last executing test programs: 1m33.622820103s ago: executing program 4 (id=6833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8000038, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xd0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xce10}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x21, 0x80, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 1m33.431499597s ago: executing program 4 (id=6837): r0 = socket(0x2c, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x11b, 0x9, 0x0, 0x0) 1m33.31256358s ago: executing program 4 (id=6839): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 1m33.184547952s ago: executing program 4 (id=6842): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$eJzs3cuOHFcZB/Cvr3MJSawsomAhNEnMJYT4GowhQJIFLNiwQN4iW5NJZOEAsg1yIgtPNBskeAgQEkuEWLLiAbJgy44HwJKNBMoCpVDNnDOuabqnZ+yZrm6f308aV319qqZP+d/Vl6mqPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxPe/98NznYi48ot0w4mIz0QvohuxUtdrEbGydqK5zgux3RzPR8RgKaJef/ufZyNej4iPn4m4/+DOen3z+QP247t/+vvvf/TUD/72x8GZ//z5Vu+NScvdvv2bf//l7qNvLwAAAJSoqqqqkz7mn4yIfvpsDwA8+fLrf5Xk29VzV2/OWX/UarVavYB1UzXe3WYREZvNder3DA7HA8CC2YxP2u4CLZJ/0foR8VTbnQDmWqftDnAs7j+4s95J+XaarwdrO+35XJA9+W92dq/vmDSdZvQck1k9vraiF89N6M/KjPowT3L+3dH8r+y0D9Nyx53/rEzKf7hz6VNxcv690fxHPDn5d8fmX6qcf/9Q+ffkDwAAAAAAcyz//f9Ey8d/lx5/Uw5kv+O/azPqAwAAAAAAAAActcOO/9cfGf9vl/H/AAAAYG7Vn9Vrv33m4W2Tvoutvv1yJ+LpkeWBwqSLZVbb7gcAAAAAAAAAAAAAlKS/cw7v5U7EICKeXl2tqqr+aRqtD+tx1190pW8/lKztJ3kAANjx8TMj1/J3IpYj4nL6rr/B6upqVS2vrFar1cpSfj87XFquVhqfa/O0vm1peIA3xP1hVf+y5cZ6TdM+L09rH/199X0Nq94BOjYbLQYOABGx82p0f9Ir0n+9Xi2mqno2Wn6Tw4LYZ/9nQdn/OYi2H6cAAADA8auqquqkr/M+mY75d9vuFAAwE/n1f/S4gFqtVhde9+esP2r1kdRN1Xh3m0VEbDbXqd8zGI4fABbMZnzSdhdokfyLVn+wfaHtTgBzrdN2BzgW9x/cWe+kfDvN14M0vns+F2RP/pud7fXy+uOm04yeYzKrx9dW9OK5Cf15fkZ9mCc5/+5o/ld22odpucfPv9rzZ8K2zjGalH+9nSda6E/bcv690fxHHPf+Pytb0R2bf6ly/v1D5d+TPwAAAAAAzLH89/8Tc3X8d/iomzPVfsd/18aucXx9AQAAAAAAAICjcv/BnfV83Ws+/v+5Mcu5/vPJlPPvyL9IOf/uSP5fHlmu15i/9/bD/P/14M76H27987N5etD8l/JMJz2yOukR0Un31ElfuXvEXwyxNegN63sadLq9fjrnpxq8G9fiemzE2T3LdtP/x8P2c3va654Ottur3k77+T3t/d32vP6FPe2DdHZRtZLbT8d6/DSuxzvb7XXb0pTtX57SXk1pz/n37P9Fyvn3Gz91/qupvTMyrd37qPt/+31zOu5+3rr2+V+dPf7NmWorervb1lRv30st9Gf7/+SpYfz85saN07ev3rp141ykyZ5bz0eaHLGc/yD97D7/v7zTnp/3m/vrvY+Gh85/XmxFf2L+Lzfm6+19ZcZ9a0POf5h+cv7vpPbx+/8i5z95/3+1hf4AAAAAAAAAAAAAAADAfqqq2r5E9K2IuJiu/2nr2kwAYLby63+V5NtnVfdmfH9q9YLXnTnrz0zrT6v56o9avYh1UzXem80iIv7aXKd+z/DLcb8MAJhnn0bEP9ruBK2Rf8Hy9/3V01NtdwaYqZsffPjjq9evb9y42XZPAAAAAAAAAIBHlcf/XGuM/3yqqqq7I8vtGf/17Vh73PE/+3lmd4DRCQNV9w6/TfvZ6g573cZw4y/GpPG/B7tz+43/3Z9yf4Mp7cMp7UtT2pentI+90KMh5/9iY7zzUxFxcmT49RLGfx0d874EOf+XGo/nOv8vjSzXzL/63SLn392T/5lb7//szM0PPnzt2vtX39t4b+MnF86dO3vh4sVLly6deffa9Y2zO/+22OPjlfPPY187D7QsOf+cufzLkvP/QqrlX5ac/xdTLf+y5Pzz+z35lyXnnz/7yL8sOf9XUi3/suT8v5Jq+Zcl5/9qquVflpz/V1Mt/7Lk/F9LtfzLkvM/nWr5lyXnfybVB8x/5bj7xWzk/PMRLvt/WXL++cwG+Zcl538+1fIvS87/QqrlX5ac/+upln9Zcv5fS7X8y5Lzv5hq+Zcl5//1VMu/LDn/S6mWf1ly/t9ItfzLkvP/ZqrlX5ac/xupln9Zcv7fSrX8y5Lz/3aq5V+WnP93Ui3/suT830y1/Mvy8Pv/H2/m188eze8xU+zMYD66YWZnpu1nJgAAAAAAAAAAAABg1CxOJ257GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11vcDP7NvXjshMRDyd/I3sHaMMc4mu36JX2hdTHhteCuBUOgLtutdmwW/4bVLoJFsGiiRMCqqaBsu2gJCbW4qfMEFrQDlArVCqkTaC3qDqFC5iKqAAlIlWkG2mnOe59mZ2dmZXe94d/acz0eyf94zZ8555swzZ+e36+8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRtjdMf6aWZVn9T/7X5iy7tf7vjWOb82WvXesRAgAAACv1q/zv529PC44u4U4N6/zzK7739bm5ubns/YN/PvyFubl0w1iWDW/Isvy26PqPPlBrXCd4PButDTR8PdBl94Ndbh/qcvtwl9tHuty+ocvto11uX3AAFthY/Dwm39iO/J+bi0Oa3ZEN57ftaHOvx2sbBgbiz3Jytfw+c8OnspnsTDadTTatX6xby9f/5rb6vt6axX0NNOxra32G/Oyxk3EMtXCMdzTta36b0U9en439/GePnfzbS8/d1a52PQxN2yvGuWt7fZyfCkuKsdayDemYxHEONIxza5vnZLBpnLX8fvV/t47z+SWOc3B+mKuq9TkfzQbyfz+TH6ehxh/rpeO0NSz7xT1Zll2dH3brOgv2lQ1km5qWDMw/P6PFjKxvoz6VXpINLWueblvCPK3XqR3N87T1NRGf/23hfkOLjKHxafrJJ0canvdfzt3IPI3qj7oYw9zg/LJiDK1zsNevlX6Zg3FePJM/6CfazsEd4fE/tnPxOdh27rSZg+lxN8zB7d3m4MDIYD7m9CTU8vvMz8E9TesP5nuq5fXZnZ3n4MSlsxcmZj/+iftmzp44PX16+ty+PXsm9x04cOjQoYlTM2emJ4u/b/Bo979N2UB6HW4Pxy6+Bl7dsm7jVJ378siC8++Nvg5H0+tw4feszS3r9vp1ONT64Gqr84JcOKeL18Z76wd99NpAtshrLH9+dq/8dZged8PrcKjhddj2e0qb1+HQEl6H9XUu7F7ae5ahhj/txrD494KVzcHNDXOw9f1I6xzs9fuRfpmDo2Fe/GD34t8LtobxPjG+3PcjgwvmYHq44dxTX5Le748eyku7eXl3/YZbRrLLs9MX73/0xKVLF/dkoayKlzbMldb5uqnhMWUL5uvAsufr0ZlXPHF3m+Wbw7Eava/+1+iiz1V9nf33d36u8u9u7Y9n09K9WSg9ttrHs9138/rxHMmyL37nkw9/67EvvmHR41nvNz81sfL34qkvbTj/Di9y/o19/wvF/tKmHh8cHipev4Pp6Aw3nY+bn6qh/NxVy/f9/MTSzsfD4c9qn4/v6HA+3tKybq/Px8OtDy6ej2vdftqxMq3P52iYJ2cmO5+P6+ts2bvcOTnU8Xx8T6i1cPxfEzqF1Bc1zJ3F5m3a19DQcHhcQ3EPzfN0X9P6w6E3q+/rqb3hTWEa5dLm6a57ivUHG+4XrdY8HWtZt9fzNP3sa7F5Wuv207cb0/p8joZ5cce+zvO0vs7T+1d+7twY/9lw7hzpNgeHB0fqYx5OkzA/32dzG+McvD87mZ3PzmRT+a0j+Xyq5fsaf2Bp58qR8Ge1z5VbOszBXS3r9noOpu9ji8292tDCB98Drc/naJgXTz7QeQ7W13njwd6+d90VlqR1Gt67tv58bbGfed3dcphu1lwZCuP8zsHOP5utr3Pm0HL7zM7H6d6w5JY2x6n19bvYa2oqW53jtCWM87lDix+n+njq63zh8BLn09Esy6589MH8573h9ytXLn//602/d2n3O50rH33wpy869U/LGT8A698LRdlUfK9r+M3UUn7/DwAAAKy9bv9BPf2MezT8DlP/DwAAAGUU+/74v8IT/T8AAACURuz7h0JNytD//3H3Vba88bmZF65kKZk/F8Tb02F4qFgvZlwnw9djc/Pqyx/86vR//+OVpQ1vIMuyXz70R23X3/JQHFdhLIzz+pualy/w9fuWtO/jj1xJ+23Mr38pbD8+nqVOg3YR3Mksy755++fy/Yx94Fpen37oeF4fvvrE4/V1nj9cfB3v/+xLi/X/KvzflaOnTjTd/9lwHH4c6uTb2h+PeL+vXXvN1oPvm99fvF9t+235w37yg8V24+fkfP7xYv14nBcb/7c++9TX6us/+qr2478y0H78T4XtfjXU/3l5sX7jc1D/Ot7v02H8cX/xfvd/5dttx3/9M8X6F95crHc81Lj/XeHrHW9+bqbxeD1aO9H0uLK3FOvF/U9+/0/z2+P24vZbxz967FrT8WidH0//W7GdiZb14/K4n+gfWvZf307j/Iz7f+pPjjcd5277v/7wsy+vb7d1//e2rHfho7vz/c9vr/kTm/76059ru784nqN/f6Hp8Rx9d3gdh/0/+cEwH8Pt/3u92F7rpyscf3fz+Seu/6XNV5oeT/TWnxf7v/6603ndMLpx0y23vui2q++qH7sse2ZDsb1u+z/9N+ebxv/lO4vjEW+P/8Wsdf+LufrKYv8XPzZ+7vzs5ZmpdFQfuz3/7Jy3F+OJ4709nFtbvz52/tKHpi+OTY5NZtlYeT9C74Z9JdSfFuVq57XnFpxBdz8Sns+7//Kbm3b+62fj8n9/b7H82tuK71uvDut9PizfHJ6/5e1/oSe33Zm/vmtPhxHOLfy84JXYuuO/Di1pxfD4W98XxPl+4WUfyo9D/bb8+0Z8Xa9w/D+cKrbzjXBc58InM2+/c35/jevHz0a49p7i9b7i4xdOc/F5/bvwfL/jx8X247ji4/1heB/z7S3N57s4P75xZaB1+/mneFwN55PsanF7XCse72vP39l2ePFzSLKrd+Vf/1nazl3LepiLmf347MSZmXOXH524ND17aWL24584dvb85XOXjuWf5Xnsw93uP39+2pSfn6amD+zP8rPV+aLcZGs9/guPnJw6OLlzavrUicunLj1yYfri6ZOzsyenp2Z3njh1avpj3e4/M3Vkz97D+w7uHT89M3Xk0OHD+w6Pz5w7Xx9GMaguDkx+ZPzcxWP5XWaP7D+854EH9k+Onz0/NX3k4OTk+OVu98+/N43X7/2H4xenz5y4NHN2enx25hPTR/YcPnBgb9dPAzx74dTs2MTFy+cmLs9OX5woHsvYpXxx/Xtft/tTTrP/UbyfbVUrPogve9e9B9Lns9Z99ZOLbqpYpeUDRJ8Ln0Xz3RdfOLSUr2PfPxxqUob+HwAAAMjFvn8k1ET/DwAAAKUR+/4NoSb6fwAAACiN2PePhpr+S0BF+v/S5f+3XFnS/uX/1zL/n1/9Wf5f/n/18/8hf//Me/ot/1+cL+T/e2Ol+Xv5/0D+X/5f/l/+X/6fHui3/H/s+zdmmd//AwAAQEnFvn9TqIn+HwAAAEoj9v23hJro/wEAAKA0Yt9/a6hJRfp/+X/5f9f/l/+X/2+/f/n/9Un+vzP5/y7k/yeyauX/r/Zy/GuQ/9/Y+IX8P/2o3/L/se9/UahJRfp/AAAAqILY998WaqL/BwAAgNKIff/toSb6fwAAACiN2PdvDjWpSP8v/7+i/H/KXMn/N49f/r+Z/H+YD/L/8v+rQP6/M/n/LuT/Xf9/feX/m8j/04/6Lf8f+/4Xh5pUpP8HAACAKoh9/0tCTfT/AAAA0H+GOtzW7j9nB7Hvf2moyYL+v9MOAAAAgH4W+/47spYgeEV+/y//7/r/8v/y//L/7fe/9Pz/YCb/3z/k/zuT/+9C/l/+X/5f/p+e6rf8f973Z6PZy0JNKtL/AwAAQBXEvv/OUJMl9P8bbtqoAAAAgF6Kff//CzXx+38AAAAojdj3bwk1qUj/L/9fmvz/LxqfOvl/+f9O+5f/d/3/MpP/70z+vwv5f/l/+f8bzP9f3SP/Tzv9lv+Pff9doSYV6f8BAACgCmLff3eoif4fAAAASiP2/f8/1ET/DwAAAKUR+/6toSYV6f/l//s8/x+To67/L/8v/9+X+f9R+f++I//fmfx/F0vJ/98q/78Y+f8q5/9d/5/2+i3/H/v+l4eaVKT/BwAAgCqIff8rQk30/wAAAFAase9/ZaiJ/h8AAABKI/b9Y6EmFen/l5P/r12V/1/MTb7+/8gSrv/fRP5f/r/T/uX/Xf+/zOT/O5P/78L1/+X/5f/l/+mpfsv/x75/W6hJRfp/AAAAqILY928PNdH/AwAAQGnEvv+eUBP9PwAAAJRG7Pt3hJpUpP93/f91kf/P5P/l/+X/5f/l/5dG/r8z+f8u5P/l/+X/5f/pqX7L/8e+/1WhJhXp/wEAAKAKYt+/M9RE/w8AAAClEfv+V4ea6P8BAACgNGLfvyvUpCL9v/y//L/8v/y//H/7/cv/r0/y/53J/3ch/y//L/8v/09P9Vv+P/b9rwk1qUj/DwAAAFUQ+/7doSb6fwAAACiN2PffG2qi/wcAAIDSiH3/eKhJRfp/+X/5f/l/+X/5//b7l/9fn+T/O5P/70L+X/5f/l/+n57qt/x/7PvvCzWpSP8PAAAAVRD7/vtDTfT/AAAAUBqx758INdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8/7Ly/6+c3678f0H+v7/I/3cm/9+F/L/8/5rn/4fl/ymVfsv/x75/T6hJRfp/AAAAqILY9+8NNdH/AwAAQGnEvn9fqIn+HwAAAEoj9v37Q00q0v/L/8v/y//3NP9fazcfSpX/byD/X5D/7y/y/531Pv8fH6L8v/y//L/r/8v/s1C/5f9j3/9AqElF+n8AAACogtj3Hwg10f8DAABAacS+/2Coif4fAAAASiP2/YdCTSrS/8v/y//L/7v+v/x/+/3L/69P8v+duf5/F/L/8v/rOP9fn1vy//Sbfsv/x77/cKhJRfp/AAAAqILY97821ET/DwAAAKUR+/5fCzXR/wMAAEBpxL7/10NNKtL/y//L/8v/y//3e/5/RP5f/n8Z5P87k//vQv5f/n8d5/9d/59+1G/5/9j3Hwk1qUj/DwAAAFUQ+/7fCDXR/wMAAEBpxL7/daEm+n8AAAAojdj3Hw01qUj/L/+/Svn/uFD+X/5f/t/1/+X/byr5/87k/7uQ/5f/l/+X/6en+i3/H/v+14eaVKT/BwAAgCqIff+DoSb6fwAAACiN2Pe/IdRE/w8AAAClEfv+N4aaVKT/l/93/f+1z/8PN41d/n/+fvL/Bfl/+f/lkP/vTP6/C/l/+X/5f/l/eqrf8v+x739TqElF+n8AAACogtj3vznURP8PAAAApRH7/reEmuj/AQAAoDRi3//WUJOK9P/y//L/a5//d/1/+f+C/L/8fy/I/3cm/99F7/P/wy3bl/+/idZ6/PL/8v8s1G/5/9j3/2aoSUX6fwAAAKiC2Pc/FGqi/wcAAIDSiH3/20JN9P8AAABQGrHvf3uoSUX6f/l/+X/5f/l/+f/2+5f/X5/k/ztbZ/n/X90Wlq/j/H/r9uX/b6K1Hv9y8/9DLV/flPz/jxbL/89taL2//D83Q7/l/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18cxn16W/5f/zxfI/8v/y/+vW/L/na2z/H8Zrv/fun35/5torcfv+v/y/yzUb/n/2Pe/O9SkIv0/AAAAVEHs+x8ONdH/AwAAQGnEvv89oSb6fwAAACiN2Pe/N9SkIv2//L/r/6/X/P8tDevL/8v/y/8Tyf93Jv/fhfy//H+/5f//U/6f9a3f8v+x738k1KQi/T8AAABUQez73xdqov8HAACA0oh9/2+Hmuj/AQAAoDRi3//+UJOK9P+rlv/fvHCR/P9y8v9j8v/LvP7/SFgm/y//L/9fLfL/ncn/dyH/L//fb/l/1/9nneu3/H/s+z8QarL0/n90yWsCAAAAayL2/b8TalKR3/8DAABAFcS+/3dDTfT/AAAAUBqx7/+9UJOK9P+u/79e8v+u/58tM//v+v+L71/+v4/z/wPy/yu1evn/eOaR/5f/l/+P5P/l/+X/adVv+f/Y9/9+qElF+n8AAACogtj3fzDURP8PAAAA60K7/5PdKvb9x0JN9P8AAABQGrHvPx5qUpH+X/5f/l/+/4by//lqNzX//xfb/+UH33vn8T3y/9XK/7v+/4qt6vX/6y9+1/+X/5f/T+T/5f/l/2nVb/n/2PefCDWZb/ze7gL/AAAAsL7Fvv8PQk0q8vt/AAAAqILY958MNdH/AwAAQGnEvn8q1KQi/b/8v/y//L/r//c6/x+Px3rK/49vWEf5/3jSlf9va1Xz/++bz4nL/y83/z/Sdmlr/r8m/99E/n/Z4/9ulmXy//L/rKF+y//Hvn861KQi/T8AAABUQej7B04Vdf4G/T8AAACURuz7T4ea6P8BAACgNGLf/6FQk4r0//L/8v/y//L/rv/ffv99m/93/f+O5P8765/8f3uu/y//v57HL/8v/89C/Zb/j33/TKhJRfp/AAAAqILY93841ET/DwAAAKUR+/6PhJro/wEAAKA0Yt9/JtSkIv2//P//sXcfT5aV5x3H70AzoahyeeeFF2bvP4GFWds7b7xg44Vd5XKVwTZOODEI5YByDigLBZSQEEooJ1BCQllIQjkHlEGqUTHzPE93T58+t3v6dt9z3vfzWfhBjUa3cVFCP4bvvPp//b/+X/8//Pn6/3nS/4/T/y+h/9f/6//1/6zU1Pr/3P3/FLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/n+OWTva//l//32z//xf6/90+X/+v/2+Z/n+c/n/IJZu/qf/X/+v/9f+s1NT6/9z9/xK3dLL/AQAAoAe5+/81brH/AQAAoBm5+6+JW+x/AAAAaEbu/n+LWzrZ/+f1/8cW6+n/j+/4vo62/8+MV//fUv/v/f9dP1//r/9v2dH2/9c/9N98+v/Z9/9b6P/1//p//T8rNbX+P3f/v8ctnex/AAAA6EHu/v+IW+x/AAAAaEbu/v+MW+x/AAAAaEbu/v+KWzrZ/97/9/6//l//r/8f/nz9/zx5/39cT/3/NfdcetX9t/3p7fv5fP2//l//r/9ntabW/+fuvzZu6WT/AwAAQA9y9/933GL/AwAAQDNy9/9P3GL/AwAAwAydGvxq7v7/jVs62f/6f/2//j/6/5P6f/2//r8F+v9xPfX/F/L5+n/9v/5f/89qTa3/z93/f3FLJ/sfAAAAepC7///jFvsfAAAApmvoH8Qekbv/urjF/gcAAIBm5O4/Hbd0sv/1/4ff//9e/z+P/t/7//p//X8T9P/j9P9L6P/1//p//T8rNbX+P3f/9XFLJ/sfAAAAepC7/2Fxi/0PAAAAzcjdf0PcYv8DAABAM3L3Pzxu6WT/6/+9/6//1//r/4c/X/8/T9Pu/zeWfr7+X/8/8/7/Ev2//l//z1b77P8fGPmv7ZX0/7n7HxG3dLL/AQAAoAe5+x8Zt9j/AAAA0Izc/Y+KW+x/AAAAaEbu/kfHLZ3sf/2//l//r/+/4P5/5596Z+n/h+n/j8a0+//luun/jw3/Wgj6/9n3/97/1//r/9lmau//5+5/TNzSyf4HAACAHuTuf2zcMrL/9/038wEAAIC1yt3/uLjFz/8DAADA7GV1lrv/8XFLJ/tf/6//1//r/73/P/z5Y/3/7Vu+P/3/tOj/x02m/9+F/l//P+fvX/+v/2enqfX/ufufELd0sv8BAACgB7n7b4xb7H8AAABoRu7+J8Yt9j8AAAA0I3f/k+KWTvb/cP+/+fv1/3uj/9/+/ev/h//8WFX/n/+J+v/R/v8K7//3Sf8/Tv+/xLb+/683Fgv9v/5f/x/9/6llP17/z5Cp9f+5+58ct3Sy/wEAAKAHufufErfY/wAAANCM3P1PjVvsfwAAAGhG7v6nxS2d7H/v/+v/9f/z6/+9/3/OOt//Xxx5/7+h/98j/f84/f8S3v/X/+v/x9//H/lVAPT/DDm6/n9jT/1/7v6nxy2d7H8AAADoQe7+Z8Qt9j8AAADMw9Z/duD8f6A05O5/Ztxi/wMAAEAzcvc/K25pZ/+PvtWp/9f/6//1//r/4c+fVv/v/f+90v+Pa73/P7HQ/x/EIfXzG431/zft9uOn0P9fd9j9/wj9P0O29f93bH59Xe//5+5/dtzSzv4HAACA7uXuf07cYv8DAABAM3L3Pzdusf8BAACgGbn7nxe3dLL/D73/H/nVB/T/+n/9v/5f/6//XzX9/7jW+3/v/x/Mut/Pn/v3P4X+/9Df/x+h/2fItv5/i3X1/7n7nx+3dLL/AQAAoAe5+18Qt9j/AAAA0Izc/TfFLfY/AAAANCN3/wvjlk72v/f/9f/6f/2//n/48/X/83Sg/v4i/X/R/+v/9f/6f/0/KzC1/j93/4vilk72PwAAAPQgd/+L4xb7HwAAAObkxNjvzN3/krjF/gcAAIBm5O5/adzSyf7X/x9u/59f1//r/xf6f/2//v9IdPv+/7GhvxLttEv/f9c/nP6r7V/R/+v/9f/6f/0/e/THI79vEv3/mc3/dZm7/2VxSyf7HwAAAHqQu//lcYv9DwAAAM3I3f+KuMX+BwAAgGbk7r85btnn/h9rHqZM/+/9f/2//l//P/z5+v956rb/3yPv/y+h/9f/6//1/6zUJPr/Lf86d/8r4xY//w8AAADNyN3/qrjF/gcAAIBm5O5/ddxi/wMAAEAzcve/Jm7pZP/r//X/+n/9v/5/+PP1//Ok/x+n/19iTv3/zQfo/zeGv7zufv6g1v396//1/+w0tf4/d/8tcUsn+x8AAAB6kLv/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/+v/9f/6f/3/8Ofr/+dJ/z9O/79YLN448g0M9f9nTkyz//f+/+S+f/2//p+dptb/5+5/Q9zSyf4HAACADlx26uw5GX8r2P4HAACAFuXuvzVusf8BAACgGbn73xS3dLL/9f/6f/3/Zv9ffyT6f/2//n+29P/j9P9LzOn9f/3/5L5//b/+n52m1v/n7n9z3NLJ/gcAAIAe5O6/LW6x/wEAAKAZufvfErfY/wAAANCM3P23xy2d7H/9v/5f/+/9f/3/8Ofr/+fp8Pr/hf5f/6//X0L/r//X/3O+qfX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/9f/D3++/n+evP8/Tv+/hP5f/6//1/+zUsP9/3Vr6/9z978zbulk/wMAAEAPcvffEbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5/e/+/WOj/9f977/+v1/8frP8/udD/r5z+f5z+fwn9f5v9/0WLhvr/U7v+eP0/UzS19/9z978nbulk/wMAAEAPcve/N26x/wEAAKAZufvfF7fY/wAAANCM3P3vj1s62f/6f/2/9//1/97/H/587//Pk/5/nP5/Cf3/gfr//Ovx5Pp/7//r/1mbqfX/ufs/ELd0sv8BAACgB7n7Pxi32P8AAADQjNz9H4pb7H8AAABoRu7+D8ctnex//b/+X/+v/9f/D3++/n+e9P/j9P9L6P/bfP+/j/7/1EL/zwRNrf/P3f+RuKWT/Q8AAAA9yN1/Z9xi/wMAAEAzcvffFbfY/wAAANCM3P0fjVs62f/6f/2//n+e/f9J/b/+X/8/aCr9/+WX/+Xd+n/9v/5f/+/9f/1/76bW/+fu/1jc0sn+BwAAgB7k7v943GL/AwAAQDNy938ibrH/AQAAoBm5+z8Zt3Sy/3f2/5cszhWq5wz1/9Gozb7/P7Hl+0j6f/3/2S/MoP9f6P/1//r/QVPp/73/f2Hfv/5f/z/n739f/f9lO3+8/p8WTa3/z91/d9zSyf4HAACAHuTu/1TcYv8DAABAM3L3fzpusf8BAACgGbn774lbOtn/3v/X/+v/9f/6/+HP1//Pk/5/nP5/Cf2//t/7/1f/3cX6f1Znav1/7v7PxC2d7H8AAADoQe7+z8Yt9j8AAAA0I3f/5+IW+x8AAACakbv/83FLJ/tf/380/f8fxdf0//r/nvr/B8+cOaP/36T/Pxr6/3H6/3L+H9o5/fT/J4e+uO5+/qDW/f030/97/58Vmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+1/938/7/fce77f//Vv9/3ud7/1//3zL9f/4VfZj+f4l++v9B6+7n5/796//1/+w0tf4/d/+9cUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/3fT/99w7vvssf/3/r/+X//fE/3/OP3/Evp//X/7/f/x3X68/p/DMLX+P3f/fcc2utz/AAAAMFd/8+f/eO9e/733nf2/Jxdfj1uuWJzZ409jAwAAABP30O4/trFYfOPsv/Lz/wAAANCi3P3fjFs62f/6/776/z7f/9f/6//1/z3R/4/T/y+h/9f/t9//70r/z2GYWv+fu/9bccuW4bex7z9KAAAAYEpy9387bunk5/8BAACgB7n7vxO37Nj/fjlAAAAAmKvc/d+NWzr5+f919v8X6/+X9/+LQ+r/49+n/z9H/6//H/p8/f886f/HHbD/P3NM/6//H6H/1//r/znf1Pr/3P3fi1s62f8AAADQqG1/RyF3//fjFvsfAAAAmpG7/wdxi/0PAAAAzcjd/8O4pZP97/3/Q+7/H/oP2N7PZ6p+iO//n6rf8v5/5/3/jScHP1//r/9vmf5/3Irf/79W/6//32pC/f8J/b/+n2mYWv+fu/9HcUsn+x8AAAB6kLv/x3GL/Q8AAADNyN3/k7jF/gcAAIBm5O7/adzSyf7X/0/8/f8L6v/38P6//r+P/n+Xz2+n//+TS0/feeXf33qL/p9NR9n/558LHff/3v/X/28zof7f+//6fyZi9f3/xrYv7rf/z93/s7ilk/0PAAAAPcjdf3/cYv8DAABAM3L3/zxusf8BAACgGbn7fxG3dLL/9f/6/6n0//n/6zX0/6cvuP8/tVgs1tL/Z1Pce//v/X/9/07e/x+n/19C/6//1//r/1mp1ff/27+43/4/d/8v45ZO9j8AAAD0IHf/r+KW3P/H9v237gEAAICJyd3/67jFz/8DAABAM3L3/yZu6WT/6//1/1Pp/5P3/zd/XFvv/19Zceq5zz++4/tru///s/ot/f/h0v+P0/8vof/X/+v/9f+s1NT6/9z9v41bOtn/AAAA0IPc/Q/ELfY/AAAANCN3/4Nxi/0PAAAAzcjd/7u4pZP9r/9vtf/PIl7/r/+fSv/v/X/v/x8N/f84/f8S+n/9v/5f/89KTa3/z93/hwAAAP//3wFdTQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m32.708330713s ago: executing program 4 (id=6851): r0 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x8000) ioctl$FE_READ_SNR(r0, 0x80026f48, &(0x7f00000003c0)) 1m31.966518729s ago: executing program 4 (id=6867): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1m31.774125953s ago: executing program 32 (id=6867): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 2.390706538s ago: executing program 1 (id=9177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}}, 0x40820) 2.390582218s ago: executing program 5 (id=9178): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f00000003c0)={[{@umask={'umask', 0x3d, 0xeef}}, {}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp863'}}, {}, {@dir_umask}, {}, {}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}]}, 0x4, 0x31d, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, 0x1a1) 2.33696209s ago: executing program 1 (id=9181): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {0x0, 0x20}], 0x2, 0xfffffffc, 0x0) 2.273059521s ago: executing program 5 (id=9183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x36, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x2}, @enter_looper], 0x0, 0x0, 0x0}) 2.212587082s ago: executing program 1 (id=9186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 2.119577734s ago: executing program 1 (id=9188): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bind$vsock_stream(r0, &(0x7f0000000080)={0x1e, 0x0, 0x2711, @host}, 0x10) 2.076321205s ago: executing program 5 (id=9190): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 1.991220557s ago: executing program 1 (id=9192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4149007c87e8a4a4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xec}}, 0x0) 1.960394548s ago: executing program 5 (id=9194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}}, 0x0) 1.900471369s ago: executing program 1 (id=9196): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)={0x40, 0x2c, 0x4, "0ed836f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.826449181s ago: executing program 5 (id=9199): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000060905", @ANYRESDEC], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 931.93627ms ago: executing program 3 (id=9228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) 796.611223ms ago: executing program 3 (id=9231): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 780.019293ms ago: executing program 3 (id=9233): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15.9\x8b|\xe9H\xa7a>\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x02\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\x014g+\xbd\xd1\xe0R\x9d\x18\x19a:', 0x0) 694.474425ms ago: executing program 3 (id=9234): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) 629.492167ms ago: executing program 3 (id=9238): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x0, 0x0, @mcast1}}}, 0x38) 516.685389ms ago: executing program 3 (id=9241): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb100000000102000905", @ANYRES32=r0], 0x0) 328.392383ms ago: executing program 2 (id=9249): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) 284.023994ms ago: executing program 0 (id=9251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xe9}]}, 0x40}}, 0x0) 243.138085ms ago: executing program 2 (id=9252): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x8, 0x7fff0004}]}) semop(0x0, 0x0, 0x0) 242.502675ms ago: executing program 0 (id=9253): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x18100d0, &(0x7f0000000200)={[{@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@rodir}, {@fat=@check_strict}, {@utf8no}, {@shortname_winnt}, {@fat=@showexec}, {@rodir}, {@shortname_win95}, {@uni_xlate}]}, 0x3, 0x36b, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 221.219096ms ago: executing program 2 (id=9254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r0, 0xfffffffffffffe42, 0x0}, 0x10) 158.952527ms ago: executing program 0 (id=9255): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x68, &(0x7f0000000080), 0x4) 158.307507ms ago: executing program 2 (id=9256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 156.638917ms ago: executing program 0 (id=9257): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)=0xb6) 127.222618ms ago: executing program 0 (id=9258): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000002c0)='key_or_keyring:\xd6\x7f\x91\xf0\x86\xf2z\xcd\xf5X\xe1VW:\x8f/pe\xc4\xcc\xfb%m\xeaA\xde\xbf\x89*\x14\x90I\xab[\xf8\xec\xd3=\xf2\x8b\xfb\xe1\xa7\xa1\r6\x81\xd7\n\xacY\xcf\x13/\xd6\xa1r.}\x05(\xab\xaf\'\xc83\xef\xac\x02D\x05 2. [ 369.602102][T19335] ntfs3: loop3: Failed to load $Volume. [ 370.379649][T19384] loop5: detected capacity change from 0 to 4096 [ 370.493731][T19384] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 370.634044][T19384] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 370.689468][T19403] loop1: detected capacity change from 0 to 4096 [ 370.774071][T19403] ntfs3: loop1: ino=3, Correct links count -> 2. [ 370.782729][T19403] ntfs3: loop1: Failed to load $Volume. [ 371.011397][T19429] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.132577][T19438] loop5: detected capacity change from 0 to 1024 [ 371.393730][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 371.614608][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6984'. [ 371.663708][ T7162] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 371.852344][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6992'. [ 371.885896][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6993'. [ 371.950330][ T7162] usb 2-1: Using ep0 maxpacket: 32 [ 372.083826][ T7162] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.093926][ T1108] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 372.179515][T19513] netlink: 'syz.3.6999': attribute type 21 has an invalid length. [ 372.188241][T19513] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6999'. [ 372.199609][T19513] netlink: 'syz.3.6999': attribute type 4 has an invalid length. [ 372.210455][T19513] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6999'. [ 372.273691][ T4674] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 372.323806][ T7162] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 372.346205][ T7162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.354455][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 372.378820][ T7162] usb 2-1: Product: syz [ 372.383011][ T7162] usb 2-1: Manufacturer: syz [ 372.388721][ T7162] usb 2-1: SerialNumber: syz [ 372.418413][ T7162] usb 2-1: config 0 descriptor?? [ 372.449080][T19518] loop3: detected capacity change from 0 to 8192 [ 372.489395][ T7162] usb 2-1: bad CDC descriptors [ 372.494657][ T7162] usb 2-1: unsupported MDLM descriptors [ 372.498177][T19526] netlink: 'syz.2.7004': attribute type 1 has an invalid length. [ 372.513860][ T4674] usb 6-1: Using ep0 maxpacket: 32 [ 372.542704][T19518] loop3: p1 p2 < > p3 [ 372.547099][T19518] loop3: partition table partially beyond EOD, truncated [ 372.582596][T19518] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 372.605695][T19518] loop3: p2 start 4059840512 is beyond EOD, truncated [ 372.612510][T19518] loop3: p3 start 67108864 is beyond EOD, truncated [ 372.638692][ T1108] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 372.658214][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.680847][ T1108] usb 1-1: Product: syz [ 372.685753][ T1108] usb 1-1: Manufacturer: syz [ 372.690548][ T1108] usb 1-1: SerialNumber: syz [ 372.709108][ T4232] usb 2-1: USB disconnect, device number 39 [ 372.833658][ T7162] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 372.883721][ T4674] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 372.898559][ T4674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.907173][ T4674] usb 6-1: Product: syz [ 372.911364][ T4674] usb 6-1: Manufacturer: syz [ 372.922118][ T4674] usb 6-1: SerialNumber: syz [ 373.073635][ T5106] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 373.183956][ T1108] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 373.193347][ T1108] mxuport: probe of 1-1:254.0 failed with error -5 [ 373.202025][ T1108] usb 1-1: USB disconnect, device number 34 [ 373.223651][ T4674] usb 6-1: failed waiting for Axe-Fx III to boot: -71 [ 373.230480][ T4674] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 373.248798][ T4674] usb 6-1: USB disconnect, device number 2 [ 373.264040][ T7162] usb 4-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 373.279479][ T7162] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 373.303844][ T7162] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 373.333636][ T5106] usb 3-1: Using ep0 maxpacket: 32 [ 373.454053][ T5106] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.465416][ T5106] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.495372][ T7162] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 373.509379][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.518053][ T7162] usb 4-1: Product: syz [ 373.522238][ T7162] usb 4-1: Manufacturer: syz [ 373.532535][ T7162] usb 4-1: SerialNumber: syz [ 373.564138][T19528] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 373.603863][ T5106] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 373.622542][ T5106] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 373.631677][ T5106] usb 3-1: Product: syz [ 373.636210][ T5106] usb 3-1: Manufacturer: syz [ 373.651940][T19555] xt_NFQUEUE: number of total queues is 0 [ 373.684802][ T5106] hub 3-1:4.0: USB hub found [ 373.810331][T19563] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 373.817458][T19563] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.832357][T19567] x_tables: unsorted underflow at hook 1 [ 373.873745][T19563] vhci_hcd vhci_hcd.0: Device attached [ 373.879880][T19568] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 373.886416][T19568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.900725][T19573] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7023'. [ 373.920853][T19568] vhci_hcd vhci_hcd.0: Device attached [ 373.920988][ T5106] hub 3-1:4.0: 8 ports detected [ 373.935971][ T7162] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 373.945692][T19572] vhci_hcd: connection closed [ 373.945770][T19564] vhci_hcd: connection closed [ 373.959440][ T9] vhci_hcd: stop threads [ 373.975077][ T9] vhci_hcd: release socket [ 373.979569][ T9] vhci_hcd: disconnect device [ 373.984835][ T7162] usb 4-1: USB disconnect, device number 31 [ 374.006565][ T5106] hub 3-1:4.0: insufficient power available to use all downstream ports [ 374.018671][ T9] vhci_hcd: stop threads [ 374.022948][ T9] vhci_hcd: release socket [ 374.032922][ T9] vhci_hcd: disconnect device [ 374.053640][ T1108] vhci_hcd: vhci_device speed not set [ 374.130794][ T5106] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 374.147037][ T5106] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 374.210399][ T5106] usb 3-1: USB disconnect, device number 32 [ 374.425657][T19606] loop3: detected capacity change from 0 to 512 [ 374.480392][T19606] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,barrier,quota,,errors=continue. Quota mode: writeback. [ 374.508770][T19611] loop1: detected capacity change from 0 to 256 [ 374.587365][T19611] exfat: Deprecated parameter 'utf8' [ 374.592720][T19611] exfat: Deprecated parameter 'namecase' [ 374.611926][T19611] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 374.731007][T19617] CIFS mount error: No usable UNC path provided in device string! [ 374.731007][T19617] [ 374.777896][T19617] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.063148][T19646] netlink: 'syz.0.7056': attribute type 2 has an invalid length. [ 375.151508][T19652] x_tables: unsorted underflow at hook 3 [ 375.248967][T19659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7065'. [ 375.529284][T19685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7075'. [ 375.583790][T19685] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7075'. [ 376.189310][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7101'. [ 376.231039][T19736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.296437][T19745] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 376.363605][ T1108] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 376.623683][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 376.743779][ T1108] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 376.778879][ T1108] usb 3-1: config 1 has no interface number 0 [ 376.804270][ T1108] usb 3-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.833614][ T1108] usb 3-1: config 1 interface 19 has no altsetting 0 [ 376.929920][T19794] __nla_validate_parse: 6 callbacks suppressed [ 376.929936][T19794] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7129'. [ 377.028872][ T1108] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 377.048837][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.061142][ T1108] usb 3-1: Product: syz [ 377.073885][ T7162] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 377.078753][ T1108] usb 3-1: Manufacturer: syz [ 377.087797][T19806] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 377.103731][ T1108] usb 3-1: SerialNumber: syz [ 377.112032][T19806] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 377.204983][ T1108] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 377.303886][ T5106] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 377.371504][ T5111] usb 3-1: USB disconnect, device number 33 [ 377.383115][T19826] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7142'. [ 377.395590][ T9] usb 3-1: Failed to submit usb control message: -71 [ 377.407825][ T9] usb 3-1: unable to send the bmi data to the device: -71 [ 377.427669][ T9] usb 3-1: unable to get target info from device [ 377.467034][ T9] usb 3-1: could not get target info (-71) [ 377.482252][ T9] usb 3-1: could not probe fw (-71) [ 377.513753][ T7162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.533603][ T7162] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.581350][ T5106] usb 1-1: Using ep0 maxpacket: 8 [ 377.644086][ T7162] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.654088][ T7162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.662104][ T7162] usb 6-1: SerialNumber: syz [ 377.743668][ T5106] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.898687][T19855] device syz_tun entered promiscuous mode [ 377.931666][T19855] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 377.966335][ T7162] usb 6-1: 0:2 : does not exist [ 377.971479][ T5106] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 378.015488][ T5106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.034318][ T7162] usb 6-1: USB disconnect, device number 3 [ 378.053748][ T5106] usb 1-1: Product: syz [ 378.057945][ T5106] usb 1-1: Manufacturer: syz [ 378.062878][ T5106] usb 1-1: SerialNumber: syz [ 378.104253][ T5106] usb 1-1: config 0 descriptor?? [ 378.193081][T19866] loop2: detected capacity change from 0 to 1764 [ 378.205636][ T5106] gspca_main: t613-2.14.0 probing 17a1:0128 [ 378.298746][T13946] udevd[13946]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.327773][T19866] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 378.357126][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.364371][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.372187][ T1422] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 378.458781][ T5106] gspca_t613: unknown sensor 0000 [ 378.464246][ T5106] t613: probe of 1-1:0.0 failed with error -22 [ 378.498998][T19884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7166'. [ 378.536259][ T5106] usb 1-1: USB disconnect, device number 35 [ 378.575422][T19884] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 378.628904][T19888] netlink: 'syz.3.7169': attribute type 21 has an invalid length. [ 378.649402][T19888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7169'. [ 378.769566][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7177'. [ 378.901462][T19913] x_tables: unsorted underflow at hook 4 [ 379.006702][T19921] loop3: detected capacity change from 0 to 64 [ 379.443405][T19960] netlink: 'syz.5.7198': attribute type 1 has an invalid length. [ 379.508345][ T151] block nbd3: Attempted send on invalid socket [ 379.514838][ T151] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.530489][ T151] block nbd3: Attempted send on invalid socket [ 379.536831][ T151] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.549869][ T1092] block nbd3: Attempted send on invalid socket [ 379.556346][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.569020][ T1092] block nbd3: Attempted send on invalid socket [ 379.575545][ T1092] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.592222][ T151] block nbd3: Attempted send on invalid socket [ 379.598545][ T151] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.610167][ T151] block nbd3: Attempted send on invalid socket [ 379.616397][ T151] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.627579][T19966] VFS: unable to find oldfs superblock on device nbd3 [ 379.866954][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7207'. [ 379.973194][T19990] device lo entered promiscuous mode [ 380.004652][T19990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.754978][T20051] netlink: 'syz.1.7242': attribute type 3 has an invalid length. [ 380.805057][T20051] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7242'. [ 380.941000][T20062] loop5: detected capacity change from 0 to 256 [ 381.287263][T20087] openvswitch: netlink: Key type 2481 is out of range max 29 [ 381.495206][T20099] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 381.836506][T20121] program syz.2.7276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.879934][T20070] loop1: detected capacity change from 0 to 32768 [ 382.063662][T20140] i2c i2c-0: Invalid block write size 253 [ 382.129645][T20070] XFS (loop1): Mounting V5 Filesystem [ 382.279504][T20070] XFS (loop1): Ending clean mount [ 382.466418][ T4189] XFS (loop1): Unmounting Filesystem [ 382.843164][T20202] netlink: 'syz.5.7308': attribute type 1 has an invalid length. [ 382.908416][T20202] netlink: 'syz.5.7308': attribute type 2 has an invalid length. [ 383.238954][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7316'. [ 383.447093][T20178] loop2: detected capacity change from 0 to 32768 [ 383.668824][T20178] XFS (loop2): Mounting V5 Filesystem [ 383.750948][T20274] loop1: detected capacity change from 0 to 256 [ 383.875880][T20178] XFS (loop2): Ending clean mount [ 383.886622][T20274] FAT-fs (loop1): Directory bread(block 64) failed [ 383.910192][T20274] FAT-fs (loop1): Directory bread(block 65) failed [ 383.935875][T20178] attempt to access beyond end of device [ 383.935875][T20178] loop2: rw=4096, want=18446744073709551588, limit=32768 [ 383.937583][T20274] FAT-fs (loop1): Directory bread(block 66) failed [ 383.963904][ T5106] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 384.003078][T20274] FAT-fs (loop1): Directory bread(block 67) failed [ 384.058773][T20274] FAT-fs (loop1): Directory bread(block 68) failed [ 384.104639][T20274] FAT-fs (loop1): Directory bread(block 69) failed [ 384.111316][T20274] FAT-fs (loop1): Directory bread(block 70) failed [ 384.117928][ T4193] XFS (loop2): Unmounting Filesystem [ 384.153569][T20274] FAT-fs (loop1): Directory bread(block 71) failed [ 384.160180][T20274] FAT-fs (loop1): Directory bread(block 72) failed [ 384.176578][T20274] FAT-fs (loop1): Directory bread(block 73) failed [ 384.274734][ T5106] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 384.450090][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7341'. [ 384.915800][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 384.957158][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 384.977379][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 384.987413][ T5106] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 385.003564][ T5106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.022367][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 385.042248][ T5106] usb 6-1: config 0 descriptor?? [ 385.056435][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 385.095211][ T5106] hub 6-1:0.0: Invalid hub with more than one config or interface [ 385.107162][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 385.123401][ T5106] hub: probe of 6-1:0.0 failed with error -22 [ 385.139544][ T5106] sierra 6-1:0.0: Sierra USB modem converter detected [ 385.154023][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 385.190993][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 385.224879][T20338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.282531][T20338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.318104][ T5106] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 385.328893][T20338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.348959][ T5106] usb 6-1: USB disconnect, device number 4 [ 385.386903][ T5106] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 385.412574][T20338] infiniband syz2: set active [ 385.435882][ T5106] sierra 6-1:0.0: device disconnected [ 385.469023][T20338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 385.671282][T20381] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 385.872959][T20394] CIFS mount error: No usable UNC path provided in device string! [ 385.872959][T20394] [ 385.924196][T20394] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 386.032353][T20408] netlink: 'syz.3.7378': attribute type 1 has an invalid length. [ 386.353621][T20429] netlink: 'syz.5.7387': attribute type 2 has an invalid length. [ 386.395260][T20433] loop3: detected capacity change from 0 to 164 [ 386.949265][T20476] misc userio: The device must be registered before sending interrupts [ 387.220601][T20496] netlink: zone id is out of range [ 387.322569][T20506] loop5: detected capacity change from 0 to 164 [ 387.456847][ T1092] block nbd3: Attempted send on invalid socket [ 387.463124][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.479865][T20514] hpfs: hpfs_map_sector(): read error [ 388.384562][ T5106] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 388.548132][T20586] loop3: detected capacity change from 0 to 512 [ 388.633143][T20586] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 388.654882][T20586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.672247][T20586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.679397][ T5106] usb 2-1: Using ep0 maxpacket: 32 [ 388.724118][T20586] EXT4-fs (loop3): Mount option "journal_async_commit" incompatible with ext3 [ 388.833853][ T5106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.851726][ T5106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.899142][ T5106] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 388.933150][ T5106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.967727][ T5106] usb 2-1: config 0 descriptor?? [ 389.045807][ T5106] hub 2-1:0.0: USB hub found [ 389.113664][ T4232] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 389.263919][ T5106] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 389.395605][T20578] loop2: detected capacity change from 0 to 32768 [ 389.483914][ T4232] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 389.495310][ T4232] usb 4-1: config 0 has no interface number 0 [ 389.501436][ T4232] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 389.513538][ T4232] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 389.573698][ T5106] usbhid 2-1:0.0: can't add hid device: -71 [ 389.587375][ T5106] usbhid: probe of 2-1:0.0 failed with error -71 [ 389.659251][T20578] XFS (loop2): Mounting V5 Filesystem [ 389.665979][ T5106] usb 2-1: USB disconnect, device number 40 [ 389.683658][ T4232] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 389.702960][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.711061][ T4232] usb 4-1: Product: syz [ 389.715552][ T4232] usb 4-1: Manufacturer: syz [ 389.720163][ T4232] usb 4-1: SerialNumber: syz [ 389.750723][ T4232] usb 4-1: config 0 descriptor?? [ 389.787767][T20586] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.795891][T20578] XFS (loop2): Ending clean mount [ 389.816245][T20578] XFS (loop2): Quotacheck needed: Please wait. [ 389.841285][ T4232] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 389.926119][T20578] XFS (loop2): Quotacheck: Done. [ 390.003234][T20645] netlink: 'syz.0.7470': attribute type 2 has an invalid length. [ 390.089406][ T4193] XFS (loop2): Unmounting Filesystem [ 390.094050][ T7160] usb 4-1: USB disconnect, device number 32 [ 390.125856][ T7160] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 390.207306][T20627] loop5: detected capacity change from 0 to 32768 [ 390.233589][T20627] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.7465 (20627) [ 390.299758][T20627] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 390.332299][T20627] BTRFS info (device loop5): force clearing of disk cache [ 390.340759][T20627] BTRFS info (device loop5): metadata ratio 0 [ 390.347184][T20627] BTRFS info (device loop5): enabling ssd optimizations [ 390.366000][T20627] BTRFS info (device loop5): using spread ssd allocation scheme [ 390.376994][T20627] BTRFS info (device loop5): using free space tree [ 390.389910][T20627] BTRFS info (device loop5): has skinny extents [ 390.455900][T20661] __nla_validate_parse: 86 callbacks suppressed [ 390.455916][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7477'. [ 390.817579][T20627] BTRFS info (device loop5): clearing free space tree [ 390.831683][T20627] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.845032][T20627] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 390.865225][T20700] netlink: 'syz.1.7487': attribute type 11 has an invalid length. [ 390.878141][T20627] BTRFS info (device loop5): creating free space tree [ 390.888375][T20627] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.898476][T20700] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7487'. [ 390.918953][T20627] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 391.014901][T20627] overlayfs: conflicting options: userxattr,redirect_dir=on [ 391.116474][T20712] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.7494' sets config #0 [ 391.211634][T20715] loop1: detected capacity change from 0 to 2048 [ 391.220591][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7497'. [ 391.452435][T20715] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 391.867672][T20746] loop5: detected capacity change from 0 to 2048 [ 391.916265][T20752] tc_dump_action: action bad kind [ 391.986897][T20746] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.076656][T20760] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.343332][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7524'. [ 392.403357][T20782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7526'. [ 392.540830][T20787] loop1: detected capacity change from 0 to 2048 [ 392.680034][T20800] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.740400][T20787] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 392.838674][T20787] Remounting filesystem read-only [ 393.313786][T20843] netlink: 'syz.2.7556': attribute type 1 has an invalid length. [ 393.337730][T20843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7556'. [ 393.363755][T10140] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 393.449150][T20851] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 393.502365][T20851] overlayfs: missing 'lowerdir' [ 393.623718][T10140] usb 6-1: Using ep0 maxpacket: 8 [ 393.665103][T10140] usb 6-1: too many configurations: 249, using maximum allowed: 8 [ 393.673058][ T26] audit: type=1326 audit(1783113533.647:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.7567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34d9fdfe59 code=0x0 [ 393.909135][T20887] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 393.943775][ T7] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 394.196217][T20909] netlink: 'syz.0.7589': attribute type 3 has an invalid length. [ 394.213706][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 394.327832][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7594'. [ 394.354532][ T7] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 394.362867][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.395054][ T7] usb 2-1: config 0 has no interface number 0 [ 394.490750][T20931] loop3: detected capacity change from 0 to 8 [ 394.509668][T10140] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 394.532169][T20935] device vlan0 entered promiscuous mode [ 394.543556][T10140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 394.570127][T10140] usb 6-1: Product: syz [ 394.580257][T10140] usb 6-1: Manufacturer: syz [ 394.590589][T10140] usb 6-1: SerialNumber: syz [ 394.594188][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 394.606023][T20931] SQUASHFS error: Unable to read directory block [629:0] [ 394.626572][T10140] usb 6-1: config 0 descriptor?? [ 394.648187][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 394.663680][ T7] usb 2-1: Product: syz [ 394.667872][ T7] usb 2-1: Manufacturer: syz [ 394.671370][T20939] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 394.689281][ T7] usb 2-1: SerialNumber: syz [ 394.706231][ T7] usb 2-1: config 0 descriptor?? [ 394.869545][T20825] udc-core: couldn't find an available UDC or it's busy [ 394.903736][T20825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 394.968374][T10140] mdc800 6-1:0.0: probe fails -> wrong Number of Configuration [ 394.984758][ T7] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 394.991180][ T7] usb 2-1: No valid video chain found. [ 395.006064][T10140] usb 6-1: USB disconnect, device number 5 [ 395.027747][ T7] usb 2-1: USB disconnect, device number 41 [ 395.186374][T20971] netlink: 'syz.0.7619': attribute type 1 has an invalid length. [ 395.244690][ T13] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 395.486747][T20993] loop3: detected capacity change from 0 to 2048 [ 395.499949][T20995] xt_hashlimit: size too large, truncated to 1048576 [ 395.512282][T20995] xt_hashlimit: max too large, truncated to 1048576 [ 395.513703][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 395.630441][T20993] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 395.692348][T21009] netlink: 'syz.0.7638': attribute type 1 has an invalid length. [ 395.713801][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.803949][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.833818][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 395.861089][T21018] netlink: 4816 bytes leftover after parsing attributes in process `syz.0.7642'. [ 395.864002][ T7] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 395.883992][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 395.952019][ T26] audit: type=1326 audit(1783113535.927:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.3.7644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac80bfe59 code=0x7ffc0000 [ 395.984293][ T26] audit: type=1326 audit(1783113535.947:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.3.7644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ac80bfe59 code=0x7ffc0000 [ 396.077515][ T26] audit: type=1326 audit(1783113535.957:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.3.7644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac80bfe59 code=0x7ffc0000 [ 396.138273][ T26] audit: type=1326 audit(1783113535.957:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.3.7644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac80bfe59 code=0x7ffc0000 [ 396.203930][ T13] usb 3-1: string descriptor 0 read error: -22 [ 396.210302][ T13] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 396.242308][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.272857][T21036] loop5: detected capacity change from 0 to 2048 [ 396.343616][ T7] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 396.352850][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.379983][ T7] usb 2-1: config 0 has no interface number 0 [ 396.396389][T21036] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 396.414849][ T7] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.633779][ T7] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 396.636105][T21054] netlink: 'syz.0.7660': attribute type 1 has an invalid length. [ 396.651025][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.680759][ T7] usb 2-1: Product: syz [ 396.693348][ T7] usb 2-1: Manufacturer: syz [ 396.713510][ T7] usb 2-1: SerialNumber: syz [ 396.723108][T21054] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.7660'. [ 396.762604][ T13] usb 3-1: USB disconnect, device number 34 [ 396.778410][ T7] usb 2-1: config 0 descriptor?? [ 396.796683][T21054] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7660'. [ 396.844473][ T7] asix: probe of 2-1:0.251 failed with error -22 [ 397.033929][T21076] loop3: detected capacity change from 0 to 512 [ 397.047083][ T4674] usb 2-1: USB disconnect, device number 42 [ 397.082849][T21078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7671'. [ 397.106332][T21076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 397.120299][T21076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 397.130359][T21076] System zones: 0-1, 15-15, 18-18, 34-34 [ 397.142418][T21076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 397.150308][T21076] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 397.173879][T21076] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.195021][T21076] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 397.203105][T21076] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.7670: bad orphan inode 16 [ 397.218019][T21076] ext4_test_bit(bit=15, block=18) = 1 [ 397.225056][T21076] is_bad_inode(inode)=0 [ 397.229302][T21076] NEXT_ORPHAN(inode)=0 [ 397.233383][T21076] max_ino=32 [ 397.236775][T10140] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 397.244600][T21076] i_nlink=2 [ 397.247925][T21076] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 397.335837][T21076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 397.344129][T21076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 397.357347][T21089] xt_l2tp: v2 sid > 0xffff: 262144 [ 397.479266][T21097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7678'. [ 397.488574][T10140] usb 6-1: Using ep0 maxpacket: 16 [ 397.496862][T21099] loop2: detected capacity change from 0 to 64 [ 397.618245][T21107] kAFS: No cell specified [ 397.623955][T10140] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 397.637701][T10140] usb 6-1: config 0 has no interface number 0 [ 397.663760][T10140] usb 6-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 397.792116][T21119] xt_nfacct: accounting object `syz1' does not exist [ 397.799354][T10140] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 397.820159][T10140] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 397.853386][T10140] usb 6-1: Product: syz [ 397.866083][T10140] usb 6-1: SerialNumber: syz [ 397.902440][T10140] usb 6-1: config 0 descriptor?? [ 397.954030][T21068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 397.988061][T10140] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 398.116222][T21140] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 398.135487][T21140] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 398.190239][T21140] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 398.206353][T21142] netlink: 'syz.3.7702': attribute type 30 has an invalid length. [ 398.222839][T21142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7702'. [ 398.253696][ T7] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 398.284676][T21149] sock: sock_timestamping_bind_phc: sock not bind to device [ 398.325779][T21151] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 398.382625][T21155] netlink: 'syz.0.7709': attribute type 1 has an invalid length. [ 398.392231][T21155] netlink: 'syz.0.7709': attribute type 2 has an invalid length. [ 398.400710][T21155] netlink: 'syz.0.7709': attribute type 2 has an invalid length. [ 398.409183][T21155] netlink: 'syz.0.7709': attribute type 2 has an invalid length. [ 398.417354][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7709'. [ 398.504922][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 398.653617][ T7] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 398.665219][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.686816][ T7] usb 2-1: config 0 has no interface number 0 [ 398.723023][T21180] tipc: Trying to set illegal importance in message [ 398.873707][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 398.904369][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.921826][ T7] usb 2-1: Product: syz [ 398.926868][ T7] usb 2-1: Manufacturer: syz [ 398.936990][ T7] usb 2-1: SerialNumber: syz [ 398.973193][ T7] usb 2-1: config 0 descriptor?? [ 399.045675][ T7] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 399.062385][ T7] usb 2-1: No valid video chain found. [ 399.272432][ T7] usb 2-1: USB disconnect, device number 43 [ 399.309708][T21220] netlink: 'syz.2.7737': attribute type 21 has an invalid length. [ 399.323621][T21220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7737'. [ 399.436446][T21226] loop2: detected capacity change from 0 to 256 [ 399.685974][T21232] block device autoloading is deprecated and will be removed. [ 399.845964][T21241] sctp: [Deprecated]: syz.3.7749 (pid 21241) Use of int in maxseg socket option. [ 399.845964][T21241] Use struct sctp_assoc_value instead [ 399.975215][ T4674] usb 6-1: USB disconnect, device number 6 [ 400.216069][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7763'. [ 400.253847][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 400.262095][T21266] loop5: detected capacity change from 0 to 2048 [ 400.319612][T21274] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.361259][T21266] NILFS (loop5): unrecognized mount option "<\}OLqQ·χ [ 400.361259][T21266] OQ6b" [ 400.378288][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.509306][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 400.643687][ T7162] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 400.749150][T21303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7780'. [ 400.844763][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 400.854079][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.865252][ T7] usb 4-1: Product: syz [ 400.869452][ T7] usb 4-1: Manufacturer: syz [ 400.879150][ T7] usb 4-1: SerialNumber: syz [ 400.919854][ T7] usb 4-1: config 0 descriptor?? [ 400.965689][ T7] gspca_main: spca508-2.14.0 probing 041e:4018 [ 401.052308][T21325] __nla_validate_parse: 1 callbacks suppressed [ 401.052325][T21325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7791'. [ 401.094762][ T7162] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 401.122832][ T7162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.134332][ T7162] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.143371][ T7162] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.160859][T21329] netlink: 'syz.1.7793': attribute type 3 has an invalid length. [ 401.172290][T21331] netlink: 'syz.0.7794': attribute type 46 has an invalid length. [ 401.177422][T21329] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7793'. [ 401.190081][ T7162] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 401.191987][T21331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7794'. [ 401.200356][ T7162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.276183][ T7162] hub 3-1:1.0: bad descriptor, ignoring hub [ 401.282166][ T7162] hub: probe of 3-1:1.0 failed with error -5 [ 401.289484][ T7162] cdc_wdm 3-1:1.0: skipping garbage [ 401.295345][ T7162] cdc_wdm 3-1:1.0: invalid descriptor buffer length [ 401.302226][ T7162] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 401.313783][T21337] trusted_key: encrypted_key: hex blob is missing [ 401.383765][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.403885][ T7] gspca_spca508: reg_read err -71 [ 401.426986][ T7] gspca_spca508: reg_read err -71 [ 401.447072][ T7] gspca_spca508: reg_read err -71 [ 401.463695][ T7] gspca_spca508: reg_read err -71 [ 401.494202][ T7] gspca_spca508: reg write: error -71 [ 401.503076][ T7] spca508: probe of 4-1:0.0 failed with error -71 [ 401.522509][ T7] usb 4-1: USB disconnect, device number 33 [ 401.523766][T10140] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 401.599878][ T5106] usb 3-1: USB disconnect, device number 35 [ 401.783609][T10140] usb 2-1: Using ep0 maxpacket: 8 [ 401.863711][ T7162] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 401.926877][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'. [ 401.973976][ T13] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 402.009529][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.028082][ T13] usb 6-1: Product: syz [ 402.032411][ T13] usb 6-1: Manufacturer: syz [ 402.057416][ T13] usb 6-1: SerialNumber: syz [ 402.069006][T10140] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 402.076071][ T13] usb 6-1: config 0 descriptor?? [ 402.088810][T10140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.113775][T10140] usb 2-1: Product: syz [ 402.118072][T10140] usb 2-1: Manufacturer: syz [ 402.132010][T10140] usb 2-1: SerialNumber: syz [ 402.137664][T21364] overlayfs: missing 'lowerdir' [ 402.146795][T10140] usb 2-1: config 0 descriptor?? [ 402.151280][ T13] hub 6-1:0.0: bad descriptor, ignoring hub [ 402.165144][ T13] hub: probe of 6-1:0.0 failed with error -5 [ 402.171806][ T13] f81232 6-1:0.0: f81534a converter detected [ 402.302991][T21374] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 402.353740][ T13] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 402.360950][ T13] f81534a: probe of ttyUSB0 failed with error -5 [ 402.424077][ T7162] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 402.433752][ T13] usb 6-1: USB disconnect, device number 7 [ 402.435113][T10140] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 402.441610][ T13] f81232 6-1:0.0: device disconnected [ 402.460888][T10140] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 402.471847][ T7162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.490388][T10140] usb 2-1: USB disconnect, device number 44 [ 402.509090][ T7162] usb 1-1: Product: syz [ 402.513280][ T7162] usb 1-1: Manufacturer: syz [ 402.545805][ T7162] usb 1-1: SerialNumber: syz [ 402.573083][ T7162] usb 1-1: config 0 descriptor?? [ 402.646562][ T7162] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 402.798449][T21397] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.962838][T21406] ax25_connect(): syz.2.7830 uses autobind, please contact jreuter@yaina.de [ 403.063797][ T7162] gspca_sunplus: reg_w_riv err -71 [ 403.069005][ T7162] sunplus: probe of 1-1:0.0 failed with error -71 [ 403.079454][T21410] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 403.100389][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7832'. [ 403.114392][ T7162] usb 1-1: USB disconnect, device number 36 [ 403.129511][T21414] loop5: detected capacity change from 0 to 128 [ 403.140790][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7832'. [ 403.191656][T21414] EXT4-fs (loop5): Ignoring removed nobh option [ 403.232301][T21414] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,nobh,nodelalloc,auto_da_alloc=0x0000000000000002,,errors=continue. Quota mode: none. [ 403.377467][T21414] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.586602][T21428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7841'. [ 403.631525][T21428] IPv6: sit1: Disabled Multicast RS [ 403.669776][T21434] nftables ruleset with unbound chain [ 403.722365][T21436] loop5: detected capacity change from 0 to 1024 [ 403.844238][T21445] netlink: 'syz.1.7848': attribute type 8 has an invalid length. [ 403.883688][T21436] hfsplus: xattr searching failed [ 404.024687][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7855'. [ 404.033710][T21460] openvswitch: netlink: Actions may not be safe on all matching packets [ 404.260678][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.301240][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7864'. [ 404.324079][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.331626][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.393320][T21475] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 404.462246][T21490] loop1: detected capacity change from 0 to 256 [ 404.491039][T21475] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 404.577152][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.584544][T21492] loop2: detected capacity change from 0 to 4096 [ 404.620330][T21492] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 404.633008][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.646254][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.653321][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.664594][T21492] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 404.680362][T21475] bond0 speed is unknown, defaulting to 1000 [ 404.687034][T21492] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 404.709496][T21492] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 404.724627][T21492] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 404.750912][T21492] ntfs: volume version 3.1. [ 404.795447][T21492] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 404.897788][T21492] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 404.932377][T21492] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 404.952041][T21492] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 404.972108][T21492] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 405.488931][T21546] loop1: detected capacity change from 0 to 256 [ 405.519627][T21550] netlink: 'syz.3.7898': attribute type 4 has an invalid length. [ 405.759001][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7905'. [ 405.820675][T21568] netlink: 'syz.3.7906': attribute type 21 has an invalid length. [ 405.866804][T21568] netlink: 'syz.3.7906': attribute type 4 has an invalid length. [ 405.893651][T21568] netlink: 'syz.3.7906': attribute type 3 has an invalid length. [ 406.131963][T21584] xt_TCPMSS: Only works on TCP SYN packets [ 406.600342][T21609] loop2: detected capacity change from 0 to 4096 [ 406.642242][T21616] netlink: 'syz.5.7931': attribute type 21 has an invalid length. [ 406.650418][T21616] netlink: 'syz.5.7931': attribute type 1 has an invalid length. [ 406.660072][T21616] __nla_validate_parse: 3 callbacks suppressed [ 406.660086][T21616] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7931'. [ 406.703540][ T7162] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 406.758324][T21609] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 406.761767][T21621] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7933'. [ 406.819592][ T1108] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 407.022876][T21637] device veth1_to_team entered promiscuous mode [ 407.034164][T21635] device veth1_to_team left promiscuous mode [ 407.073584][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 407.114625][T21642] overlayfs: conflicting options: nfs_export=on,index=off [ 407.133872][ T7162] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 407.156636][ T7162] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 407.170089][ T7162] usb 4-1: config 0 has no interface number 0 [ 407.192633][ T7162] usb 4-1: config 0 has no interface number 1 [ 407.199938][ T1108] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 407.209281][ T7162] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 407.220907][ T1108] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 407.242734][ T7162] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 407.256257][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 407.256282][ T1108] usb 2-1: config 1 has no interface number 0 [ 407.256312][ T1108] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 407.256332][ T1108] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 407.256368][ T1108] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 407.256402][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.337698][T21653] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 407.348273][ T7162] usb 4-1: config 0 interface 255 has no altsetting 0 [ 407.426690][ T1108] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 407.563799][ T7162] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 407.590167][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.623522][ T7162] usb 4-1: Product: syz [ 407.627730][ T7162] usb 4-1: Manufacturer: syz [ 407.644031][ T1108] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 407.668272][ T7162] usb 4-1: SerialNumber: syz [ 407.673849][ T1108] snd_usb_pod 2-1:1.1: invalid control EP [ 407.681967][ T1108] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 407.702979][ T7162] usb 4-1: config 0 descriptor?? [ 407.711382][ T1108] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 407.729701][ T1108] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 407.777088][ T7162] usb 4-1: selecting invalid altsetting 0 [ 407.797381][ T7162] usb 4-1: Could not set interface, error -22 [ 407.847423][ T7162] usb 2-1: USB disconnect, device number 45 [ 407.988097][ T4674] usb 4-1: USB disconnect, device number 34 [ 408.178448][T21715] MTD: Couldn't look up '': -22 [ 408.238579][ T13] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 408.606503][T21749] comedi comedi1: dt2815: I/O port conflict (0x1,2) [ 408.633796][ T13] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 408.655933][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.684779][ T13] usb 3-1: config 0 descriptor?? [ 408.735346][ T13] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 409.039011][T21741] loop1: detected capacity change from 0 to 32768 [ 409.067832][T21741] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7992 (21741) [ 409.096737][T21741] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 409.127752][T21741] BTRFS info (device loop1): force zlib compression, level 3 [ 409.145651][T21741] BTRFS info (device loop1): turning on flush-on-commit [ 409.154214][ T13] gp8psk: usb in 137 operation failed. [ 409.164753][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 409.180298][T21779] xt_TCPMSS: Only works on TCP SYN packets [ 409.189843][T21741] BTRFS info (device loop1): max_inline at 4096 [ 409.199917][ T13] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 409.217803][T21741] BTRFS info (device loop1): using free space tree [ 409.235814][ T13] usb 3-1: USB disconnect, device number 36 [ 409.248947][T21741] BTRFS info (device loop1): has skinny extents [ 409.421014][T21801] loop5: detected capacity change from 0 to 256 [ 409.561981][T21815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8020'. [ 409.577863][T21815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8020'. [ 409.640550][T21741] BTRFS info (device loop1): enabling ssd optimizations [ 409.663725][T21818] device wg1 entered promiscuous mode [ 409.956332][T21830] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 409.997499][T13946] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (13946) [ 410.078770][T21835] netlink: 'syz.5.8029': attribute type 3 has an invalid length. [ 410.199549][T21842] libceph: resolve '0.' (ret=-3): failed [ 410.527464][T21859] netlink: 'syz.2.8040': attribute type 1 has an invalid length. [ 410.776960][ T21] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 410.969600][T21885] netlink: 'syz.5.8052': attribute type 3 has an invalid length. [ 410.983739][T21886] netlink: 'syz.1.8053': attribute type 1 has an invalid length. [ 411.163776][ T21] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 411.178137][ T21] usb 4-1: config 0 has no interface number 0 [ 411.199243][ T21] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.215642][T21871] infiniband syz0: set down [ 411.220238][T21871] infiniband syz0: added ipvlan0 [ 411.311451][T21903] loop1: detected capacity change from 0 to 1024 [ 411.331543][T21871] RDS/IB: syz0: added [ 411.345485][T21871] smc: adding ib device syz0 with port count 1 [ 411.362038][T21871] smc: ib device syz0 port 1 has pnetid [ 411.393945][ T21] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 411.440163][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.488892][T21903] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.503221][ T21] usb 4-1: Product: syz [ 411.522289][ T21] usb 4-1: Manufacturer: syz [ 411.560558][ T21] usb 4-1: SerialNumber: syz [ 411.599264][ T21] usb 4-1: config 0 descriptor?? [ 411.618115][T21928] Cannot find add_set index 3 as target [ 411.681433][ T21] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 411.848888][T21943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8077'. [ 411.873620][T21943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8077'. [ 411.913523][ C1] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 411.961714][T21949] loop5: detected capacity change from 0 to 1024 [ 412.090540][T21949] hfsplus: extend alloc file! (16384,256,150995124) [ 412.105586][ T4674] usb 4-1: USB disconnect, device number 35 [ 412.119675][ T4674] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 412.206669][T21962] bond0 (unregistering): Released all slaves [ 412.599346][T21976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8095'. [ 412.750627][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8099'. [ 412.788963][T21984] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8099'. [ 412.805809][T21982] loop3: detected capacity change from 0 to 4096 [ 412.834486][T21984] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8099'. [ 412.943571][T21992] loop1: detected capacity change from 0 to 1024 [ 412.951576][T21982] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 413.017501][T21992] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 413.059805][T21992] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 413.068169][T21992] EXT4-fs (loop1): inline encryption not supported [ 413.075112][T21992] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 413.083033][T21992] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 413.151429][T21992] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 413.283970][T21992] ext4 filesystem being mounted at /1548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.346612][ T7] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 413.552087][T22024] netlink: 'syz.1.8116': attribute type 1 has an invalid length. [ 413.598446][T22024] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8116'. [ 413.613627][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 413.743796][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.763990][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.799021][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.853368][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.871954][T22048] netlink: 'syz.0.8129': attribute type 1 has an invalid length. [ 413.881573][ T7] usb 3-1: config 0 descriptor?? [ 413.924605][ T7] hub 3-1:0.0: USB hub found [ 414.083161][T22063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8136'. [ 414.093945][T22063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8136'. [ 414.116744][T22064] overlayfs: unrecognized mount option "smackfsfloor=\{" or missing value [ 414.143743][ T7] hub 3-1:0.0: 2 ports detected [ 414.306916][T22076] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 414.363764][ T7] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 414.370150][ T7] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 414.504912][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 414.510939][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 414.523590][T22093] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8151'. [ 414.565634][T22097] loop5: detected capacity change from 0 to 764 [ 414.576475][ T7] usb 3-1: USB disconnect, device number 37 [ 414.627856][T22097] Symlink component flag not implemented [ 414.671589][T22097] Symlink component flag not implemented (15) [ 415.040124][T22132] IPv6: Can't replace route, no match found [ 415.806343][ T4672] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 415.823833][ T4674] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 415.943751][ T13] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 416.183691][ T4674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 416.195528][ T4674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 416.203827][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 416.208577][ T4674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 416.212298][ T7162] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 416.222387][ T4672] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.228948][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 416.237207][ T4674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.257379][ T4674] usb 2-1: config 0 descriptor?? [ 416.323636][ T4672] usb 6-1: config 35 has an invalid interface number: 223 but max is 0 [ 416.332022][ T4672] usb 6-1: config 35 has no interface number 0 [ 416.341858][ T4672] usb 6-1: config 35 interface 223 has no altsetting 0 [ 416.513723][ T4674] ath6kl: Failed to submit usb control message: -71 [ 416.514006][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 416.529145][ T4674] ath6kl: unable to send the bmi data to the device: -71 [ 416.536312][ T4674] ath6kl: Unable to send get target info: -71 [ 416.543736][ T13] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 416.553675][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.556116][ T4674] ath6kl: Failed to init ath6kl core: -71 [ 416.562224][ T13] usb 4-1: Product: syz [ 416.572666][ T13] usb 4-1: Manufacturer: syz [ 416.577490][ T13] usb 4-1: SerialNumber: syz [ 416.583718][ T13] r8152-cfgselector 4-1: config 0 descriptor?? [ 416.596076][ T4672] usb 6-1: string descriptor 0 read error: -22 [ 416.602563][ T4672] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 416.612199][ T4672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.623336][ T4674] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 416.626498][ T7162] usb 1-1: not running at top speed; connect to a high speed hub [ 416.639711][ T4674] usb 2-1: USB disconnect, device number 46 [ 416.667755][ T4672] usb_ehset_test: probe of 6-1:35.223 failed with error -32 [ 416.683904][ T7] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 416.692633][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.707472][ T7] usb 3-1: config 0 has no interface number 0 [ 416.713815][ T7] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 416.725206][ T7] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 416.735485][ T7162] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 416.745847][ T7] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.759342][ T7] usb 3-1: config 0 interface 52 has no altsetting 0 [ 416.844207][ T7] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 416.853402][ T7] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 416.862036][ T7] usb 3-1: Manufacturer: syz [ 416.869107][ T7] usb 3-1: config 0 descriptor?? [ 416.883079][ T4674] usb 6-1: USB disconnect, device number 8 [ 416.913725][ T7162] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 416.924094][ T7] hub 3-1:0.52: bad descriptor, ignoring hub [ 416.930104][ T7] hub: probe of 3-1:0.52 failed with error -5 [ 416.936448][ T7162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.945643][ T7162] usb 1-1: Product: syz [ 416.949962][ T7162] usb 1-1: Manufacturer: syz [ 416.954673][ T7162] usb 1-1: SerialNumber: syz [ 417.085685][ T13] r8152-cfgselector 4-1: Unknown version 0x0000 [ 417.095908][ T13] r8152-cfgselector 4-1: bad CDC descriptors [ 417.133831][ T13] r8152-cfgselector 4-1: Unknown version 0x0000 [ 417.141365][ T7] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 417.166262][ T13] r8152-cfgselector 4-1: USB disconnect, device number 36 [ 417.179424][ T7] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 417.183186][T22216] sock: sock_timestamping_bind_phc: sock not bind to device [ 417.253062][ T7162] usb 1-1: USB disconnect, device number 37 [ 417.486235][ T7] usb 3-1: USB disconnect, device number 38 [ 417.543729][ T4674] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 417.750645][T22243] x_tables: unsorted underflow at hook 3 [ 417.793601][ T4674] usb 2-1: Using ep0 maxpacket: 32 [ 417.859161][T22251] __nla_validate_parse: 4 callbacks suppressed [ 417.859177][T22251] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.8228'. [ 417.928939][ T4674] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 417.947398][ T4674] usb 2-1: config 2 has no interface number 0 [ 417.972245][ T4674] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 417.999148][ T4674] usb 2-1: config 2 interface 88 has no altsetting 0 [ 418.183894][ T4674] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 418.193079][ T4674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.226812][ T4674] usb 2-1: Product: syz [ 418.231152][ T4674] usb 2-1: Manufacturer: syz [ 418.238492][ T4674] usb 2-1: SerialNumber: syz [ 418.275998][T22220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 418.314400][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8242'. [ 418.418866][T22290] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8246'. [ 418.502329][T22220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 418.767683][ T4674] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 418.798543][T22318] bond0 (unregistering): Released all slaves [ 418.804922][ T4674] asix: probe of 2-1:2.88 failed with error -71 [ 418.838264][ T4674] usb 2-1: USB disconnect, device number 47 [ 418.903737][ T4232] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 419.263724][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 419.304601][T22351] bond0 (unregistering): Released all slaves [ 419.310935][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 419.331969][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 419.342246][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 419.396225][ T7] bond0 speed is unknown, defaulting to 1000 [ 419.419588][ T4232] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 419.444074][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.480900][ T4232] usb 4-1: config 0 descriptor?? [ 419.753839][ T4232] hdpvr 4-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 419.774198][ T4232] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 419.868127][ T7162] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 419.973691][ T4232] hdpvr 4-1:0.0: device init failed [ 419.983744][ T4232] hdpvr: probe of 4-1:0.0 failed with error -12 [ 419.998227][T22394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.012779][ T4232] usb 4-1: USB disconnect, device number 37 [ 420.040380][T22394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.073260][T22394] bond0 (unregistering): Released all slaves [ 420.128016][T22402] libceph: resolve '0' (ret=-3): failed [ 420.228908][T22408] device netdevsim0 entered promiscuous mode [ 420.254304][T22408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.293925][ T7162] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.308506][ T7162] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 420.311419][T22410] ieee802154 phy0 wpan0: encryption failed: -90 [ 420.363935][ T7162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.394631][ T7162] usb 1-1: config 0 descriptor?? [ 420.431756][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 420.431770][ T26] audit: type=1400 audit(1783113560.407:30): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=22416 comm="syz.2.8309" [ 420.486639][ T7162] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 420.703689][ T3546] bcm5974 1-1:0.0: could not read from device [ 420.718305][ T7162] usb 1-1: USB disconnect, device number 38 [ 421.016167][T22461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8328'. [ 421.142231][T22467] rdma_rxe: rxe_register_device failed with error -23 [ 421.200804][T22467] rdma_rxe: failed to add ipvlan0 [ 421.625670][T22491] bond0 (unregistering): Released all slaves [ 421.659827][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8346'. [ 421.679950][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8346'. [ 421.858652][T22510] netlink: 'syz.3.8351': attribute type 1 has an invalid length. [ 422.137792][ T26] audit: type=1326 audit(1783113562.117:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.2.8364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d9fdfe59 code=0x7ffc0000 [ 422.138519][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8362'. [ 422.221418][ T26] audit: type=1326 audit(1783113562.167:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.2.8364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34d9fdfe59 code=0x7ffc0000 [ 422.316444][ T26] audit: type=1326 audit(1783113562.167:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.2.8364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d9fdfe59 code=0x7ffc0000 [ 422.363575][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8362'. [ 422.377791][T22530] device vlan0 entered promiscuous mode [ 422.386815][ T26] audit: type=1326 audit(1783113562.167:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22531 comm="syz.2.8364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d9fdfe59 code=0x7ffc0000 [ 422.593828][ T13] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 422.637209][T22564] netlink: 'syz.1.8379': attribute type 10 has an invalid length. [ 422.658890][T22564] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 422.712898][T22564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.740857][T22571] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8383'. [ 422.913766][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 423.020388][T22590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8392'. [ 423.105364][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.213720][ T13] usb 3-1: config 4 has an invalid interface number: 177 but max is 1 [ 423.231665][ T13] usb 3-1: config 4 has no interface number 1 [ 423.232849][T22598] xt_CT: No such helper "snmp_trap" [ 423.244969][ T13] usb 3-1: config 4 interface 177 has no altsetting 0 [ 423.261678][ T13] usb 3-1: config 4 interface 0 has no altsetting 0 [ 423.443942][ T13] usb 3-1: New USB device found, idVendor=413c, idProduct=81cc, bcdDevice=b7.34 [ 423.461716][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.472329][ T13] usb 3-1: Product: syz [ 423.485959][ T13] usb 3-1: Manufacturer: syz [ 423.519320][ T13] usb 3-1: SerialNumber: syz [ 423.568623][T22622] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8406'. [ 423.647839][T22628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8407'. [ 423.915845][ T13] usb 3-1: selecting invalid altsetting 0 [ 423.931910][ T13] usb 3-1: Could not set interface, error -22 [ 423.967003][ T13] usb 3-1: USB disconnect, device number 39 [ 424.130188][T22663] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8427'. [ 424.453366][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8438'. [ 424.710364][T22701] netlink: 'syz.2.8446': attribute type 13 has an invalid length. [ 424.791513][T22701] gretap0: refused to change device tx_queue_len [ 424.813130][T22701] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 424.843604][ T7162] Bluetooth: hci3: command 0x0407 tx timeout [ 424.853846][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8451'. [ 424.995126][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8456'. [ 425.087343][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8458'. [ 425.412512][T22740] cgroup: name respecified [ 425.546354][T22751] loop1: detected capacity change from 0 to 16 [ 425.653746][T22751] erofs: (device loop1): mounted with root inode @ nid 36. [ 425.802649][T22719] loop5: detected capacity change from 0 to 40427 [ 425.882188][T22719] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 425.916075][T22719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 425.966325][T22719] F2FS-fs (loop5): invalid crc value [ 426.024724][T22719] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 426.073756][ T13] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 426.173253][T22786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.229110][T22719] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 426.243563][T22719] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 426.494287][T22805] ip6t_REJECT: ECHOREPLY is not supported [ 426.523872][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 426.568983][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 426.612232][T22809] loop1: detected capacity change from 0 to 1024 [ 426.666621][ T13] usb 3-1: config 9 has an invalid interface number: 65 but max is 0 [ 426.676118][ T13] usb 3-1: config 9 has no interface number 0 [ 426.683116][ T13] usb 3-1: config 9 interface 65 has no altsetting 0 [ 426.883835][ T13] usb 3-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 426.893202][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.923383][ T13] usb 3-1: Product: syz [ 426.964105][ T13] usb 3-1: Manufacturer: syz [ 426.968768][ T13] usb 3-1: SerialNumber: syz [ 427.243464][T22834] loop3: detected capacity change from 0 to 4096 [ 427.294216][T22834] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 427.352769][T22834] ntfs3: loop3: mft corrupted [ 427.357885][T22834] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 427.365055][ T13] cdc_mbim 3-1:9.65: More than one union descriptor, skipping ... [ 427.365073][ T13] cdc_mbim 3-1:9.65: CDC Union missing and no IAD found [ 427.365099][ T13] cdc_mbim 3-1:9.65: bind() failure [ 427.384530][T22834] ntfs3: loop3: Failed to load $BadClus. [ 427.458913][ T13] usb 3-1: USB disconnect, device number 40 [ 427.682229][T22862] x_tables: duplicate underflow at hook 1 [ 427.701518][T22865] affs: No valid root block on device nbd1 [ 427.922090][T22883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8533'. [ 427.951816][T22884] netlink: 'syz.3.8535': attribute type 1 has an invalid length. [ 428.048244][T22890] netlink: 208 bytes leftover after parsing attributes in process `syz.3.8539'. [ 428.230590][T22905] delete_channel: no stack [ 428.290515][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8549'. [ 428.337667][T22912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8549'. [ 428.375459][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8549'. [ 428.409732][T22912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8549'. [ 428.429079][T22912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8549'. [ 428.540035][T22926] loop1: detected capacity change from 0 to 256 [ 429.144891][T22971] netlink: 'syz.0.8576': attribute type 10 has an invalid length. [ 429.176744][T22971] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8576'. [ 429.214227][T22971] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.633101][T23009] netlink: 'syz.5.8596': attribute type 8 has an invalid length. [ 429.873918][ T13] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 429.886361][T23022] loop3: detected capacity change from 0 to 1024 [ 430.141920][T23036] netlink: 'syz.5.8612': attribute type 1 has an invalid length. [ 430.181863][T23036] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.8612'. [ 430.200445][T23036] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8612'. [ 430.263872][ T13] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 430.298195][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.341223][ T13] usb 1-1: config 0 descriptor?? [ 430.426616][ T13] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 430.447523][ T13] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 430.479604][T23058] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8621'. [ 430.648380][ T13] usb 1-1: USB disconnect, device number 39 [ 430.720652][T23080] loop5: detected capacity change from 0 to 64 [ 430.796016][T23080] Trying to free block not in datazone [ 430.801951][T23080] Trying to free block not in datazone [ 430.828420][T23080] Trying to free block not in datazone [ 430.844096][T23080] Trying to free block not in datazone [ 430.849706][T23080] Trying to free block not in datazone [ 430.870094][T23080] Trying to free block not in datazone [ 430.888098][T23080] Trying to free block not in datazone [ 430.910061][T23080] Trying to free block not in datazone [ 431.087848][T23100] loop1: detected capacity change from 0 to 164 [ 431.436656][T23128] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.487411][T23132] netlink: 'syz.2.8658': attribute type 1 has an invalid length. [ 431.511518][T23132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.622200][ T26] audit: type=1326 audit(1783113571.597:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.0.8663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31b669e59 code=0x7ffc0000 [ 431.656974][T23144] xt_cgroup: xt_cgroup: no path or classid specified [ 431.712635][T23148] loop5: detected capacity change from 0 to 128 [ 431.723506][ T26] audit: type=1326 audit(1783113571.687:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.0.8663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31b669e59 code=0x7ffc0000 [ 431.803859][T23148] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 431.813581][ T5101] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 431.835128][T23148] vxfs: unsupported VxFS version (-1232326277) [ 431.851659][ T26] audit: type=1326 audit(1783113571.727:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.0.8663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe31b669e59 code=0x7ffc0000 [ 431.949317][ T26] audit: type=1326 audit(1783113571.727:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.0.8663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31b669e59 code=0x7ffc0000 [ 432.024017][ T26] audit: type=1326 audit(1783113571.727:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23141 comm="syz.0.8663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31b669e59 code=0x7ffc0000 [ 432.143713][ T7162] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 432.403605][ T7162] usb 3-1: Using ep0 maxpacket: 16 [ 432.446501][ T5101] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 432.463510][ T5101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.477181][T23148] loop5: detected capacity change from 0 to 32768 [ 432.484520][ T5101] usb 2-1: Product: syz [ 432.488721][ T5101] usb 2-1: Manufacturer: syz [ 432.494155][ T5101] usb 2-1: SerialNumber: syz [ 432.500611][ T5101] usb 2-1: config 0 descriptor?? [ 432.554499][ T7162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.571225][ T5101] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 432.591425][ T7162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.617192][ T7162] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.643738][ T7162] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 432.669688][ T7162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.681243][ T7162] usb 3-1: config 0 descriptor?? [ 432.742330][ T7162] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 432.776660][ T3546] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.828301][ T3546] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.876248][ T3546] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.909894][ T3546] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.947664][T23150] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.968635][T23179] netlink: 'syz.5.8681': attribute type 4 has an invalid length. [ 432.978300][ T3546] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 432.989111][ T7162] usb 3-1: USB disconnect, device number 41 [ 432.997108][ T5101] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 433.009034][ T5101] sq905c 2-1:0.0: Reading version command failed [ 433.018518][ T5101] sq905c: probe of 2-1:0.0 failed with error -71 [ 433.059966][T23177] loop3: detected capacity change from 0 to 2048 [ 433.063382][ T5101] usb 2-1: USB disconnect, device number 48 [ 433.114977][T23177] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 433.114977][T23177] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 433.114977][T23177] [ 433.151305][ T4512] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 433.212246][T23186] netlink: 'syz.0.8684': attribute type 1 has an invalid length. [ 433.224600][T23177] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8408018, mo2=0002] [ 433.248187][T23177] System zones: 0-4 [ 433.279531][T23177] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,debug,nouser_xattr,init_itable,,errors=continue. Quota mode: none. [ 433.296923][T23177] ext4 filesystem being mounted at /1794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.589172][T23210] __nla_validate_parse: 3 callbacks suppressed [ 433.589191][T23210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8696'. [ 433.639024][T23210] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 433.717268][T23218] libceph: resolve '0' (ret=-3): failed [ 433.878911][T23229] loop5: detected capacity change from 0 to 8 [ 433.958395][T23229] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 433.976927][T13946] udevd[13946]: incorrect cramfs checksum on /dev/loop5 [ 434.006384][T23229] cramfs: Error -3 while decompressing! [ 434.038158][T23240] netlink: 'syz.1.8709': attribute type 1 has an invalid length. [ 434.070162][T23229] cramfs: ffffffff96418088(26)->ffff88805468b000(4096) [ 434.077777][T23240] netlink: 'syz.1.8709': attribute type 2 has an invalid length. [ 434.086425][T13946] udevd[13946]: incorrect cramfs checksum on /dev/loop5 [ 434.113606][T23229] cramfs: Error -3 while decompressing! [ 434.173357][T13946] udevd[13946]: incorrect cramfs checksum on /dev/loop5 [ 434.193604][T23229] cramfs: ffffffff964180a2(26)->ffff88805509e000(4096) [ 434.200625][T23229] cramfs: Error -3 while decompressing! [ 434.224575][T23248] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8713'. [ 434.240437][T23229] cramfs: ffffffff964180bc(16)->ffff888051191000(4096) [ 434.251855][T23251] tmpfs: Bad value for 'mpol' [ 434.266167][T23229] cramfs: Error -3 while decompressing! [ 434.284037][T23229] cramfs: ffffffff96418088(26)->ffff88805468b000(4096) [ 434.311612][ T26] audit: type=1800 audit(1783113574.287:40): pid=23229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8705" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 434.588908][T23262] loop2: detected capacity change from 0 to 4096 [ 434.713628][T23280] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.720336][T23262] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 434.787228][T23262] NILFS (loop2): mounting fs with errors [ 434.841294][T23287] netlink: 'syz.5.8731': attribute type 41 has an invalid length. [ 434.859824][T23262] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 434.935844][T23289] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 435.004995][T23292] loop3: detected capacity change from 0 to 256 [ 435.044766][ T4672] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 435.323658][ T4672] usb 2-1: Using ep0 maxpacket: 8 [ 435.450787][ T4672] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 435.461940][T23321] xt_TCPMSS: Only works on TCP SYN packets [ 435.488993][ T4672] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.499330][ T4672] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.561611][T23327] loop2: detected capacity change from 0 to 256 [ 435.693787][ T4672] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 435.707516][ T4672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.724900][ T4672] usb 2-1: Product: syz [ 435.730219][ T4672] usb 2-1: Manufacturer: syz [ 435.741877][ T4672] usb 2-1: SerialNumber: syz [ 435.752930][ T4672] usb 2-1: config 0 descriptor?? [ 435.806539][ T4672] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 435.833703][ T5101] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 435.924269][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8761'. [ 436.015776][ T4672] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 436.032318][ T4672] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 436.047527][ T4672] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 436.093424][T23359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.233875][ T5101] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 436.241964][ T5101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.264743][ T4672] usb 2-1: USB disconnect, device number 49 [ 436.273977][ T5101] usb 4-1: config 0 has no interface number 0 [ 436.284454][ T5101] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 436.326279][ T5101] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 436.444949][T23380] netlink: 'syz.0.8776': attribute type 30 has an invalid length. [ 436.464602][T23374] loop5: detected capacity change from 0 to 8192 [ 436.533914][ T5101] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 436.553225][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.565955][T23374] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 436.569731][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8780'. [ 436.577671][T23374] REISERFS (device loop5): using ordered data mode [ 436.592795][ T5101] usb 4-1: Product: syz [ 436.597409][T23374] reiserfs: using flush barriers [ 436.603759][ T5101] usb 4-1: Manufacturer: syz [ 436.609588][T23374] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.626442][T23389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.637807][T23374] REISERFS (device loop5): checking transaction log (loop5) [ 436.643872][ T5101] usb 4-1: SerialNumber: syz [ 436.676620][T23374] REISERFS (device loop5): Using r5 hash to sort names [ 436.678696][ T5101] usb 4-1: config 0 descriptor?? [ 436.695752][T23374] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 436.773877][T23328] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 436.792400][T23328] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 436.810058][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8782'. [ 436.836916][ T5101] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 436.846798][T23393] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8782'. [ 437.012012][T23404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8787'. [ 437.101854][ T5101] usb 4-1: USB disconnect, device number 38 [ 437.197385][T23416] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.8793'. [ 437.400541][T23431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8799'. [ 437.537883][T23430] loop5: detected capacity change from 0 to 8192 [ 437.628460][T23430] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 437.649880][T23430] FAT-fs (loop5): Filesystem has been set read-only [ 437.988116][T23467] loop2: detected capacity change from 0 to 512 [ 437.997488][T23470] netlink: 'syz.5.8818': attribute type 1 has an invalid length. [ 438.038969][T23470] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8818'. [ 438.165957][T23467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.207896][T23467] ext4 filesystem being mounted at /1798/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.342019][T23467] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.8817: invalid size [ 438.827016][T23534] __nla_validate_parse: 1 callbacks suppressed [ 438.827032][T23534] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8848'. [ 439.266254][T23567] loop5: detected capacity change from 0 to 256 [ 439.317178][T23572] loop2: detected capacity change from 0 to 256 [ 439.371457][T23567] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 439.384824][T23572] exfat: Deprecated parameter 'namecase' [ 439.390771][T23572] exfat: Deprecated parameter 'namecase' [ 439.483051][T23572] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 439.513428][ T26] audit: type=1800 audit(1783113579.487:41): pid=23567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8865" name="file1" dev="loop5" ino=1048638 res=0 errno=0 [ 439.624628][T23572] exFAT-fs (loop2): invalid start cluster (4278190088) [ 439.756214][T23594] netlink: 'syz.0.8879': attribute type 3 has an invalid length. [ 439.796380][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.802681][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.812802][ T1422] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 440.348484][T23637] xt_addrtype: ipv6 does not support BROADCAST matching [ 440.781000][T23667] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 441.012544][T23678] loop5: detected capacity change from 0 to 2048 [ 441.065102][T23678] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 441.108400][T13946] udevd[13946]: incorrect nilfs2 checksum on /dev/loop5 [ 441.138271][T23685] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.156025][T23687] loop2: detected capacity change from 0 to 1024 [ 441.199669][T23678] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 441.270922][T23678] Remounting filesystem read-only [ 441.470331][T23655] loop1: detected capacity change from 0 to 32768 [ 441.611243][T23705] --map-set only usable from mangle table [ 441.630538][T23655] XFS (loop1): Mounting V5 Filesystem [ 441.703686][ T4672] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 441.725222][T23655] XFS (loop1): Ending clean mount [ 441.784531][ T4189] XFS (loop1): Unmounting Filesystem [ 442.121168][ T4672] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.187184][ T4672] usb 6-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 442.206275][ T4672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.247259][ T4672] usb 6-1: config 0 descriptor?? [ 442.285835][ T4672] gspca_main: kinect-2.14.0 probing 045e:02bf [ 442.497446][ T4672] usb 6-1: USB disconnect, device number 9 [ 442.607575][T23714] loop3: detected capacity change from 0 to 32768 [ 442.707746][T23714] XFS (loop3): Mounting V5 Filesystem [ 442.825714][T23767] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 442.833272][T23767] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 442.866986][T23769] netlink: 'syz.2.8955': attribute type 21 has an invalid length. [ 442.875270][T23769] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.895363][T23714] XFS (loop3): Ending clean mount [ 442.963629][ T4674] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 442.967462][T23775] loop2: detected capacity change from 0 to 256 [ 443.006993][ T4201] XFS (loop3): Unmounting Filesystem [ 443.146767][T23775] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 443.217358][ T4674] usb 2-1: Using ep0 maxpacket: 16 [ 443.232818][ T26] audit: type=1800 audit(1783113583.197:42): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8957" name="file1" dev="loop2" ino=1048640 res=0 errno=0 [ 443.373706][ T4674] usb 2-1: unable to get BOS descriptor or descriptor too short [ 443.466777][ T4674] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.502175][ T4674] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.563819][T23793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 443.676920][T23805] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8973'. [ 443.703862][ T4674] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 443.723267][ T4674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.752073][ T4674] usb 2-1: Product: syz [ 443.762017][ T4674] usb 2-1: Manufacturer: syz [ 443.771768][ T4674] usb 2-1: SerialNumber: syz [ 444.046164][T23829] loop2: detected capacity change from 0 to 2048 [ 444.135140][T23829] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 444.175802][T13945] udevd[13945]: incorrect nilfs2 checksum on /dev/loop2 [ 444.185174][ T4674] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu [ 444.237514][T23842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.270405][ T4674] usb 2-1: USB disconnect, device number 50 [ 444.297981][T23829] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 444.362437][T23829] Remounting filesystem read-only [ 444.428226][T23850] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8994'. [ 444.524370][T13946] udevd[13946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.613628][ T7162] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 444.861607][T23877] ipt_REJECT: TCP_RESET invalid for non-tcp [ 444.993794][ T7162] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 445.012417][ T7162] usb 1-1: config 220 descriptor has 1 excess byte, ignoring [ 445.036082][ T7162] usb 1-1: config 220 has no interface number 2 [ 445.057834][ T7162] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 445.074519][T23887] QAT: failed to copy from user. [ 445.084350][ T7162] usb 1-1: config 220 interface 0 has no altsetting 0 [ 445.091142][ T7162] usb 1-1: config 220 interface 76 has no altsetting 0 [ 445.153928][ T5106] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 445.171779][ T7162] usb 1-1: config 220 interface 1 has no altsetting 0 [ 445.363713][ T7162] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 445.382176][ T7162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.411804][ T7162] usb 1-1: Product: syz [ 445.433619][ T7162] usb 1-1: Manufacturer: syz [ 445.457443][ T7162] usb 1-1: SerialNumber: syz [ 445.514751][ T4232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 445.613735][ T5106] usb 4-1: unable to get BOS descriptor or descriptor too short [ 445.748219][ T5106] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.766761][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 445.893968][ T7162] usb 1-1: selecting invalid altsetting 0 [ 445.900320][ T7162] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 445.909397][T23928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9033'. [ 445.918547][ T7162] usb 1-1: No valid video chain found. [ 445.927447][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.950613][ T5106] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 445.984270][ T5106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.992304][ T5106] usb 4-1: Product: syz [ 446.017272][ T5106] usb 4-1: Manufacturer: syz [ 446.021931][ T5106] usb 4-1: SerialNumber: syz [ 446.034777][ T7162] usb 1-1: selecting invalid altsetting 0 [ 446.045466][ T7162] usbtest: probe of 1-1:220.1 failed with error -22 [ 446.082652][ T7162] usb 1-1: USB disconnect, device number 40 [ 446.173699][ T4232] usb 6-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 446.208813][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.229057][ T4232] usb 6-1: Product: syz [ 446.233266][ T4232] usb 6-1: Manufacturer: syz [ 446.242165][T23934] device bond0 entered promiscuous mode [ 446.258416][T23934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.258430][ T4232] usb 6-1: SerialNumber: syz [ 446.320113][T23874] udc-core: couldn't find an available UDC or it's busy [ 446.351458][T23939] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 446.359496][T23939] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 446.411847][T23874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.714962][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9045'. [ 446.734356][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9045'. [ 446.753509][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9045'. [ 446.802659][T23930] loop1: detected capacity change from 0 to 32768 [ 446.817174][ T4232] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 446.866390][ T4232] usb 6-1: USB disconnect, device number 10 [ 446.923771][T23930] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 446.938480][T23930] JBD2: Ignoring recovery information on journal [ 447.084197][ T5106] usb 4-1: USB disconnect, device number 39 [ 447.119611][T23930] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 447.144848][ T4512] udevd[4512]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 447.177007][T13946] udevd[13946]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.418680][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 447.751565][T23960] loop2: detected capacity change from 0 to 32768 [ 447.773937][ T5106] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 447.811424][T23991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.889813][T23960] XFS (loop2): Mounting V5 Filesystem [ 448.056488][T23960] XFS (loop2): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x51. [ 448.083574][ T5106] usb 4-1: Using ep0 maxpacket: 8 [ 448.132453][T23960] XFS (loop2): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 448.163933][T23960] XFS (loop2): log mount/recovery failed: error -22 [ 448.237976][ T5106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 448.260257][ T5106] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 448.300797][T23960] XFS (loop2): log mount failed [ 448.473619][ T5106] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 448.508938][ T5106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.523503][ T5106] usb 4-1: Product: syz [ 448.527762][ T5106] usb 4-1: Manufacturer: syz [ 448.537871][ T5106] usb 4-1: SerialNumber: syz [ 448.558165][ T5106] usb 4-1: config 0 descriptor?? [ 448.613211][T24035] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.621390][T24034] netlink: 'syz.5.9080': attribute type 4 has an invalid length. [ 448.723784][ T7162] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 448.942694][T24048] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 449.120985][ T5106] usb 4-1: USB disconnect, device number 40 [ 449.127309][ T7162] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.164619][T24061] overlayfs: bad mount option "redirect_dir=on:/" [ 449.238369][T24066] loop2: detected capacity change from 0 to 256 [ 449.333890][ T7162] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 449.353169][ T7162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.362174][ T7162] usb 2-1: Product: syz [ 449.364132][ T4232] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 449.368290][ T7162] usb 2-1: Manufacturer: syz [ 449.409347][ T7162] usb 2-1: SerialNumber: syz [ 449.439258][ T7162] usb 2-1: config 0 descriptor?? [ 449.502174][T24076] netlink: 'syz.2.9101': attribute type 1 has an invalid length. [ 449.530230][ T7162] CoreChips: probe of 2-1:0.0 failed with error -22 [ 449.733732][ T4232] usb 1-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 449.824333][ T4232] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 449.835480][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 449.844247][ T4232] usb 1-1: Product: syz [ 449.853763][ T4672] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 449.863832][T24058] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 449.885947][ T4232] usbhid 1-1:15.0: fixing wrong optional hid class descriptors count [ 449.900736][ T4232] usbhid 1-1:15.0: can't add hid device: -22 [ 449.907311][ T4232] usbhid: probe of 1-1:15.0 failed with error -22 [ 449.963595][ T4674] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 450.101963][ T4232] usb 1-1: USB disconnect, device number 41 [ 450.213910][ T4672] usb 6-1: config index 0 descriptor too short (expected 45, got 27) [ 450.222103][ T4672] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.235339][ T4674] usb 4-1: Using ep0 maxpacket: 32 [ 450.353649][ T4674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.375158][ T4674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.390951][ T4674] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.402792][ T4674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.411353][ T4672] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 450.420930][ T4672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.430016][ T4672] usb 6-1: Product: syz [ 450.441319][ T4674] usb 4-1: config 0 descriptor?? [ 450.446732][ T4672] usb 6-1: Manufacturer: syz [ 450.451417][ T4672] usb 6-1: SerialNumber: syz [ 450.484564][ T4674] hub 4-1:0.0: USB hub found [ 450.516173][T24118] netlink: 'syz.2.9121': attribute type 15 has an invalid length. [ 450.528728][ T4672] rtl8150 6-1:1.0: couldn't find required endpoints [ 450.542108][ T4672] rtl8150: probe of 6-1:1.0 failed with error -5 [ 450.543910][T24118] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9121'. [ 450.715838][ T4674] hub 4-1:0.0: 27 ports detected [ 450.735767][ T4674] hub 4-1:0.0: insufficient power available to use all downstream ports [ 450.748103][ T7162] usb 6-1: USB disconnect, device number 11 [ 450.923576][ T4674] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 450.931167][ T4674] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 450.958561][T24136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9130'. [ 451.073749][ T4674] usbhid 4-1:0.0: can't add hid device: -71 [ 451.079769][ T4674] usbhid: probe of 4-1:0.0 failed with error -71 [ 451.148780][ T4674] usb 4-1: USB disconnect, device number 41 [ 451.328288][ T5101] usb 2-1: USB disconnect, device number 51 [ 451.576186][T24185] nfs4: Bad value for 'source' [ 451.846412][T24209] netlink: 'syz.0.9166': attribute type 11 has an invalid length. [ 451.966685][ T4674] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 452.136346][T24234] loop5: detected capacity change from 0 to 64 [ 452.326579][T24246] binder: 24245:24246 unknown command 0 [ 452.333111][T24246] binder: 24245:24246 ioctl c0306201 200000000380 returned -22 [ 452.383341][T24252] binfmt_misc: register: failed to install interpreter file ./file0 [ 452.384066][ T4674] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 452.442316][ T4674] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 452.713792][ T4674] usb 4-1: string descriptor 0 read error: -22 [ 452.720082][ T4674] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 452.758689][ T4674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.820367][ T4674] usb 4-1: low speed audio streaming not supported [ 452.852026][ T4674] usb 4-1: low speed audio streaming not supported [ 452.925845][ T4232] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 453.043613][ T7162] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 453.052147][ T4674] usb 4-1: USB disconnect, device number 42 [ 453.183690][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 453.280405][T24314] openvswitch: netlink: Actions may not be safe on all matching packets [ 453.303645][ T4232] usb 2-1: config 0 has no interfaces? [ 453.360435][T24320] openvswitch: netlink: Actions may not be safe on all matching packets [ 453.437701][T24326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9223'. [ 453.453794][ T7162] usb 6-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 453.464025][ T4232] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 453.476658][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.484772][ T4232] usb 2-1: Product: syz [ 453.488972][ T4232] usb 2-1: Manufacturer: syz [ 453.499964][ T4232] usb 2-1: SerialNumber: syz [ 453.521901][ T4232] r8152-cfgselector 2-1: config 0 descriptor?? [ 453.603869][ T7162] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 453.620106][ T7162] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 453.636051][ T7162] usb 6-1: Manufacturer: syz [ 453.654373][ T7162] usb 6-1: SerialNumber: syz [ 453.762851][T24344] libceph: resolve '400' (ret=-3): failed [ 453.784887][ T4232] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 453.992265][ T4232] usb 2-1: USB disconnect, device number 52 [ 454.019096][ T7162] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 454.055992][ T7162] usb 6-1: USB disconnect, device number 12 [ 454.283817][ T4674] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 454.514207][T24402] Zero length message leads to an empty skb [ 454.564688][T24405] ------------[ cut here ]------------ [ 454.570632][T24405] dst_release underflow [ 454.571416][T24405] WARNING: CPU: 0 PID: 24405 at net/core/dst.c:172 dst_release+0x15a/0x180 [ 454.584298][T24405] Modules linked in: [ 454.588217][T24405] CPU: 0 PID: 24405 Comm: syz.2.9262 Not tainted syzkaller #0 [ 454.595726][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.605836][T24405] RIP: 0010:dst_release+0x15a/0x180 [ 454.611082][T24405] Code: 8b 48 89 da 44 89 f1 5b 41 5e 41 5f 5d e9 7e e2 ca 01 e8 e9 62 8f f9 c6 05 ec a7 8d 05 01 48 c7 c7 e0 54 1f 8b e8 06 9a ca 01 <0f> 0b e9 0b ff ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 41 ff ff [ 454.630773][T24405] RSP: 0018:ffffc90003376fd8 EFLAGS: 00010246 [ 454.636927][T24405] RAX: 4cb9e5b0a82e7c00 RBX: ffff8880791d7000 RCX: 0000000000080000 [ 454.644969][T24405] RDX: ffffc90005daa000 RSI: 0000000000009b11 RDI: 0000000000009b12 [ 454.652973][T24405] RBP: ffffc90003377130 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 454.654371][ T4674] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.661078][T24405] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000 [ 454.679213][T24405] R13: ffffc90003377098 R14: 00000000ffffffff R15: ffff8880570c5140 [ 454.687226][T24405] FS: 00007f34d82386c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 454.696206][T24405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.702819][T24405] CR2: 0000200000001342 CR3: 000000004b1e6000 CR4: 00000000003506f0 [ 454.710852][T24405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.718612][ T4674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 454.718919][T24405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.737850][T24405] Call Trace: [ 454.741147][T24405] [ 454.744128][T24405] ip6_redirect_no_header+0x232/0x2c0 [ 454.749530][T24405] ? rt6_do_redirect+0xf50/0xf50 [ 454.751141][ T4674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.754520][T24405] ? ndisc_parse_options+0x6e6/0x710 [ 454.754553][T24405] ndisc_redirect_rcv+0x3a8/0x5e0 [ 454.754578][T24405] ? ndisc_router_discovery+0x3520/0x3520 [ 454.754627][T24405] ndisc_rcv+0x383/0x4e0 [ 454.754651][T24405] icmpv6_rcv+0xe5b/0x1620 [ 454.754683][T24405] ip6_protocol_deliver_rcu+0x97b/0x1360 [ 454.794749][T24405] ? ip6_input+0xa0/0xa0 [ 454.799024][T24405] ip6_input_finish+0xa2/0x130 [ 454.803838][T24405] NF_HOOK+0x303/0x390 [ 454.807935][T24405] ? ip6_input+0xa0/0xa0 [ 454.812210][T24405] ? ip6_rcv_core+0x1600/0x1600 [ 454.817126][T24405] ? ip6_input+0xa0/0xa0 [ 454.821414][T24405] ip6_mc_input+0x79f/0xbc0 [ 454.825983][T24405] ? ip6_input_finish+0x130/0x130 [ 454.828765][ T4674] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 454.831039][T24405] ? ip6_rcv_finish+0x18d/0x240 [ 454.831070][T24405] ? refcount_add+0x80/0x80 [ 454.853317][T24405] NF_HOOK+0x303/0x390 [ 454.857518][T24405] ? refcount_add+0x80/0x80 [ 454.862049][T24405] ? ip6_rcv_core+0x1600/0x1600 [ 454.866957][T24405] ? refcount_add+0x80/0x80 [ 454.871492][T24405] ? ip6_rcv_finish_core+0x420/0x420 [ 454.876834][T24405] __netif_receive_skb+0xcc/0x290 [ 454.881887][T24405] ? ktime_get_with_offset+0x2d7/0x320 [ 454.887399][T24405] netif_receive_skb+0x19e/0x700 [ 454.892363][T24405] ? __bpf_trace_softirq+0x10/0x10 [ 454.897519][T24405] ? netif_receive_skb_core+0x210/0x210 [ 454.903107][T24405] tun_rx_batched+0x606/0x760 [ 454.907838][T24405] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 454.913870][T24405] ? local_bh_enable+0x20/0x20 [ 454.918666][T24405] ? __local_bh_enable_ip+0x136/0x1c0 [ 454.924112][T24405] ? read_lock_is_recursive+0x10/0x10 [ 454.929521][T24405] ? __local_bh_enable_ip+0x136/0x1c0 [ 454.935390][T24405] ? _local_bh_enable+0xa0/0xa0 [ 454.940255][T24405] ? skb_set_owner_w+0x213/0x340 [ 454.945244][T24405] tun_get_user+0x25bf/0x3b40 [ 454.949955][T24405] ? tun_ring_recv+0xc90/0xc90 [ 454.954775][T24405] ? rcu_lock_release+0x5/0x20 [ 454.959574][T24405] ? __lock_acquire+0x7b50/0x7b50 [ 454.964663][T24405] tun_chr_write_iter+0x112/0x1e0 [ 454.969745][T24405] vfs_write+0x748/0xd70 [ 454.974054][T24405] ? file_end_write+0x250/0x250 [ 454.978949][T24405] ? __fget_files+0x402/0x470 [ 454.983814][T24405] ? __fdget_pos+0x1e2/0x370 [ 454.988426][T24405] ? ksys_write+0x70/0x260 [ 454.992875][T24405] ksys_write+0x153/0x260 [ 454.994106][ T4674] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 454.997287][T24405] ? __ia32_sys_read+0x80/0x80 [ 455.011033][T24405] ? lockdep_hardirqs_on+0x94/0x140 [ 455.016292][T24405] do_syscall_64+0x4c/0xa0 [ 455.020733][T24405] ? clear_bhb_loop+0x30/0x80 [ 455.025487][T24405] ? clear_bhb_loop+0x30/0x80 [ 455.030271][T24405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 455.031806][ T4674] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.036207][T24405] RIP: 0033:0x7f34d9fa068e [ 455.036227][T24405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.036244][T24405] RSP: 002b:00007f34d8237fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.036267][T24405] RAX: ffffffffffffffda RBX: 00007f34d82386c0 RCX: 00007f34d9fa068e [ 455.072739][ T4674] usb 4-1: Manufacturer: syz [ 455.076769][T24405] RDX: 000000000000005e RSI: 0000200000001340 RDI: 00000000000000c8 [ 455.076787][T24405] RBP: 00007f34da075e6f R08: 0000000000000000 R09: 0000000000000000 [ 455.076801][T24405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.076814][T24405] R13: 00007f34da268038 R14: 00007f34da267fa0 R15: 00007fffed11fd18 [ 455.076843][T24405] [ 455.076863][T24405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 455.076874][T24405] CPU: 0 PID: 24405 Comm: syz.2.9262 Not tainted syzkaller #0 [ 455.139214][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.149284][T24405] Call Trace: [ 455.152582][T24405] [ 455.155543][T24405] dump_stack_lvl+0x188/0x250 [ 455.160267][T24405] ? show_regs_print_info+0x20/0x20 [ 455.165527][T24405] ? load_image+0x410/0x410 [ 455.170074][T24405] panic+0x2f8/0x850 [ 455.174000][T24405] ? bpf_jit_dump+0xd0/0xd0 [ 455.178546][T24405] ? dst_release+0x15a/0x180 [ 455.183161][T24405] __warn+0x248/0x2b0 [ 455.187160][T24405] ? dst_release+0x15a/0x180 [ 455.191795][T24405] report_bug+0x1b9/0x2e0 [ 455.196166][T24405] handle_bug+0x3a/0x70 [ 455.197129][ T4674] usb 4-1: config 0 descriptor?? [ 455.200337][T24405] exc_invalid_op+0x16/0x40 [ 455.200358][T24405] asm_exc_invalid_op+0x16/0x20 [ 455.200377][T24405] RIP: 0010:dst_release+0x15a/0x180 [ 455.219871][T24405] Code: 8b 48 89 da 44 89 f1 5b 41 5e 41 5f 5d e9 7e e2 ca 01 e8 e9 62 8f f9 c6 05 ec a7 8d 05 01 48 c7 c7 e0 54 1f 8b e8 06 9a ca 01 <0f> 0b e9 0b ff ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 41 ff ff [ 455.239490][T24405] RSP: 0018:ffffc90003376fd8 EFLAGS: 00010246 [ 455.245576][T24405] RAX: 4cb9e5b0a82e7c00 RBX: ffff8880791d7000 RCX: 0000000000080000 [ 455.253559][T24405] RDX: ffffc90005daa000 RSI: 0000000000009b11 RDI: 0000000000009b12 [ 455.261546][T24405] RBP: ffffc90003377130 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 455.269546][T24405] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000 [ 455.277529][T24405] R13: ffffc90003377098 R14: 00000000ffffffff R15: ffff8880570c5140 [ 455.285531][T24405] ? dst_release+0x15a/0x180 [ 455.290154][T24405] ip6_redirect_no_header+0x232/0x2c0 [ 455.295550][T24405] ? rt6_do_redirect+0xf50/0xf50 [ 455.300512][T24405] ? ndisc_parse_options+0x6e6/0x710 [ 455.305822][T24405] ndisc_redirect_rcv+0x3a8/0x5e0 [ 455.310893][T24405] ? ndisc_router_discovery+0x3520/0x3520 [ 455.316698][T24405] ndisc_rcv+0x383/0x4e0 [ 455.320991][T24405] icmpv6_rcv+0xe5b/0x1620 [ 455.325449][T24405] ip6_protocol_deliver_rcu+0x97b/0x1360 [ 455.331131][T24405] ? ip6_input+0xa0/0xa0 [ 455.335406][T24405] ip6_input_finish+0xa2/0x130 [ 455.340191][T24405] NF_HOOK+0x303/0x390 [ 455.344280][T24405] ? ip6_input+0xa0/0xa0 [ 455.348549][T24405] ? ip6_rcv_core+0x1600/0x1600 [ 455.353432][T24405] ? ip6_input+0xa0/0xa0 [ 455.357703][T24405] ip6_mc_input+0x79f/0xbc0 [ 455.362236][T24405] ? ip6_input_finish+0x130/0x130 [ 455.367289][T24405] ? ip6_rcv_finish+0x18d/0x240 [ 455.372176][T24405] ? refcount_add+0x80/0x80 [ 455.376708][T24405] NF_HOOK+0x303/0x390 [ 455.380798][T24405] ? refcount_add+0x80/0x80 [ 455.385337][T24405] ? ip6_rcv_core+0x1600/0x1600 [ 455.390331][T24405] ? refcount_add+0x80/0x80 [ 455.394872][T24405] ? ip6_rcv_finish_core+0x420/0x420 [ 455.400174][T24405] __netif_receive_skb+0xcc/0x290 [ 455.405219][T24405] ? ktime_get_with_offset+0x2d7/0x320 [ 455.410767][T24405] netif_receive_skb+0x19e/0x700 [ 455.415871][T24405] ? __bpf_trace_softirq+0x10/0x10 [ 455.421009][T24405] ? netif_receive_skb_core+0x210/0x210 [ 455.426601][T24405] tun_rx_batched+0x606/0x760 [ 455.431303][T24405] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 455.437322][T24405] ? local_bh_enable+0x20/0x20 [ 455.442105][T24405] ? __local_bh_enable_ip+0x136/0x1c0 [ 455.447501][T24405] ? read_lock_is_recursive+0x10/0x10 [ 455.452899][T24405] ? __local_bh_enable_ip+0x136/0x1c0 [ 455.458288][T24405] ? _local_bh_enable+0xa0/0xa0 [ 455.463156][T24405] ? skb_set_owner_w+0x213/0x340 [ 455.468125][T24405] tun_get_user+0x25bf/0x3b40 [ 455.472851][T24405] ? tun_ring_recv+0xc90/0xc90 [ 455.477654][T24405] ? rcu_lock_release+0x5/0x20 [ 455.482484][T24405] ? __lock_acquire+0x7b50/0x7b50 [ 455.487555][T24405] tun_chr_write_iter+0x112/0x1e0 [ 455.492606][T24405] vfs_write+0x748/0xd70 [ 455.492731][ T4232] usb 4-1: USB disconnect, device number 43 [ 455.496882][T24405] ? file_end_write+0x250/0x250 [ 455.496910][T24405] ? __fget_files+0x402/0x470 [ 455.496936][T24405] ? __fdget_pos+0x1e2/0x370 [ 455.496953][T24405] ? ksys_write+0x70/0x260 [ 455.496973][T24405] ksys_write+0x153/0x260 [ 455.496992][T24405] ? __ia32_sys_read+0x80/0x80 [ 455.530693][T24405] ? lockdep_hardirqs_on+0x94/0x140 [ 455.536414][T24405] do_syscall_64+0x4c/0xa0 [ 455.540860][T24405] ? clear_bhb_loop+0x30/0x80 [ 455.545580][T24405] ? clear_bhb_loop+0x30/0x80 [ 455.550306][T24405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 455.556227][T24405] RIP: 0033:0x7f34d9fa068e [ 455.560665][T24405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.580295][T24405] RSP: 002b:00007f34d8237fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.588730][T24405] RAX: ffffffffffffffda RBX: 00007f34d82386c0 RCX: 00007f34d9fa068e [ 455.596724][T24405] RDX: 000000000000005e RSI: 0000200000001340 RDI: 00000000000000c8 [ 455.604711][T24405] RBP: 00007f34da075e6f R08: 0000000000000000 R09: 0000000000000000 [ 455.612699][T24405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.620713][T24405] R13: 00007f34da268038 R14: 00007f34da267fa0 R15: 00007fffed11fd18 [ 455.628729][T24405] [ 455.632138][T24405] Kernel Offset: disabled [ 455.636835][T24405] Rebooting in 86400 seconds..