last executing test programs: 1m55.400599649s ago: executing program 1 (id=2213): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080)=0x80000000, 0x4) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x0}}], 0x1, 0x10) 1m55.298347555s ago: executing program 1 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 1m55.066894119s ago: executing program 1 (id=2216): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m54.769919026s ago: executing program 1 (id=2217): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m54.335211011s ago: executing program 1 (id=2218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) 1m53.83797049s ago: executing program 1 (id=2221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) 1m53.268459753s ago: executing program 32 (id=2221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) 55.488171223s ago: executing program 4 (id=2433): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x2110, 0x2}) 54.723313217s ago: executing program 3 (id=2437): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904030000ff4f9b000904b000003a3846000904"], 0x0) 52.674563325s ago: executing program 0 (id=2443): syz_mount_image$jfs(&(0x7f0000000b80), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[], 0xf0, 0x624f, &(0x7f0000001240)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000780)=ANY=[], 0xfe37, 0x0) lremovexattr(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00') 51.73672178s ago: executing program 4 (id=2445): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 50.536810799s ago: executing program 3 (id=2448): syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 50.164655461s ago: executing program 4 (id=2449): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000840)}, {&(0x7f0000001480)="d1ffacd5", 0x4}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 49.510717499s ago: executing program 4 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x16, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 49.441773462s ago: executing program 3 (id=2451): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 49.184132517s ago: executing program 0 (id=2452): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x91f, 0x4, 0x8, 0x43564548, [0x5, 0x4], [0xfffffff9, 0x8001], 0x2}}) 48.947236991s ago: executing program 4 (id=2453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0xd, 0xdd, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e23, 0x4e21, 0xc9, 0x0, @gue={{0x2, 0x0, 0x2, 0xfe, 0x0, @val=0x80}, "39ac50f35e79d1482ca1999edce6cd8403f7c1d0be8150b9e2194b55a3395e5b15b112061142f98f7ee09964024585395a4e71633d02ac95fe56388a6d5a19de0b12ea561be536f8e35cb12322b7d652111a315844261cd15a26d98abd54f1a4f6de96d113fe19a7e6ae3497f87462663ebbb47575305511c88f7d29faa3daba601fbd451f00a5c296f37e815205a3005a6d35add3247a278c9dfa7e6e34b3afe258099ec1639d21ffd66cedc1c9b07e4c7b5a507fbca961d3"}}}}}, 0xeb) 48.670365787s ago: executing program 3 (id=2454): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe79, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0x1e, 0x204, @rand_addr=0x1000000}, 0x10, 0x0}}], 0x2, 0x0) 48.61476421s ago: executing program 0 (id=2455): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040005) 48.174859835s ago: executing program 3 (id=2457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0x4, 0x20}, {0x4d}]}) 47.93060251s ago: executing program 0 (id=2458): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1000400, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) 46.988159254s ago: executing program 2 (id=2460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100001"], 0x1c}}, 0x8010) 46.708286811s ago: executing program 2 (id=2461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 46.322738892s ago: executing program 2 (id=2462): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 46.093630946s ago: executing program 2 (id=2463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) 45.938795874s ago: executing program 4 (id=2464): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5549, &(0x7f0000003d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x7f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 45.562263857s ago: executing program 2 (id=2465): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, "84"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "96"}]}}, 0x0}, 0x0) 44.955238771s ago: executing program 0 (id=2466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "09a72734"}, @main, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) 43.370087803s ago: executing program 3 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250c0000005400038048000200ff010000040000000000000000eb2e2466b3b726c12bfffe5f916f1716088a9129f9d2da6226169a994f49a227f189a859257dea5b53a46afb0f8effa4689efe631ffa5f5e03709c04000100180001801400020076657468305f746f5f626174616476"], 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 43.198011473s ago: executing program 2 (id=2468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000100)="56bb23ef", 0x4, 0x20000845, &(0x7f00000001c0)={0xa, 0x4001, 0xffff, @loopback, 0x4}, 0x1c) 0s ago: executing program 0 (id=2469): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f00000007c0)="c535b19b24e409d71f69b4dc7989c16c36b6af938fcbc585aeb7f089eef29c64fcd936535ecc22620e42284967ad321ed051a97c0d6fb9089486cdf9cb9be764d4423079deb95c274f335a029015f34c02a3019ce82e2c5b31479bc1bd5f774aba6b8f086f02c72245e5636053d760f9f3484410dccd8852f1f6d881be49a85498da2e0bb336ee09f5bf6150b2481cb8933cd57fb94428addaffa11932bb5feb18db3fc01ff0ff3223ef7625c4bfaa54100182f4b0313a1f903c1bb5e899a5aaff6757ccf18421fb8fcafa0df6c5efd9666616b074ff2e93e75353d2e3641b9dedf114d333", 0xe5}, {&(0x7f00000001c0)="c02fe37617367a9585f15f6166b18898f0cb1bfc8bdfaf8c02cb958e146ab178a6067bfd5596bfac55c157aaaf602259d1851ee82963e8af87225a7f6fef58e3ccef850072075c38fd19660061a7c3050c9bb8bd912c6a0f4fb56b89f9ff79", 0x5f}, {&(0x7f00000008c0)="ba8de48e1de8d4328b606af3259a6a94d56a8b8b24f3d0fd99c55890432b4c4fd67ed71d52a9325f9649f58e372b01714bdbaadfd3fb3ef640c93a80e23dffaa96f715521565e23f2f195510aa6cf798709973e96b2226e7fbce4dcfcd3422f1a203a18f4ffc1cfbb9cedd1c00aff7ef453b56ff4a80d092c301f34e1a9d607d3931d92304bea53b6cdc8effba2edf13369f0759292fd383ae642069a713fa9a6327a45c23813c3e6224d7a5eac396508d040f227ebc29e5f9ad63351dd866e95d6dec8700ad9220c9b4fef1771cfd1d232f57d9ad71ab654cefbba62e97e58dda3ced20715bae3e0ab505dc941b988d1bf03c874cf7e971f6717597479b1619a9d1d28d4c93ca2e04f51a89caf7d8df0096d34974e31e86ceaf4573ca45041f704ff34cf85aa9809128901d15f2e23dd9c57073824f8368b3f51617f1466e2abab289dcfda34ce7734e38f48977c3cca36293fdb6eaa813b90ed3b138f9a0519b01ae66366dc52883e4fc7a2bff7bbdb3606318da0a68ac0429d0a43e46955a509913b7f93ec915a29fcf7ca10b9438fef87b82779d98d44720127d09b0ee4163e9e72311bd6ca80268a8481681129cb395e203473c5d7cfe8114d6d70eb20c7551c3ba768fbeacd9aadf9d55ae15829f46069132ff14eaecbb391fed06e7f82a19f446b314d7c115c1eee93a16ea395fbea108be5f4dc2113eba263b544b7c043326b71cd1e949d35c22fe2f3866311535b0811a4e5e5fbd195fcc0171fe54dc562c93f5c9a475307e1068cd9cca23079ab2dcfb807d04ff0018e901e2e1683e4bcdcdac7f68e968149dd91dfde126e74bdff3ec4d58b8706d4db22cff057e5a88f1b0e58b1c33742402f84ca38e76bc268dd25a076b5feddb7440a5784e523c8a7eb6c10c69fff6fab708d03fb7e136fa78e6b237350adedd20b1b9a0b52a30144a90e75adcc8ed9c30bde900485edad6d3524538a467765037757c3973b5a0552531006438164bdb9e1486cefdf848cc510e3b462181aecdf8f93ab52b4fb478690b50d83a81c67bbaf34ecd191e9731721e7686978525362a95fc35b14d60031ac58afb9dafe6e8e3a5ead2a4d8801356a57446b6e2f7369240d79621c49f01bdb02fad6e2814bc0ad6e8fe8e2184332fd904a02ff164ec253fffb229a55ff5ba2437a9bf88b904dcac049970fd587ad319c496f15f5bdeace47433168bf8b9d92c86b77b5dad8af618a905df06152dd265940311eae3b998cd3e50c3ffc5b072862d0387fc877ef8893288b52717adfe000645751df40c11a84e3f697294bfd77689fe1ea85816d1a9297d6d598cc311017a906d96d7c04e69b78a52e460893d09bf0b60274c73cb6374f8f72616046dff3c69113c3f1b80dc5a1b294d925b834a4c045cc4217d499905ceee29472ffae1a8e9ac82a1d9f8c4a43c0e7c077f5583dbe22f9aeecd7e41170fd165e342076101e7779b31fabfbbb39dde1a2944cecc3433f3908cd7d4e8eeec19c00aa693f0b044975be34ddbf7dccff7b93a797ae2eedb6245b352d55f56eaeb896301fe7983856cd1c6742b18004f1574317f31efeaaddfc4bc7ddddb1ddb652cc0a93bf47be51639760c56f789a759bb5d41c0c72f39794268f42165690973ca99788c6e07ab0786fc9f67fa6c14f1f373e47aab806f2ede3191e52fa62f6651bd73b2c3c3e2b68e15a6c8fea92efcc7e27d74f78c97c4e1bad9b99a0d45000f0aee5c97112a6a4d03c0b371dbc34a34b194bb2f0ca6680737f724501c11fc5f480b413681820e3aa2422f023abbf91e3d91bfe23b85b1991ed296e2c5ec9be853dbd29bbb7f4aa5eb2643fb7b8ac571ba087407c639fec377cf0f4589b19626e77a52091356b4a15d84d10f9d193bcd3974b2e4c8ebc65ed69e412ac4f6ee8febad97f1698661877bdee8d29507374b8c7dc68874213552baaa1915eaa42896888724a536a190d6fa4ebdb4723e9f052e7e5a6ba2e90d2af581e33ef618c9deef8c1bc4685e2bdd2e8e34211793aed3bf549cc418c633c18bd94b6b93dc12496e46fe3f4171ce8abdde765a63bdba5e0b97a0397b3f3f64190bbe7203883511f4b4e308fb9e81a79b52a6f7ebd044c6bf7d74899a9827f2cbfc4ae6fa90ea62e2af95c17482c35c1348a072908683901f1f81cb34a02a675074ec587fa71586e14f923a72a91b895a6d3c4e6c17d1fc7190e592a61ba79619b789b8f373b1dc762808b070d7763ddef7ac6960b3ff28826ac59f0d6f1bd61ea61ed6de8b4383fc34555acd746d6738ce62e566d373f50e403072d498214f55f91fffe2666c1b8e94dfc870ecbd664d7965cdb3c9bf51da565459d829311cadcf36aca08cffaaabc26e0aaf3944f178d179c00eeed203576a6f099fcaa4de3004ed8a0b031c12d5becd20498497fa35b6f14cbba95043c89f36e8ed21358a079ab99335c9ea7b07468b1b1e9179b6706f03481a5c449252b47b124274e0ea9cbdb710015f9ade3e4beb7c35a21f239232f6b6faeb845e475d5b1531a361f5eef97847a2f6d74104d2e345adeb2f3f0d197295877c6ef70455471fd1368bd562130849936c26dbeacd28f6bc1169aa57cc28647b3ea8627131571457d9dfad350247c97b5d124733c3a047211caabd194da95892d7a98115bc1791df7f0e8c3acfb027d202bbc6d1e0dbecf21f3e0c7599f49b8aa7d82624039ca6026eaf34365cbfef7e49f0a6cc2d5f68af8dca8fa17eded4c6dc59381f5da636f575981b8fb9fb3db6fc7dbdb0ee5bd89000521fbc18d68291434ea9909b4641427ed651a44eccdcf0e33fd9cbed456c8a7df82fd9c54e2cd2d5ce19f961b22d052bbc6e3754aefa61e33a331f6d79e4716d510f78d1decfa3b0325a32db1003426863aafcdd9e8a930c35f2a4459c9d86002d1ed36553dc055c55e2d9a40b5e84ed4f484bcc8b751ebc8d62ace75e42bd53de2728090bf31ad832e6595e57c38ee40334a7a1b222f565a18a1206f3cc971a35f3f6d575d74fffed3266b58fd5e74c84fa3205a52900a75e8bd1a7f78a3bfb0868f9761d1d3fa3fe2d57b67382089ab557c4fe51e80e3b844e4e2cb30c7e78ab8d2be3c620a27e72721091cd6dd8cb64e935c055bc60095f566d75b873ab62ddd0eaf19f62112af28bfde1612f70b14fa819dc18b8e9fd5edd3d7063b62dffe524cb0a1c80a6af351a2f1f461e96bc9aa5ff1071efb8d1807adb686c61674a1c343fb014bde833e6929e8e7718ae154b8113665bead2c0c20719fffb5a87da629961ee2a5934e450fe92da2e8abebb8a35b98df889a5efd85c2965c029f0fda3c0b84e15a5d2624fe01728f9a0b69e3e7be4df1a0d53b5b7713245da8c65ae0795679d57ad0e79c4e8e76d1b2470f80f24ec6f1d17ce2641f2044afa3cc0168c9214a49b2da56e9f62e118c7c9c1c7d06b7c01c0b189667fe8fb7fac309371450d23ec63cc27b69ef57fa6410be65d26e19073ac427db5c5a535b1d9ee8a82897e37df19e7940a8b7412840698f2b9ef189f9a197164ccf1c46cd9ce544eaebec4410e77a260c12482e0d9166624dc341c808af99bc9965501478f88f6ac614b3c24dde437cc120a9fd8819f61d70065acee3beecbba65f09780f96607190135089aeae9ec2d216953a35f413ed95e2c07e82ecb1a3c73bd1bebd846b807b6eb64fa08b9ca5f7308d2bedb93c555ac6cdb15674876890d966f4d900c6b0d08adb74cc3aebebd860fe94c42491df5c95904730528eab9436b682d840aa2249d17e389404b227423091a970fa87f2a105fd75e9f1abaea32d14b4a3f5a841da0eef97587f5da89bc4cd84753423b1497a6ecaed60f5832c841b0fb7273d8251c511db6054bfb416be72c5bc487c03b0f7dbb84dd08198ff3955c1c090e4293fb22e88fbdb8581463fa487adf5bd7ee040682c393f786dee41073ae94e694dfd06a5f0047aa9c193c08669314fd60c1114a81fc7a9a45412b68771491f54ac4b4d14f9e8d9dfff5adf1ee79e229d7b969a94fe4b2a3d2ea8bfea6c307166e3dbf82f81104ae71ca718eed3b32f6dd74a25cea746cf8729cdfeee43a2a3dfa0f72e1ac8c292431a9709f34fec5a9ba805989c01da7ad817e808e28e9489dd1f85862baf39d5e5cce0a42fe425b0ec95eafd2d07082c9f0114c8033805739987dcdd118267445ec1c3912e87343e011235b1bd3d98f94488f402e7e1e22e0a8ea1b2c0d8906831dd1f6b1281e1797e3d135403d8dd41c1922835deb76550148d7c7a191601f0aad872e557675e4d3d00964669eea4f6e42be944cf6c8270fef483411296f26601e3d7cda901af09fccf205b1fad2ac892851dee13e186c0388e34a8f816015622e4fcda07afc1b29e804b3cd71eab7fe02cce6715dc747367886782deb5d5b5404940f0ddf7fd96d3b4b71db03820a9f78082073d57dc328a33ec0de81c859a4c484a67fc666d98c14fb751fcfe77bf5de969a07202e64cdc2bcb66124aa0694dba2e7d331882a86762f255f4ae8beb89bd08c252ed68914167f4913cdd82a4d28641a1e3f0f131d8f45eaa9e67f6feacff9b3a960797faeee19d0126896874d52ce9f2a7ac16740d571431fa013b2f03d613d5fdfac29babc81e818ca7dd8f6913d2c9ef5fb1fd52b58379e00317adaf4e059799fb6cf69f070f85edc26e02af7fe0b6d94490a632386ef20c0007e7e93e77e2dd5038dc8c5e8432368001da8cb93380b3d039f2d3e976005135f682ff122e42abc840a5dbde3269c5c2ea2101366c72fec3d231e257d8cfbf17f55e233e9a583bc73656e4c0cb6d1dc4a2da6b9b4108707e97a24e9b48941dafb629ee5efec1d93575b2351c9ccc5bd5c857bea8c87888002573c862b660546d64ed97f66a08e96399f99c335b21d704f9630830d5e796060cd6788b8db348839d09de90853fe596a4c0e2d0226963610a3a0943f98e7a725223a2f47a390300f4409ccd25dc813c25e38382ed4fd133d720ebf47a33ba13bbbf2186b53b8894c47c907ddbd5f1e", 0xdf0}], 0x4}, 0x9cdc2384256b48a8) kernel console output (not intermixed with test programs): (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 321.721186][T10648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.128931][T10658] loop3: detected capacity change from 0 to 256 [ 322.258008][ T787] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 322.352996][T10662] loop0: detected capacity change from 0 to 2048 [ 322.386146][T10662] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 322.413087][T10662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.468015][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 322.482336][ T787] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 322.509060][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.517172][ T787] usb 2-1: Product: syz [ 322.536529][ T787] usb 2-1: Manufacturer: syz [ 322.557648][ T787] usb 2-1: SerialNumber: syz [ 322.570036][ T787] r8152-cfgselector 2-1: config 0 descriptor?? [ 322.775819][T10667] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 322.815312][T10667] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.922348][T10656] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 322.939329][T10656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 322.962091][T10656] F2FS-fs (loop2): heap/no_heap options were deprecated [ 322.978201][T10656] F2FS-fs (loop2): invalid crc value [ 322.991574][T10667] FAT-fs (loop0): FAT read failed (blocknr 128) [ 323.025024][T10656] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.044805][ T787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 323.068630][ T787] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 323.077855][ T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 323.186568][T10656] F2FS-fs (loop2): Start checkpoint disabled! [ 323.203969][T10656] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 323.215413][T10656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 323.309685][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 323.317659][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.338039][ T27] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 323.357590][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.381626][ T27] usb 4-1: config 0 descriptor?? [ 323.450297][T10676] set_capacity_and_notify: 2 callbacks suppressed [ 323.450342][T10676] loop2: detected capacity change from 0 to 1024 [ 323.518747][T10676] hfsplus: bad catalog entry type [ 323.633161][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 323.830958][ T27] kye 0003:0458:0087.0034: unknown main item tag 0xd [ 323.861108][ T27] kye 0003:0458:0087.0034: unexpected long global item [ 323.918330][ T27] kye 0003:0458:0087.0034: parse failed [ 323.924078][ T27] kye: probe of 0003:0458:0087.0034 failed with error -22 [ 324.022147][ T5761] usb 4-1: USB disconnect, device number 23 [ 324.029347][T10685] loop0: detected capacity change from 0 to 512 [ 324.090937][T10685] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 324.980455][T10718] loop0: detected capacity change from 0 to 128 [ 325.135686][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 325.145157][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 325.681076][T10736] loop2: detected capacity change from 0 to 2048 [ 325.712737][T10736] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 325.765623][T10736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.255772][T10725] loop1: detected capacity change from 0 to 32768 [ 326.298083][T10725] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.412672][T10725] XFS (loop1): Ending clean mount [ 326.431347][T10725] XFS (loop1): Quotacheck needed: Please wait. [ 326.544693][T10725] XFS (loop1): Quotacheck: Done. [ 326.643788][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.703995][T10733] loop0: detected capacity change from 0 to 40427 [ 326.737303][T10733] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 326.739095][T10733] F2FS-fs (loop0): invalid crc value [ 326.755980][T10733] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.932819][T10733] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 327.388970][T10772] loop3: detected capacity change from 0 to 512 [ 327.486756][T10772] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.1890: bad orphan inode 15 [ 327.529682][T10776] loop0: detected capacity change from 0 to 128 [ 327.537833][T10772] ext4_test_bit(bit=14, block=18) = 1 [ 327.543289][T10772] is_bad_inode(inode)=0 [ 327.585078][T10772] NEXT_ORPHAN(inode)=1023 [ 327.594586][T10772] max_ino=32 [ 327.598415][T10772] i_nlink=0 [ 327.605936][T10772] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2968: inode #15: comm syz.3.1890: corrupted xattr block 19: invalid header [ 327.627069][T10772] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -117) [ 327.635083][ T5762] blk_print_req_error: 28 callbacks suppressed [ 327.635133][ T5762] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.654267][T10772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 327.697842][T10772] ext4 filesystem being mounted at /521/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 327.824933][T10772] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.1890: Directory hole found for htree leaf block 0 [ 327.912895][T10780] loop2: detected capacity change from 0 to 128 [ 328.035163][T10780] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 328.056989][T10780] hpfs: filesystem error: improperly stopped [ 328.067952][T10780] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 328.081123][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 328.104495][T10780] hpfs: You really don't want any checks? You are crazy... [ 328.126419][T10780] hpfs: Code page index out of array [ 328.132258][T10780] hpfs: code page support is disabled [ 328.152238][T10780] hpfs: hpfs_map_4sectors(): unaligned read [ 328.188576][T10780] hpfs: hpfs_map_4sectors(): unaligned read [ 328.194649][T10780] hpfs: filesystem error: unable to find root dir [ 328.264335][T10780] hpfs: hpfs_map_4sectors(): unaligned read [ 328.517874][ T5778] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 328.745628][ T5778] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 328.774819][ T5778] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 328.810102][ T5778] usb 4-1: config 0 has no interface number 0 [ 328.835195][ T5778] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 328.859962][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 328.897154][ T5778] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.932281][ T5778] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 328.972735][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.019503][ T5778] usb 4-1: config 0 descriptor?? [ 329.687991][ T5778] usb 4-1: USB disconnect, device number 24 [ 329.871968][T10804] loop0: detected capacity change from 0 to 2048 [ 329.908177][T10804] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 330.823603][T10787] loop1: detected capacity change from 0 to 262144 [ 330.891430][T10787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 330.951055][T10787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 331.157105][T10808] loop2: detected capacity change from 0 to 32768 [ 331.173483][T10808] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1905 (10808) [ 331.214469][T10808] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 331.266557][T10808] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 331.297558][T10808] BTRFS info (device loop2): enabling disk space caching [ 331.304707][T10808] BTRFS info (device loop2): force clearing of disk cache [ 331.353679][T10808] BTRFS info (device loop2): turning off barriers [ 331.382051][T10808] BTRFS info (device loop2): setting nodatasum [ 331.404197][T10808] BTRFS info (device loop2): enabling ssd optimizations [ 331.441460][T10808] BTRFS info (device loop2): using spread ssd allocation scheme [ 331.511975][T10808] BTRFS info (device loop2): disk space caching is enabled [ 331.553792][T10822] loop1: detected capacity change from 0 to 4096 [ 331.624463][T10822] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 331.653551][T10804] loop0: detected capacity change from 0 to 32768 [ 331.823192][T10822] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 331.858782][T10804] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 331.858782][T10804] [ 331.899606][T10804] ERROR: (device loop0): remounting filesystem as read-only [ 331.970433][T10822] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 332.027657][T10822] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 332.077769][T10822] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 332.086584][T10822] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 332.167818][T10822] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 332.176624][T10822] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 332.225766][ T5779] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 332.296408][T10822] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 332.355387][T10822] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 332.474162][T10822] ntfs: volume version 3.1. [ 332.585947][ T5784] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (5784) [ 332.943492][ T8] kernel write not supported for file /comedi4 (pid: 8 comm: kworker/0:0) [ 334.661070][T10870] loop0: detected capacity change from 0 to 32768 [ 334.772399][T10892] loop3: detected capacity change from 0 to 256 [ 334.816770][T10892] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 335.294053][T10886] loop2: detected capacity change from 0 to 32768 [ 335.329561][T10886] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1933 (10886) [ 335.403660][T10886] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.432564][T10886] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 335.463908][T10886] BTRFS info (device loop2): allowing degraded mounts [ 335.488483][T10886] BTRFS info (device loop2): setting nodatasum [ 335.494751][T10886] BTRFS info (device loop2): disabling tree log [ 335.534505][T10886] BTRFS info (device loop2): using free space tree [ 335.551098][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 335.687071][T10886] BTRFS info (device loop2): auto enabling async discard [ 335.891168][T10918] loop0: detected capacity change from 0 to 4096 [ 335.908441][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.991602][T10924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.005459][T10918] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 336.019816][T10890] loop1: detected capacity change from 0 to 40427 [ 336.056027][T10923] tipc: Enabling of bearer rejected, failed to enable media [ 336.059253][T10890] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 336.092146][T10918] NILFS (loop0): mounting fs with errors [ 336.116756][T10890] F2FS-fs (loop1): Image doesn't support compression [ 336.134396][T10890] F2FS-fs (loop1): Image doesn't support compression [ 336.217712][T10890] F2FS-fs (loop1): invalid crc value [ 336.236190][T10918] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 336.285585][T10918] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 336.300647][T10890] F2FS-fs (loop1): Found nat_bits in checkpoint [ 336.334260][T10918] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 336.524826][T10890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 336.564815][ T5762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5762) [ 336.777794][T10937] netlink: 'syz.0.1947': attribute type 2 has an invalid length. [ 336.948214][ T5771] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 336.981454][ T5771] F2FS-fs (loop1): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 337.327807][ T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.520139][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.552076][ T27] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 337.580706][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 337.607572][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.628295][ T27] usb 1-1: Product: syz [ 337.647607][ T27] usb 1-1: Manufacturer: syz [ 337.652298][ T27] usb 1-1: SerialNumber: syz [ 337.683682][T10952] loop2: detected capacity change from 0 to 1024 [ 337.818884][ T12] hfsplus: b-tree write err: -5, ino 4 [ 337.968269][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 338.098735][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 338.098751][ T28] audit: type=1326 audit(1769426433.421:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.147098][ T28] audit: type=1326 audit(1769426433.431:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.177688][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 338.184249][ T28] audit: type=1326 audit(1769426433.431:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.219305][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 338.238980][ T8] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 338.247161][ T8] usb 2-1: Product: syz [ 338.255776][ T28] audit: type=1326 audit(1769426433.431:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.287676][ T8] usb 2-1: Manufacturer: syz [ 338.292347][ T8] usb 2-1: SerialNumber: syz [ 338.315657][ T28] audit: type=1326 audit(1769426433.431:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.321647][ T8] usb 2-1: config 0 descriptor?? [ 338.347399][ T28] audit: type=1326 audit(1769426433.431:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.376947][ T28] audit: type=1326 audit(1769426433.431:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d76f9aeb9 code=0x7ffc0000 [ 338.533924][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 338.616212][ T27] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 338.719900][ T8] usb 2-1: USB disconnect, device number 20 [ 338.878814][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.088032][ T5761] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 339.140731][ T27] usb 1-1: USB disconnect, device number 23 [ 339.231980][ C1] sd 0:0:1:0: [sda] tag#4980 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 339.242502][ C1] sd 0:0:1:0: [sda] tag#4980 CDB: Read(6) 08 00 00 00 00 00 [ 339.308074][ T5761] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.336289][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 339.350627][ T5761] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 339.360866][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.374483][ T5761] usb 3-1: config 0 descriptor?? [ 339.654945][T10996] loop1: detected capacity change from 0 to 1024 [ 339.728957][T10996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.813696][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.823432][T10996] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.1976: inode #1485435381: comm syz.1.1976: iget: illegal inode # [ 339.870767][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.885602][T10996] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1976: error while reading EA inode 1485435381 err=-117 [ 339.903992][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.913269][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.930205][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.939961][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.947038][ T5761] elecom 0003:056E:00FD.0035: unknown main item tag 0x0 [ 339.970888][ T5761] elecom 0003:056E:00FD.0035: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.2-1/input0 [ 340.024522][ T5761] usb 3-1: USB disconnect, device number 21 [ 340.099309][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.178482][T11002] fido_id[11002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 340.364869][T10994] loop3: detected capacity change from 0 to 32768 [ 341.004794][T11024] netlink: 'syz.0.1988': attribute type 66 has an invalid length. [ 341.198684][T11028] loop3: detected capacity change from 0 to 4096 [ 341.236711][ T28] audit: type=1326 audit(1769426436.561:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 341.276651][T11028] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 341.290042][ T28] audit: type=1326 audit(1769426436.561:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 341.297928][ T5761] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 341.312616][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.360077][ T28] audit: type=1326 audit(1769426436.601:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 341.366644][T11028] ntfs3: loop3: Failed to load $Extend (-22). [ 341.400631][T11028] ntfs3: loop3: Failed to initialize $Extend. [ 341.560283][T11019] loop2: detected capacity change from 0 to 32768 [ 341.570064][T11028] overlayfs: upper fs does not support tmpfile. [ 341.583619][T11019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1986 (11019) [ 341.599847][ T5761] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.615322][ T5761] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.636897][T11028] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.644840][T11019] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.660381][ T5761] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.683863][T11019] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 341.696925][T11019] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 341.701451][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 341.721044][T11019] BTRFS info (device loop2): trying to use backup root at mount time [ 341.747635][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 341.757724][T11019] BTRFS info (device loop2): metadata ratio 0 [ 341.765385][T11019] BTRFS info (device loop2): enabling ssd optimizations [ 341.773571][T11019] BTRFS info (device loop2): using spread ssd allocation scheme [ 341.783641][ T5761] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.799011][T11019] BTRFS info (device loop2): using free space tree [ 341.806877][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.840791][ T5761] usb 2-1: Product: syz [ 341.845038][ T5761] usb 2-1: Manufacturer: syz [ 341.873466][ T5761] cdc_wdm 2-1:1.0: skipping garbage [ 341.885975][T11019] BTRFS info (device loop2): auto enabling async discard [ 341.886216][ T5761] cdc_wdm 2-1:1.0: skipping garbage [ 341.924249][ T5761] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 341.937589][ T5761] cdc_wdm 2-1:1.0: Unknown control protocol [ 342.131009][ T5779] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.196884][ T5761] usb 2-1: USB disconnect, device number 21 [ 342.650836][T11059] loop3: detected capacity change from 0 to 1024 [ 342.660931][T11059] EXT4-fs: Ignoring removed nobh option [ 342.684798][T11059] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 342.720683][T11059] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 342.739376][T11059] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 342.924234][T11065] loop1: detected capacity change from 0 to 128 [ 343.012865][T11065] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 343.074324][T11069] program syz.3.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.084832][T11065] hpfs: filesystem error: improperly stopped [ 343.107588][T11065] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 343.141724][T11065] hpfs: You really don't want any checks? You are crazy... [ 343.160870][T11065] hpfs: hpfs_map_sector(): read error [ 343.187899][T11065] hpfs: code page support is disabled [ 343.193551][T11065] hpfs: hpfs_map_4sectors(): unaligned read [ 343.227677][T11065] hpfs: hpfs_map_4sectors(): unaligned read [ 343.233684][T11065] hpfs: filesystem error: unable to find root dir [ 343.324138][T11073] loop2: detected capacity change from 0 to 256 [ 343.407655][T11073] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 343.531732][T11073] exFAT-fs (loop2): error, invalid size(size(6940) > aligned(9223372036854777344) [ 343.531732][T11073] [ 343.563243][T11073] exFAT-fs (loop2): Filesystem has been set read-only [ 343.667698][ T787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 343.887754][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 343.915505][ T787] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 343.934438][ T787] usb 4-1: config 0 has no interface number 0 [ 343.952739][ T787] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 343.964436][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.975777][ T787] usb 4-1: Product: syz [ 343.983048][ T787] usb 4-1: Manufacturer: syz [ 343.991361][ T787] usb 4-1: SerialNumber: syz [ 344.001182][ T787] usb 4-1: config 0 descriptor?? [ 344.009922][ T787] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 344.332114][T11104] loop1: detected capacity change from 0 to 64 [ 344.347745][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 344.570823][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 344.584984][ T27] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 344.614470][ T27] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 344.625868][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 344.643683][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.663491][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 344.676117][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.685904][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.707373][ T27] usb 3-1: Product: syz [ 344.719657][ T27] usb 3-1: Manufacturer: syz [ 344.724369][ T27] usb 3-1: SerialNumber: syz [ 344.843980][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 344.844900][ T8] usb 4-1: USB disconnect, device number 25 [ 344.864811][ T5761] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 344.891066][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 344.910905][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 344.923377][ T8] quatech2 4-1:0.51: device disconnected [ 345.019514][T11117] loop0: detected capacity change from 0 to 1764 [ 345.066337][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.097679][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.114258][ T5761] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 345.145049][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.169977][ T5761] usb 2-1: config 0 descriptor?? [ 345.194293][ T27] usb 3-1: 0:2 : does not exist [ 345.444199][ T27] usb 3-1: USB disconnect, device number 22 [ 345.604293][ T5761] aureal 0003:0755:2626.0036: unknown main item tag 0x0 [ 345.633877][ T5761] aureal 0003:0755:2626.0036: unknown main item tag 0x0 [ 345.641839][ T5761] aureal 0003:0755:2626.0036: unknown main item tag 0x0 [ 345.659705][ T5761] aureal 0003:0755:2626.0036: unknown main item tag 0x0 [ 345.666834][ T5761] aureal 0003:0755:2626.0036: unknown main item tag 0x0 [ 345.690109][ T5761] aureal 0003:0755:2626.0036: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 345.857436][ T5761] usb 2-1: USB disconnect, device number 22 [ 345.877126][T11128] loop0: detected capacity change from 0 to 1024 [ 346.081877][ T710] hfsplus: b-tree write err: -5, ino 4 [ 346.215045][T11123] loop3: detected capacity change from 0 to 32768 [ 346.224090][T11123] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.2028 (11123) [ 346.278343][T11123] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 346.307652][T11123] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 346.332473][T11123] BTRFS info (device loop3): using free space tree [ 346.622620][T11123] BTRFS info (device loop3): enabling ssd optimizations [ 346.647650][T11123] BTRFS info (device loop3): auto enabling async discard [ 346.932781][T11160] loop1: detected capacity change from 0 to 256 [ 346.949492][ T5774] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 346.978885][T11160] exfat: Deprecated parameter 'namecase' [ 346.984833][T11160] exfat: Deprecated parameter 'namecase' [ 347.063988][T11160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 347.435385][T11144] loop2: detected capacity change from 0 to 32768 [ 347.470046][T11144] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2035 (11144) [ 347.538354][T11144] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.562154][T11144] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 347.596621][T11144] BTRFS info (device loop2): allowing degraded mounts [ 347.616429][T11144] BTRFS info (device loop2): setting nodatasum [ 347.623756][T11144] BTRFS info (device loop2): disabling tree log [ 347.631725][T11144] BTRFS info (device loop2): using free space tree [ 347.766896][T11144] BTRFS info (device loop2): auto enabling async discard [ 347.780416][ T5761] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 347.797743][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 347.987857][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.015533][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.023054][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.029687][ T5761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 348.057862][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.087647][ T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 348.099328][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.107722][ T5761] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 348.116823][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.128829][ T27] usb 2-1: config 0 descriptor?? [ 348.202451][ T5761] usb 1-1: config 0 descriptor?? [ 348.552329][ T27] itetech 0003:06CB:2968.0037: unbalanced delimiter at end of report description [ 348.618389][ T27] itetech: probe of 0003:06CB:2968.0037 failed with error -22 [ 348.716207][T11171] loop3: detected capacity change from 0 to 32768 [ 348.757098][ T27] usb 2-1: USB disconnect, device number 23 [ 348.923114][T11171] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.040933][T11171] XFS (loop3): Ending clean mount [ 349.065830][T11171] XFS (loop3): Quotacheck needed: Please wait. [ 349.184347][T11171] XFS (loop3): Quotacheck: Done. [ 349.422848][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.742731][T11201] loop1: detected capacity change from 0 to 8192 [ 349.763138][T11201] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 349.813180][T11201] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 349.841626][T11201] REISERFS (device loop1): using ordered data mode [ 349.869405][T11201] reiserfs: using flush barriers [ 349.913991][T11201] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 349.960656][T11201] REISERFS (device loop1): checking transaction log (loop1) [ 349.989211][T11201] REISERFS (device loop1): Using r5 hash to sort names [ 350.010520][T11201] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 350.053388][T11201] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 350.566235][T11206] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2049'. [ 350.776019][T11210] netlink: 'syz.1.2051': attribute type 10 has an invalid length. [ 350.788647][T11210] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2051'. [ 350.805805][T11210] bond0: entered promiscuous mode [ 350.812376][T11210] bond_slave_0: entered promiscuous mode [ 350.822399][T11210] bond_slave_1: entered promiscuous mode [ 350.830275][T11210] bridge0: port 3(bond0) entered blocking state [ 350.836954][T11210] bridge0: port 3(bond0) entered disabled state [ 350.847655][T11210] bond0: entered allmulticast mode [ 350.853388][T11210] bond_slave_0: entered allmulticast mode [ 350.864446][T11210] bond_slave_1: entered allmulticast mode [ 350.892811][T11189] loop2: detected capacity change from 0 to 262144 [ 350.908049][T11210] bridge0: port 3(bond0) entered blocking state [ 350.914899][T11210] bridge0: port 3(bond0) entered forwarding state [ 350.926002][ T5761] kovaplus 0003:1E7D:2D50.0038: item fetching failed at offset 1/5 [ 350.939588][T11189] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.000954][ T5761] kovaplus 0003:1E7D:2D50.0038: parse failed [ 351.007216][T11189] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 351.042228][ T5761] kovaplus: probe of 0003:1E7D:2D50.0038 failed with error -22 [ 351.069297][T11216] loop0: detected capacity change from 0 to 512 [ 351.083120][ T5761] usb 1-1: USB disconnect, device number 24 [ 351.689410][T11225] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2046'. [ 351.955797][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 352.257981][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 352.777617][ T23] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 353.019901][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 353.062745][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 353.091953][T11265] loop3: detected capacity change from 0 to 512 [ 353.097710][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.134540][T11265] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2075: Directory hole found for htree index block 0 [ 353.137345][ T23] usb 3-1: config 0 descriptor?? [ 353.182399][T11265] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 353.248944][T11265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.280677][T11253] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.436542][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.482358][T11242] loop0: detected capacity change from 0 to 32768 [ 353.488808][ T5761] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.567578][T11242] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 353.587897][T11242] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 353.666460][T11242] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 353.674626][ T5761] usb 2-1: Using ep0 maxpacket: 32 [ 353.704950][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.739275][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 353.753101][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.766043][ T23] ryos 0003:1E7D:3138.0039: unbalanced delimiter at end of report description [ 353.785386][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 353.795803][ T23] ryos 0003:1E7D:3138.0039: parse failed [ 353.799027][ T5761] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 353.813241][ T23] ryos: probe of 0003:1E7D:3138.0039 failed with error -22 [ 353.849329][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.883811][ T5761] usb 2-1: config 0 descriptor?? [ 353.898179][ T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 353.928519][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 143ms [ 353.941564][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 353.950067][T11242] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 354.017380][ T8] usb 3-1: USB disconnect, device number 23 [ 354.149083][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 354.156631][ T27] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 354.187660][ T27] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 354.196174][ T27] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 354.213490][ T27] usb 4-1: config 250 has no interface number 0 [ 354.224552][ T27] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 354.238594][ T27] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 354.253247][ T27] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.263980][ T27] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.274929][ T27] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 354.313259][ T27] usb 4-1: config 250 interface 228 has no altsetting 0 [ 354.336671][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 354.349789][ T27] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 354.366455][ T5761] ft260 0003:0403:6030.003A: item fetching failed at offset 0/2 [ 354.380458][ T5761] ft260 0003:0403:6030.003A: failed to parse HID [ 354.387408][ T5761] ft260: probe of 0003:0403:6030.003A failed with error -22 [ 354.405670][ T27] usb 4-1: Product: syz [ 354.418857][ T27] usb 4-1: SerialNumber: syz [ 354.472855][ T27] hub 4-1:250.228: bad descriptor, ignoring hub [ 354.495772][ T27] hub: probe of 4-1:250.228 failed with error -5 [ 354.513951][T11242] gfs2: fsid=syz:syz.0: found 1 quota changes [ 354.644922][ T5761] usb 2-1: USB disconnect, device number 24 [ 354.704564][ T27] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 354.817193][ T5775] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 354.817193][ T5775] inode = 11 2339 [ 354.817193][ T5775] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 354.857869][ T5775] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 354.867246][ T5775] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5775 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 354.880492][ T5775] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 354.890180][ T5775] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 354.911933][ T5775] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 354.921057][ T5775] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 354.934160][ T5775] gfs2: fsid=syz:syz.0: File system withdrawn [ 354.941201][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 354.948967][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.959096][ T5775] Call Trace: [ 354.962443][ T5775] [ 354.965435][ T5775] dump_stack_lvl+0x18c/0x250 [ 354.970273][ T5775] ? kobject_uevent_env+0x363/0x8b0 [ 354.975541][ T5775] ? show_regs_print_info+0x20/0x20 [ 354.980920][ T5775] ? load_image+0x400/0x400 [ 354.985497][ T5775] ? kobject_uevent_env+0x363/0x8b0 [ 354.990858][ T5775] gfs2_withdraw+0xb24/0x13d0 [ 354.995646][ T5775] ? gfs2_lm+0x240/0x240 [ 354.999974][ T5775] ? gfs2_consist_inode_i+0xf5/0x110 [ 355.005335][ T5775] gfs2_inode_refresh+0xb89/0x1000 [ 355.010504][ T5775] ? gfs2_inode_metasync+0xf0/0xf0 [ 355.015670][ T5775] ? gfs2_glock_nq+0xd4f/0x1420 [ 355.020609][ T5775] gfs2_instantiate+0x162/0x220 [ 355.025523][ T5775] gfs2_glock_wait+0x1d4/0x2a0 [ 355.030351][ T5775] do_sync+0x4c6/0xe50 [ 355.034477][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 355.039472][ T5775] ? bh_get+0x760/0x760 [ 355.043681][ T5775] ? __lock_acquire+0x7d40/0x7d40 [ 355.048769][ T5775] ? do_raw_spin_lock+0x11f/0x2c0 [ 355.053851][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 355.058857][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 355.064109][ T5775] gfs2_quota_sync+0x411/0x5a0 [ 355.068945][ T5775] gfs2_sync_fs+0x4c/0xb0 [ 355.073338][ T5775] sync_filesystem+0xea/0x220 [ 355.078072][ T5775] generic_shutdown_super+0x6f/0x2b0 [ 355.083416][ T5775] kill_block_super+0x44/0x90 [ 355.088152][ T5775] deactivate_locked_super+0x97/0x100 [ 355.093759][ T5775] cleanup_mnt+0x43b/0x4d0 [ 355.098239][ T5775] task_work_run+0x1d4/0x260 [ 355.102892][ T5775] ? task_work_cancel+0x220/0x220 [ 355.107983][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 355.113505][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 355.118859][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 355.124472][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 355.129986][ T5775] do_syscall_64+0x61/0xa0 [ 355.134474][ T5775] ? clear_bhb_loop+0x40/0x90 [ 355.139206][ T5775] ? clear_bhb_loop+0x40/0x90 [ 355.143938][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.149897][ T5775] RIP: 0033:0x7f485c79c117 [ 355.154383][ T5775] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 355.174046][ T5775] RSP: 002b:00007ffd5efd30d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 355.182525][ T5775] RAX: 0000000000000000 RBX: 00007f485c80471f RCX: 00007f485c79c117 [ 355.190546][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5efd3190 [ 355.198570][ T5775] RBP: 00007ffd5efd3190 R08: 00007ffd5efd4190 R09: 00000000ffffffff [ 355.206601][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5efd4220 [ 355.214630][ T5775] R13: 00007f485c80471f R14: 000000000005695a R15: 00007ffd5efd4260 [ 355.222672][ T5775] [ 355.283062][ T27] usb 4-1: USB disconnect, device number 26 [ 355.313213][ T27] usblp0: removed [ 355.509218][T11278] loop0: detected capacity change from 0 to 256 [ 355.516594][T11278] exfat: Unknown parameter 'zero_size_dir' [ 355.582558][ T5762] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 355.643897][T11276] loop2: detected capacity change from 0 to 32768 [ 356.457400][T11278] loop0: detected capacity change from 0 to 32768 [ 356.504325][T11278] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.703265][T11282] loop1: detected capacity change from 0 to 32768 [ 356.785069][T11278] XFS (loop0): Ending clean mount [ 356.821980][T11282] syz.1.2081: attempt to access beyond end of device [ 356.821980][T11282] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 356.890332][T11282] lbmIODone: I/O error in JFS log [ 356.909638][T11282] *** Log Format Error ! *** [ 356.914818][T11282] lmLogInit: exit(-22) [ 356.939968][T11278] cifs: Unknown parameter 'inode32' [ 356.959483][T11282] lmLogOpen: exit(-22) [ 357.092059][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.136078][T11302] tipc: Enabling of bearer rejected, failed to enable media [ 357.389757][T11304] loop1: detected capacity change from 0 to 256 [ 357.457968][T11304] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 357.969429][T11294] loop3: detected capacity change from 0 to 32768 [ 357.996662][T11294] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 358.010826][T11294] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 358.050155][T11294] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 358.207818][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 358.223802][T11294] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 358.244624][T11322] loop1: detected capacity change from 0 to 512 [ 358.400016][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.411312][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 358.445195][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 358.502159][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.564725][ T9] usb 1-1: config 0 descriptor?? [ 358.572834][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 358.572852][ T28] audit: type=1326 audit(1769426453.901:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087e19aeb9 code=0x7fc00000 [ 358.877718][T11331] loop1: detected capacity change from 0 to 47 [ 359.079393][ T9] kovaplus 0003:1E7D:2D50.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 359.281132][ T9] kovaplus 0003:1E7D:2D50.003B: couldn't init struct kovaplus_device [ 359.297901][ T9] kovaplus 0003:1E7D:2D50.003B: couldn't install mouse [ 359.316003][ T9] kovaplus: probe of 0003:1E7D:2D50.003B failed with error -71 [ 359.368097][ T9] usb 1-1: USB disconnect, device number 25 [ 359.630106][T11346] tipc: Enabling of bearer rejected, failed to enable media [ 359.660123][T11348] loop2: detected capacity change from 0 to 512 [ 359.726061][T11348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.890738][ T28] audit: type=1800 audit(1769426455.221:118): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2108" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 359.958685][T11328] loop3: detected capacity change from 0 to 40427 [ 360.002458][T11328] F2FS-fs (loop3): Invalid segment count (1) [ 360.023125][T11328] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 360.057730][T11328] F2FS-fs (loop3): heap/no_heap options were deprecated [ 360.102883][T11328] F2FS-fs (loop3): invalid crc value [ 360.131043][T11328] F2FS-fs (loop3): Found nat_bits in checkpoint [ 360.138319][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.347160][T11328] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 360.383838][ T8] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 360.392367][T11328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 360.419810][ T8] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 360.460357][T11360] mkiss: ax0: crc mode is auto. [ 360.651141][T11364] loop0: detected capacity change from 0 to 512 [ 360.672920][T11362] fido_id[11362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.708296][T11364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.763819][T11370] loop1: detected capacity change from 0 to 512 [ 360.774908][T11370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.796768][T11364] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.826898][T11370] EXT4-fs (loop1): 1 truncate cleaned up [ 360.859313][T11370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.948433][T11373] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2115: bg 0: block 145: padding at end of block bitmap is not set [ 360.980111][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.206294][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.333915][T11377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.529261][ T5779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 361.584819][ T28] audit: type=1326 audit(1769426456.911:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 361.585069][ T5779] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 361.668362][ T28] audit: type=1326 audit(1769426456.911:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 361.704589][ T28] audit: type=1326 audit(1769426456.951:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 361.791827][ T28] audit: type=1326 audit(1769426456.951:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 361.867989][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.898350][ T28] audit: type=1326 audit(1769426456.951:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 362.005043][ T28] audit: type=1326 audit(1769426456.951:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 362.082569][ T28] audit: type=1326 audit(1769426456.951:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x7ffc0000 [ 362.216743][T11400] raw_sendmsg: syz.3.2128 forgot to set AF_INET. Fix it! [ 362.249668][T11402] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 362.310102][T11402] CIFS: Unable to determine destination address [ 362.801394][T11414] use of bytesused == 0 is deprecated and will be removed in the future, [ 362.840123][T11414] use the actual size instead. [ 363.032081][T11392] set_capacity_and_notify: 2 callbacks suppressed [ 363.032106][T11392] loop0: detected capacity change from 0 to 40427 [ 363.075201][T11392] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 363.115623][T11392] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 363.146185][T11392] F2FS-fs (loop0): Image doesn't support compression [ 363.170756][T11392] F2FS-fs (loop0): Image doesn't support compression [ 363.218271][T11392] F2FS-fs (loop0): invalid crc value [ 363.295711][T11392] F2FS-fs (loop0): Found nat_bits in checkpoint [ 363.427748][T11435] loop3: detected capacity change from 0 to 128 [ 363.502976][T11435] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.522405][T11392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 363.543876][T11435] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.772450][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.903687][ T5775] syz-executor: attempt to access beyond end of device [ 363.903687][ T5775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.941297][ T5775] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 364.482562][T11440] loop2: detected capacity change from 0 to 32768 [ 364.565111][T11440] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.698182][T11447] loop1: detected capacity change from 0 to 32768 [ 364.713420][T11440] XFS (loop2): Ending clean mount [ 364.745111][T11447] JBD2: Ignoring recovery information on journal [ 364.793270][T11440] XFS (loop2): Quotacheck needed: Please wait. [ 364.921699][T11451] loop3: detected capacity change from 0 to 32768 [ 364.986798][T11451] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 365.012782][T11451] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 365.023281][T11440] XFS (loop2): Quotacheck: Done. [ 365.059461][T11447] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 365.092199][T11451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 365.399899][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 365.550315][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 365.570054][ T787] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 365.619507][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 365.767812][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 365.775523][ T787] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 365.791925][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.819188][ T787] usb 1-1: config 0 descriptor?? [ 365.840803][ T787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 366.460202][T11499] tmpfs: Cannot retroactively limit inodes [ 366.464829][ T787] gspca_vc032x: reg_w err -71 [ 366.484925][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.494088][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.500398][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.505895][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.515424][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.521459][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.526901][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.541285][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.548981][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.554454][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.561590][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.569828][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.575303][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.590508][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.604195][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.611351][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.616700][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.622262][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.627742][ T787] gspca_vc032x: Unknown sensor... [ 366.633114][ T787] vc032x: probe of 1-1:0.0 failed with error -22 [ 366.655622][ T787] usb 1-1: USB disconnect, device number 26 [ 366.764325][T11501] loop3: detected capacity change from 0 to 4096 [ 366.922869][T11501] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 366.966506][T11501] ntfs3: loop3: Failed to load $Extend (-22). [ 366.983959][T11501] ntfs3: loop3: Failed to initialize $Extend. [ 367.181962][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2157'. [ 367.661473][T11516] loop0: detected capacity change from 0 to 128 [ 367.696647][T11516] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 367.702471][T11517] loop3: detected capacity change from 0 to 512 [ 367.724667][T11516] hpfs: filesystem error: improperly stopped [ 367.731890][T11516] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 367.783792][T11517] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 367.787230][T11516] hpfs: You really don't want any checks? You are crazy... [ 367.838505][T11516] hpfs: hpfs_map_sector(): read error [ 367.847555][T11516] hpfs: code page support is disabled [ 367.856925][T11517] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.863748][T11516] hpfs: hpfs_map_4sectors(): unaligned read [ 367.877326][T11503] loop1: detected capacity change from 0 to 40427 [ 367.894828][T11516] hpfs: hpfs_map_4sectors(): unaligned read [ 367.918689][T11503] F2FS-fs (loop1): Invalid segment count (1) [ 367.925281][T11516] hpfs: filesystem error: unable to find root dir [ 367.956927][T11503] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 367.992057][T11503] F2FS-fs (loop1): heap/no_heap options were deprecated [ 368.017767][T11521] vivid-000: disconnect [ 368.045383][T11520] vivid-000: reconnect [ 368.058068][T11503] F2FS-fs (loop1): invalid crc value [ 368.073449][T11503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 368.232065][T11523] loop3: detected capacity change from 0 to 1037 [ 368.323695][T11503] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 368.338873][T11503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 368.371109][T11523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.393707][T11523] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.548297][T11523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 368.778100][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.383385][T11551] smc: net device wlan0 applied user defined pnetid SYZ0 [ 369.579328][T11553] loop1: detected capacity change from 0 to 256 [ 369.662098][T11535] loop2: detected capacity change from 0 to 32768 [ 369.755403][T11535] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 369.980639][T11535] XFS (loop2): Ending clean mount [ 370.028965][T11535] XFS (loop2): Quotacheck needed: Please wait. [ 370.123832][T11543] loop0: detected capacity change from 0 to 32768 [ 370.141266][T11535] XFS (loop2): Quotacheck: Done. [ 370.163956][T11573] loop3: detected capacity change from 0 to 2048 [ 370.237941][ T23] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 370.415212][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 370.483326][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.529053][ T23] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 370.550781][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.597529][ T23] usb 2-1: Product: syz [ 370.601777][ T23] usb 2-1: Manufacturer: syz [ 370.627051][ T23] usb 2-1: SerialNumber: syz [ 370.664710][ T23] usb 2-1: config 0 descriptor?? [ 370.690582][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 370.751447][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 370.799002][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 370.811954][T11578] loop3: detected capacity change from 0 to 4096 [ 370.848342][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 370.877173][ T23] usb 2-1: media controller created [ 370.899448][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.941706][T11570] dvb-usb: bulk message failed: -22 (2/0) [ 370.998079][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 371.003978][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 371.077192][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 371.130894][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 371.158129][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 371.207754][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 371.257816][ T23] usb 2-1: USB disconnect, device number 25 [ 371.412016][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 371.962974][T11593] loop1: detected capacity change from 0 to 64 [ 371.963890][T11581] loop2: detected capacity change from 0 to 32768 [ 372.066201][T11581] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 372.134332][T11585] loop0: detected capacity change from 0 to 32768 [ 372.148295][ T1083] hfs: request for non-existent node 1280 in B*Tree [ 372.155523][ T1083] hfs: request for non-existent node 1280 in B*Tree [ 372.202648][T11585] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 372.222161][T11610] loop3: detected capacity change from 0 to 512 [ 372.273954][T11581] XFS (loop2): Ending clean mount [ 372.284325][T11610] EXT4-fs (loop3): 1 truncate cleaned up [ 372.344700][T11610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.420107][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 372.441378][T11585] XFS (loop0): Ending clean mount [ 372.473999][T11616] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 372.557770][T11616] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 372.630412][T11616] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 372.649471][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 372.688210][T11616] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 372.703486][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.744677][T11616] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 372.882392][T11616] ntfs: volume version 3.1. [ 372.937738][T11616] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 373.013069][T11616] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 373.119584][T11616] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 373.144153][T11616] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 373.210351][T11616] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 373.372776][T11616] ptrace attach of "./syz-executor exec"[5771] was attempted by "Þ¤=éJ:Gþõ!EI\x09R˜”&EHQR˜”!¥H\x09Rè¶³™BÉÎlþÜϔՄpAýÃ\x0dõ7æ®ù6Eþó„j„)E\x0bwËÿºõrùh“„éŽV\x09ÓÄåi}ý?q½»MÍí¥¾þÿûó?wÒvh\x22“”×ÿ\x09_‰‹î;áÓEβøèzCH{2\x0c$ý£ýÒ~àÀþER>Ÿ»Ãó‹þöü¢¿w^²š.¨¸¡þá&Ý!ÿéHþ›)ÞÿFuB\x229v»»åžö\x09¹|¹OÂtÈà„iâò´æâzw›F_ÞO’:ÿ‹Þa;ì]·“ØïÄiÊíäÎ~·í‹<þ;Ï3jGTNv?Oâ\x5cåÛðmýN˜Ê$+S%ÒÞŸ£”£Âõ7ù_ÿ³„wxÇènùmdB^V\x1b›|š¸üNùÿÛëå\x0ci–\x22—×»Û´[ŠöÛ—’r¹ éHú’^¤S¤g>Ç%m‡&R½ð¿›!¿›ëxÿ/ÜPÿpCýÃ\x0dõ\x07 €аq®IHŒ™ðØ%„Є˜bäQ:r‹ÊB(:ò€‹!„ÄÄÏ+é⛩–7áùTÂr;þÅMxîíˈKÞ œ¤ç)IÏ£N&[FÒ‘ÕÄN¶ý¬¿miªå ð‡Ý~­žüº þ?ªÓ zËÜDJµ<7!d\x0bOÈY#áq:r”ºÓúlôÿn•šDæ¸èÿqÍ\x0a÷™tó(u·)‰Þo@ä„\x09}(2±¤\x0aH’þ¤ú’ÄMR$á~‘t#iÜN\x0a·o§*iO:‘j¤DD–\x0aѯó¤iô§ö§rŠí‘ít'IoÒžô#Bt;íH½´µm0&yû\x5c¤ý¾¤/Hº“^$á¾\x09åö?ùÇÉLì\x0d2„\x0 [ 373.697551][ T8] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 373.960735][T11637] set_capacity_and_notify: 1 callbacks suppressed [ 373.960752][T11637] loop1: detected capacity change from 0 to 128 [ 374.139797][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 374.155759][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 374.173902][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.209850][ T8] usb 4-1: Product: syz [ 374.214104][ T8] usb 4-1: Manufacturer: syz [ 374.219399][ T8] usb 4-1: SerialNumber: syz [ 374.427323][T11633] loop0: detected capacity change from 0 to 32768 [ 374.465561][T11633] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.546919][T11633] XFS (loop0): Ending clean mount [ 374.571000][T11633] XFS (loop0): Quotacheck needed: Please wait. [ 374.628082][ T5842] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 374.652279][T11633] XFS (loop0): Quotacheck: Done. [ 374.843412][ T5842] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 374.869596][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.873996][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.882634][ T5842] usb 3-1: Product: syz [ 374.905714][ T5842] usb 3-1: Manufacturer: syz [ 374.913989][ T5842] usb 3-1: SerialNumber: syz [ 374.934127][ T5842] usb 3-1: config 0 descriptor?? [ 374.945656][ T5842] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 374.972776][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.989253][ T5842] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 375.003691][ T5842] usb 3-1: media controller created [ 375.094783][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.170401][T11646] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 375.231877][ T5842] DVB: Unable to find symbol mt352_attach() [ 375.302438][ T5842] DVB: Unable to find symbol nxt6000_attach() [ 375.310313][ T5842] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 375.327301][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 375.347416][ T5842] dvb-usb: schedule remote query interval to 1000 msecs. [ 375.357125][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 375.377866][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 375.386916][ T5842] dvb-usb: bulk message failed: -22 (7/0) [ 375.402953][ T5842] usb 3-1: USB disconnect, device number 24 [ 375.463138][T11669] loop1: detected capacity change from 0 to 64 [ 375.586714][ T5842] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 375.657298][T11669] overlayfs: upper fs needs to support d_type. [ 375.697292][T11669] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 375.706290][T11669] overlayfs: failed to set xattr on upper [ 375.720910][T11669] overlayfs: ...falling back to redirect_dir=nofollow. [ 375.728007][T11669] overlayfs: ...falling back to index=off. [ 375.735023][T11669] overlayfs: ...falling back to uuid=null. [ 375.805614][ T5771] Bad inode number on dev loop1: 4160749571 is out of range [ 375.814671][ T5771] Bad inode number on dev loop1: 4160749571 is out of range [ 376.475144][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.570920][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 376.632583][ T8] usb 4-1: USB disconnect, device number 27 [ 376.653272][ T8] usblp0: removed [ 376.780702][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.985735][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.558246][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.673831][T11703] loop0: detected capacity change from 0 to 512 [ 377.717990][T11703] EXT4-fs (loop0): Test dummy encryption mode enabled [ 377.747280][T11703] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.812429][T11703] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.2234: Directory hole found for htree leaf block 0 [ 377.920491][ T27] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 377.927103][ T5775] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 377.943856][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 378.033275][ T8352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.057894][ T8352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.078958][ T8352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.104027][ T8352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.127939][ T8352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.136237][ T8352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.147714][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 378.190249][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 378.230007][ T27] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 378.286080][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.297233][ T27] usb 4-1: Product: syz [ 378.302809][ T27] usb 4-1: Manufacturer: syz [ 378.347934][ T27] usb 4-1: SerialNumber: syz [ 378.369130][ T27] usb 4-1: config 0 descriptor?? [ 378.391084][T11701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.411528][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 378.687954][ T27] usb 4-1: USB disconnect, device number 28 [ 378.965535][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.972033][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.481314][T11747] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 379.593478][T11745] loop2: detected capacity change from 0 to 8192 [ 379.635150][T11745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 379.654598][T11745] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 379.673043][T11745] REISERFS (device loop2): using ordered data mode [ 379.680058][T11745] reiserfs: using flush barriers [ 379.687141][T11745] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 379.724835][T11745] REISERFS (device loop2): checking transaction log (loop2) [ 379.792356][T11710] chnl_net:caif_netlink_parms(): no params data found [ 379.933242][T11745] REISERFS (device loop2): Using tea hash to sort names [ 379.948587][T11745] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 380.240535][ T5773] Bluetooth: hci0: command tx timeout [ 380.277194][T11762] loop0: detected capacity change from 0 to 512 [ 380.320949][T11762] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 380.386743][T11762] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 380.440249][T11762] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 380.457891][T11762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 380.466452][T11762] System zones: 0-2, 18-18, 34-34 [ 380.497974][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 380.528224][T11762] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.2251: iget: bad i_size value: 360287970189639680 [ 380.608877][T11762] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2251: couldn't read orphan inode 15 (err -117) [ 380.634507][T11762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.646059][T11750] loop3: detected capacity change from 0 to 32768 [ 380.678160][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.686711][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.694758][T11710] bridge_slave_0: entered allmulticast mode [ 380.703892][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.721417][ T49] IPVS: stopping master sync thread 9467 ... [ 380.745653][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 380.762368][T11710] bridge_slave_0: entered promiscuous mode [ 380.777240][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 380.777255][ T28] audit: type=1800 audit(1769426476.101:126): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2247" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 380.824247][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.849681][T11750] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 380.849681][T11750] [ 380.857204][ T9] usb 3-1: config 0 descriptor?? [ 380.917952][T11750] ERROR: (device loop3): remounting filesystem as read-only [ 380.956270][T11750] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 380.956270][T11750] [ 380.978579][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.057585][T11750] xtLookup: xtSearch returned -5 [ 381.072845][T11750] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 381.072845][T11750] [ 381.290134][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.312611][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.327739][T11710] bridge_slave_1: entered allmulticast mode [ 381.343177][ T9] wacom 0003:056A:00E3.003D: unbalanced collection at end of report description [ 381.368784][T11710] bridge_slave_1: entered promiscuous mode [ 381.385350][ T9] wacom 0003:056A:00E3.003D: parse failed [ 381.404795][ T9] wacom: probe of 0003:056A:00E3.003D failed with error -22 [ 381.511695][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.573260][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.622544][ T27] usb 3-1: USB disconnect, device number 25 [ 381.747914][T11784] loop3: detected capacity change from 0 to 256 [ 381.779677][T11784] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x68d18d75, utbl_chksum : 0xe619d30d) [ 381.818810][T11710] team0: Port device team_slave_0 added [ 381.879736][T11710] team0: Port device team_slave_1 added [ 381.894554][T11784] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000008) bogus content (0x00080000) [ 381.921408][T11784] exFAT-fs (loop3): Filesystem has been set read-only [ 381.965149][T11784] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880612e4260 iblock : 8, err : -5) [ 381.983291][T11784] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000008) bogus content (0x00080000) [ 382.001092][ T49] hsr_slave_0: left promiscuous mode [ 382.008416][ T49] hsr_slave_1: left promiscuous mode [ 382.014750][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.037610][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.057023][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.068342][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.106016][ T49] bond0: left allmulticast mode [ 382.134492][ T49] bond_slave_0: left allmulticast mode [ 382.147689][ T49] bond_slave_1: left allmulticast mode [ 382.162536][ T49] bridge0: port 3(bond0) entered disabled state [ 382.190688][ T49] bridge_slave_1: left allmulticast mode [ 382.206706][ T49] bridge_slave_1: left promiscuous mode [ 382.213164][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.258625][ T49] bridge_slave_0: left allmulticast mode [ 382.287500][ T49] bridge_slave_0: left promiscuous mode [ 382.295165][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.327874][ T5773] Bluetooth: hci0: command tx timeout [ 382.434768][T11794] loop3: detected capacity change from 0 to 1024 [ 382.470422][ T49] veth1_macvtap: left promiscuous mode [ 382.490589][ T49] veth0_macvtap: left promiscuous mode [ 382.508770][T11794] hfsplus: bad catalog entry type [ 382.514131][ T49] veth1_vlan: left promiscuous mode [ 382.520084][ T49] veth0_vlan: left promiscuous mode [ 382.637049][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 382.797145][T11780] loop0: detected capacity change from 0 to 32768 [ 382.873720][T11780] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 383.146109][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 383.604820][T11807] loop0: detected capacity change from 0 to 2048 [ 383.692169][T11807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.803286][T11800] loop2: detected capacity change from 0 to 40427 [ 383.834950][T11800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 383.842998][T11800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 383.958352][T11800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 383.984964][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.176872][ T5761] IPVS: starting estimator thread 0... [ 384.214467][T11800] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 384.238056][T11800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 384.269088][T11820] IPVS: using max 20 ests per chain, 48000 per kthread [ 384.353384][T11800] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 384.398578][ T5773] Bluetooth: hci0: command tx timeout [ 385.273114][ T49] team0 (unregistering): Port device team_slave_1 removed [ 385.567077][ T49] team0 (unregistering): Port device team_slave_0 removed [ 385.814023][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.842659][ T49] bond_slave_1 (unregistering): left promiscuous mode [ 385.990353][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.018794][ T49] bond_slave_0 (unregistering): left promiscuous mode [ 386.507696][ T5773] Bluetooth: hci0: command tx timeout [ 387.174931][ T49] bond0 (unregistering): Released all slaves [ 389.088192][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.150452][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.333517][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.409042][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.416053][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.547592][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.604819][T11710] hsr_slave_0: entered promiscuous mode [ 390.760371][T11710] hsr_slave_1: entered promiscuous mode [ 390.817629][T11710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.825278][T11710] Cannot create hsr debugfs directory [ 391.020367][T11864] loop3: detected capacity change from 0 to 1024 [ 391.095367][T11869] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 392.515831][T11710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.569853][T11710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.615650][T11710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.654431][T11710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.661512][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 392.908207][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 392.965946][ T23] usb 3-1: config 0 has no interfaces? [ 392.985110][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 393.025570][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.078335][ T23] usb 3-1: Product: syz [ 393.108084][ T23] usb 3-1: Manufacturer: syz [ 393.112763][ T23] usb 3-1: SerialNumber: syz [ 393.183613][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 393.323542][T11710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.510877][T11710] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.523615][ T23] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 393.644081][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.651364][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.764724][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.771983][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.807724][ T23] usb 3-1: USB disconnect, device number 26 [ 394.061866][T11910] loop3: detected capacity change from 0 to 512 [ 394.123359][T11910] EXT4-fs: Ignoring removed bh option [ 394.215566][T11910] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 394.501118][T11910] EXT4-fs (loop3): 1 truncate cleaned up [ 394.560387][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.022377][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 395.313267][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.475780][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 395.686303][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.721385][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.817830][ T8] usb 1-1: config 140 has an invalid interface number: 182 but max is 1 [ 395.826258][ T8] usb 1-1: config 140 has no interface number 1 [ 395.853011][ T8] usb 1-1: config 140 interface 182 has no altsetting 0 [ 396.016177][T11934] loop2: detected capacity change from 0 to 512 [ 396.188645][T11934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.283460][T11934] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.329109][ T8] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 396.358540][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.403920][ T8] usb 1-1: Product: syz [ 396.458795][ T8] usb 1-1: Manufacturer: syz [ 396.463478][ T8] usb 1-1: SerialNumber: syz [ 396.481376][T11934] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.2295: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 396.639354][T11941] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 397.017215][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.090392][ T8] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 398.002421][T11956] loop2: detected capacity change from 0 to 128 [ 398.093471][T11956] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 398.224601][T11956] syz.2.2298: attempt to access beyond end of device [ 398.224601][T11956] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 398.337690][T11710] veth0_vlan: entered promiscuous mode [ 398.389333][T11956] sysv_free_block: trying to free block not in datazone [ 398.432260][T11940] loop3: detected capacity change from 0 to 32768 [ 398.459832][T11710] veth1_vlan: entered promiscuous mode [ 398.531322][T11940] [ 398.531322][T11940] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 398.531322][T11940] [ 398.598253][ T8] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 398.712090][T11710] veth0_macvtap: entered promiscuous mode [ 398.747838][T11940] find_entry called with index = 0 [ 398.753703][T11940] find_entry called with index = 0 [ 398.775590][T11710] veth1_macvtap: entered promiscuous mode [ 398.816904][T11940] read_mapping_page failed! [ 398.864088][T11940] ERROR: (device loop3): txCommit: [ 398.864088][T11940] [ 398.916073][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.956614][ T5779] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 398.983264][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.022766][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.118706][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.185653][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.226026][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.309846][ T5774] [ 399.309846][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.309846][ T5774] [ 399.344326][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.447951][ T5774] [ 399.447951][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.447951][ T5774] [ 399.681803][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.719519][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.736804][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.752838][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.784914][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.815062][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.846052][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.898186][ T8] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 399.906007][ T8] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 400.135561][ T5761] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 400.160531][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 400.196322][T11710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.231294][T11710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.266355][T11710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.291515][T11710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.475482][ T8] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 400.743266][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.780451][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.900592][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.924272][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.110390][ T5761] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 401.188670][ T8] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 401.196571][ T8] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 401.315980][ T27] kernel write not supported for file /input/mice (pid: 27 comm: kworker/1:1) [ 401.765520][ T8] usb 1-1: USB disconnect, device number 27 [ 401.793667][ T8] usb 1-1: [ueagle-atm] ADSL device removed [ 401.824350][T11990] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2307'. [ 402.216532][T11996] loop3: detected capacity change from 0 to 128 [ 402.242596][T11996] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 402.251263][T11996] sysv_free_block: trying to free block not in datazone [ 402.260237][T11996] sysv_free_block: trying to free block not in datazone [ 402.269278][T11996] sysv_free_block: getblk() failed [ 402.274539][T11996] sysv_free_block: getblk() failed [ 402.279844][T11996] sysv_free_block: getblk() failed [ 402.285018][T11996] sysv_free_block: getblk() failed [ 402.290592][T11996] sysv_free_block: getblk() failed [ 402.295773][T11996] sysv_free_block: getblk() failed [ 402.302618][T11996] sysv_free_block: getblk() failed [ 402.307892][T11996] sysv_free_block: getblk() failed [ 402.313059][T11996] sysv_free_block: getblk() failed [ 402.318495][T11996] sysv_free_block: getblk() failed [ 402.323669][T11996] sysv_free_block: getblk() failed [ 402.328968][T11996] sysv_free_block: getblk() failed [ 402.336254][T11996] sysv_free_block: getblk() failed [ 402.341478][T11996] sysv_free_block: getblk() failed [ 402.346662][T11996] sysv_free_block: getblk() failed [ 402.351959][T11996] sysv_free_block: getblk() failed [ 402.357129][T11996] sysv_free_block: getblk() failed [ 402.362370][T11996] sysv_free_block: getblk() failed [ 402.367569][T11996] sysv_free_block: getblk() failed [ 402.372743][T11996] sysv_free_block: getblk() failed [ 402.378350][T11996] sysv_free_block: getblk() failed [ 402.383784][T11996] sysv_free_block: getblk() failed [ 402.389405][T11996] sysv_free_block: getblk() failed [ 402.394574][T11996] sysv_free_block: getblk() failed [ 402.399835][T11996] sysv_free_block: getblk() failed [ 402.406447][T11996] sysv_free_block: getblk() failed [ 402.411669][T11996] sysv_free_block: getblk() failed [ 402.416840][T11996] sysv_free_block: getblk() failed [ 402.422335][T11996] sysv_free_block: getblk() failed [ 402.427710][T11996] sysv_free_block: getblk() failed [ 402.432881][T11996] sysv_free_block: getblk() failed [ 402.438096][T11996] sysv_free_block: getblk() failed [ 402.443270][T11996] sysv_free_block: getblk() failed [ 402.448463][T11996] sysv_free_block: getblk() failed [ 402.453637][T11996] sysv_free_block: getblk() failed [ 402.458962][T11996] sysv_free_block: getblk() failed [ 402.464392][T11996] sysv_free_block: getblk() failed [ 402.469590][T11996] sysv_free_block: getblk() failed [ 402.474790][T11996] sysv_free_block: getblk() failed [ 402.479998][T11996] sysv_free_block: getblk() failed [ 402.485156][T11996] sysv_free_block: getblk() failed [ 402.490355][T11996] sysv_free_block: trying to free block not in datazone [ 402.582581][T11996] sysv_free_block: getblk() failed [ 402.587910][T11996] sysv_free_block: getblk() failed [ 402.593086][T11996] sysv_free_block: getblk() failed [ 402.598642][T11996] sysv_free_block: getblk() failed [ 402.603813][T11996] sysv_free_block: getblk() failed [ 402.610589][T11996] sysv_free_block: getblk() failed [ 402.615768][T11996] sysv_free_block: getblk() failed [ 402.621071][T11996] sysv_free_block: getblk() failed [ 402.626243][T11996] sysv_free_block: getblk() failed [ 402.631489][T11996] sysv_free_block: getblk() failed [ 402.636670][T11996] sysv_free_block: getblk() failed [ 402.642263][T11996] sysv_free_block: getblk() failed [ 402.647481][T11996] sysv_free_block: getblk() failed [ 402.652672][T11996] sysv_free_block: getblk() failed [ 402.657903][T11996] sysv_free_block: getblk() failed [ 402.663071][T11996] sysv_free_block: getblk() failed [ 402.668294][T11996] sysv_free_block: getblk() failed [ 402.673461][T11996] sysv_free_block: getblk() failed [ 402.678803][T11996] sysv_free_block: getblk() failed [ 402.684254][T11996] sysv_free_block: getblk() failed [ 402.689518][T11996] sysv_free_block: getblk() failed [ 402.694727][T11996] sysv_free_block: getblk() failed [ 402.699927][T11996] sysv_free_block: getblk() failed [ 402.705091][T11996] sysv_free_block: getblk() failed [ 402.711874][T11996] sysv_free_block: getblk() failed [ 402.717046][T11996] sysv_free_block: getblk() failed [ 402.722271][T11996] sysv_free_block: getblk() failed [ 402.727775][T11996] sysv_free_block: getblk() failed [ 402.732946][T11996] sysv_free_block: getblk() failed [ 402.738155][T11996] sysv_free_block: getblk() failed [ 402.743312][T11996] sysv_free_block: getblk() failed [ 402.748524][T11996] sysv_free_block: getblk() failed [ 402.753712][T11996] sysv_free_block: getblk() failed [ 402.758935][T11996] sysv_free_block: getblk() failed [ 402.764095][T11996] sysv_free_block: getblk() failed [ 402.769569][T11996] sysv_free_block: getblk() failed [ 402.774743][T11996] sysv_free_block: getblk() failed [ 402.779977][T11996] sysv_free_block: getblk() failed [ 402.785155][T11996] sysv_free_block: getblk() failed [ 402.790382][T11996] sysv_free_block: getblk() failed [ 402.795541][T11996] sysv_free_block: getblk() failed [ 402.800977][T11996] sysv_free_block: getblk() failed [ 402.806137][T11996] sysv_free_block: getblk() failed [ 402.811627][T11996] sysv_free_block: getblk() failed [ 402.818176][T11996] sysv_free_block: getblk() failed [ 402.823344][T11996] sysv_free_block: getblk() failed [ 402.828749][T11996] sysv_free_block: getblk() failed [ 402.833915][T11996] sysv_free_block: getblk() failed [ 402.839116][T11996] sysv_free_block: getblk() failed [ 402.844273][T11996] sysv_free_block: getblk() failed [ 402.849465][T11996] sysv_free_block: getblk() failed [ 402.854906][T11996] sysv_free_block: getblk() failed [ 402.860130][T11996] sysv_free_block: getblk() failed [ 402.865297][T11996] sysv_free_block: getblk() failed [ 402.870496][T11996] sysv_free_block: getblk() failed [ 402.875660][T11996] sysv_free_block: getblk() failed [ 402.881231][T11996] sysv_free_block: getblk() failed [ 402.886396][T11996] sysv_free_block: getblk() failed [ 402.891695][T11996] sysv_free_block: getblk() failed [ 402.898244][T11996] sysv_free_block: getblk() failed [ 402.903436][T11996] sysv_free_block: getblk() failed [ 402.909030][T11996] sysv_free_block: getblk() failed [ 402.914214][T11996] sysv_free_block: getblk() failed [ 402.920882][T11996] sysv_free_block: getblk() failed [ 402.926048][T11996] sysv_free_block: getblk() failed [ 402.931248][T11996] sysv_free_block: getblk() failed [ 402.936409][T11996] sysv_free_block: getblk() failed [ 402.941982][T11996] sysv_free_block: getblk() failed [ 402.947152][T11996] sysv_free_block: getblk() failed [ 402.952365][T11996] sysv_free_block: getblk() failed [ 402.957595][T11996] sysv_free_block: getblk() failed [ 402.962760][T11996] sysv_free_block: getblk() failed [ 402.967988][T11996] sysv_free_block: getblk() failed [ 402.973453][T11996] sysv_free_block: getblk() failed [ 402.978917][T11996] sysv_free_block: getblk() failed [ 402.984503][T11996] sysv_free_block: getblk() failed [ 402.989830][T11996] sysv_free_block: getblk() failed [ 402.994993][T11996] sysv_free_block: getblk() failed [ 403.000211][T11996] sysv_free_block: getblk() failed [ 403.005378][T11996] sysv_free_block: getblk() failed [ 403.010619][T11996] sysv_free_block: getblk() failed [ 403.015788][T11996] sysv_free_block: getblk() failed [ 403.022508][T11996] sysv_free_block: getblk() failed [ 403.027972][T11996] sysv_free_block: getblk() failed [ 403.033142][T11996] sysv_free_block: getblk() failed [ 403.038597][T11996] sysv_free_block: getblk() failed [ 403.043757][T11996] sysv_free_block: getblk() failed [ 403.048949][T11996] sysv_free_block: getblk() failed [ 403.054114][T11996] sysv_free_block: getblk() failed [ 403.059333][T11996] sysv_free_block: getblk() failed [ 403.064532][T11996] sysv_free_block: getblk() failed [ 403.070109][T11996] sysv_free_block: getblk() failed [ 403.075281][T11996] sysv_free_block: getblk() failed [ 403.080476][T11996] sysv_free_block: getblk() failed [ 403.086039][T11996] sysv_free_block: getblk() failed [ 403.091266][T11996] sysv_free_block: getblk() failed [ 403.096430][T11996] sysv_free_block: getblk() failed [ 403.101655][T11996] sysv_free_block: getblk() failed [ 403.106817][T11996] sysv_free_block: getblk() failed [ 403.112305][T11996] sysv_free_block: getblk() failed [ 403.117753][T11996] sysv_free_block: getblk() failed [ 403.124453][T11996] sysv_free_block: getblk() failed [ 403.129694][T11996] sysv_free_block: getblk() failed [ 403.134862][T11996] sysv_free_block: getblk() failed [ 403.140058][T11996] sysv_free_block: getblk() failed [ 403.145222][T11996] sysv_free_block: getblk() failed [ 403.150432][T11996] sysv_free_block: getblk() failed [ 403.155884][T11996] sysv_free_block: getblk() failed [ 403.161110][T11996] sysv_free_block: getblk() failed [ 403.166276][T11996] sysv_free_block: getblk() failed [ 403.171555][T11996] sysv_free_block: getblk() failed [ 403.176726][T11996] sysv_free_block: getblk() failed [ 403.182065][T11996] sysv_free_block: getblk() failed [ 403.187230][T11996] sysv_free_block: getblk() failed [ 403.192446][T11996] sysv_free_block: getblk() failed [ 403.198304][T11996] sysv_free_block: getblk() failed [ 403.203478][T11996] sysv_free_block: getblk() failed [ 403.208670][T11996] sysv_free_block: getblk() failed [ 403.213829][T11996] sysv_free_block: getblk() failed [ 403.219024][T11996] sysv_free_block: getblk() failed [ 403.225675][T11996] sysv_free_block: getblk() failed [ 403.230899][T11996] sysv_free_block: getblk() failed [ 403.236061][T11996] sysv_free_block: getblk() failed [ 403.241534][T11996] sysv_free_block: getblk() failed [ 403.246716][T11996] sysv_free_block: getblk() failed [ 403.251958][T11996] sysv_free_block: getblk() failed [ 403.257119][T11996] sysv_free_block: getblk() failed [ 403.262350][T11996] sysv_free_block: getblk() failed [ 403.267535][T11996] sysv_free_block: trying to free block not in datazone [ 403.274506][T11996] sysv_free_block: trying to free block not in datazone [ 403.281552][T11996] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 403.312803][ T28] audit: type=1326 audit(1769426498.641:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 403.485094][ T28] audit: type=1326 audit(1769426498.641:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 403.659818][ T28] audit: type=1326 audit(1769426498.691:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 403.784148][ T28] audit: type=1326 audit(1769426498.691:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 403.917163][ T28] audit: type=1326 audit(1769426498.691:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 403.981077][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 404.059388][T12005] erspan0: entered promiscuous mode [ 404.075921][ T28] audit: type=1326 audit(1769426498.711:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 404.120795][T12005] erspan0: left promiscuous mode [ 404.204646][ T28] audit: type=1326 audit(1769426498.711:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.4.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a959aeb9 code=0x7ffc0000 [ 405.186644][T12021] netlink: 'syz.4.2316': attribute type 4 has an invalid length. [ 405.565326][ T28] audit: type=1326 audit(1769426500.891:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.0.2317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f485c79aeb9 code=0x0 [ 406.113510][T12038] 9p: Unknown Cache mode or invalid value m [ 408.133500][ T49] IPVS: stop unused estimator thread 0... [ 409.536593][T12094] loop3: detected capacity change from 0 to 64 [ 411.187755][ T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 411.437855][ T27] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 411.446076][ T27] usb 4-1: config 0 has no interface number 0 [ 411.513382][ T27] usb 4-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8 [ 411.591694][ T27] usb 4-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024 [ 411.653154][ T27] usb 4-1: config 0 interface 40 has no altsetting 0 [ 411.693677][ T27] usb 4-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16 [ 411.720566][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.747567][ T27] usb 4-1: Product: syz [ 411.765092][ T27] usb 4-1: Manufacturer: syz [ 411.791737][ T27] usb 4-1: SerialNumber: syz [ 411.834485][ T27] usb 4-1: config 0 descriptor?? [ 411.856010][T12117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.883938][T12117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.232522][T12117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.328407][T12117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.454761][ T27] cdc_subset 4-1:0.40 usb0: register 'cdc_subset' at usb-dummy_hcd.3-1, ALi M5632, 6e:57:be:dd:80:cf [ 413.046085][ T23] usb 4-1: USB disconnect, device number 29 [ 413.055349][ T23] cdc_subset 4-1:0.40 usb0: unregister 'cdc_subset' usb-dummy_hcd.3-1, ALi M5632 [ 413.066347][T12112] loop2: detected capacity change from 0 to 32768 [ 413.322754][T12112] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 413.362538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 413.567820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 413.576441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 413.585117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 413.593823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 413.602456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 413.667962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 413.752983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 413.808383][T12112] XFS (loop2): Ending clean mount [ 414.133936][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 414.673689][T12165] veth1_to_bridge: entered promiscuous mode [ 414.774723][T12165] veth1_to_bridge: left promiscuous mode [ 415.925249][T12180] loop0: detected capacity change from 0 to 256 [ 416.021568][T12180] FAT-fs (loop0): Directory bread(block 64) failed [ 416.073615][T12180] FAT-fs (loop0): Directory bread(block 65) failed [ 416.129058][T12180] FAT-fs (loop0): Directory bread(block 66) failed [ 416.135677][T12180] FAT-fs (loop0): Directory bread(block 67) failed [ 416.244293][T12180] FAT-fs (loop0): Directory bread(block 68) failed [ 416.317797][T12180] FAT-fs (loop0): Directory bread(block 69) failed [ 416.336746][T12180] FAT-fs (loop0): Directory bread(block 70) failed [ 416.365911][T12180] FAT-fs (loop0): Directory bread(block 71) failed [ 416.393243][T12180] FAT-fs (loop0): Directory bread(block 72) failed [ 416.417383][T12180] FAT-fs (loop0): Directory bread(block 73) failed [ 416.426109][T12173] loop2: detected capacity change from 0 to 32768 [ 416.483516][T12173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2361 (12173) [ 416.604683][T12173] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.662156][T12173] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 416.794151][T12173] BTRFS info (device loop2): using free space tree [ 417.205158][T12197] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2365'. [ 417.378929][T12173] BTRFS info (device loop2): enabling ssd optimizations [ 417.411000][T12173] BTRFS info (device loop2): auto enabling async discard [ 417.928154][ T27] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 418.147626][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 418.200099][ T27] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.294580][ T27] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.369050][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 418.417526][ T27] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 418.476609][ T27] usb 1-1: Product: syz [ 418.507663][ T27] usb 1-1: Manufacturer: syz [ 418.559258][ T27] hub 1-1:4.0: USB hub found [ 418.637820][T12219] loop4: detected capacity change from 0 to 256 [ 418.678294][ T5779] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.863884][ T27] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 418.883625][T12219] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 419.309640][ T5828] usb 1-1: USB disconnect, device number 28 [ 419.607695][ T5828] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 419.776363][T12228] netlink: 'syz.4.2371': attribute type 3 has an invalid length. [ 419.838402][ T5828] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.915629][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.977562][ T5828] usb 4-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 420.068363][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.153202][ T5828] usb 4-1: config 0 descriptor?? [ 420.743067][ T5828] hid-generic 0003:0463:1215.003E: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.3-1/input0 [ 421.051148][ T23] usb 4-1: USB disconnect, device number 30 [ 421.384087][T12244] loop4: detected capacity change from 0 to 4096 [ 421.539745][T12246] fido_id[12246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 422.741552][T12260] loop0: detected capacity change from 0 to 64 [ 425.171954][T12300] loop0: detected capacity change from 0 to 512 [ 425.207998][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 425.251959][T12300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.295871][T12300] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 425.398619][T12304] netlink: 'syz.3.2398': attribute type 9 has an invalid length. [ 425.427048][T12304] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2398'. [ 425.456142][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 425.513264][ T27] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 425.590935][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.710320][ T27] usb 3-1: config 0 descriptor?? [ 426.252484][ T27] a4tech 0003:09DA:001A.003F: unknown main item tag 0x0 [ 426.323033][ T27] a4tech 0003:09DA:001A.003F: unknown main item tag 0x0 [ 426.374675][ T27] a4tech 0003:09DA:001A.003F: item fetching failed at offset 4/5 [ 426.439427][ T27] a4tech 0003:09DA:001A.003F: parse failed [ 426.506263][ T27] a4tech: probe of 0003:09DA:001A.003F failed with error -22 [ 426.602450][ T27] usb 3-1: USB disconnect, device number 27 [ 426.826810][T12312] loop3: detected capacity change from 0 to 8192 [ 426.850421][T12320] loop4: detected capacity change from 0 to 512 [ 426.899905][T12320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.052976][T12323] netlink: 'syz.0.2405': attribute type 2 has an invalid length. [ 427.235123][T12320] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2404: invalid indirect mapped block 4294967295 (level 0) [ 427.301635][T12320] EXT4-fs (loop4): Remounting filesystem read-only [ 427.359078][T12320] EXT4-fs (loop4): 1 orphan inode deleted [ 427.386877][T12320] EXT4-fs (loop4): 1 truncate cleaned up [ 427.433899][T12320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.613459][T12328] loop0: detected capacity change from 0 to 256 [ 427.838596][T12328] FAT-fs (loop0): Directory bread(block 64) failed [ 427.887767][T12328] FAT-fs (loop0): Directory bread(block 65) failed [ 427.966006][T12328] FAT-fs (loop0): Directory bread(block 66) failed [ 427.985163][T11710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.027546][T12328] FAT-fs (loop0): Directory bread(block 67) failed [ 428.034404][T12328] FAT-fs (loop0): Directory bread(block 68) failed [ 428.147646][T12328] FAT-fs (loop0): Directory bread(block 69) failed [ 428.196905][T12328] FAT-fs (loop0): Directory bread(block 70) failed [ 428.230265][T12328] FAT-fs (loop0): Directory bread(block 71) failed [ 428.237032][T12328] FAT-fs (loop0): Directory bread(block 72) failed [ 428.369743][T12328] FAT-fs (loop0): Directory bread(block 73) failed [ 428.729959][T12340] loop4: detected capacity change from 0 to 1024 [ 428.833745][T12340] EXT4-fs: Ignoring removed bh option [ 428.888730][T12340] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 429.024845][T12340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.094166][T12343] loop2: detected capacity change from 0 to 2048 [ 429.221844][T12343] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 429.338001][T12340] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.2410: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 429.387521][T12343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.602565][T12340] EXT4-fs (loop4): Remounting filesystem read-only [ 430.076145][T12361] loop0: detected capacity change from 0 to 512 [ 430.109394][T11710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.272997][T12361] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 430.576185][T12367] loop3: detected capacity change from 0 to 512 [ 432.328037][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 432.347715][ T27] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 432.355503][ T5828] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 432.584008][ T5778] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 432.594001][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 432.599283][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 432.604560][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 432.615584][ T23] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 432.631692][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.643626][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.657888][ T23] usb 1-1: config 0 has no interface number 0 [ 432.671914][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.683192][ T5828] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 432.708331][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 432.727470][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.735779][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.750362][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.768594][ T5828] usb 5-1: config 0 descriptor?? [ 432.778058][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.797475][ T23] usb 1-1: Product: syz [ 432.819089][ T23] usb 1-1: Manufacturer: syz [ 432.829719][ T5778] usb 3-1: Using ep0 maxpacket: 8 [ 432.840758][ T5828] dw2102: su3000_identify_state [ 432.848867][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.863481][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.876739][ T5828] dvb-usb: found a 'TeVii S662' in warm state. [ 432.894288][ T23] usb 1-1: SerialNumber: syz [ 432.906083][ T5828] dw2102: su3000_power_ctrl: 1, initialized 0 [ 432.917353][ T23] usb 1-1: config 0 descriptor?? [ 432.943334][ T5778] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 432.956151][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 432.975181][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.997683][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.008106][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.028564][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.087489][ T27] usb 4-1: Manufacturer: syz [ 433.093919][ T5778] usb 3-1: config 0 descriptor?? [ 433.104865][T12391] dvb-usb: bulk message failed: -22 (37/0) [ 433.134827][ T5828] dvbdev: DVB: registering new adapter (TeVii S662) [ 433.154070][ T27] usb 4-1: config 0 descriptor?? [ 433.199664][T12391] dw2102: i2c transfer failed. [ 433.217283][ T5828] usb 5-1: media controller created [ 433.234035][T12391] i2c i2c-1: Invalid block size returned: 33 [ 433.276776][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.306448][ T23] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 433.337562][ T5828] dw2102: i2c transfer failed. [ 433.343167][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.354153][ T23] usb 1-1: Failed to initialize entity for entity 6 [ 433.407018][ T23] usb 1-1: Failed to register entities (-22). [ 433.423784][ T5828] dw2102: i2c transfer failed. [ 433.464310][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.500913][ T5828] dw2102: i2c transfer failed. [ 433.552018][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.597803][ T5828] dw2102: i2c transfer failed. [ 433.625125][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.653953][ T5778] kye 0003:0458:4018.0040: unknown main item tag 0x0 [ 433.665130][ T23] usb 1-1: USB disconnect, device number 29 [ 433.689573][ T5828] dw2102: i2c transfer failed. [ 433.733103][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 433.742100][ T5778] kye 0003:0458:4018.0040: unknown main item tag 0x0 [ 433.779099][ T5778] kye 0003:0458:4018.0040: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.2-1/input0 [ 433.792998][ T5828] dw2102: i2c transfer failed. [ 433.818968][ T5828] dvb-usb: MAC address: 02:02:02:02:02:02 [ 433.892394][ T5778] usb 3-1: USB disconnect, device number 28 [ 433.917843][ T27] rc_core: IR keymap rc-hauppauge not found [ 433.967504][ T27] Registered IR keymap rc-empty [ 434.006773][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.026859][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.137794][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.213282][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 434.233885][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 434.277848][ T5828] dw2102: command 0x0e transfer failed. [ 434.306480][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 434.337599][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 434.355994][T12410] fido_id[12410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 434.381125][ T5828] dw2102: command 0x0e transfer failed. [ 434.435652][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.559112][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.662829][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.717789][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 434.723600][ T5828] dw2102: command 0x0e transfer failed. [ 434.767652][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.803630][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 434.850242][ T5828] dw2102: command 0x0e transfer failed. [ 434.867660][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.895327][ T5828] dvb-usb: bulk message failed: -22 (1/0) [ 434.932690][ T5828] dw2102: command 0x51 transfer failed. [ 434.938983][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 434.982308][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 434.990730][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.021096][ T5828] dw2102: i2c probe for address 0x68 failed. [ 435.027147][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 435.080893][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.109701][ T5828] dw2102: i2c probe for address 0x69 failed. [ 435.157627][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.164927][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 435.198856][ T5828] dw2102: i2c probe for address 0x6a failed. [ 435.252205][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.259503][ T5828] dw2102: probing for demodulator failed. Is the external power switched on? [ 435.315970][ T5828] dvb-usb: no frontend was attached by 'TeVii S662' [ 435.349835][ T27] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 435.429609][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 435.551314][ T27] usb 4-1: USB disconnect, device number 31 [ 435.679061][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2436'. [ 435.857605][ T5828] rc_core: IR keymap rc-tt-1500 not found [ 435.866993][ T5828] Registered IR keymap rc-empty [ 435.917743][ T5828] rc rc1: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 435.974439][ T5828] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input49 [ 436.035602][ T5828] dvb-usb: schedule remote query interval to 250 msecs. [ 436.081467][ T5828] dw2102: su3000_power_ctrl: 0, initialized 1 [ 436.137944][ T5828] dvb-usb: TeVii S662 successfully initialized and connected. [ 436.174772][ T5828] usb 5-1: USB disconnect, device number 2 [ 436.373473][ T5828] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 436.740341][T12446] loop0: detected capacity change from 0 to 512 [ 436.791333][T12446] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 436.831897][T12446] EXT4-fs (loop0): invalid journal inode [ 436.862011][T12446] EXT4-fs (loop0): can't get journal size [ 436.954432][T12446] EXT4-fs (loop0): 1 truncate cleaned up [ 436.988640][T12446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.134154][T12419] loop4: detected capacity change from 0 to 40427 [ 437.234962][T12419] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 437.317764][T12419] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 437.449676][T12419] F2FS-fs (loop4): Found nat_bits in checkpoint [ 437.472561][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.567582][ T27] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 437.829674][ T27] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 437.881713][ T27] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 437.911948][T12419] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 437.968599][ T27] usb 4-1: config 0 has no interface number 1 [ 437.985176][T12419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 438.029733][ T27] usb 4-1: config 0 has no interface number 2 [ 438.071384][ T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 438.173448][ T27] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 438.248042][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.254762][ T27] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 438.339379][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.431809][ T27] usb 4-1: config 0 descriptor?? [ 438.677624][ T27] usb 4-1: Could not set interface, error -71 [ 438.734167][ T27] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 438.815175][ T27] usb 4-1: USB disconnect, device number 32 [ 439.881270][ T5778] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 439.908094][T12478] loop3: detected capacity change from 0 to 2048 [ 440.095285][T12478] loop3: p1 p3 p4 [ 440.117562][ T5778] usb 3-1: Using ep0 maxpacket: 32 [ 440.140866][ T5778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.157792][T12478] loop3: p4 size 589824 extends beyond EOD, truncated [ 440.166357][T12461] loop0: detected capacity change from 0 to 32768 [ 440.210425][ T5778] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 440.281604][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.367826][ T5778] usb 3-1: Product: syz [ 440.406367][ T5778] usb 3-1: Manufacturer: syz [ 440.418180][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.424825][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.459603][ T5778] usb 3-1: SerialNumber: syz [ 440.513753][ T5778] usb 3-1: config 0 descriptor?? [ 440.581677][ T5778] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 440.919482][ T5778] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 440.926767][ T5778] quatech2: probe of 3-1:0.0 failed with error -8 [ 441.238749][ T5778] usb 3-1: USB disconnect, device number 29 [ 441.497350][T12455] udevd[12455]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 441.532012][T11876] udevd[11876]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 441.560955][T11840] udevd[11840]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 442.236269][T12506] loop2: detected capacity change from 0 to 256 [ 444.075708][T12509] loop0: detected capacity change from 0 to 32768 [ 444.405108][ T28] audit: type=1800 audit(1769426539.731:135): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2458" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 444.997810][ T5828] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 445.250751][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.287031][ T5828] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 445.338290][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.383517][ T5828] usb 3-1: config 0 descriptor?? [ 445.608089][ T27] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 445.852245][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 445.892216][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.939517][ T5828] logitech-djreceiver 0003:046D:C71F.0041: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 445.972754][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.988379][ T27] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 445.998087][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.025262][ T27] usb 1-1: config 0 descriptor?? [ 446.098287][ T5828] usb 3-1: USB disconnect, device number 30 [ 446.336043][T12551] fido_id[12551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 446.584583][ T27] hid-picolcd 0003:04D8:F002.0042: unknown main item tag 0x0 [ 446.704860][T12537] loop4: detected capacity change from 0 to 40427 [ 446.715213][ T27] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf3 found [ 446.763301][ T27] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf4 found [ 446.781844][T12537] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 446.826996][T12537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 446.848407][ T27] usb 1-1: USB disconnect, device number 30 [ 447.007484][T12537] F2FS-fs (loop4): Found nat_bits in checkpoint [ 447.159730][T12560] netlink: 'syz.3.2467': attribute type 2 has an invalid length. [ 447.298871][T12537] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.115936][ T5761] ------------[ cut here ]------------ [ 468.140790][ T5761] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 468.167197][ T5842] usb 1-1: [UEAGLE-ATM] firmware is not available [ 497.611383][ T5761] WARNING: CPU: 0 PID: 5761 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 497.644026][ T5761] Modules linked in: [ 497.671902][ T5761] CPU: 0 PID: 5761 Comm: kworker/0:3 Not tainted syzkaller #0 [ 497.703560][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.737608][ T5761] Workqueue: events request_firmware_work_func [ 497.743875][ T5761] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 497.775052][ T5761] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1a 23 c9 ff 49 8b 17 48 c7 c7 40 b6 da 8a 48 89 de e8 18 c0 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 fb 70 ff [ 497.819447][ T5761] RSP: 0018:ffffc900044a7800 EFLAGS: 00010246 [ 497.825636][ T5761] RAX: 8e6ba12288481100 RBX: ffffffff8b41ab40 RCX: ffff888025c6da00 [ 497.857583][ T5761] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 497.865634][ T5761] RBP: dffffc0000000000 R08: ffffc900044a7407 R09: 1ffff92000894e80 [ 497.898068][ T5761] R10: dffffc0000000000 R11: fffff52000894e81 R12: 1ffffffff168356c [ 497.906132][ T5761] R13: 0000000000000001 R14: ffff8880789e1ba0 R15: ffff888060e63008 [ 497.938195][ T5761] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 497.971889][ T5761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.002578][ T5761] CR2: 0000562be9b86008 CR3: 0000000062dd5000 CR4: 00000000003506f0 [ 498.034805][ T5761] Call Trace: [ 498.061820][ T5761] [ 498.064838][ T5761] ? sysfs_unmerge_group+0x10d/0x130 [ 498.094363][ T5761] device_del+0x251/0x910 [ 498.122892][ T5761] ? kill_device+0x160/0x160 [ 498.151352][ T5761] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 498.157331][ T5761] ? _raw_spin_unlock+0x40/0x40 [ 498.211453][ T5761] ? complete_all+0xd0/0x1d0 [ 498.216138][ T5761] firmware_fallback_sysfs+0x682/0x930 [ 498.245467][ T5761] _request_firmware+0xf27/0x1510 [ 498.274572][ T5761] ? request_firmware+0x50/0x50 [ 498.303614][ T5761] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 498.333132][ T5761] ? read_lock_is_recursive+0x20/0x20 [ 498.361996][ T5761] request_firmware_work_func+0xb0/0x1b0 [ 498.391762][ T5761] ? process_scheduled_works+0x96f/0x15d0 [ 498.421239][ T5761] process_scheduled_works+0xa5d/0x15d0 [ 498.426924][ T5761] ? assign_work+0x430/0x430 [ 498.456300][ T5761] ? assign_work+0x3d0/0x430 [ 498.485143][ T5761] worker_thread+0xa55/0xfc0 [ 498.514272][ T5761] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 498.544086][ T5761] ? _raw_spin_unlock+0x40/0x40 [ 498.572786][ T5761] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 498.602933][ T5761] kthread+0x2fa/0x390 [ 498.607136][ T5761] ? pr_cont_work+0x560/0x560 [ 498.635468][ T5761] ? kthread_blkcg+0xd0/0xd0 [ 498.663837][ T5761] ret_from_fork+0x48/0x80 [ 498.692299][ T5761] ? kthread_blkcg+0xd0/0xd0 [ 498.696986][ T5761] ret_from_fork_asm+0x11/0x20 [ 498.725989][ T5761] [ 498.752554][ T5761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.759915][ T5761] CPU: 0 PID: 5761 Comm: kworker/0:3 Not tainted syzkaller #0 [ 498.767427][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.777558][ T5761] Workqueue: events request_firmware_work_func [ 498.783839][ T5761] Call Trace: [ 498.787167][ T5761] [ 498.790143][ T5761] dump_stack_lvl+0x18c/0x250 [ 498.794885][ T5761] ? show_regs_print_info+0x20/0x20 [ 498.800137][ T5761] ? load_image+0x400/0x400 [ 498.804717][ T5761] panic+0x2dc/0x730 [ 498.808664][ T5761] ? bpf_jit_dump+0xd0/0xd0 [ 498.813241][ T5761] ? ret_from_fork_asm+0x11/0x20 [ 498.818238][ T5761] __warn+0x2e0/0x470 [ 498.822272][ T5761] ? sysfs_remove_group+0x178/0x2a0 [ 498.827523][ T5761] ? sysfs_remove_group+0x178/0x2a0 [ 498.832767][ T5761] report_bug+0x2be/0x4f0 [ 498.837146][ T5761] ? sysfs_remove_group+0x178/0x2a0 [ 498.842403][ T5761] ? sysfs_remove_group+0x178/0x2a0 [ 498.847643][ T5761] ? sysfs_remove_group+0x17a/0x2a0 [ 498.852890][ T5761] handle_bug+0xcf/0x120 [ 498.857187][ T5761] exc_invalid_op+0x1a/0x50 [ 498.861739][ T5761] asm_exc_invalid_op+0x1a/0x20 [ 498.866632][ T5761] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 498.872483][ T5761] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 1a 23 c9 ff 49 8b 17 48 c7 c7 40 b6 da 8a 48 89 de e8 18 c0 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 fb 70 ff [ 498.892134][ T5761] RSP: 0018:ffffc900044a7800 EFLAGS: 00010246 [ 498.898251][ T5761] RAX: 8e6ba12288481100 RBX: ffffffff8b41ab40 RCX: ffff888025c6da00 [ 498.906267][ T5761] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 498.914275][ T5761] RBP: dffffc0000000000 R08: ffffc900044a7407 R09: 1ffff92000894e80 [ 498.922288][ T5761] R10: dffffc0000000000 R11: fffff52000894e81 R12: 1ffffffff168356c [ 498.930306][ T5761] R13: 0000000000000001 R14: ffff8880789e1ba0 R15: ffff888060e63008 [ 498.938330][ T5761] ? sysfs_unmerge_group+0x10d/0x130 [ 498.943689][ T5761] device_del+0x251/0x910 [ 498.948071][ T5761] ? kill_device+0x160/0x160 [ 498.952722][ T5761] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 498.958660][ T5761] ? _raw_spin_unlock+0x40/0x40 [ 498.963551][ T5761] ? complete_all+0xd0/0x1d0 [ 498.968191][ T5761] firmware_fallback_sysfs+0x682/0x930 [ 498.973718][ T5761] _request_firmware+0xf27/0x1510 [ 498.978811][ T5761] ? request_firmware+0x50/0x50 [ 498.983715][ T5761] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 498.989753][ T5761] ? read_lock_is_recursive+0x20/0x20 [ 498.995176][ T5761] request_firmware_work_func+0xb0/0x1b0 [ 499.000955][ T5761] ? process_scheduled_works+0x96f/0x15d0 [ 499.006726][ T5761] process_scheduled_works+0xa5d/0x15d0 [ 499.012356][ T5761] ? assign_work+0x430/0x430 [ 499.017021][ T5761] ? assign_work+0x3d0/0x430 [ 499.021664][ T5761] worker_thread+0xa55/0xfc0 [ 499.026302][ T5761] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 499.032245][ T5761] ? _raw_spin_unlock+0x40/0x40 [ 499.037131][ T5761] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 499.043086][ T5761] kthread+0x2fa/0x390 [ 499.047194][ T5761] ? pr_cont_work+0x560/0x560 [ 499.052005][ T5761] ? kthread_blkcg+0xd0/0xd0 [ 499.056642][ T5761] ret_from_fork+0x48/0x80 [ 499.061098][ T5761] ? kthread_blkcg+0xd0/0xd0 [ 499.065729][ T5761] ret_from_fork_asm+0x11/0x20 [ 499.070559][ T5761] [ 499.074194][ T5761] Kernel Offset: disabled [ 499.078638][ T5761] Rebooting in 86400 seconds..