssd optimizations [ 376.084666][T15679] BTRFS info (device loop2): turning off barriers [ 376.112529][T15679] BTRFS info (device loop2): using free space tree [ 376.124077][T15707] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.5195: Inode bitmap for bg 0 marked uninitialized [ 376.191714][T15707] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 376.430977][T15708] loop4: detected capacity change from 0 to 32768 [ 376.502488][T10094] EXT4-fs (loop5): unmounting filesystem. [ 376.742290][ T4275] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 377.062903][ T4263] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (4263) [ 377.135083][T14765] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 377.315041][T14841] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 377.324915][T14765] usb 2-1: Using ep0 maxpacket: 32 [ 377.332094][T14765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 377.354079][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.370428][T14765] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 377.390238][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.400135][T14765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.409214][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.430553][T14765] usb 2-1: Product: syz [ 377.436400][T15752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.440703][T14765] usb 2-1: Manufacturer: syz [ 377.494871][T14765] usb 2-1: SerialNumber: syz [ 377.512558][T14765] usb 2-1: config 0 descriptor?? [ 377.517690][T14841] usb 5-1: Using ep0 maxpacket: 8 [ 377.526549][T14841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.555575][T15743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.566169][T15737] loop5: detected capacity change from 0 to 32768 [ 377.566401][T14765] hub 2-1:0.0: bad descriptor, ignoring hub [ 377.579928][T14841] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 377.598499][T14765] hub: probe of 2-1:0.0 failed with error -5 [ 377.604623][T14841] usb 5-1: config 1 has no interface number 0 [ 377.619651][T14765] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 377.630024][T15737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5200 (15737) [ 377.637119][T14841] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 377.704492][T14841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.744846][T14841] usb 5-1: Product: syz [ 377.755110][T14841] usb 5-1: Manufacturer: syz [ 377.773043][T14841] usb 5-1: SerialNumber: syz [ 377.837971][T15737] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.899286][T15737] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 377.965201][T15737] BTRFS info (device loop5): using free space tree [ 377.992513][ T8942] usb 2-1: USB disconnect, device number 20 [ 377.992544][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 378.076550][T14841] usb 5-1: USB disconnect, device number 27 [ 378.208831][T15751] loop3: detected capacity change from 0 to 32768 [ 378.308788][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.358168][T15751] XFS (loop3): Mounting V5 Filesystem [ 378.390994][T15737] BTRFS info (device loop5): enabling ssd optimizations [ 378.479702][T15737] BTRFS warning (device loop5): can't clear the free_space_tree,compat_ro:1,verity feature bits while mounted [ 378.494616][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.545669][T15751] XFS (loop3): Ending clean mount [ 378.574821][ T9544] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 378.611593][T10094] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.665713][ T4283] XFS (loop3): Unmounting Filesystem [ 378.765018][ T9544] usb 3-1: Using ep0 maxpacket: 8 [ 378.771818][ T9544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.803577][ T9544] usb 3-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 378.856389][ T9544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.886555][ T9544] usb 3-1: config 0 descriptor?? [ 378.910039][ T9544] usb 3-1: Found UVC 148.00 device (05a9:2630) [ 378.917613][ T9544] usb 3-1: No valid video chain found. [ 378.981745][T15799] loop4: detected capacity change from 0 to 128 [ 379.053408][T15799] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 379.181585][T14761] usb 3-1: USB disconnect, device number 21 [ 379.268061][T15803] netlink: 'syz.4.5220': attribute type 3 has an invalid length. [ 379.582781][T15814] netlink: 'syz.4.5223': attribute type 1 has an invalid length. [ 380.162520][T15827] loop3: detected capacity change from 0 to 4096 [ 380.203785][T15827] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 380.312342][T15810] loop5: detected capacity change from 0 to 32768 [ 380.326142][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 380.326156][ T26] audit: type=1800 audit(1785346698.160:573): pid=15827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5230" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 380.381359][T15827] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 380.414030][T15810] (syz.5.5213,15810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 380.438025][T15827] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 380.467470][T15827] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 380.493767][T15810] (syz.5.5213,15810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 380.569144][T15810] (syz.5.5213,15810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 380.644447][ T57] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 380.661700][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5241'. [ 380.661706][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5242'. [ 380.670895][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5242'. [ 380.710589][ T4283] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 380.726312][T15810] JBD2: Ignoring recovery information on journal [ 380.847636][T15810] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 380.855062][T15855] CIFS mount error: No usable UNC path provided in device string! [ 380.855062][T15855] [ 380.924937][T15855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.027200][T15861] loop1: detected capacity change from 0 to 64 [ 381.220948][T10094] ocfs2: Unmounting device (7,5) on (node local) [ 381.409144][T15870] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 381.914293][T15891] loop5: detected capacity change from 0 to 4096 [ 382.027594][T15899] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.332270][T14761] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 382.494669][ T9544] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 382.526891][T14761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 382.542723][T14761] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 382.563519][T14761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 382.592781][T14761] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 382.632243][T14761] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 382.652731][T14761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.664013][T14761] usb 4-1: config 0 descriptor?? [ 382.709658][ T9544] usb 5-1: Using ep0 maxpacket: 16 [ 382.718613][ T8942] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.738502][ T9544] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 382.738981][ T8942] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.787201][ T9544] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 382.804777][ T9544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.813985][ T4353] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.823611][ T9544] usb 5-1: Product: syz [ 382.853932][ T9544] usb 5-1: Manufacturer: syz [ 382.864912][ T9544] usb 5-1: SerialNumber: syz [ 382.891948][ T9544] r8152-cfgselector 5-1: config 0 descriptor?? [ 382.898482][T14761] hdpvr 4-1:0.0: firmware version 0x0 dated [ 382.917726][T14761] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 383.015181][ T8942] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.098928][T14761] hdpvr 4-1:0.0: device init failed [ 383.114718][ T8942] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.115225][T14761] hdpvr: probe of 4-1:0.0 failed with error -12 [ 383.180365][T14761] usb 4-1: USB disconnect, device number 24 [ 383.307374][T15949] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5288'. [ 383.344714][T14836] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 383.353756][ T9544] r8152-cfgselector 5-1: Unknown version 0x0000 [ 383.370653][ T9544] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 383.513645][T15957] i2c i2c-0: Invalid block read size 255 [ 383.554535][T14836] usb 2-1: Using ep0 maxpacket: 16 [ 383.561693][T14836] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 383.582819][T14836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.594311][T14836] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 383.604169][T14836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.621790][T14836] usb 2-1: config 0 descriptor?? [ 383.651716][T14836] pxrc 2-1:0.0: Could not find endpoint [ 383.834476][ T4353] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 383.866373][T14836] usb 2-1: USB disconnect, device number 21 [ 384.030069][ T4353] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 384.049992][ T4353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.063828][T15975] loop2: detected capacity change from 0 to 64 [ 384.083062][ T4353] usb 6-1: config 0 descriptor?? [ 384.521847][ T4353] ath6kl: Failed to submit usb control message: -71 [ 384.529488][ T4353] ath6kl: unable to send the bmi data to the device: -71 [ 384.547021][ T4353] ath6kl: Unable to send get target info: -71 [ 384.584580][ T4353] ath6kl: Failed to init ath6kl core: -71 [ 384.660942][ T4353] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 384.675953][ T4353] usb 6-1: USB disconnect, device number 12 [ 384.829573][T15999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5312'. [ 385.082135][T16007] loop3: detected capacity change from 0 to 1024 [ 385.115149][T16007] EXT4-fs: Ignoring removed orlov option [ 385.159623][T16007] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 385.189910][T16007] EXT4-fs (loop3): invalid journal inode [ 385.222682][T16007] EXT4-fs (loop3): can't get journal size [ 385.256302][T16007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 385.383907][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 385.929680][T16047] netlink: 'syz.5.5333': attribute type 21 has an invalid length. [ 385.944404][T16047] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5333'. [ 385.960006][T14761] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 385.963870][T16047] netlink: 'syz.5.5333': attribute type 4 has an invalid length. [ 386.011488][T16047] netlink: 'syz.5.5333': attribute type 5 has an invalid length. [ 386.044842][T16047] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5333'. [ 386.080452][T16053] loop1: detected capacity change from 0 to 512 [ 386.150594][T16053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.170961][T14761] usb 5-1: Using ep0 maxpacket: 8 [ 386.178741][T14761] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.187431][T16053] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.5337: Unimplemented hash flags: 0x0001 [ 386.202630][T16053] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5337: Corrupt directory, running e2fsck is recommended [ 386.260715][T14761] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 386.292669][T14761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.334414][T16059] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5339'. [ 386.336612][T14761] usb 5-1: config 0 descriptor?? [ 386.354050][T16059] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5339'. [ 386.365928][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 386.390749][T14761] usb 5-1: Found UVC 148.00 device (05a9:2630) [ 386.397722][T16051] loop3: detected capacity change from 0 to 32768 [ 386.409991][T14761] usb 5-1: No valid video chain found. [ 386.448857][T16051] (syz.3.5336,16051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 386.531521][T16051] (syz.3.5336,16051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 386.560442][T16051] (syz.3.5336,16051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 386.626571][T14761] usb 5-1: USB disconnect, device number 29 [ 386.634317][T16051] JBD2: Ignoring recovery information on journal [ 386.787572][T16051] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 386.833054][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5345'. [ 386.854536][T16076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5345'. [ 386.984877][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 387.204418][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.302602][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5354'. [ 387.360094][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5354'. [ 387.824696][T16086] loop3: detected capacity change from 0 to 32768 [ 387.860274][T16086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5350 (16086) [ 387.930623][T16086] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 387.946655][T16086] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 387.979235][T16086] BTRFS info (device loop3): using free space tree [ 388.153793][T16128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.201759][T16118] loop4: detected capacity change from 0 to 4096 [ 388.249748][T16118] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 388.416750][T16086] BTRFS info (device loop3): enabling ssd optimizations [ 388.669342][ T4283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.774416][ T4353] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 388.895495][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4263) [ 389.005217][ T4353] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 389.033641][ T4353] usb 3-1: config 0 has no interface number 0 [ 389.040468][ T4353] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64 [ 389.075840][ T4353] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 389.085422][T16167] ipt_ECN: cannot use operation on non-tcp rule [ 389.095941][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 389.124473][ T4353] usb 3-1: Manufacturer: syz [ 389.129126][ T4353] usb 3-1: SerialNumber: syz [ 389.154658][ T4353] usb 3-1: config 0 descriptor?? [ 389.175837][T16150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.399119][ T4353] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 389.410271][ T4353] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 389.481478][ T4353] usb 3-1: USB disconnect, device number 22 [ 389.692252][T16191] xt_TCPMSS: Only works on TCP SYN packets [ 390.057415][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5403'. [ 390.258288][T16217] loop5: detected capacity change from 0 to 8 [ 390.615384][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5416'. [ 390.994233][ T4313] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 391.116270][T16255] loop3: detected capacity change from 0 to 4096 [ 391.131252][T16255] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 391.154166][ T4260] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 391.187942][ T4313] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.198943][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.215185][ T4313] usb 3-1: Product: syz [ 391.228207][ T4313] usb 3-1: Manufacturer: syz [ 391.234739][ T4313] usb 3-1: SerialNumber: syz [ 391.273671][ T4313] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.339880][ T4313] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.349506][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 391.356978][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 391.403143][ T4260] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 391.422851][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.441469][ T4260] usb 2-1: Product: syz [ 391.479277][ T4260] usb 2-1: Manufacturer: syz [ 391.502169][ T4260] usb 2-1: SerialNumber: syz [ 391.518040][ T4260] usb 2-1: config 0 descriptor?? [ 391.568390][ T4260] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 391.743045][ T4260] usb 2-1: USB disconnect, device number 22 [ 391.797771][ T4353] usb 3-1: USB disconnect, device number 23 [ 391.919197][T16283] loop5: detected capacity change from 0 to 1024 [ 391.949043][T16286] netlink: 'syz.3.5442': attribute type 21 has an invalid length. [ 391.980687][T16283] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 392.004210][T16283] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 392.016329][T16283] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.5441: Failed to acquire dquot type 0 [ 392.031094][T16283] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 392.050368][T16283] EXT4-fs (loop5): 1 truncate cleaned up [ 392.075160][T16283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 392.236173][T16293] loop4: detected capacity change from 0 to 2048 [ 392.254296][T10094] EXT4-fs (loop5): unmounting filesystem. [ 392.275533][T16293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.494066][ T4313] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 392.501139][ T4313] ath9k_htc: Failed to initialize the device [ 392.530326][ T4353] usb 3-1: ath9k_htc: USB layer deinitialized [ 392.813985][ T4260] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.980203][T16325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5461'. [ 393.004145][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 393.018263][ T4260] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.066173][ T4260] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 393.094606][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.116435][ T4260] usb 4-1: Product: syz [ 393.134402][ T4260] usb 4-1: Manufacturer: syz [ 393.143472][ T4260] usb 4-1: SerialNumber: syz [ 393.167528][ T4260] usb 4-1: config 0 descriptor?? [ 393.206247][ T4260] cdc_ether 4-1:0.0: skipping garbage [ 393.211691][ T4260] cdc_ether 4-1:0.0: skipping garbage [ 393.250004][ T4260] cdc_ether 4-1:0.0: invalid descriptor buffer length [ 393.277523][ T4260] usb 4-1: bad CDC descriptors [ 393.282707][ T4260] usb 4-1: unsupported MDLM descriptors [ 393.309459][ T4260] cdc_acm 4-1:0.0: skipping garbage [ 393.333155][ T4260] cdc_acm 4-1:0.0: skipping garbage [ 393.354360][ T4260] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 393.398275][ T4260] usb 4-1: USB disconnect, device number 25 [ 393.540711][T14836] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.551019][T16347] netlink: 'syz.4.5472': attribute type 2 has an invalid length. [ 393.594183][T14761] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 393.737641][T14836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 393.754126][T14836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 393.766203][T14836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 393.778420][T14836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 393.794353][T14836] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 393.818785][T14836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.827031][T14761] usb 2-1: Using ep0 maxpacket: 16 [ 393.834600][T14761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.854831][T14836] usb 6-1: config 0 descriptor?? [ 393.865980][T14761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.876759][T14761] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 393.889005][T14761] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 393.907281][T14761] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 393.928566][T16359] netlink: del zone limit has 8 unknown bytes [ 393.974785][T14761] usb 2-1: string descriptor 0 read error: -22 [ 393.981126][T14761] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 394.004046][T14761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.022035][T14761] usb 2-1: MIDIStreaming interface descriptor not found [ 394.050682][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5479'. [ 394.073582][T14836] hdpvr 6-1:0.0: firmware version 0xd dated [ 394.101468][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5479'. [ 394.281024][T14836] hdpvr 6-1:0.0: device init failed [ 394.292463][T14836] hdpvr: probe of 6-1:0.0 failed with error -12 [ 394.303488][T14836] usb 6-1: USB disconnect, device number 13 [ 394.444144][ T26] audit: type=1326 audit(1785346712.281:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.514384][ T26] audit: type=1326 audit(1785346712.291:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.567281][ T26] audit: type=1326 audit(1785346712.291:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.592355][ T26] audit: type=1326 audit(1785346712.291:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.622268][ T26] audit: type=1326 audit(1785346712.311:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.695132][ T26] audit: type=1326 audit(1785346712.311:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.742995][ T26] audit: type=1326 audit(1785346712.321:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.774295][ T26] audit: type=1326 audit(1785346712.321:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.2.5482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f46da59df99 code=0x7ffc0000 [ 394.814592][T16374] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 394.985664][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5487'. [ 395.119825][T16385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5491'. [ 395.418133][T16395] loop2: detected capacity change from 0 to 256 [ 395.489527][T16395] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 395.983324][T16410] loop5: detected capacity change from 0 to 2048 [ 396.027719][T16410] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=301129, location=301129 [ 396.078823][T16410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.081676][T16411] loop2: detected capacity change from 0 to 4096 [ 396.158406][T16411] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 396.369056][ T4260] usb 2-1: USB disconnect, device number 23 [ 396.415782][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.607861][T16421] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 396.720654][T16425] loop1: detected capacity change from 0 to 2048 [ 396.732446][T16355] syz.4.5476 (16355): drop_caches: 3 [ 396.768633][T16425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.919469][T16433] netlink: 'syz.4.5515': attribute type 13 has an invalid length. [ 397.449838][T14761] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 397.635447][T14761] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.660973][T14761] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 397.676310][T14761] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.737345][T14761] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 397.763936][T14761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.781449][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5534'. [ 397.793871][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 397.803511][T14761] usb 2-1: Product: syz [ 397.808278][T14761] usb 2-1: Manufacturer: syz [ 397.812944][T14761] usb 2-1: SerialNumber: syz [ 397.835851][T14761] usblp0: Disabling reads from problematic bidirectional printer [ 397.903747][ T4353] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 398.057241][T14761] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 398.081599][T14761] usb 2-1: USB disconnect, device number 24 [ 398.112394][T14761] usblp0: removed [ 398.122444][ T4353] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 398.142808][ T4353] usb 4-1: config 0 has no interface number 0 [ 398.168226][ T4353] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64 [ 398.183692][T14836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 398.208448][ T4353] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 398.232293][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 398.257511][ T4353] usb 4-1: Manufacturer: syz [ 398.263164][T16486] loop2: detected capacity change from 0 to 1764 [ 398.269672][ T4353] usb 4-1: SerialNumber: syz [ 398.280253][ T4353] usb 4-1: config 0 descriptor?? [ 398.303853][T16466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 398.383941][T14836] usb 5-1: Using ep0 maxpacket: 16 [ 398.395606][T14836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.410939][T14836] usb 5-1: config 251 has an invalid interface number: 33 but max is 0 [ 398.433701][T14836] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 398.452479][T14836] usb 5-1: config 251 has no interface number 0 [ 398.472170][T14836] usb 5-1: config 251 interface 33 has no altsetting 0 [ 398.494947][T14836] usb 5-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 398.512100][T14836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.524633][ T4353] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 398.534237][T14836] usb 5-1: Product: syz [ 398.538449][T14836] usb 5-1: Manufacturer: syz [ 398.539094][ T4353] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 398.561522][T14836] usb 5-1: SerialNumber: syz [ 398.572074][ T4353] usb 4-1: USB disconnect, device number 26 [ 398.809813][T14836] qmi_wwan: probe of 5-1:251.33 failed with error -22 [ 398.831085][T14836] usb 5-1: USB disconnect, device number 30 [ 399.223829][T14765] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 399.418820][T14765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.455668][T14765] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.487861][T14765] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 399.516856][T14765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.541145][T14765] usb 6-1: Product: syz [ 399.556343][T14765] usb 6-1: Manufacturer: syz [ 399.570794][T14765] usb 6-1: SerialNumber: syz [ 399.582996][T14765] usb 6-1: config 0 descriptor?? [ 399.601379][T14765] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 399.661180][T14765] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.703076][T14765] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 399.731004][T14765] usb 6-1: media controller created [ 399.757659][T16514] loop2: detected capacity change from 0 to 32768 [ 399.770486][T14765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.942161][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5568'. [ 399.967188][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5568'. [ 400.096719][T16547] loop3: detected capacity change from 0 to 764 [ 400.179833][T14765] DVB: Unable to find symbol tda10046_attach() [ 400.191892][T14765] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 400.226486][T14765] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 400.480849][T14765] dvb_usb_m920x: probe of 6-1:0.0 failed with error -71 [ 400.518873][T14765] usb 6-1: USB disconnect, device number 14 [ 400.621329][T16559] loop1: detected capacity change from 0 to 4096 [ 400.634907][T16563] loop3: detected capacity change from 0 to 512 [ 400.647399][T16563] EXT4-fs: Ignoring removed bh option [ 400.668212][T16559] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 400.689502][T16563] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 400.722876][T16563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 400.733506][ T4353] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 400.743290][T16563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 400.761611][T16563] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5579: attempt to clear invalid blocks 1024 len 1 [ 400.879038][T16563] EXT4-fs (loop3): Remounting filesystem read-only [ 400.899436][T16563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5579: bg 0: block 361: padding at end of block bitmap is not set [ 400.923628][ T4353] usb 3-1: Using ep0 maxpacket: 32 [ 400.930951][ T4353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.951647][ T4353] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.963994][T16563] EXT4-fs (loop3): Remounting filesystem read-only [ 400.970997][T16563] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 400.973715][ T4353] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 401.012321][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.017203][T16563] EXT4-fs (loop3): Remounting filesystem read-only [ 401.060343][ T4353] usb 3-1: Product: syz [ 401.060513][T16563] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5579: invalid indirect mapped block 1811939328 (level 0) [ 401.074287][ T4353] usb 3-1: Manufacturer: syz [ 401.100054][ T4353] usb 3-1: SerialNumber: syz [ 401.144913][ T4353] usb 3-1: config 0 descriptor?? [ 401.152362][T16563] EXT4-fs (loop3): Remounting filesystem read-only [ 401.163397][T16563] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5579: invalid indirect mapped block 2185560079 (level 1) [ 401.231573][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5586'. [ 401.241200][T16563] EXT4-fs (loop3): Remounting filesystem read-only [ 401.253872][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5586'. [ 401.258810][T16563] EXT4-fs (loop3): 1 truncate cleaned up [ 401.280055][T16563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 401.435317][ T4260] usb 3-1: USB disconnect, device number 24 [ 401.459221][T16584] loop1: detected capacity change from 0 to 256 [ 401.467967][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 401.550186][T16584] FAT-fs (loop1): Directory bread(block 64) failed [ 401.592252][T16584] FAT-fs (loop1): Directory bread(block 65) failed [ 401.619065][T16584] FAT-fs (loop1): Directory bread(block 66) failed [ 401.651925][T16584] FAT-fs (loop1): Directory bread(block 67) failed [ 401.683657][T16584] FAT-fs (loop1): Directory bread(block 68) failed [ 401.690877][T16584] FAT-fs (loop1): Directory bread(block 69) failed [ 401.748468][T16584] FAT-fs (loop1): Directory bread(block 70) failed [ 401.758940][T16591] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 401.762478][T16584] FAT-fs (loop1): Directory bread(block 71) failed [ 401.784949][T16584] FAT-fs (loop1): Directory bread(block 72) failed [ 401.794623][T16584] FAT-fs (loop1): Directory bread(block 73) failed [ 402.163038][T16606] PM: Enabling pm_trace changes system date and time during resume. [ 402.163038][T16606] PM: Correct system time has to be restored manually after resume. [ 402.453916][T16617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5603'. [ 402.472999][T16620] tmpfs: Bad value for 'mpol' [ 402.518351][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5603'. [ 402.853415][T14765] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 403.019457][T16644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5617'. [ 403.053885][T14765] usb 2-1: Using ep0 maxpacket: 32 [ 403.070463][T14765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.124355][T14765] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 403.143989][T14765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.152048][T14765] usb 2-1: Product: syz [ 403.174314][T14765] usb 2-1: Manufacturer: syz [ 403.179184][T14765] usb 2-1: SerialNumber: syz [ 403.203752][T14765] usb 2-1: config 0 descriptor?? [ 403.218171][T14765] usb 2-1: bad CDC descriptors [ 403.228122][T14765] usb 2-1: unsupported MDLM descriptors [ 403.417323][T14765] usb 2-1: USB disconnect, device number 25 [ 403.473537][T14836] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 403.487596][T16658] loop4: detected capacity change from 0 to 256 [ 403.603147][T16638] syz.5.5615 (16638): drop_caches: 3 [ 403.663505][T14836] usb 3-1: Using ep0 maxpacket: 8 [ 403.670113][T14836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.700823][T14836] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 403.729238][T14836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 403.751195][T14836] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 403.783597][T14836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.808062][T16660] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5627'. [ 403.817279][T14836] usb 3-1: Product: syz [ 403.821487][T14836] usb 3-1: Manufacturer: syz [ 403.833631][T14836] usb 3-1: SerialNumber: syz [ 403.854898][T16648] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 403.966231][T16667] loop5: detected capacity change from 0 to 64 [ 404.065065][T16673] loop3: detected capacity change from 0 to 512 [ 404.080379][T14836] usb 3-1: MIDIStreaming interface descriptor not found [ 404.222614][T14836] usb 3-1: USB disconnect, device number 25 [ 404.563480][ T4260] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 404.763328][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 404.770254][ T4260] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 404.784644][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.842340][ T4260] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 404.883709][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.891777][ T4260] usb 6-1: Product: syz [ 404.912981][ T4260] usb 6-1: Manufacturer: syz [ 404.945287][ T4260] usb 6-1: SerialNumber: syz [ 404.958239][ T4260] r8152-cfgselector 6-1: config 0 descriptor?? [ 405.194990][ T4260] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 405.239576][T16709] netlink: 'syz.1.5649': attribute type 5 has an invalid length. [ 405.411067][ T4353] usb 6-1: USB disconnect, device number 15 [ 405.510150][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5654'. [ 405.626213][T16721] loop1: detected capacity change from 0 to 1024 [ 405.671992][T16685] syz.3.5637 (16685): drop_caches: 3 [ 405.726412][T16725] bridge0: port 2(hsr0) entered blocking state [ 405.738355][T16725] bridge0: port 2(hsr0) entered disabled state [ 405.758826][T16725] device hsr0 entered promiscuous mode [ 405.799059][ T57] hfsplus: b-tree write err: -5, ino 25 [ 405.815899][ T57] hfsplus: b-tree write err: -5, ino 4 [ 405.821658][ T57] hfsplus: b-tree write err: -5, ino 2 [ 405.834468][T16728] netlink: 'syz.3.5658': attribute type 2 has an invalid length. [ 405.842263][T16728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5658'. [ 406.031637][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5661'. [ 406.736218][T16767] loop5: detected capacity change from 0 to 256 [ 407.264665][T16785] netlink: 'syz.3.5687': attribute type 2 has an invalid length. [ 407.303006][T16785] netlink: 'syz.3.5687': attribute type 8 has an invalid length. [ 407.357367][T16751] syz.2.5669 (16751): drop_caches: 3 [ 407.368393][T16785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5687'. [ 407.407790][T16767] FAT-fs (loop5): Directory bread(block 64) failed [ 407.420431][T16767] FAT-fs (loop5): Directory bread(block 65) failed [ 407.441630][T16767] FAT-fs (loop5): Directory bread(block 66) failed [ 407.460482][T16767] FAT-fs (loop5): Directory bread(block 67) failed [ 407.477798][T16767] FAT-fs (loop5): Directory bread(block 68) failed [ 407.513270][T16767] FAT-fs (loop5): Directory bread(block 69) failed [ 407.551418][T16767] FAT-fs (loop5): Directory bread(block 70) failed [ 407.573499][T16767] FAT-fs (loop5): Directory bread(block 71) failed [ 407.593363][T16767] FAT-fs (loop5): Directory bread(block 72) failed [ 407.599955][T16767] FAT-fs (loop5): Directory bread(block 73) failed [ 408.023085][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5699'. [ 408.058092][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5699'. [ 408.113145][ T4313] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 408.304916][ T4313] usb 3-1: Using ep0 maxpacket: 32 [ 408.323338][ T4260] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 408.334063][ T4313] usb 3-1: config 0 has an invalid interface number: 188 but max is 1 [ 408.352918][ T4313] usb 3-1: config 0 has an invalid interface number: 122 but max is 1 [ 408.373310][ T4313] usb 3-1: config 0 has no interface number 0 [ 408.396281][ T4313] usb 3-1: config 0 has no interface number 1 [ 408.419860][ T4313] usb 3-1: config 0 interface 188 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 408.451443][ T4313] usb 3-1: config 0 interface 188 has no altsetting 0 [ 408.464398][ T4313] usb 3-1: config 0 interface 122 has no altsetting 0 [ 408.483842][ T4313] usb 3-1: string descriptor 0 read error: -22 [ 408.515815][ T4313] usb 3-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=bb.1a [ 408.537232][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.551664][T16827] loop4: detected capacity change from 0 to 16 [ 408.551845][ T4260] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 408.572799][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.593140][ T4260] usb 4-1: config 4 has no interface number 0 [ 408.601481][ T4313] usb 3-1: config 0 descriptor?? [ 408.613476][T16819] syz.1.5703 (16819): drop_caches: 3 [ 408.618427][T16827] erofs: (device loop4): mounted with root inode @ nid 36. [ 408.618852][ T4260] usb 4-1: config 4 interface 138 has no altsetting 0 [ 408.673410][ T4260] usb 4-1: string descriptor 0 read error: -22 [ 408.689416][ T4260] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 408.707398][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.845838][T16833] loop4: detected capacity change from 0 to 256 [ 408.877093][ T4313] usb 3-1: USB disconnect, device number 26 [ 408.928603][ T4260] catc 4-1:4.138: Missing or invalid endpoints [ 408.985118][T16833] FAT-fs (loop4): Directory bread(block 64) failed [ 408.991718][T16833] FAT-fs (loop4): Directory bread(block 65) failed [ 409.037571][T16833] FAT-fs (loop4): Directory bread(block 66) failed [ 409.062721][T16833] FAT-fs (loop4): Directory bread(block 67) failed [ 409.093895][T16833] FAT-fs (loop4): Directory bread(block 68) failed [ 409.100488][T16833] FAT-fs (loop4): Directory bread(block 69) failed [ 409.107770][T16833] FAT-fs (loop4): Directory bread(block 70) failed [ 409.116327][T16833] FAT-fs (loop4): Directory bread(block 71) failed [ 409.123669][T16833] FAT-fs (loop4): Directory bread(block 72) failed [ 409.130236][T16833] FAT-fs (loop4): Directory bread(block 73) failed [ 409.150486][T16841] loop5: detected capacity change from 0 to 1024 [ 409.186244][ T4346] hfsplus: b-tree write err: -5, ino 25 [ 409.195808][ T4313] usb 4-1: USB disconnect, device number 27 [ 409.205228][ T4346] hfsplus: b-tree write err: -5, ino 4 [ 409.210848][ T4346] hfsplus: b-tree write err: -5, ino 2 [ 409.394012][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5716'. [ 410.080763][T16874] IPv6: Can't replace route, no match found [ 410.102986][T14836] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 410.306255][T14836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.318639][T16857] loop1: detected capacity change from 0 to 32768 [ 410.334742][T14836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.349466][T16857] (syz.1.5723,16857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 410.366245][T14836] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 410.395842][T14836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.423339][T16857] (syz.1.5723,16857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 410.432290][T14836] usb 3-1: Product: syz [ 410.454615][T14836] usb 3-1: Manufacturer: syz [ 410.460300][T14836] usb 3-1: SerialNumber: syz [ 410.481605][T14836] usb 3-1: config 0 descriptor?? [ 410.496433][T14836] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 410.560772][T16857] JBD2: Ignoring recovery information on journal [ 410.573626][T14836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.589085][T14836] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 410.591933][T16890] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.598500][T14836] usb 3-1: media controller created [ 410.621548][T14836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.704332][T16857] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 410.975838][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 411.005523][T14836] DVB: Unable to find symbol tda10046_attach() [ 411.025713][T14836] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 411.062313][T14836] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 411.311529][T14836] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 411.340308][T14836] usb 3-1: USB disconnect, device number 27 [ 411.599199][T16929] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 412.283036][ T4313] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 412.416999][T16958] loop2: detected capacity change from 0 to 4096 [ 412.484925][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.499313][ T4313] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 412.518298][T16958] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 412.519140][ T4313] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 412.605159][ T4313] usb 5-1: config 63 has no interface number 0 [ 412.611415][ T4313] usb 5-1: config 63 interface 66 has no altsetting 0 [ 412.658760][ T4313] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 412.688310][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.713871][ T4313] usb 5-1: Product: syz [ 412.735221][ T4313] usb 5-1: Manufacturer: syz [ 412.765279][ T4313] usb 5-1: SerialNumber: syz [ 413.022050][ T4313] usb 5-1: Found UVC 0.07 device syz (174f:8acf) [ 413.047146][ T4313] usb 5-1: No valid video chain found. [ 413.091495][ T4313] usb 5-1: USB disconnect, device number 31 [ 413.893005][ T4260] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 413.912645][T17025] loop2: detected capacity change from 0 to 512 [ 413.975647][T17025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 413.985047][T14836] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 413.994065][T17025] ext4 filesystem being mounted at /1186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.091208][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 414.145330][ T4260] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.162391][ T4260] usb 6-1: not running at top speed; connect to a high speed hub [ 414.182967][T14836] usb 2-1: Using ep0 maxpacket: 32 [ 414.183949][ T4260] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 414.196512][T14836] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 414.218191][ T4260] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 414.232811][T14836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.256251][ T4260] usb 6-1: config 4 has no interface number 0 [ 414.261477][T14836] usb 2-1: Product: syz [ 414.272793][T14836] usb 2-1: Manufacturer: syz [ 414.281312][ T4260] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 414.291364][T14836] usb 2-1: SerialNumber: syz [ 414.296339][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.313440][T14836] usb 2-1: config 0 descriptor?? [ 414.329457][ T4260] usb 6-1: Product: syz [ 414.334628][ T4260] usb 6-1: Manufacturer: syz [ 414.339255][ T4260] usb 6-1: SerialNumber: syz [ 414.378562][T17042] vivid-006: disconnect [ 414.393678][T17041] vivid-006: reconnect [ 414.467977][T17046] netlink: 'syz.2.5813': attribute type 3 has an invalid length. [ 414.591489][ T4260] usb 6-1: Found UVC 0.00 device syz (04f2:b746) [ 414.609993][ T4260] usb 6-1: No valid video chain found. [ 414.620693][ T4260] usb 6-1: USB disconnect, device number 16 [ 414.756746][T14836] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 414.772233][T14836] airspy 2-1:0.0: Could not detect board [ 414.801319][T14836] airspy: probe of 2-1:0.0 failed with error -71 [ 414.810668][T14836] usb 2-1: USB disconnect, device number 26 [ 415.602834][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 415.838342][T17106] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5843'. [ 416.152377][T17122] overlayfs: './file0' not a directory [ 416.258309][T17126] netlink: 'syz.1.5853': attribute type 4 has an invalid length. [ 416.282644][T17126] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.337389][T17128] SET target dimension over the limit! [ 416.817864][T17151] netlink: 'syz.4.5866': attribute type 1 has an invalid length. [ 416.860712][T17151] netlink: 908 bytes leftover after parsing attributes in process `syz.4.5866'. [ 416.883604][T17151] nbd: must specify at least one socket [ 417.473712][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.481585][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.528922][T17181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.543484][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.594799][T17184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.099538][T17207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.371904][T17215] netlink: 'syz.2.5890': attribute type 21 has an invalid length. [ 418.517563][T17179] loop3: detected capacity change from 0 to 32768 [ 418.563970][T17179] (syz.3.5878,17179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 418.603891][T17179] (syz.3.5878,17179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 418.684743][T17179] JBD2: Ignoring recovery information on journal [ 418.724996][T17231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5897'. [ 418.848080][T17179] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 419.131584][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 420.505304][T17310] netlink: 'syz.5.5928': attribute type 29 has an invalid length. [ 420.567609][T17310] netlink: 'syz.5.5928': attribute type 29 has an invalid length. [ 420.635631][T17314] netlink: 'syz.3.5930': attribute type 1 has an invalid length. [ 420.662512][ T4260] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 420.682448][T17314] netlink: 908 bytes leftover after parsing attributes in process `syz.3.5930'. [ 420.722730][T17314] nbd: must specify at least one socket [ 420.876466][ T4260] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 420.905547][ T4260] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 420.941967][ T4260] usb 5-1: Product: syz [ 420.947944][T17324] loop3: detected capacity change from 0 to 2048 [ 420.972514][ T4260] usb 5-1: Manufacturer: syz [ 420.977288][ T4260] usb 5-1: SerialNumber: syz [ 420.998270][ T4260] r8152-cfgselector 5-1: config 0 descriptor?? [ 421.054234][T17324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 421.155444][T17324] VFS: Lookup of 'file0' in ext4 loop3 would have caused loop [ 421.218831][ T4260] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 421.314877][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 421.368539][T17345] loop2: detected capacity change from 0 to 64 [ 421.430932][T14836] usb 5-1: USB disconnect, device number 32 [ 421.696019][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5949'. [ 421.739853][T17360] ipt_REJECT: ECHOREPLY no longer supported. [ 421.874834][ T94] block nbd5: Attempted send on invalid socket [ 421.881103][ T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.902633][T17364] F2FS-fs (nbd5): Unable to read 1th superblock [ 421.934607][ T53] block nbd5: Attempted send on invalid socket [ 421.940858][ T53] I/O error, dev nbd5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.961959][T17364] F2FS-fs (nbd5): Unable to read 2th superblock [ 422.385367][T17388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5964'. [ 422.501205][T17394] autofs4:pid:17394:autofs_fill_super: called with bogus options [ 422.574007][T17395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.891389][T17414] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 423.267945][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5984'. [ 423.803298][T14451] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 423.862118][T17454] autofs4:pid:17454:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 423.882071][T17454] autofs4:pid:17454:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 424.013850][T14451] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 424.027558][T14451] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.059328][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 424.062182][T14451] usb 6-1: config 0 has no interface number 0 [ 424.107441][T14451] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 424.140233][T14451] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 424.169003][T14451] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.212715][T14451] usb 6-1: config 0 interface 52 has no altsetting 0 [ 424.235804][T14451] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 424.252417][T17468] loop3: detected capacity change from 0 to 64 [ 424.265470][T14451] usb 6-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 424.296742][T17468] syz.3.6003: attempt to access beyond end of device [ 424.296742][T17468] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 424.316341][T14451] usb 6-1: Product: syz [ 424.320554][T14451] usb 6-1: SerialNumber: syz [ 424.341526][T14451] usb 6-1: config 0 descriptor?? [ 424.357617][T17468] Buffer I/O error on dev loop3, logical block 512, async page read [ 424.377549][T17468] syz.3.6003: attempt to access beyond end of device [ 424.377549][T17468] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 424.421747][T17468] Buffer I/O error on dev loop3, logical block 56576, async page read [ 424.573747][T14451] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 424.592248][T14451] synaptics_usb: probe of 6-1:0.52 failed with error -5 [ 424.829830][T14451] usb 6-1: USB disconnect, device number 17 [ 425.317591][T17494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.619693][T17507] loop2: detected capacity change from 0 to 1024 [ 425.872457][T17485] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.388495][T17539] loop2: detected capacity change from 0 to 2048 [ 426.419049][T17539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.712236][T17553] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000) [ 427.305078][T17578] netlink: 292 bytes leftover after parsing attributes in process `syz.2.6056'. [ 427.349672][T17581] nftables ruleset with unbound chain [ 427.606817][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6063'. [ 427.674770][T14836] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 427.827182][T17605] loop1: detected capacity change from 0 to 256 [ 427.872261][T14836] usb 4-1: Using ep0 maxpacket: 32 [ 427.881490][T14836] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 427.922721][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.957438][T14836] usb 4-1: config 0 has no interface number 0 [ 427.957481][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.986698][T17605] FAT-fs (loop1): Directory bread(block 64) failed [ 427.986735][T17605] FAT-fs (loop1): Directory bread(block 65) failed [ 427.986802][T17605] FAT-fs (loop1): Directory bread(block 66) failed [ 427.986828][T17605] FAT-fs (loop1): Directory bread(block 67) failed [ 427.986941][T17605] FAT-fs (loop1): Directory bread(block 68) failed [ 427.986967][T17605] FAT-fs (loop1): Directory bread(block 69) failed [ 427.987047][T17605] FAT-fs (loop1): Directory bread(block 70) failed [ 427.987073][T17605] FAT-fs (loop1): Directory bread(block 71) failed [ 427.987139][T17605] FAT-fs (loop1): Directory bread(block 72) failed [ 427.987165][T17605] FAT-fs (loop1): Directory bread(block 73) failed [ 428.016350][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.026433][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.026461][T14836] usb 4-1: config 0 has no interface number 0 [ 428.026496][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.026518][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.034289][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.034318][T14836] usb 4-1: config 0 has no interface number 0 [ 428.034358][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.034381][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.035376][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.035401][T14836] usb 4-1: config 0 has no interface number 0 [ 428.035495][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.035518][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.036515][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.036538][T14836] usb 4-1: config 0 has no interface number 0 [ 428.036571][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.036592][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.037614][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.037636][T14836] usb 4-1: config 0 has no interface number 0 [ 428.037673][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.037694][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.038800][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.038823][T14836] usb 4-1: config 0 has no interface number 0 [ 428.038850][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.038872][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.039906][T14836] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.039935][T14836] usb 4-1: config 0 has no interface number 0 [ 428.039965][T14836] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.039986][T14836] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.045740][T14836] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 428.045769][T14836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.045789][T14836] usb 4-1: Product: syz [ 428.045803][T14836] usb 4-1: Manufacturer: syz [ 428.045817][T14836] usb 4-1: SerialNumber: syz [ 428.047952][T14836] usb 4-1: config 0 descriptor?? [ 428.430527][T14836] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 428.515861][T17623] netlink: 'syz.2.6078': attribute type 30 has an invalid length. [ 428.563930][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6078'. [ 428.609839][T14836] etas_es58x 4-1:0.2: Product info: [ 428.627068][T17623] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 428.656882][T17623] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 429.041723][T14836] usb 4-1: USB disconnect, device number 28 [ 429.065754][T14836] etas_es58x 4-1:0.2: Disconnecting syz syz [ 429.280452][T17649] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6088'. [ 429.411232][T17655] loop1: detected capacity change from 0 to 16 [ 429.474825][T17655] erofs: (device loop1): mounted with root inode @ nid 36. [ 429.543104][T17655] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 429.591878][T17655] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 429.621435][T17655] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 429.664252][T17655] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 429.710500][T17666] overlayfs: missing 'lowerdir' [ 429.721372][T17655] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 430.474291][T17698] netlink: 'syz.1.6109': attribute type 10 has an invalid length. [ 430.509771][T17698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6109'. [ 430.540572][T17698] batman_adv: batadv0: Adding interface: virt_wifi0 [ 430.569338][T17698] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.594994][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.671527][T17698] batman_adv: batadv0: Interface activated: virt_wifi0 [ 431.117080][T17719] loop1: detected capacity change from 0 to 8 [ 431.219532][T17719] SQUASHFS error: Failed to read block 0x71: -5 [ 431.303634][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 431.303650][ T26] audit: type=1800 audit(1785346749.153:584): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6118" name="file0" dev="loop1" ino=1 res=0 errno=0 [ 431.425992][T17700] loop4: detected capacity change from 0 to 32768 [ 431.498576][T17700] [ 431.498576][T17700] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.498576][T17700] [ 431.629641][T17737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6125'. [ 431.723486][ T4346] [ 431.723486][ T4346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.723486][ T4346] [ 431.769514][ T4346] [ 431.769514][ T4346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.769514][ T4346] [ 431.840856][ T4279] [ 431.840856][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.840856][ T4279] [ 431.883355][ T4279] [ 431.883355][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.883355][ T4279] [ 431.954391][ T108] [ 431.954391][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.954391][ T108] [ 432.002119][ T108] ================================================================== [ 432.010229][ T108] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 432.016693][ T108] Write of size 8 at addr ffff8880588bd040 by task jfsCommit/108 [ 432.024421][ T108] [ 432.026758][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 432.033964][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.044029][ T108] Call Trace: [ 432.047311][ T108] [ 432.050243][ T108] dump_stack_lvl+0x188/0x24e [ 432.054969][ T108] ? read_lock_is_recursive+0x10/0x10 [ 432.060386][ T108] ? show_regs_print_info+0x12/0x12 [ 432.065600][ T108] ? load_image+0x410/0x410 [ 432.070257][ T108] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 432.075789][ T108] ? __virt_addr_valid+0x188/0x540 [ 432.080915][ T108] ? __virt_addr_valid+0x467/0x540 [ 432.086038][ T108] ? txEnd+0x329/0x520 [ 432.090101][ T108] print_report+0xa8/0x210 [ 432.094514][ T108] kasan_report+0x10b/0x140 [ 432.099031][ T108] ? mutex_unlock+0x10/0x10 [ 432.103533][ T108] ? txEnd+0x329/0x520 [ 432.107596][ T108] kasan_check_range+0x235/0x290 [ 432.112530][ T108] txEnd+0x329/0x520 [ 432.116423][ T108] jfs_lazycommit+0x5bf/0xa90 [ 432.121095][ T108] ? txFreelock+0x5a0/0x5a0 [ 432.125588][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 432.131472][ T108] ? do_task_dead+0xd0/0xd0 [ 432.136067][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 432.141949][ T108] ? __kthread_parkme+0x71/0x1c0 [ 432.146944][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 432.151965][ T108] kthread+0x29d/0x330 [ 432.156024][ T108] ? txFreelock+0x5a0/0x5a0 [ 432.160521][ T108] ? kthread_blkcg+0xd0/0xd0 [ 432.165099][ T108] ret_from_fork+0x1f/0x30 [ 432.169545][ T108] [ 432.172551][ T108] [ 432.174860][ T108] Allocated by task 17700: [ 432.179261][ T108] kasan_set_track+0x4b/0x70 [ 432.183845][ T108] __kasan_kmalloc+0x8e/0xa0 [ 432.188433][ T108] lmLogOpen+0x2c0/0xf90 [ 432.192683][ T108] jfs_mount_rw+0xfb/0x5a0 [ 432.197167][ T108] jfs_fill_super+0x57d/0xab0 [ 432.201837][ T108] mount_bdev+0x28a/0x3c0 [ 432.206204][ T108] legacy_get_tree+0xe6/0x180 [ 432.210917][ T108] vfs_get_tree+0x88/0x270 [ 432.215321][ T108] do_new_mount+0x247/0xa40 [ 432.219822][ T108] __se_sys_mount+0x2e3/0x3d0 [ 432.224491][ T108] do_syscall_64+0x4c/0xa0 [ 432.228900][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.234837][ T108] [ 432.237162][ T108] Freed by task 4279: [ 432.241125][ T108] kasan_set_track+0x4b/0x70 [ 432.245712][ T108] kasan_save_free_info+0x27/0x40 [ 432.250777][ T108] ____kasan_slab_free+0x126/0x1f0 [ 432.255880][ T108] slab_free_freelist_hook+0x133/0x1b0 [ 432.261328][ T108] __kmem_cache_free+0xb6/0x200 [ 432.266166][ T108] lmLogClose+0x292/0x530 [ 432.270506][ T108] jfs_umount+0x288/0x360 [ 432.274843][ T108] jfs_put_super+0x88/0x190 [ 432.279372][ T108] generic_shutdown_super+0x130/0x340 [ 432.284742][ T108] kill_block_super+0x7c/0xe0 [ 432.289414][ T108] deactivate_locked_super+0x93/0xf0 [ 432.294687][ T108] cleanup_mnt+0x471/0x4f0 [ 432.299174][ T108] task_work_run+0x1d0/0x260 [ 432.303763][ T108] exit_to_user_mode_loop+0xe6/0x110 [ 432.309109][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 432.314654][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 432.320100][ T108] do_syscall_64+0x58/0xa0 [ 432.324515][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.330399][ T108] [ 432.332740][ T108] Last potentially related work creation: [ 432.338438][ T108] kasan_save_stack+0x3a/0x60 [ 432.343110][ T108] __kasan_record_aux_stack+0xb2/0xc0 [ 432.348467][ T108] kvfree_call_rcu+0x103/0x890 [ 432.353283][ T108] batadv_hard_if_event+0x780/0x1510 [ 432.358598][ T108] raw_notifier_call_chain+0xcb/0x160 [ 432.363962][ T108] unregister_netdevice_many_notify+0x10b1/0x1990 [ 432.370442][ T108] default_device_exit_batch+0x95e/0x9f0 [ 432.376063][ T108] cleanup_net+0x78e/0xba0 [ 432.380468][ T108] process_one_work+0x8ab/0x1160 [ 432.385396][ T108] worker_thread+0xaf5/0x12a0 [ 432.390059][ T108] kthread+0x29d/0x330 [ 432.394113][ T108] ret_from_fork+0x1f/0x30 [ 432.398534][ T108] [ 432.400854][ T108] The buggy address belongs to the object at ffff8880588bd000 [ 432.400854][ T108] which belongs to the cache kmalloc-1k of size 1024 [ 432.414912][ T108] The buggy address is located 64 bytes inside of [ 432.414912][ T108] 1024-byte region [ffff8880588bd000, ffff8880588bd400) [ 432.428196][ T108] [ 432.430508][ T108] The buggy address belongs to the physical page: [ 432.436902][ T108] page:ffffea0001622e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x588b8 [ 432.447039][ T108] head:ffffea0001622e00 order:3 compound_mapcount:0 compound_pincount:0 [ 432.455349][ T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 432.463342][ T108] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 432.471915][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 432.480479][ T108] page dumped because: kasan: bad access detected [ 432.486883][ T108] page_owner tracks the page as allocated [ 432.492583][ T108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4271, tgid 4271 (syz-executor), ts 65391821896, free_ts 14557631135 [ 432.511845][ T108] post_alloc_hook+0x173/0x1a0 [ 432.516688][ T108] get_page_from_freelist+0x206b/0x2180 [ 432.522224][ T108] __alloc_pages+0x1ec/0x4f0 [ 432.526806][ T108] alloc_slab_page+0x5d/0x180 [ 432.531471][ T108] new_slab+0x87/0x2d0 [ 432.535528][ T108] ___slab_alloc+0xbc5/0x1240 [ 432.540192][ T108] __kmem_cache_alloc_node+0x126/0x270 [ 432.545659][ T108] kmalloc_trace+0x26/0xe0 [ 432.550145][ T108] batadv_hard_if_event+0xd53/0x1510 [ 432.555420][ T108] raw_notifier_call_chain+0xcb/0x160 [ 432.560786][ T108] register_netdevice+0x16a8/0x1b80 [ 432.565975][ T108] veth_newlink+0x66a/0xd60 [ 432.570520][ T108] rtnl_newlink+0x14b3/0x1f90 [ 432.575229][ T108] rtnetlink_rcv_msg+0x863/0xfb0 [ 432.580162][ T108] netlink_rcv_skb+0x1ef/0x440 [ 432.584993][ T108] netlink_unicast+0x7ad/0x920 [ 432.589745][ T108] page last free stack trace: [ 432.594409][ T108] free_unref_page_prepare+0x8e5/0x9e0 [ 432.599858][ T108] free_unref_page+0x2e/0x3f0 [ 432.604527][ T108] free_contig_range+0x9d/0x150 [ 432.609363][ T108] destroy_args+0xef/0xa0e [ 432.613829][ T108] debug_vm_pgtable+0x33c/0x38e [ 432.618668][ T108] do_one_initcall+0x257/0x800 [ 432.623422][ T108] do_initcall_level+0x13d/0x1ed [ 432.628413][ T108] do_initcalls+0x4b/0x8a [ 432.632739][ T108] kernel_init_freeable+0x401/0x5ab [ 432.637947][ T108] kernel_init+0x19/0x1b0 [ 432.642267][ T108] ret_from_fork+0x1f/0x30 [ 432.646674][ T108] [ 432.648985][ T108] Memory state around the buggy address: [ 432.654603][ T108] ffff8880588bcf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 432.662650][ T108] ffff8880588bcf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 432.670692][ T108] >ffff8880588bd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 432.678747][ T108] ^ [ 432.684884][ T108] ffff8880588bd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 432.692927][ T108] ffff8880588bd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 432.700993][ T108] ================================================================== [ 432.709050][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.829355][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 432.836602][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 432.843857][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.853923][ T108] Call Trace: [ 432.857208][ T108] [ 432.860150][ T108] dump_stack_lvl+0x188/0x24e [ 432.864847][ T108] ? memcpy+0x3c/0x60 [ 432.868843][ T108] ? show_regs_print_info+0x12/0x12 [ 432.874057][ T108] ? load_image+0x410/0x410 [ 432.878589][ T108] panic+0x2d3/0x710 [ 432.882499][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 432.887017][ T108] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 432.893021][ T108] ? _raw_spin_unlock+0x40/0x40 [ 432.897901][ T108] check_panic_on_warn+0x80/0xa0 [ 432.902938][ T108] ? txEnd+0x329/0x520 [ 432.907026][ T108] end_report+0x66/0x110 [ 432.911287][ T108] kasan_report+0x118/0x140 [ 432.915855][ T108] ? mutex_unlock+0x10/0x10 [ 432.920460][ T108] ? txEnd+0x329/0x520 [ 432.924556][ T108] kasan_check_range+0x235/0x290 [ 432.929517][ T108] txEnd+0x329/0x520 [ 432.933429][ T108] jfs_lazycommit+0x5bf/0xa90 [ 432.938127][ T108] ? txFreelock+0x5a0/0x5a0 [ 432.942648][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 432.948559][ T108] ? do_task_dead+0xd0/0xd0 [ 432.953087][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 432.959002][ T108] ? __kthread_parkme+0x71/0x1c0 [ 432.963963][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 432.969009][ T108] kthread+0x29d/0x330 [ 432.973087][ T108] ? txFreelock+0x5a0/0x5a0 [ 432.977608][ T108] ? kthread_blkcg+0xd0/0xd0 [ 432.982209][ T108] ret_from_fork+0x1f/0x30 [ 432.986648][ T108] [ 432.989993][ T108] Kernel Offset: disabled [ 432.994319][ T108] Rebooting in 86400 seconds..