last executing test programs: 12m54.017235332s ago: executing program 2 (id=8603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) 12m53.763143676s ago: executing program 2 (id=8607): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 12m53.47774361s ago: executing program 2 (id=8609): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$sequencer(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0a"], 0x8) 12m53.158001495s ago: executing program 2 (id=8613): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m52.515258276s ago: executing program 2 (id=8620): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000300)={0x2, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) 12m51.875119826s ago: executing program 2 (id=8627): r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x80) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000200)) 12m51.317314985s ago: executing program 32 (id=8627): r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x80) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000200)) 7.015588197s ago: executing program 1 (id=21622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x8, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 6.650271665s ago: executing program 1 (id=21627): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2442, 0x140) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '\x10/\\*,'}}]}}) 6.274889721s ago: executing program 1 (id=21634): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x1, {0xf8000002, 0x8ba, 0x27, 0xb}}) 6.074624325s ago: executing program 1 (id=21638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.530069956s ago: executing program 1 (id=21647): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000008a80)={0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000000440)="d99c89760bf083ebb5aac9b4b977a9d69ea6fa93a7b8de", 0x17}, {&(0x7f0000008900)="3fcaeec95aef94e087f8321bf9acd0722a6fe0e4b0b2712574b9a6ec7518bd8c8b59c31448338d78f58c10b5b52aba25a75470d6ecedc43ad1d774126e9fb783bbffb3e0ef4c885807dd5e018768e9b928c8e4e7047e17dc28559639b904e7", 0x5f}], 0x2}, 0x24000040) 3.882127517s ago: executing program 0 (id=21672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.728362999s ago: executing program 0 (id=21676): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x202) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="71da6f3585b32a692eeb80200b807223fbf6405831b37cfa", 0x18}, {&(0x7f0000000200)="9d", 0x1}], 0x2) 3.549075173s ago: executing program 1 (id=21679): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0xc}], 0x1, 0x0, 0x0, 0x0) 3.538121103s ago: executing program 0 (id=21680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.289662928s ago: executing program 33 (id=21679): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0xc}], 0x1, 0x0, 0x0, 0x0) 3.284211848s ago: executing program 0 (id=21682): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) timerfd_create(0x8, 0x0) 3.118554581s ago: executing program 0 (id=21686): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x0) 2.916321975s ago: executing program 0 (id=21688): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000a00)=ANY=[@ANYBLOB="400ee2000000518081cece49aec41d49"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.203592549s ago: executing program 5 (id=21697): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}, {0x8, 0x5, 0x5, 0x6}, {0x6, 0x3, 0x3, 0x80}]}, 0x1b) 2.13368537s ago: executing program 5 (id=21698): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) 1.547486581s ago: executing program 5 (id=21703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001100)={0x2c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2f6b5f55daa39320}, 0x4040000) 1.372933164s ago: executing program 5 (id=21704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 1.251936296s ago: executing program 5 (id=21707): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x2, 0x631b, &(0x7f0000001f80)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ8S5B67c+AOIlCCBKg4dtN7nccbTtddOujNrz+cjOTO/eWY9z+S74931zPgJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC+/70fnisi4sov0oITEZ+JfkQvYmVcr0XEytqJvP4gIp6L7eZ4NiKGSxFFbnw64tWI+PCpiPsP7qyPF50/YD+++6d//O5HT/zg738cnvnvn2/1X9trvdu3f/2fv9x99P0FAACALirLsizSx/yT6fN9r+1OAQCNyK//ZZKXqxeu3jzk+v9bsP6r1Wq1egHqqnK6u9UiIjarjxm/Z3A6HgCOmM34qO0u0CL5d9ogIp5ouxPAQiva7gBzcf/BnfUi5VtUXw/WJu35WpBd+W8WO/d37DWdpX6NSVPPr63oxzN79GeloT4skpx/r57/lUn7KK037/ybslf+o8mtT52T8+/X8685Pvn3pubfVTn/waHy78sfAAAAAAAWWP79/4mWz/8uPf6uHMh+53/XGuoDAAAAAAAAAHzaHnf8vx2F8f8AAABgUY0/q4/95qmHy6rX+o9i9/LLRcSTtfWB4+Vvs27ISTfLrDbRGQAAAAAAAAAAAABgYjC5hvdyETGMiCdXV8uyHH9V1evDetzHH3Vd33/osrZ/yAMAwMSHT9Xu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyuVD7X5ul42dLoAG+IB6Ny/M2WK4+rmvV5eVZ7/fuNtzUq+wfoWDNaDBwAImLyanTfK9IxU5ZPR9vvcjgaHP/Hj+Ofg2j7eQoAAADMX1mWZZH+nPfJdM6/13anAIBG5Nf/+nkBtVqtVqvVDdfLDxfMa3tV5XR3q0VEbFYfM37PYDh+ADhiNuOjtrtAi+TfaYOIeK7tTgALrWi7A8zF/Qd31ouUb1F9PUjju+drQXblv1lsPy4/ftp0lvo1Jk09v7aiH8/s0Z9nG+rDIsn59+r5X5m0j9J6886/KXvlP97PEy30p205/349/5rjk39vav5dlfMfHCr/vvwBAAAAAGCB5d//n1io87+jR92dmfY7/7s2t60CAAAAAAAAwHzdf3BnPd/3ms//f27Keu7/PJ5y/oX8Oynn36vl/+Xaev3K/L03H+b/7wd31n9/61+fzdOD5r+UZ4r0zCrSM6JIWyoGafo4e/dJW8P+aLylYdHrD9I1P+Xw7bgW12Mjzu5at5f+Px62n9vVPu7pcLu97E/az+9qH+y058df2NU+TFc6lSu5/XSsx0/jery13T5uW5qx/8sz2sv920c5/77jv5Ny/oPK1zj/1dRe1KZj9z7ofeK4r06nbeeNa5//1dn5785MW9Hf2beq8f690EJ/tv9PnhjFz29u3Dh9++qtWzfORZrsWno+0uRTlvMfpq+dn/8vTtrzz/3q8Xrvg9Gh818UWzHYM/8XK/Pj/X2p4b61Iec/Sl85/7dS+/Tj/xD59/7Q2L4cxH7H/8st9AcAAAAAAAAAAAAAAAD2U5bl9i2ib0TExXT/T1v3ZgIAzcqv/2WSlzdV9xvenlp9xOtiwfrTaP1xuVj9UauPYl1VTvd6tYiIv1YfM37P8Mtp3wwAWGQfR8Q/2+4ErZF/h+W/9zeenmq7M0Cjbr73/o+vXr++ceNm2z0BAAAAAAAAAB5VHv9zrTL+86myLO/W1ts1/uubsfa4478O8szOAKN7DFTdP/w+7WerN+r3KsONPx97jf893Jnbb/zvwYztDWe0j2a0L81oX57RPvVGj4qc//OV8c5PRcTJ2vDrjzz+64LZb/zX+pj3XZDzf6HyfB7n/6XaetX8y98e5fx7u/I/c+vdn525+d77r1x79+o7G+9s/OTCuXNnL1y8eOnSpTNvX7u+cXbyb4s9nq+cfx772nWg3ZLzz5nLv1ty/l9Itfy7Jef/xVTLv1ty/vn9nvy7JeefP/vIv1ty/i+lWv7dkvP/Sqrl3y05/5dTLf9uyfl/NdXy75ac/yupln+35PxPp1r+3ZLzP5PqA+a/Mu9+0Yycfz7D5fjvlpx/vrJB/t2S8z+favl3S87/Qqrl3y05/1dTLf9uyfl/LdXy75ac/8VUy79bcv5fT7X8uyXnfynV8u+WnP83Ui3/bsn5fzPV8u+WnP9rqZZ/t+T8v5Vq+XdLzv/bqZZ/t+T8v5Nq+XdLzv/1VMu/Wx7+/X8zZsyYyTNt/2QCAAAAAAAAAAAAAOqauJy47X0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxneQfwM/vltRMSAyF1UhM2jgnB2WTXH/EHrYsJnw1fJSEUaIvtetdmwV947RJoVDsKlEgYFVW0DRdtAaE2NxVWRSVaAcoFalWpErQX9AZRoXIRVQEFpEptBWw1c9733ZnZ2Zld73h95pzfT7If78yZOe85854z++z6PwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa3fn62U/Vsiyr1Wr5DZuz7MZ63TixuXHLa67v+AAAAIC1+3nj7xduTjccWsGDmpb5pzu+/dWFhYWF7L3DfzL6uYWFePv3N2bZ6IYsa9wXXfnB+2pNy0RPZuO1oaavh3qsfrjH/SM97h/tcf9Yj/s39Lh/vMf9S3bAEhuzWnqy7Y1/bs6ybCLLsluy0cZ92zs86snahqH6vkuPzWqNxyyMHs/mspPZbDbdsny+bK2x/NfvrK/rLVlc11DTurbWZ8hPHj8Wx1AL+3h7y7oWnzP60euyiZ/+5PFjf3X++ds61Z67oeX58nHes60+zk+EW/Kx1rINaZ/EcQ41jXNrh9dkuGWctcbj6v9uH+cLKxzn8OIw11X7az6eDTX+/Z3GfhqpZR3209Zw2//clWXZpcVhty+zZF3ZULap5ZahxddnPJ+R9eeoT6WXZCPd5+lCrWWe3rmCeVqvM9tb52n7MRFf/zvD40aWGUPzy/SjJ8aaXvefLVzNPI3qW73csdI+B/t9rBRlDsZ58Z3GRj/VcQ5uD9v/+N3Lz8GOc6fDHEzb3TQHt/Wag0Njw40xpxeh1njM4hzc2bL8cGNNtUZ97u7uc3Dq/KmzU/Mf+/h9c6eOnpg9MXt6986d07v37t2/f//U8bmTs9P531e5t4tvUzaUjoFtYd/FY+BVbcs2T9WFL44tOf9e7XE43uU43Ny2bL+Pw5H2jautzwG5dE7nx8a76zt9/PJQtswx1nh9dqz9OEzb3XQcjjQdhx3fUzochyMrOA7ry5zdsbLvWUaa/nQaw/LvBWubg5ub5mD79yPtc7Df348UZQ6Oh3nxvR3LvxdsDeN9anK1348ML5mDaXPDuad+S/79/okbs/H9jX91mpe31++4YSy7MD977v7Hjp4/f25nFsq6eGnTXGmfr5uatilbMl+HVj1fD83d8dTtHW7fHPbV+H31v8aXfa3qy+y5v/tr1Xh367w/W27dlYXSZ2F/LmxYp/3Z6d28vj/Hsuzz33ri4W88/vnXL7s/6/3mJ6bW/r146kubzr+jy5x/Y9//i3x96ameHB4dyY/f4bR3RlvOx60v1Ujj3FVrrPuFqZWdj0fDn/U+H9/S5Xy8pW3Zfp+PR9s3Lp6Pa71+2rE27a/neJgnJ6e7n4/ry2zZtdo5OdL1fHxXqLWw/18dOoXUFzXNneXmbVrXyMho2K6RuIbWebq7ZfnR0JvV1/XMrqubp/fclT/XcNq6Res1Tyfalu33PE0/+1puntZ6/fTt6rS/nuNhXtyyu/s8rS/z7J61nzs3xn82nTvHes3B0eGx+phH0yRsnO+zhY1xDt6fHcvOZCezmca9Y435VGusa/KBlc3BsfBnvc+VW7rMwXvalu33HEzvY8vNvdrI0o3vg/bXczzMi6cf6D4H68u8YV9/v3e9J9ySlmn63rX952vL/czr9rbddK3mykgY57f2df/ZbH2Zk/tX22d230/3hltu6LCf2o/f5Y6pmWx99tOWMM7n9y+/n+rjqS/zuQMrnE+Hsiy7+JEHGz/vDb9f+dsL3/1qy+9dOv1O5+JHHvzxi47/42rGD8Dg+0VeNuXvdU2/mVrJ7/8BAACAgRD7/qFQE/0/AAAAlEbs++P/Ck/0/wAAAFAase8fCTWpSP+/5Q3Pz/3iYpaS+QtBvD/thofy5WLGdTp8PbGwqH77g1+e/e9/uLiydQ9lWfazh36/4/JbHorjyk2EcV55Y+vtS3z1vhWt+8ijF9N6m/PrXwjPH7dnpdOgUwR3Osuyr9/8mcZ6Jt53uVGffehIoz586akn68u8cCD/Oj7+uZfmy/95CP8eOn605fHPhf3ww1Cn39p5f8THfeXyq7fue8/i+uLjattuamz20x/Inzd+Ts5nn8yXj/t5ufF/49PPfKW+/GOv7Dz+i0Odx/9MeN4vh/q/L8+Xb34N6l/Hx30yjD+uLz7u/i99s+P4r3wqX/7sm/LljoQa139P+Hr7m56fa95fj9WOtmxX9uZ8ubj+6e/+UeP++Hzx+dvHP374csv+aJ8fz/5b/jxTbcvH2+N6or9vW3/9eZrnZ1z/M394pGU/91r/lYefe3n9edvXf2/bcmc/sqOx/sXna/3Epr/45Gc6ri+O59DfnG3ZnkPvCsdxWP/THwjzMdz/f1fy52v/dIUj72o9/8Tlv7D5Ysv2RG/5ab7+K6890agbxjduuuHGF9106RX1fZdl39mQP1+v9Z/4yzMt4//irfn+iPfHjH77+pcT13/uo5Onz8xfmJtJe/XxmxufnfO2fDxxvDeHc2v714fPnP/g7LmJ6YnpLJso70foXbUvhfrjvFzqvvTCkjPojkfD63n7n319093/+ul4+7+/O7/98lvz961XheU+G27fHF6/1a1/qafvvLVxfNeeDSNcWPp5wWuxdft/7V/RgmH7278viPP97Ms+2NgP9fsa7xvxuF7j+L8/kz/P18J+XQifzLzt1sX1NS8fPxvh8iP58b7m/RdOc/F1/evwer/9h/nzx3HF7f1++D7mm1taz3dxfnzt4lD78zc+xeNSOJ9kl/L741Jxf19+4daOw4ufQ5Jduq3x9R+n57ltVZu5nPmPzU+dnDt94bGp87Pz56fmP/bxw6fOXDh9/nDjszwPf6jX4xfPT5sa56eZ2b17ssbZ6kxerrHrPf6zjx6b2Td998zs8aMXjp9/9OzsuRPH5uePzc7M3330+PHZj/Z6/NzMwZ27Duzet2vyxNzMwf0HDuw+MDl3+kx9GPmgetg7/eHJ0+cONx4yf3DPgZ0PPLBnevLUmZnZg/umpycv9Hp8471psv7o35s8N3vy6Pm5U7OT83Mfnz2488Devbt6fhrgqbPH5yemzl04PXVhfvbcVL4tE+cbN9ff+3o9nnKa/4/8+9l2tfyD+LJ33rs3fT5r3ZefWPap8kXaPkD0+fBZNP/84rP7V/J17PtHQ00q0v8DAABAFcS+fyzURP8PAAAApRH7/g2hJvp/AAAAKI3Y94+HmlSk/y9d/n/LxRWtX/5f/r95f8n/Vyz//0jR8v/5+UL+vz/Wmr+X/w/k/+X/5f8HJv+/EN6Q5P8poqLl/2PfvzHLKtn/AwAAQBXEvn9TqIn+HwAAAEoj9v03hJro/wEAAKA0Yt9/Y6hJRfp/+X/5f/l/+X/5/87rl/8fTPL/3cn/9yD/P5VVK/9/qZ/jd/1/+X+WKlr+P/b9Lwo1qUj/DwAAAFUQ+/6bQk30/wAAAFAase+/OdRE/w8AAAClEfv+zaEmFen/5f/l/+X/5f/l/zuvX/5/MMn/dyf/34P8v+v/y//L/9NXRcv/x77/xaEmFen/AQAAoApi3/+SUBP9PwAAABTPyNU9LPb9Lw01WdL/X+UKAAAAgOsu9v23ZG1B8Ir8/l/+X/6/+Pn/Dek++X/5/6yQ+f/hTP6/OOT/u5P/70H+X/5f/l/+n74qWv6/0fdn49nLQk0q0v8DAABAFcS+/9ZQE/0/AAAAlEbs+38p1ET/DwAAAKUR+/4toSYV6f/l/+X/r3f+f7Rt7K7/v/g4+f9c8fP/rv9fJPL/3cn/9yD/L/8v/y//T18VLf8f+/7bQk0q0v8DAABAFcS+//ZQE/0/AAAAlEbs+3851ET/DwAAAKUR+/6toSYV6f/l/wue/4/J0RLn/3tf/1/+X/5f/l/+f+Xk/7uT/+9B/l/+X/5f/p++Klr+P/b9Lw81qUj/DwAAAFUQ+/47Qk30/wAAAFAase9/RaiJ/h8AAABKI/b9E6EmFen/5f8Lnv/Pc/BjZb7+v/y//L/8v/x/P8n/dyf/30M4zf0oyzL5/0HN/8ev5P/l/ymCouX/Y99/Z6hJRfp/AAAAqILY928LNdH/AwAAQGnEvv+uUBP9PwAAAJRG7Pu3h5pUpP+X/x+I/H8m/y//L/8v/y//vzLy/93J//fg+v8lyP+7/n9T/r8+teT/ua6Klv+Pff8rQ00q0v8DAABAFcS+/+5QE/0/AAAAlEbs+18VaqL/BwAAgNKIff89oSYV6f/l/+X/5f/l/+X/O69f/n8wyf93J//fg/y//H+58v+u/891V7T8f+z7Xx1qUpH+HwAAAKog9v07Qk30/wAAAFAase+/N9RE/w8AAAClEfv+yVCTivT/8v/y//L/8v/y/53XL/8/mOT/u5P/70H+X/5f/l/+n74qWv4/9v33hZpUpP8HAACAKoh9//2hJvp/AAAAKI3Y90+Fmuj/AQAAoDRi3z8dalKR/l/+X/5f/l/+f1X5/1csPq/8f07+v1jk/7uT/+9B/l/+/7rn/0fl/ymVouX/Y9+/M9QkNX5jV7GVAAAAQJHEvn9XqElFfv8PAAAAVRD7/t2hJvp/AAAAKI3Y9+8JNalI/y//L/8v/y//7/r/ndcv/z+Y5P+763/+P26i/L/8v/y/6//L/7NU0fL/se9/INSkIv0/AAAAVEHs+/eGmuj/AQAAoDRi378v1ET/DwAAAKUR+/79oSYV6f/l/+X/5f/l/+Pto23Lyf/L/w8i+f/uXP+/h+Ll/1/b/PD1zP/X1yX/L/8v/8/qPfIHzV8VLf8f+/4DoSYV6f8BAACgCmLf/5pQE/0/AAAAlEbs+38l1KR7/7/h2o4KAAAA6KfY9/9qqElFfv8v/y//L/8v/+/6/53XL/8/mOT/u5P/76F4+f8Wrv9f7PHL/8v/s1TR8v+x7z8YalKR/h8AAACqIPb9vxZqov8HAACA0oh9/2tDTfT/AAAAUBqx7z8UatApzj0o/m7zKhaW/5f/X2H+Py5SkPz/uPy//H/p8v9j8Xnl/9dE/r87+f8e5P/l/+X/5f/pq6Ll/2Pf/7pQE7//BwAAgNKIff+DoSb6fwAAACiN2Pe/PtRE/w8AAAClEfv+N4SaVKT/l/+X/3f9f/l/+f/O63f9/8Ek/9+d/H8P8v/y//L/8v/0VdHy/7Hvf2OoSUX6fwAAAKiC2Pe/KdRE/w8AAAClEfv+N4ea6P8BAACgNGLf/5ZQk4r0//L/8v/XM/+fuyT/L//fIP8v/98P8v/dyf/3IP8v/y//L/9PXxUt/x/7/l8PNalI/w8AAABVEPv+h0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/y//L//v+v+Fyf/XF5P/l/+X/18j+f/uBiz///Obwu3y/zn5/2KPf7X5/5G2r69J/v8Hy+X/Fza0P17+n2uhaPn/2Pe/PdSkIv0/AAAAVEHs+98RaqL/BwAAgNKIff87Q02a+v++/sc7AAAAYN3Fvv83Qk0q8vt/+f/6OBbTy/L/8v+NG1z/X/5f/n9gyf93N2D5f9f/byP/X+zxu/6//D9LFS3/H/v+d4WaVKT/BwAAgCqIff/DoSb6fwAAACiN2Pc/Emqi/wcAAIDSiH3/u0NNKtL/y/+7/r/8v/y//H/n9cv/Dyb5/+7k/3uQ/5f/L1r+/z/l/xlsRcv/x77/0VCTivT/AAAAUAWx739PqIn+HwAAAEoj9v2/GWqi/wcAAIDSiH3/e0NNKtL/y/8PSv5/YkDz/0/I/1/D/P8dN+XLyf/L/7NI/r87+f8e5P/l/4uW/3f9fwZc0fL/se9/X6jJyvv/8RUvCQAAAFxDI8veE/v+94eaVOT3/wAAAFAFse//rVAT/T8AAACURuz7fzvUpCL9v/z/oOT/Xf8/k/93/f+27ZH/l//vZP3y//HMI/8v/1+s/P/mVW1wq+udn1+r6z3+6ub/83dG+X86KVr+P/b9vxNqUpH+HwAAAKog9v0fCDXR/wMAAMBA6PR/stvFvv9wqIn+HwAAAEoj9v1HQk0q0v/L/8v/y/8XNP//p9v+5XvffseRnfL/q8r/n3u//H/Vrev1/+sHv+v/y/8XLP+/Ftc7P79e468tc2kw+X/X/6f/ipb/j33/0VCTivT/AAAAUAWx7//dUBP9PwAAAJRG7PuPhZro/wEAAKA0Yt8/E2pSkf5f/l/+X/6/oPn/Ab7+f9wfrv/fqm/5/3jSlf/vaF3z/+9ZzInL/682/z/W8Vb5f/n/QR6//L/8P0sVLf8f+/7ZUJOK9P8AAABQBaHvHzqe18U79P8AAABQGrHvPxFqov8HAACA0oh9/wdDTSrS/8v/y//L/8v/l+n6/9k65f9rI67/X1Ty/90VJ//fmfy//P8gj1/+X/6fpYqW/499/1yoSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+D4ea6P8BgP9n706e7DrPOo6ftmSpVaYodizYUMWSPyELsoZ9WLCABVQBBQkQIMyRmceAgTBDIECYEoaEBBPAgJltMxjMbAMGzDyayRgoUe5+nqen0/d2t+7t+573/XwWflBbrXtRKbJ/kr4+AEA3cvd/QtwyyP7X/+v/9f/6f/3//Os3+/x//f9K+v/V9P9r6P/1//p//T8b1Vr/n7v/E+OWQfY/AAAAjCB3/2vjFvsfAAAAupG7/3Vxi/0PAAAArbt90a+Yu/+T4pZB9r/+X//fbf//Ifr/815f/6//79n19P8P1dfX/+v/9f9H9P/6f/0/p7XW/+fu/+S4ZZD9DwAAACPI3f8pcYv9DwAAAN3I3f/6uMX+BwAAgG7k7v/UuGWQ/X+q/9+bxuz/678Xof/vqP/3/P9zX1//fx/9/w39f+uu9/n/D7/yM5/+X/+v/w/6/wv1/+f+d8r0//Sotf4/d/+nxS2D7H8AAAAYQe7+T49b7H8AAADoRu7+N8Qt9j8AAAB0I3f/Z8Qtg+z/zT3//87Bxxfa/5eF9f+39P/6f/3/Nff/N4++rP9v0/X2/908//+BMx/poP9//TMPvfbF93zAo5d5ff2//t/z//X/bFZr/X/u/s+MWwbZ/wAAADCC3P2fFbfY/wAAANCN3P2fHbfY/wAAANCN3P2fE7cMsv831/8v+vn/ZWH9v+f/6//1/9fd/7/G8/9bp/9fbevP/7/RTv9/ldfX/+v/9f/6fzZr1/1/fsP55dz9nxu3DLL/AQAAYAS5+z8vbrH/AQAAoBu5+98Yt9j/AAAA0I3c/XfjlkH2v/5/+/3//+n/9f9x9f/6f/3/9un/V9t6/9/Q8/+v8vr6f/2//l//z2btuv8//eXc/Q/HLYPsfwAAABhB7v7Pj1vsfwAAAOhG7v4viFvsfwAAAOhG7v4vjFsG2f/6f8//1//r//X/86+v/18m/f9q+v819P/3288/qP9fYP8f/yKl/2cbLtn/v7zip+2N9P+5+78obhlk/wMAAMAIcvd/cdxi/wMAAEA3cvd/Sdxi/wMAAEA3cvd/adwyyP7X/+v/9f/6/yv3/2d/6B3Q/8/T/18P/f9qzfT/ezdnP6z/X3z/7/n/S+z/g/6fbWjt+f+5+78sbhlk/wMAAMAIcvd/edyyYv9f+hfzAQAAgJ3K3f8VcYvf/wcAAIDFy+osd/9Xxi2D7H/9v/5f/6//9/z/+ddf1f8/euz96f/bov9frZn+/xz6f/3/kt+//l//z1mt9f+5+78qbhlk/wMAAMAIcve/KW6x/wEAAKAbufu/Om6x/wEAAKAbufu/Jm4ZZP/P9/9Hf1//fzH6/5PvX/8//+NjU/1/fov6/5X9/6s9/39M+v/Vrr//v63/P/nt6/+3aNfvv/P+/866z9f/M6e1/j93/yNxyyD7HwAAAEaQu/9r4xb7HwAAALqRu//r4hb7HwAAALqRu//r45ZB9v+On///8K3z3pf+/4D+X//v+f9tPv9/uvb+/6b+/4L0/6t5/v8a+n/9v/7f8//ZqNb6/9z9b45bBtn/AAAAMII3vzQd7P5vmCb7HwAAAJbo+J8dOP0HSkPu/m+MW+x/AAAA6Ebu/m+KWwbZ/zvu/7f1/P8H1722/l//f/z7S/+v/597/bb6f8//vyj9/2r6/zX0/9vo52921v+/5bzPb6H/f6P+n8ac6P8fO/r4rvr/3P3fHLcMsv8BAABgBLn7vyVusf8BAACgG7n7vzVusf8BAACgG7n7vy1uGWT/b73/vxP3qY8789pb7P/X0v/r/49/f+n/9f9zr6//Xyb9/2r6/zX0/57/7/n/+n826kT/f8yu+v/c/d8etwyy/wEAAGAEufu/I26x/wEAAKAbufvfErfY/wAAANCN3P3fGbcMsv87ff7/Wvp//f/x7y/9v/5/7vX1/8uk/19N/7+G/l//r/9f3/+f/gd10P8zp7X+P3f/d8Utg+x/AAAAGEHu/rfGLfY/AAAAdCN3/3fHLfY/AAAAdCN3//fELYPsf/3/dvv//Lj+X/8/Xab/j0/Q/x/S/+v/L2Np/f/p//1cuV/fm/sn0Vnn9P9PfuzdDzv5Ef2//l//r//3/H82oIn+/97Rv13m7v/euGWQ/Q8AAAAjyN3/trjF/gcAAIBu5O7/vrjF/gcAAIBu5O7//rjlkvv//Tb6rq6P/t/z//X/Dfb/Qf9/SP+v/7+MpfX/p3n+v/5f/7/c96//1/9zVhP9/7Ev5+7/gbjF7/8DAABAN3L3/2DcYv8DAABAN3L3/1DcYv8DAABAN3L3vz1uGWT/6//1//p//b/+f/71r9r/70/z9P/XQ/+/mv5/Df2//l//r/9no1rr/3P3vyNuGWT/AwAAwAhy9/9w3GL/AwAAQDdy9/9I3GL/AwAAwJJkOjYrd/+Pxi2D7H/9v/5f/7+E/v9969vR/7ff/59H/389Ftr/10+DS+3/byyp/3/nijcw1//fu63/1//r//X/XFFr/X/u/h+LWwbZ/wAAADCC3P3vjFvsfwAAAOhG7v53xS32PwAAAHQjd/+Pxy2D7H/9v/5f/7+E/t/z/xfd/x/+9Kr/vyYL7f/LUvt/z//X/0/6f/2//p8ZrfX/ufvfHbcMsv8BAABgBLn73xO32P8AAADQjdz9PxG32P8AAADQjdz9j8Ytg+x//b/+X/+v/9f/z7++5/8v0/b6/2l3/f8LD1z2mzmX/n8N/b/+X/+v/2ejWuv/c/f/ZNwyyP4HAACAEeTuf2/cYv8DAABAN3L3/1TcYv8DAABAN3L3/3TcMsj+H7P/v6X/X3z//8j+3PvX/+v/J/3/8Dz/fzX9/xr6f/2//l//z0a11v/n7v+ZuGWQ/Q8AAAAjyN3/WNxi/wMAAEA3cvf/bNxi/wMAAEA3cvf/XNwyyP4fs//3/P/z+/9pWkb/7/n/k/6/h/5/f9L/b5z+f7WL9f+vPt3/38q/03b/f/Szh/7/anbdz2/t/T8wddT/3zn38/X/tKi1/j93/8/HLYPsfwAAABhB7v7HD3451f4HAACAvhz+2ZnHD/66P/1C3GL/AwAAQMtuXuYr5+7/xbhlkP2//P7/9qlP1P9P0/TsG7p//r/+f9L/99D/1/eq/n9z9P+ref7/Gvr/Pvt/z//X/7MzrfX/uft/KW4ZZP8DAADACHL3/3LcYv8DAABAN3L3/0rcYv8DAABAN3L3/2rcMsj+X37/f/oT9f/TfT3/X/9/8AH9v/5f/79Y+v/V9P9r6P/X9vN75/x7z6T/1//r/5nRWv+fu//X4pZB9j8AAACMIHf/E3GL/Q8AAADdyN3/ZNxi/wMAAEA3cvc/FbcMsv/1//p//f8y+/99/b/+X/8/q5X+/1Wv+tCn9f/6/x77/1X0//p//T+ntdb/5+7/9bhlkP0PAAAAI8jd/xtxi/0PAAAA3cjd/5txi/0PAAAA3cjd/1txyyD7/2z//+B0WKgemuv/o1HT/x+j/z/5/vX/8z8+PP9f/6//375W+n/P/7/a+9f/6/+X/P4v1f9/4NnP1//To9b6/9z9T8ctg+x/AAAAGEHu/t+OW+x/AAAA6Ebu/t+JW+x/AAAA6Ebu/mfilkH2v+f/6//1//p//f/86+v/l0n/v5r+fw39v/7f8/9f99E39P9sTmv9f+7+341bDobfB73PFf/fBAAAABqSu//34pZBfv8fAAAARpC7//fjFvsfAAAAupG7/w/ilkH2v/5f/6//1//r/+dfX/+/TPr/1fT/a4zT/+/PfXDX/fz92vX776b/9/x/Nqi1/j93/x/GLYPsfwAAABhB7v4/ilvsfwAAAOhG7v4/jlvsfwAAAOhG7v5n45ZB9r/+X//ff///Ufr/U6+v/9f/90z/n/9En6f/X2Oc/n/Wrvv5pb//Rvr/t32k/p+GtNb/5+5/Lm4ZZP8DAADACHL3/0ncYv8DAABAN3L3/2ncYv8DAABAN3L3/1ncMsj+30n/HzWk/v/6+/+9acT+3/P/9f/6/5Esp/9/6825j3r+v/5f/7/c999I/+/5/zSltf4/d//zezeH3P8AAACwVB/+wR//3EW/7vMHf92f/jxusf8BAACgG7n7/yJusf8BAACgG7n7/zJuGWT/e/7/WP3/mM//1//r//X/I1lO/z9P/6//1/8v9/3r//X/nNVa/5+7/4W45djwm/0P9AAAAACLkbv/r+KWQX7/HwAAAEaQu/+v45Yz+//eBf9UOwAAANCa3P1/E7cM8vv/+v/G+/9pS/1/fD39/yH9v/5/7vX1/8vUW/9/e2qq/7+3p//X/6+g/9f/6/85rbX+P3f/e989Dbn/AQAAoFMnfkXhbw/+uj/9Xdxi/wMAAEA3cvf/fdxi/wMAAEA3cvf/Q9wyyP7X/zfe/1/p+f936v/y/P/B+/837c++vv5f/9+z3vp/z/8//Lj+/5D+v+33r//X/3PWJfr/g0G67f4/d/8/xi2D7H8AAAAYQe7+f4pb7H8AAADoRu7+f45b7H8AAADoRu7+f4lbBtn/+v8d9P+P3J6mrfb/F3j+/+r+f2+a9P9d9P/nvH4//f/7P3T3iY/4mHe9Q//Pkevs//PHgv5f/7+D/v/t8eNP/9/Q+9f/6/85q7Xn/+fu/9e4ZZD9DwAAACPI3f9i3Fv5N+x/AAAA6Ebu/n+LW+x/AAAA6Ebu/n+PWwbZ//r/Hp//f9/9/06e/5/f1zvo/+8ur//Ppnj0/t/z//X/Z3n+/2r6/zWW0/8ffNnz/9t6//p//T9ntdb/5+7/j7hlkP0PAAAAI8jd/59xS+7/vUv/0j0AAADQmNz9/xW3+P1/AAAA6Ebu/pfilmXv/9esDYSC/l//30r/nzz//+jzPP//kP5f/38Z+v/V9P9r6P/1//p//T8b1Vr/n7v/v+OWZe9/AAAA4Jjc/S/HLfY/AAAAdCN3///ELfY/AAAAdCN3///GLYPsf/3/Rvr/O/r/k+9f/3+S/j9+POj/9f/XQP+/mv7/FbfOfwP6f/2//l//z0a11v/n7v//AAAA//+mMFRh") lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0) 1.095162269s ago: executing program 3 (id=21709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in=@remote, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@remote, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 910.344013ms ago: executing program 3 (id=21710): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x522, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @pix_mp={0x1, 0x1, 0x31435641, 0xfebac2b8fbe4c8cc, 0x8, [{0x1, 0x2}, {0x80000001, 0x8001}, {0x1, 0xffff}, {0x0, 0xd044}, {0xff, 0x81}, {0x0, 0x4}, {0x6, 0x8}, {0x10, 0xf6d8}], 0x8, 0x23, 0x2, 0x0, 0x6}}) 869.003953ms ago: executing program 4 (id=21711): r0 = socket$inet(0x2, 0x2, 0x1) readahead(r0, 0x2, 0xb702) 733.303526ms ago: executing program 3 (id=21712): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x7) 698.254527ms ago: executing program 4 (id=21713): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x5, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xffe0, 0x5}, {0x3, 0xe}}, [{0x4}, {0x1c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x24000000) 523.16463ms ago: executing program 4 (id=21714): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x5e, 0xfffffffd, 0xffffffff, 0x40}, 0x6, 0x2ee3, 0x0, 0x8, 0x0, 0x2}}) 522.68742ms ago: executing program 3 (id=21715): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000015c0)={&(0x7f00000010c0)=@generic={0x1e, "c4be1b95bc8cc9d64e06180bcd9ef6b5ea84e50d05fc0462579b47b8acc37d689a0bef6f0329df66645b93b40a83c8a35fb44a47687beca69546eb152af9151936a45755a17dc913b30acf9f874b0d4160af5c2f940371911e044da7f368c4f91102b272fd2dc18f34c69eab48ff82c6dac28c73a779c05f80fc808afc8b"}, 0x80, 0x0}, 0x8000) 404.842883ms ago: executing program 4 (id=21716): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) 299.028314ms ago: executing program 4 (id=21717): syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000009f40)='./file0\x00', &(0x7f0000009f80), 0x1, &(0x7f0000009fc0)={[{@redirect_dir_off}, {@volatile}]}) 283.228575ms ago: executing program 3 (id=21718): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000980)={0x7, 0x1, 0x3, "a3720435be83fa280e3c05fa73086f29e99e87a07059b46ad3ffa49748ffc23a", 0x47425247}) 136.960438ms ago: executing program 5 (id=21719): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r0], 0xd) 11.38357ms ago: executing program 3 (id=21720): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 0s ago: executing program 4 (id=21721): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x7, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) kernel console output (not intermixed with test programs): led to load $Extend. [ 1616.727985][T16267] ntfs3: loop4: ino=5, "/" directory corrupted [ 1616.797008][ T4267] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 1616.803689][ T4267] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 1617.000469][T16288] usb usb9: usbfs: process 16288 (syz.3.19651) did not claim interface 7 before use [ 1617.275470][T16298] netlink: 5 bytes leftover after parsing attributes in process `syz.5.19655'. [ 1617.360679][T16305] kcapi: manufacturer command 1 unknown. [ 1617.866598][T16322] libceph: resolve '0..' (ret=-3): failed [ 1618.103123][T16302] loop1: detected capacity change from 0 to 32768 [ 1618.120375][ T8041] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1618.378423][ T8041] usb 5-1: too many configurations: 227, using maximum allowed: 8 [ 1618.416072][ T8041] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1618.441316][ T8041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.475077][ T8041] usb 5-1: config 0 descriptor?? [ 1618.500764][ T8041] pwc: Samsung MPC-C10 USB webcam detected. [ 1618.524074][ T8041] pwc: Warning: more than 1 configuration available. [ 1618.571772][T16326] loop3: detected capacity change from 0 to 32768 [ 1618.598438][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19678'. [ 1618.620137][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19674'. [ 1618.699834][ T8041] pwc: send_video_command error -71 [ 1618.705086][ T8041] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1618.738368][ T8041] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1618.763314][ T8041] usb 5-1: USB disconnect, device number 4 [ 1618.858034][ T4271] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1618.917995][ T4258] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1619.082422][ T4271] usb 6-1: Using ep0 maxpacket: 16 [ 1619.089260][ T4271] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 1619.122094][ T4271] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1619.155620][ T4271] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1619.181235][ T4271] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 1619.212906][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.246607][ T4271] usb 6-1: Product: syz [ 1619.250798][ T4271] usb 6-1: Manufacturer: syz [ 1619.277152][ T4271] usb 6-1: SerialNumber: syz [ 1619.293949][ T4271] usb 6-1: config 0 descriptor?? [ 1619.316292][ T4271] usb 6-1: MIDIStreaming interface descriptor not found [ 1619.390720][ T4995] udevd[4995]: inotify_add_watch(7, /dev/nbd0p5, 10) failed: No such file or directory [ 1619.530964][ T7089] usb 6-1: USB disconnect, device number 41 [ 1619.818371][T16353] loop3: detected capacity change from 0 to 32768 [ 1619.835396][T16379] hsr0: VLAN not yet supported [ 1619.856452][T16353] /dev/loop3: Can't open blockdev [ 1620.251226][T16385] loop3: detected capacity change from 0 to 4096 [ 1620.275004][T16370] loop1: detected capacity change from 0 to 32768 [ 1620.290078][T16385] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1620.307585][T16370] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1620.372907][T16385] ntfs3: loop3: failed to convert "c46c" to koi8-r [ 1620.443578][T16390] loop5: detected capacity change from 0 to 256 [ 1620.544774][T16390] FAT-fs (loop5): Directory bread(block 64) failed [ 1620.554697][T16390] FAT-fs (loop5): Directory bread(block 65) failed [ 1620.594289][T16390] FAT-fs (loop5): Directory bread(block 66) failed [ 1620.622675][T16390] FAT-fs (loop5): Directory bread(block 67) failed [ 1620.623129][T16394] netlink: 'syz.3.19701': attribute type 21 has an invalid length. [ 1620.629272][T16390] FAT-fs (loop5): Directory bread(block 68) failed [ 1620.652807][ T4376] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1620.679511][T16381] loop4: detected capacity change from 0 to 32768 [ 1620.680576][T16394] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19701'. [ 1620.698057][T16390] FAT-fs (loop5): Directory bread(block 69) failed [ 1620.704676][T16390] FAT-fs (loop5): Directory bread(block 70) failed [ 1620.728170][T16381] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1620.761334][T16381] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1620.771816][T16394] netlink: 'syz.3.19701': attribute type 5 has an invalid length. [ 1620.778013][T16390] FAT-fs (loop5): Directory bread(block 71) failed [ 1620.812495][T16381] BTRFS info (device loop4): setting nodatasum [ 1620.814613][T16394] netlink: 'syz.3.19701': attribute type 6 has an invalid length. [ 1620.821354][T16390] FAT-fs (loop5): Directory bread(block 72) failed [ 1620.855542][T16394] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19701'. [ 1620.857171][T16381] BTRFS info (device loop4): force zlib compression, level 3 [ 1620.880093][T16390] FAT-fs (loop5): Directory bread(block 73) failed [ 1620.919170][T16381] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1620.973074][T16381] BTRFS info (device loop4): use lzo compression, level 0 [ 1621.024706][T16381] BTRFS info (device loop4): turning on flush-on-commit [ 1621.055041][T16381] BTRFS info (device loop4): enabling auto defrag [ 1621.098179][T16381] BTRFS info (device loop4): max_inline at 4096 [ 1621.163464][T16381] BTRFS info (device loop4): using free space tree [ 1621.454518][T16381] BTRFS info (device loop4): enabling ssd optimizations [ 1621.614493][T16418] loop5: detected capacity change from 0 to 32768 [ 1621.656100][T16418] (syz.5.19708,16418,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1621.694656][ T4267] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1621.705144][T16418] (syz.5.19708,16418,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1621.772967][T16418] JBD2: Ignoring recovery information on journal [ 1621.933407][T16412] loop1: detected capacity change from 0 to 32768 [ 1621.995014][T16418] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1622.269664][T16412] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1622.269664][T16412] [ 1622.289883][T16412] ERROR: (device loop1): remounting filesystem as read-only [ 1622.297408][T16412] ialloc: diAlloc returned -5! [ 1622.392429][T24286] ocfs2: Unmounting device (7,5) on (node local) [ 1622.591804][T16439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1623.450458][T16444] loop5: detected capacity change from 0 to 32768 [ 1623.534968][T16444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.19711 (16444) [ 1623.584754][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1623.584769][ T26] audit: type=1326 audit(1777396936.464:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.4.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1623.619610][ T26] audit: type=1326 audit(1777396936.492:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.4.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1623.678375][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19731'. [ 1623.714383][ T26] audit: type=1326 audit(1777396936.511:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.4.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1623.869454][T16479] ipt_CLUSTERIP: unknown mode 3 [ 1623.879735][T16444] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1623.927801][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.947524][T16444] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1623.956355][T16444] BTRFS info (device loop5): setting nodatasum [ 1623.990765][T16444] BTRFS info (device loop5): force zlib compression, level 3 [ 1624.022861][T16444] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1624.062200][T16444] BTRFS info (device loop5): use lzo compression, level 0 [ 1624.070157][ T26] audit: type=1326 audit(1777396936.913:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.1.19736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1624.117723][T16444] BTRFS info (device loop5): turning on flush-on-commit [ 1624.124698][T16444] BTRFS info (device loop5): enabling auto defrag [ 1624.153985][ T26] audit: type=1326 audit(1777396936.950:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.1.19736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1624.181946][T16444] BTRFS info (device loop5): max_inline at 4096 [ 1624.192983][T16444] BTRFS info (device loop5): using free space tree [ 1624.225504][ T26] audit: type=1326 audit(1777396936.950:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.1.19736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1624.274542][ T26] audit: type=1326 audit(1777396936.950:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.1.19736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1624.626178][T16524] loop4: detected capacity change from 0 to 1024 [ 1624.716435][T16444] BTRFS info (device loop5): enabling ssd optimizations [ 1625.034933][T24286] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1625.447000][T16551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19760'. [ 1625.494076][T16550] netlink: 'syz.4.19759': attribute type 10 has an invalid length. [ 1625.850288][T16550] team0 (unregistering): Port device team_slave_1 removed [ 1626.415277][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19777'. [ 1626.621978][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19782'. [ 1626.750224][T16606] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1627.535265][T16644] loop3: detected capacity change from 0 to 1024 [ 1627.557600][T16644] EXT4-fs: Ignoring removed orlov option [ 1627.588149][T16644] /dev/loop3: Can't open blockdev [ 1627.908031][T16662] netlink: 'syz.5.19814': attribute type 10 has an invalid length. [ 1627.971204][T16664] loop1: detected capacity change from 0 to 512 [ 1627.995768][T16664] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1628.027840][T16664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1628.090136][T16662] team0 (unregistering): Port device team_slave_0 removed [ 1628.117498][T16664] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1628.157424][T16662] team0 (unregistering): Port device team_slave_1 removed [ 1628.172030][T16671] loop3: detected capacity change from 0 to 256 [ 1628.231362][T16662] team0 (unregistering): Port device geneve0 removed [ 1628.341382][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1628.681874][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19826'. [ 1628.719065][ T26] audit: type=1326 audit(1777396941.263:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.3.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1628.815888][ T26] audit: type=1326 audit(1777396941.319:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.3.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1628.899626][ T26] audit: type=1326 audit(1777396941.319:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.3.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1628.922082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.973968][ T26] audit: type=1326 audit(1777396941.319:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.3.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1628.996400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.667823][T16725] loop3: detected capacity change from 0 to 128 [ 1629.751318][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1629.834402][T16731] netlink: 'syz.0.19848': attribute type 1 has an invalid length. [ 1629.866209][T16733] overlayfs: missing 'lowerdir' [ 1629.890632][T16731] netlink: 'syz.0.19848': attribute type 2 has an invalid length. [ 1629.952505][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19848'. [ 1630.316866][T16753] loop3: detected capacity change from 0 to 512 [ 1630.508368][T16757] loop1: detected capacity change from 0 to 4096 [ 1630.528628][T16757] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1631.775819][T16815] netlink: 'syz.1.19888': attribute type 21 has an invalid length. [ 1631.811903][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19888'. [ 1632.312798][T16845] netlink: 'syz.4.19903': attribute type 2 has an invalid length. [ 1632.331928][T16845] netlink: 'syz.4.19903': attribute type 1 has an invalid length. [ 1632.349205][T16836] loop3: detected capacity change from 0 to 4096 [ 1632.401249][T16836] /dev/loop3: Can't open blockdev [ 1632.471687][ T4376] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1632.516077][T16850] device bridge2 entered promiscuous mode [ 1632.758098][T16861] overlayfs: missing 'lowerdir' [ 1633.400474][T16886] overlayfs: missing 'workdir' [ 1633.489919][T16890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1633.545990][T16892] loop4: detected capacity change from 0 to 1024 [ 1633.658562][T16892] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1633.765760][T16902] loop5: detected capacity change from 0 to 164 [ 1633.850985][T16902] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1634.269883][T16918] loop5: detected capacity change from 0 to 2048 [ 1634.388497][T16918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1634.603535][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1634.846076][T16951] overlayfs: conflicting options: nfs_export=on,index=off [ 1635.343226][ T4314] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1635.483276][T16982] netlink: 340 bytes leftover after parsing attributes in process `syz.0.19969'. [ 1635.552072][T16986] IPVS: length: 193 != 8 [ 1635.564088][ T26] audit: type=1326 audit(1777396947.661:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1635.567331][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 1635.643813][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1635.682696][ T26] audit: type=1326 audit(1777396947.698:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1635.719086][ T4314] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1635.745773][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.758764][ T26] audit: type=1326 audit(1777396947.698:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1635.792691][ T4314] usb 2-1: Product: syz [ 1635.796882][ T4314] usb 2-1: Manufacturer: syz [ 1635.801500][ T4314] usb 2-1: SerialNumber: syz [ 1635.808066][ T26] audit: type=1326 audit(1777396947.698:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1635.835227][ T4314] usb 2-1: config 0 descriptor?? [ 1635.840879][T16961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1635.861708][ T4314] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1635.882203][ T26] audit: type=1326 audit(1777396947.698:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1635.999229][T17000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19978'. [ 1636.021625][ T26] audit: type=1326 audit(1777396947.698:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1636.142761][ T26] audit: type=1326 audit(1777396947.698:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1636.232336][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1636.238530][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1636.245367][ T4314] usb 2-1: USB disconnect, device number 13 [ 1636.262779][ T4314] mcba_usb 2-1:0.0 can0: device disconnected [ 1636.291283][ T26] audit: type=1326 audit(1777396947.698:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.5.19972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1636.999533][T17046] loop5: detected capacity change from 0 to 164 [ 1637.597001][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20004'. [ 1637.698597][T17030] loop3: detected capacity change from 0 to 32768 [ 1637.736910][T17030] /dev/loop3: Can't open blockdev [ 1637.753928][ T26] audit: type=1326 audit(1777396949.709:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17069 comm="syz.0.20006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1637.898403][ T26] audit: type=1326 audit(1777396949.737:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17069 comm="syz.0.20006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1638.694203][T17063] loop4: detected capacity change from 0 to 32768 [ 1638.726686][T17104] netlink: 220 bytes leftover after parsing attributes in process `syz.0.20020'. [ 1638.807346][T17109] tipc: Trying to set illegal importance in message [ 1639.094148][T17123] x_tables: arp_tables: AUDIT target: not valid for this family [ 1639.467569][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20030'. [ 1639.897904][T17158] netlink: 'syz.4.20041': attribute type 1 has an invalid length. [ 1639.905765][T17158] netlink: 'syz.4.20041': attribute type 2 has an invalid length. [ 1640.196033][T17172] loop1: detected capacity change from 0 to 128 [ 1640.309177][T17172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1640.335558][T17172] ext4 filesystem being mounted at /4123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.502841][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1640.801489][T17196] loop1: detected capacity change from 0 to 4096 [ 1640.867260][T17196] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1640.980289][T17196] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1641.055798][T17207] loop3: detected capacity change from 0 to 4096 [ 1641.150114][T17207] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1641.225112][T17207] ntfs3: loop3: failed to convert "c46c" to cp775 [ 1641.436570][ T4313] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1641.667892][ T4313] usb 6-1: Using ep0 maxpacket: 8 [ 1641.678061][ T4313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1641.710885][ T4313] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1641.741508][ T4313] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1641.765489][ T4313] usb 6-1: Product: syz [ 1641.782296][ T4313] usb 6-1: Manufacturer: syz [ 1641.786921][ T4313] usb 6-1: SerialNumber: syz [ 1641.896222][ T4310] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1642.024640][ T4313] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 1642.043436][ T4313] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1642.062482][ T4313] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1642.084203][ T4313] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1642.106549][ T4310] usb 4-1: Using ep0 maxpacket: 16 [ 1642.132962][ T4310] usb 4-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 1642.141594][ T4310] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 1642.185927][ T4310] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1642.209443][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.224869][ T4310] usb 4-1: Product: syz [ 1642.231515][ T4310] usb 4-1: Manufacturer: syz [ 1642.236132][ T4310] usb 4-1: SerialNumber: syz [ 1642.256124][ T4313] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1642.265886][ T4310] r8152-cfgselector 4-1: config 0 descriptor?? [ 1642.273155][ T4313] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1642.296618][ T4313] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1642.378263][ T4313] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1642.406561][T17262] device gre3 entered promiscuous mode [ 1642.418157][ T4313] usb 6-1: USB disconnect, device number 42 [ 1642.492857][ T4313] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1642.507242][ T4313] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1642.511024][ T4310] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1642.527861][ T4313] visor 6-1:1.0: device disconnected [ 1642.550635][ T4310] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 1642.975977][ T4312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1643.007814][T17283] netlink: 220 bytes leftover after parsing attributes in process `syz.5.20102'. [ 1643.211350][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 1643.231271][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.248672][T17277] loop1: detected capacity change from 0 to 32768 [ 1643.261338][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.282144][ T4312] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1643.305352][T17277] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1643.313650][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.315804][ T4312] usb 5-1: config 0 descriptor?? [ 1643.351138][ T4312] hub 5-1:0.0: USB hub found [ 1643.367153][T17277] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1643.430860][T17277] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1643.469567][ T4341] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1643.478808][ T4341] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1643.569226][ T4312] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 1643.619622][ T4341] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 1643.649102][ T4341] gfs2: fsid=syz:syz.0: jid=0: Done [ 1643.659376][T17277] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1643.802122][ T4312] usbhid 5-1:0.0: can't add hid device: -71 [ 1643.808148][ T4312] usbhid: probe of 5-1:0.0 failed with error -71 [ 1643.896438][ T4312] usb 5-1: USB disconnect, device number 5 [ 1644.194809][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20120'. [ 1645.020314][T17356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20139'. [ 1645.070680][T17360] loop1: detected capacity change from 0 to 512 [ 1645.089176][T17354] loop3: detected capacity change from 0 to 4096 [ 1645.099791][T17354] /dev/loop3: Can't open blockdev [ 1645.128568][T17360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1645.168799][T17360] ext4 filesystem being mounted at /4138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1645.254804][T17360] __quota_error: 2 callbacks suppressed [ 1645.254820][T17360] Quota error (device loop1): do_check_range: Getting block 115 out of range 1-5 [ 1645.302345][T17360] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1645.321837][T17360] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.20141: Failed to acquire dquot type 0 [ 1645.335510][ T4341] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1645.489657][T17369] loop5: detected capacity change from 0 to 4096 [ 1645.513773][T17369] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1645.535128][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1645.579317][ T4341] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1645.610462][ T4341] usb 5-1: config 0 has no interface number 0 [ 1645.622129][ T4341] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1645.647733][T17369] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1645.688105][T17369] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1645.704029][ T4341] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1645.719009][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.723732][T17369] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1645.747271][ T4341] usb 5-1: Product: syz [ 1645.751463][ T4341] usb 5-1: Manufacturer: syz [ 1645.777052][ T4341] usb 5-1: SerialNumber: syz [ 1645.782259][T17369] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1645.815416][ T4341] usb 5-1: config 0 descriptor?? [ 1645.863275][T17369] ntfs: volume version 3.1. [ 1645.867841][T17369] ntfs: (device loop5): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1645.908037][T17369] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 1645.932333][T17369] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1646.272197][ T4341] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1646.299575][ T4341] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1646.323343][ T4341] usb 5-1: USB disconnect, device number 6 [ 1646.525828][T17376] loop3: detected capacity change from 0 to 32768 [ 1646.599088][ T4376] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1646.817060][T17396] loop1: detected capacity change from 0 to 4096 [ 1646.864704][T17396] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1646.978433][T17400] loop5: detected capacity change from 0 to 4096 [ 1647.047118][T17400] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1647.131532][T17396] ntfs3: loop1: failed to convert "c46c" to cp775 [ 1647.441806][T17413] ieee802154 phy0 wpan0: encryption failed: -90 [ 1647.524088][T17418] loop4: detected capacity change from 0 to 164 [ 1647.585709][T17418] rock: directory entry would overflow storage [ 1647.605383][T17418] rock: sig=0x66, size=4, remaining=3 [ 1647.651225][T17418] rock: directory entry would overflow storage [ 1647.657432][T17418] rock: sig=0x66, size=4, remaining=3 [ 1647.703588][T17420] loop1: detected capacity change from 0 to 2048 [ 1647.815348][T17420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1647.926081][T17420] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #12: block 2: comm syz.1.20170: lblock 0 mapped to illegal pblock 2 (length 1) [ 1648.097676][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1648.158451][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20173'. [ 1649.655202][T17498] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 1650.035136][T17512] loop1: detected capacity change from 0 to 4096 [ 1650.085210][ T3598] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1650.117428][T17516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1650.136517][T17512] NILFS error (device loop1): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 1650.166822][T17512] Remounting filesystem read-only [ 1650.292465][ T3598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1650.329973][ T3598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1650.364053][ T3598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1650.393266][ T3598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1650.449485][ T3598] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1650.458561][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.483684][ T3598] usb 6-1: Product: syz [ 1650.488366][ T3598] usb 6-1: Manufacturer: syz [ 1650.493058][ T3598] usb 6-1: SerialNumber: syz [ 1650.521372][ T3598] usb 6-1: config 0 descriptor?? [ 1650.580227][T17532] loop4: detected capacity change from 0 to 2048 [ 1650.662233][T17532] Alternate GPT is invalid, using primary GPT. [ 1650.664410][ T4314] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1650.679513][T17532] loop4: p1 p2 p3 [ 1650.755188][ T3598] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1650.776833][ T3598] usb 6-1: USB disconnect, device number 43 [ 1650.900466][ T4314] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1650.933061][ T4314] usb 2-1: config 1 has no interface number 0 [ 1650.939189][ T4314] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1650.989100][ T4314] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1651.015335][ T4314] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1651.030608][ T4314] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 1651.040491][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.055985][ T4314] usb 2-1: Product: syz [ 1651.077048][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1651.079007][ T4314] usb 2-1: Manufacturer: syz [ 1651.087138][ T4995] udevd[4995]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1651.100258][ T4376] udevd[4376]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1651.120149][ T4314] usb 2-1: SerialNumber: syz [ 1651.251279][T17550] netlink: 'syz.3.20229': attribute type 33 has an invalid length. [ 1651.270142][T17550] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20229'. [ 1651.377501][T17552] IPv6: sit3: Disabled Multicast RS [ 1651.386962][ T4314] usb 2-1: 1:0 : does not exist [ 1651.395613][ T4314] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 1651.452566][ T4314] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1651.473965][ T4314] usb 2-1: USB disconnect, device number 14 [ 1651.520457][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1651.600698][T17556] loop3: detected capacity change from 0 to 4096 [ 1652.145007][T17570] netlink: 'syz.1.20239': attribute type 3 has an invalid length. [ 1652.449754][T17582] ip6t_rpfilter: unknown options [ 1652.610363][T17593] netlink: 'syz.4.20249': attribute type 7 has an invalid length. [ 1652.826483][T17597] device team0 entered promiscuous mode [ 1652.842598][T17597] device team_slave_0 entered promiscuous mode [ 1652.857418][T17597] device team_slave_1 entered promiscuous mode [ 1652.867637][T17597] device geneve0 entered promiscuous mode [ 1652.881345][T17597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1652.896875][ T4312] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1652.912275][T17597] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1653.121302][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 1653.128900][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.176801][ T4312] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1653.194253][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.224094][ T4312] usb 4-1: Product: syz [ 1653.239137][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20260'. [ 1653.245677][ T4312] usb 4-1: Manufacturer: syz [ 1653.266874][T17614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20260'. [ 1653.278034][ T4312] usb 4-1: SerialNumber: syz [ 1653.290726][ T4312] usb 4-1: config 0 descriptor?? [ 1653.315372][ T4312] asix: probe of 4-1:0.0 failed with error -22 [ 1653.461182][T17623] program syz.4.20265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1653.552755][ T4312] usb 4-1: USB disconnect, device number 36 [ 1653.555166][T17627] delete_channel: no stack [ 1653.777815][T17636] loop5: detected capacity change from 0 to 2048 [ 1653.816728][T17640] netlink: 'syz.1.20273': attribute type 3 has an invalid length. [ 1653.827531][T17640] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20273'. [ 1653.864333][T17642] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1653.896314][T17636] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1653.973446][T17636] Remounting filesystem read-only [ 1654.393044][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1654.393058][ T26] audit: type=1326 audit(1777396965.274:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.0.20284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1654.421665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.468565][ T3598] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1654.538857][T17670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1654.569124][ T26] audit: type=1326 audit(1777396965.274:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.0.20284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1654.598919][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20287'. [ 1654.650354][ T26] audit: type=1326 audit(1777396965.312:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.0.20284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1654.711760][ T26] audit: type=1326 audit(1777396965.312:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.0.20284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1654.746697][ T3598] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1654.799093][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.820101][ T26] audit: type=1326 audit(1777396965.312:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.0.20284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1654.824669][ T3598] usb 6-1: Product: syz [ 1654.877052][ T3598] usb 6-1: Manufacturer: syz [ 1654.881907][ T3598] usb 6-1: SerialNumber: syz [ 1654.908725][ T3598] r8152-cfgselector 6-1: config 0 descriptor?? [ 1655.277078][T17698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20301'. [ 1655.375908][ T3598] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1655.382446][ T4313] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1655.416837][ T3598] r8152-cfgselector 6-1: USB disconnect, device number 44 [ 1655.461779][T17706] loop4: detected capacity change from 0 to 64 [ 1655.601571][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 1655.610484][ T4313] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1655.633878][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.651297][ T4313] usb 2-1: config 0 has no interface number 0 [ 1655.673325][ T4313] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1655.713724][ T4313] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1655.736097][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.753368][ T4313] usb 2-1: Product: syz [ 1655.762022][ T4313] usb 2-1: Manufacturer: syz [ 1655.766642][ T4313] usb 2-1: SerialNumber: syz [ 1655.789855][ T4313] usb 2-1: config 0 descriptor?? [ 1656.318854][ T4313] usb 2-1: USB disconnect, device number 15 [ 1656.349292][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.416910][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20325'. [ 1656.442163][T17745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.266800][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20344'. [ 1657.308493][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20344'. [ 1657.930627][T17808] loop4: detected capacity change from 0 to 4096 [ 1658.004273][ T4267] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 1658.021001][ T4267] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1658.260009][T17824] loop1: detected capacity change from 0 to 1024 [ 1658.287198][T17822] loop5: detected capacity change from 0 to 4096 [ 1658.297521][T17824] EXT4-fs: Ignoring removed orlov option [ 1658.317799][T17824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1658.361012][T17822] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1658.405416][T17822] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1658.425741][T17824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1658.459108][T17822] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1658.488120][T17822] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1658.512117][T17822] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1658.535594][T17822] ntfs: volume version 3.1. [ 1658.637150][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1658.743172][T17842] loop4: detected capacity change from 0 to 512 [ 1658.854795][T17842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1658.933008][T17842] ext4 filesystem being mounted at /4062/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.029682][T17855] netlink: 'syz.5.20377': attribute type 1 has an invalid length. [ 1659.049613][T17842] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.20371: Failed to acquire dquot type 0 [ 1659.257154][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 1659.429247][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20384'. [ 1659.573248][T17875] loop3: detected capacity change from 0 to 1024 [ 1659.750736][T17882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20391'. [ 1660.335082][T17911] loop1: detected capacity change from 0 to 1024 [ 1660.382722][T17911] EXT4-fs: Ignoring removed nobh option [ 1660.388360][T17911] EXT4-fs: inline encryption not supported [ 1660.511593][T17911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1660.549674][T17911] ext4 filesystem being mounted at /4188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.641820][T17911] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.20405: corrupted xattr block 128 [ 1660.780859][T17915] loop3: detected capacity change from 0 to 40427 [ 1660.898328][T17926] loop4: detected capacity change from 0 to 764 [ 1660.905812][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1661.065200][T17926] Symlink component flag not implemented [ 1661.093609][T17926] Symlink component flag not implemented (122) [ 1661.763913][T17953] loop4: detected capacity change from 0 to 4096 [ 1661.799302][T17953] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 1661.858462][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1661.858478][ T26] audit: type=1326 audit(1777396972.262:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.5.20428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1661.955543][ T26] audit: type=1326 audit(1777396972.262:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.5.20428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1662.048759][ T26] audit: type=1326 audit(1777396972.262:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.5.20428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1662.141689][ T26] audit: type=1326 audit(1777396972.262:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.5.20428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1662.450261][T17949] loop1: detected capacity change from 0 to 32768 [ 1662.557086][T17949] XFS (loop1): Mounting V5 Filesystem [ 1662.724494][T17949] XFS (loop1): Ending clean mount [ 1662.798877][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20444'. [ 1662.900674][ T4268] XFS (loop1): Unmounting Filesystem [ 1662.941292][T18001] loop5: detected capacity change from 0 to 256 [ 1662.990306][T18001] exfat: Deprecated parameter 'namecase' [ 1663.008846][T18001] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1663.984298][T18043] set match dimension is over the limit! [ 1664.073605][T18047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1664.424260][T18063] program syz.5.20477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1664.444661][T18066] comedi: valid board names for 8255 driver are: [ 1664.451024][T18066] 8255 [ 1664.471361][T18066] comedi: valid board names for vmk80xx driver are: [ 1664.482141][T18066] vmk80xx [ 1664.499678][T18066] comedi: valid board names for usbduxsigma driver are: [ 1664.528534][T18066] usbduxsigma [ 1664.542797][T18066] comedi: valid board names for usbduxfast driver are: [ 1664.564281][T18066] usbduxfast [ 1664.567726][T18066] comedi: valid board names for usbdux driver are: [ 1664.575718][T18066] usbdux [ 1664.578721][T18066] comedi: valid board names for ni6501 driver are: [ 1664.588805][T18066] ni6501 [ 1664.591795][T18066] comedi: valid board names for dt9812 driver are: [ 1664.598569][T18066] dt9812 [ 1664.601562][T18066] comedi: valid board names for ni_labpc_cs driver are: [ 1664.608697][T18066] ni_labpc_cs [ 1664.612213][T18066] comedi: valid board names for ni_daq_700 driver are: [ 1664.619529][T18066] ni_daq_700 [ 1664.623004][T18066] comedi: valid board names for labpc_pci driver are: [ 1664.631144][T18066] labpc_pci [ 1664.659927][T18066] comedi: valid board names for adl_pci9118 driver are: [ 1664.666879][T18066] pci9118dg [ 1664.677931][T18066] pci9118hg [ 1664.689104][T18066] pci9118hr [ 1664.692434][T18066] comedi: valid board names for 8255_pci driver are: [ 1664.699966][T18066] 8255_pci [ 1664.717863][T18066] comedi: valid board names for s526 driver are: [ 1664.736747][T18066] s526 [ 1664.739537][T18066] comedi: valid board names for multiq3 driver are: [ 1664.746505][T18066] multiq3 [ 1664.749972][T18066] comedi: valid board names for pcmuio driver are: [ 1664.767065][ T4312] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1664.771781][T18066] pcmuio48 [ 1664.778121][T18066] pcmuio96 [ 1664.781288][T18077] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1664.791951][T18066] comedi: valid board names for pcmmio driver are: [ 1664.799154][T18066] pcmmio [ 1664.802118][T18066] comedi: valid board names for pcmda12 driver are: [ 1664.809122][T18066] pcmda12 [ 1664.817041][T18066] comedi: valid board names for pcmad driver are: [ 1664.827685][T18066] pcmad12 [ 1664.830730][T18066] pcmad16 [ 1664.833761][T18066] comedi: valid board names for ni_labpc driver are: [ 1664.881042][T18066] lab-pc-1200 [ 1664.884448][T18066] lab-pc-1200ai [ 1664.898443][T18066] lab-pc+ [ 1664.901592][T18066] comedi: valid board names for atmio16 driver are: [ 1664.908865][T18066] atmio16 [ 1664.911911][T18066] atmio16d [ 1664.924122][T18066] comedi: valid board names for ni_at_ao driver are: [ 1664.938813][T18066] at-ao-6 [ 1664.956505][T18066] at-ao-10 [ 1664.959643][T18066] comedi: valid board names for ni_at_a2150 driver are: [ 1664.980311][T18066] ni_at_a2150 [ 1664.983707][T18066] comedi: valid board names for adq12b driver are: [ 1665.005099][T18066] adq12b [ 1665.007201][ T4312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.008044][T18066] comedi: valid board names for mpc624 driver are: [ 1665.008056][T18066] mpc624 [ 1665.008065][T18066] comedi: valid board names for c6xdigio driver are: [ 1665.008074][T18066] c6xdigio [ 1665.024137][ T4312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1665.037675][T18066] comedi: valid board names for aio_iiro_16 driver are: [ 1665.055298][T18066] aio_iiro_16 [ 1665.059239][T18066] comedi: valid board names for aio_aio12_8 driver are: [ 1665.071613][ T4312] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1665.094835][T18066] aio_aio12_8 [ 1665.102630][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1665.104470][T18066] aio_ai12_8 [ 1665.125237][T18066] aio_ao12_4 [ 1665.136493][ T4312] usb 5-1: SerialNumber: syz [ 1665.137647][T18066] comedi: valid board names for fl512 driver are: [ 1665.167769][T18066] fl512 [ 1665.171416][ T4312] usb 5-1: 0:2 : does not exist [ 1665.178239][T18066] comedi: valid board names for dmm32at driver are: [ 1665.191220][T18066] dmm32at [ 1665.194268][T18066] comedi: valid board names for dt282x driver are: [ 1665.233172][T18066] dt2821 [ 1665.244502][T18066] dt2821-f [ 1665.261921][T18066] dt2821-g [ 1665.265058][T18066] dt2823 [ 1665.269016][T18066] dt2824-pgh [ 1665.272429][T18066] dt2824-pgl [ 1665.276010][T18066] dt2825 [ 1665.317554][T18066] dt2827 [ 1665.321024][T18066] dt2828 [ 1665.324006][T18066] dt2829 [ 1665.326951][T18066] dt21-ez [ 1665.374095][T18066] dt23-ez [ 1665.377257][T18066] dt24-ez [ 1665.380286][T18066] dt24-ez-pgl [ 1665.413839][T18066] comedi: valid board names for dt2817 driver are: [ 1665.432249][T18066] dt2817 [ 1665.435229][T18066] comedi: valid board names for dt2815 driver are: [ 1665.452927][T18066] dt2815 [ 1665.459708][T18066] comedi: valid board names for dt2814 driver are: [ 1665.470248][T18066] dt2814 [ 1665.473212][T18066] comedi: valid board names for dt2811 driver are: [ 1665.491067][T18066] dt2811-pgh [ 1665.494371][T18066] dt2811-pgl [ 1665.497666][T18066] comedi: valid board names for dt2801 driver are: [ 1665.511768][T18066] dt2801 [ 1665.514761][T18066] comedi: valid board names for das6402 driver are: [ 1665.532383][T18066] das6402-12 [ 1665.543776][T18066] das6402-16 [ 1665.547130][T18066] comedi: valid board names for das1800 driver are: [ 1665.553733][T18066] das-1701st [ 1665.565171][T18066] das-1701st-da [ 1665.584193][T18066] das-1702st [ 1665.587822][T18066] das-1702st-da [ 1665.593474][T18066] das-1702hr [ 1665.596800][T18066] das-1702hr-da [ 1665.600952][T18066] das-1701ao [ 1665.604404][T18066] das-1702ao [ 1665.607704][T18066] das-1801st [ 1665.608194][ T4312] usb 5-1: USB disconnect, device number 7 [ 1665.611474][T18066] das-1801st-da [ 1665.626525][T18100] netlink: 'syz.3.20494': attribute type 3 has an invalid length. [ 1665.636310][T18066] das-1802st [ 1665.645511][T18066] das-1802st-da [ 1665.649082][T18066] das-1802hr [ 1665.663376][T18066] das-1802hr-da [ 1665.666956][T18066] das-1801hc [ 1665.681205][T18066] das-1802hc [ 1665.691578][T18066] das-1801ao [ 1665.695801][T18066] das-1802ao [ 1665.699106][T18066] comedi: valid board names for das800 driver are: [ 1665.725649][T18066] das-800 [ 1665.728818][T18066] cio-das800 [ 1665.732111][T18066] das-801 [ 1665.735136][T18066] cio-das801 [ 1665.738896][T18066] das-802 [ 1665.742042][T18066] cio-das802 [ 1665.745334][T18066] cio-das802/16 [ 1665.749293][T18066] comedi: valid board names for isa-das08 driver are: [ 1665.756170][T18066] isa-das08 [ 1665.766103][T18066] das08-pgm [ 1665.771808][T18066] das08-pgh [ 1665.775031][T18066] das08-pgl [ 1665.778335][T18066] das08-aoh [ 1665.785943][T18066] das08-aol [ 1665.789203][T18066] das08-aom [ 1665.798690][T18066] das08/jr-ao [ 1665.807799][T18066] das08jr-16-ao [ 1665.814852][T18066] pc104-das08 [ 1665.818305][T18066] das08jr/16 [ 1665.821607][T18066] comedi: valid board names for das16m1 driver are: [ 1665.845739][T18066] das16m1 [ 1665.849117][T18066] comedi: valid board names for dac02 driver are: [ 1665.873285][T18066] dac02 [ 1665.882282][T18066] comedi: valid board names for rti802 driver are: [ 1665.899752][T18066] rti802 [ 1665.902716][T18066] comedi: valid board names for rti800 driver are: [ 1665.918074][T18066] rti800 [ 1665.925282][T18066] rti815 [ 1665.928246][T18066] comedi: valid board names for pcm3724 driver are: [ 1665.948896][T18066] pcm3724 [ 1665.961734][T18066] comedi: valid board names for pcl818 driver are: [ 1665.977912][T18066] pcl818l [ 1665.981069][T18066] pcl818h [ 1665.987915][T18066] pcl818hd [ 1665.991065][T18066] pcl818hg [ 1665.994559][T18066] pcl818 [ 1665.997511][T18066] pcl718 [ 1666.000453][T18066] pcm3718 [ 1666.003953][T18066] comedi: valid board names for pcl816 driver are: [ 1666.010597][T18066] pcl816 [ 1666.013548][T18066] pcl814b [ 1666.017260][T18066] comedi: valid board names for pcl812 driver are: [ 1666.032107][T18066] pcl812 [ 1666.035082][T18066] pcl812pg [ 1666.042892][T18066] acl8112pg [ 1666.046121][T18066] acl8112dg [ 1666.068370][T18066] acl8112hg [ 1666.071589][T18066] a821pgl [ 1666.074628][T18066] a821pglnda [ 1666.088837][T18066] a821pgh [ 1666.092558][T18066] a822pgl [ 1666.095933][T18066] a822pgh [ 1666.098979][T18066] a823pgl [ 1666.104515][T18066] a823pgh [ 1666.107890][T18066] pcl813 [ 1666.121171][T18066] pcl813b [ 1666.124314][T18066] acl8113 [ 1666.127355][T18066] iso813 [ 1666.130300][T18066] acl8216 [ 1666.138461][T18066] a826pg [ 1666.141429][T18066] comedi: valid board names for pcl730 driver are: [ 1666.148717][T18066] pcl730 [ 1666.151769][T18066] iso730 [ 1666.155208][T18066] acl7130 [ 1666.158245][T18066] pcm3730 [ 1666.164223][T18114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20501'. [ 1666.184140][T18066] pcl725 [ 1666.187488][T18066] p8r8dio [ 1666.190525][T18066] acl7225b [ 1666.193639][T18066] p16r16dio [ 1666.205911][T18066] pcl733 [ 1666.228010][T18066] pcl734 [ 1666.237159][T18066] opmm-1616-xt [ 1666.241027][T18066] pearl-mm-p [ 1666.249985][T18066] ir104-pbf [ 1666.253227][T18066] comedi: valid board names for pcl726 driver are: [ 1666.270648][T18066] pcl726 [ 1666.274282][T18066] pcl727 [ 1666.281722][T18066] pcl728 [ 1666.284681][T18066] acl6126 [ 1666.287720][T18066] acl6128 [ 1666.301582][T18066] comedi: valid board names for pcl724 driver are: [ 1666.334953][T18066] pcl724 [ 1666.338015][T18066] pcl722 [ 1666.340957][T18066] pcl731 [ 1666.343896][T18066] acl7122 [ 1666.375302][T18066] acl7124 [ 1666.378653][T18066] pet48dio [ 1666.381782][T18066] pcmio48 [ 1666.384807][T18066] onyx-mm-dio [ 1666.408200][T18066] comedi: valid board names for pcl711 driver are: [ 1666.417918][T18066] pcl711 [ 1666.433781][T18066] pcl711b [ 1666.436842][T18066] acl8112hg [ 1666.450928][T18066] acl8112dg [ 1666.459711][T18066] comedi: valid board names for amplc_pc263 driver are: [ 1666.488770][T18066] pc263 [ 1666.491644][T18066] comedi: valid board names for amplc_pc236 driver are: [ 1666.531826][T18066] pc36at [ 1666.534793][T18066] comedi: valid board names for amplc_dio200 driver are: [ 1666.556173][T18066] pc212e [ 1666.559151][T18066] pc214e [ 1666.563129][T18066] pc215e [ 1666.566161][T18066] pc218e [ 1666.569590][T18066] pc272e [ 1666.573171][T18066] comedi: valid board names for comedi_parport driver are: [ 1666.580483][T18066] comedi_parport [ 1666.584573][T18066] comedi: valid board names for comedi_test driver are: [ 1666.596700][ T93] block nbd4: Attempted send on invalid socket [ 1666.596719][T18122] loop3: detected capacity change from 0 to 4096 [ 1666.602937][ T93] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1666.603419][T18124] F2FS-fs (nbd4): Unable to read 1th superblock [ 1666.617934][T18112] loop5: detected capacity change from 0 to 32768 [ 1666.618508][T18066] comedi_test [ 1666.635069][T18066] comedi: valid board names for comedi_bond driver are: [ 1666.642026][T18066] comedi_bond [ 1666.646199][ T93] block nbd4: Attempted send on invalid socket [ 1666.652380][ T93] I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1666.662647][T18124] F2FS-fs (nbd4): Unable to read 2th superblock [ 1666.667837][T18122] /dev/loop3: Can't open blockdev [ 1666.809456][T18112] XFS (loop5): Mounting V5 Filesystem [ 1666.890024][T18135] SET target dimension over the limit! [ 1666.902225][ T26] audit: type=1107 audit(1777396976.967:657): pid=18130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1666.966899][T18112] XFS (loop5): Ending clean mount [ 1667.053742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.347549][T24286] XFS (loop5): Unmounting Filesystem [ 1667.467808][T18157] loop1: detected capacity change from 0 to 1024 [ 1667.562555][T18157] EXT4-fs: Ignoring removed orlov option [ 1667.568353][T18157] EXT4-fs: inline encryption not supported [ 1667.595665][T18157] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 1667.612746][T18157] EXT4-fs (loop1): invalid journal inode [ 1667.637307][T18157] EXT4-fs (loop1): can't get journal size [ 1667.658830][T18164] netlink: 320 bytes leftover after parsing attributes in process `syz.3.20523'. [ 1667.688057][T18157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1667.729020][T18160] wlan1: mtu less than device minimum [ 1667.735511][T18160] team0: Device wlan1 failed to change mtu [ 1667.741171][T18157] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 1667.741171][T18157] [ 1667.903189][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1668.088319][ T4341] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1668.148894][T18176] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1668.292861][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1668.312538][T18163] loop4: detected capacity change from 0 to 32768 [ 1668.324012][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1668.359267][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1668.393724][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1668.404404][T18163] XFS (loop4): Mounting V5 Filesystem [ 1668.417024][ T4341] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1668.471200][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.493339][T18163] XFS (loop4): Ending clean mount [ 1668.525436][ T4341] usb 4-1: Product: syz [ 1668.550882][ T4341] usb 4-1: Manufacturer: syz [ 1668.571786][ T4341] usb 4-1: SerialNumber: syz [ 1668.591237][ T4267] XFS (loop4): Unmounting Filesystem [ 1668.597596][ T4341] usb 4-1: config 0 descriptor?? [ 1668.847197][ T4341] adutux 4-1:0.0: Could not retrieve serial number [ 1668.864661][ T4341] adutux: probe of 4-1:0.0 failed with error -5 [ 1669.071072][ T4314] usb 4-1: USB disconnect, device number 37 [ 1669.082196][T18210] ip6t_srh: unknown srh match flags 4000 [ 1669.114113][T18212] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1669.271229][ T4341] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1669.494701][ T4341] usb 2-1: Using ep0 maxpacket: 8 [ 1669.501588][ T4341] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 155, setting to 64 [ 1669.527996][ T4341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1669.544198][ T4341] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1669.569400][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.585439][ T4341] usb 2-1: Product: syz [ 1669.595529][ T4341] usb 2-1: Manufacturer: syz [ 1669.600162][ T4341] usb 2-1: SerialNumber: syz [ 1669.637501][ T4341] usb 2-1: config 0 descriptor?? [ 1669.659416][ T4341] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1669.866352][ T4341] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1669.886625][ T4341] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 1669.984795][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.991510][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.999964][ T1267] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1670.028411][T18226] loop5: detected capacity change from 0 to 32768 [ 1670.116761][ T3598] usb 2-1: USB disconnect, device number 16 [ 1670.179402][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20553'. [ 1670.202320][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20553'. [ 1670.730804][T18256] loop4: detected capacity change from 0 to 128 [ 1670.784699][T18256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1670.828015][T18256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1671.167217][ T4312] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1671.326323][T18284] loop4: detected capacity change from 0 to 256 [ 1671.370342][ T4312] usb 2-1: Using ep0 maxpacket: 8 [ 1671.377203][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1671.379502][T18284] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1671.409971][ T4312] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1671.428899][T18284] FAT-fs (loop4): Filesystem has been set read-only [ 1671.440958][ T4312] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1671.445207][T18284] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1671.464192][ T4312] usb 2-1: Product: syz [ 1671.487809][ T4312] usb 2-1: Manufacturer: syz [ 1671.492435][ T4312] usb 2-1: SerialNumber: syz [ 1671.496694][T18284] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1671.509157][ T4313] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1671.537020][ T26] audit: type=1800 audit(1777396981.307:658): pid=18284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20576" name="file1" dev="loop4" ino=1048711 res=0 errno=0 [ 1671.537373][T18284] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1671.724630][ T4313] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1671.754485][ T4313] usb 4-1: config 0 has no interface number 0 [ 1671.770335][ T4313] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1671.780500][ T4312] usb 2-1: Invalid connection information received from device [ 1671.800151][ T4313] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1671.840535][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.859472][ T4313] usb 4-1: Product: syz [ 1671.870180][ T4313] usb 4-1: Manufacturer: syz [ 1671.880965][ T4313] usb 4-1: SerialNumber: syz [ 1671.906582][ T4313] usb 4-1: config 0 descriptor?? [ 1672.003172][ T4341] usb 2-1: USB disconnect, device number 17 [ 1672.133081][ T4313] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1672.151425][ T4313] usb 4-1: USB disconnect, device number 38 [ 1672.206856][T18312] loop5: detected capacity change from 0 to 4096 [ 1672.220579][T18312] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1672.822649][T18338] loop3: detected capacity change from 0 to 256 [ 1672.868835][T18338] exfat: Deprecated parameter 'namecase' [ 1672.899557][T18338] /dev/loop3: Can't open blockdev [ 1672.932542][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1673.122784][T18349] netlink: 'syz.0.20607': attribute type 11 has an invalid length. [ 1673.176960][T18349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20607'. [ 1673.189803][T18355] netlink: 'syz.1.20611': attribute type 3 has an invalid length. [ 1674.197636][T18404] ptrace attach of "./syz-executor exec"[24286] was attempted by ""[18404] [ 1674.364184][T18412] netlink: 'syz.3.20637': attribute type 2 has an invalid length. [ 1674.418104][T18414] loop5: detected capacity change from 0 to 512 [ 1674.531439][T18414] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1674.563235][T18418] program syz.1.20641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.574050][T18414] ext4 filesystem being mounted at /2407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1674.695366][T18425] loop3: detected capacity change from 0 to 8 [ 1674.702271][T18425] /dev/loop3: Can't open blockdev [ 1674.784487][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1674.930228][T18432] netlink: 'syz.5.20647': attribute type 6 has an invalid length. [ 1675.122054][T18443] netlink: 'syz.4.20651': attribute type 5 has an invalid length. [ 1675.159754][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20654'. [ 1675.240230][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20654'. [ 1675.624594][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20664'. [ 1675.671502][T18465] device geneve4 entered promiscuous mode [ 1675.728563][T18467] loop1: detected capacity change from 0 to 8 [ 1676.002228][ T26] audit: type=1326 audit(1777396985.479:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.007503][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20671'. [ 1676.107296][ T26] audit: type=1326 audit(1777396985.488:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.188317][ T26] audit: type=1326 audit(1777396985.488:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.254136][ T26] audit: type=1326 audit(1777396985.488:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.309382][ T26] audit: type=1326 audit(1777396985.488:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.365357][ T26] audit: type=1326 audit(1777396985.488:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.420080][T18484] loop4: detected capacity change from 0 to 256 [ 1676.458780][T18484] exfat: Deprecated parameter 'namecase' [ 1676.459244][ T26] audit: type=1326 audit(1777396985.488:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.464705][T18484] exfat: Deprecated parameter 'utf8' [ 1676.577306][ T26] audit: type=1326 audit(1777396985.488:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.3.20670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52a179cdd9 code=0x7ffc0000 [ 1676.624425][T18484] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1676.668495][T18484] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1677.450114][T18488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1677.594792][T18531] netlink: 240 bytes leftover after parsing attributes in process `syz.5.20696'. [ 1677.634918][ T4341] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1677.806095][ T4314] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 1677.839918][ T4341] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1677.858974][ T4341] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1677.895274][ T4341] usb 2-1: config 0 has no interface number 0 [ 1677.901419][ T4341] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 1677.959623][ T4341] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.983608][ T4341] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1678.002660][ T4341] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1678.018743][ T4341] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1678.032675][ T4314] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1678.040756][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1678.052093][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20706'. [ 1678.062125][ T4341] usb 2-1: Manufacturer: syz [ 1678.067844][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1678.086042][ T4341] usb 2-1: config 0 descriptor?? [ 1678.099189][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1678.112348][ T4341] hub 2-1:0.52: bad descriptor, ignoring hub [ 1678.119603][ T4341] hub: probe of 2-1:0.52 failed with error -5 [ 1678.125797][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1678.159193][ T4314] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1678.177505][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1678.197466][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1678.221677][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1678.248483][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1678.261712][ T4314] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1678.281774][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1678.294443][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1678.313650][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1678.348043][ T4341] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input116 [ 1678.365886][ T4314] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1678.419051][ T4314] usb 4-1: string descriptor 0 read error: -22 [ 1678.440504][ T4314] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1678.470075][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.530056][ T4314] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1678.725516][ T4314] usb 2-1: USB disconnect, device number 18 [ 1678.768187][T18553] loop5: detected capacity change from 0 to 32768 [ 1678.776305][ T4310] usb 4-1: USB disconnect, device number 39 [ 1678.841837][T18553] XFS (loop5): Mounting V5 Filesystem [ 1678.923696][T18553] XFS (loop5): Ending clean mount [ 1678.942419][T18553] XFS (loop5): Quotacheck needed: Please wait. [ 1679.008846][T18553] XFS (loop5): Quotacheck: Done. [ 1679.108623][T24286] XFS (loop5): Unmounting Filesystem [ 1679.237806][T18587] comedi comedi0: Minor 2048 is invalid! [ 1680.168720][ T3598] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1680.185068][ T26] audit: type=1326 audit(1777396989.398:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.1.20740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1680.229745][ T26] audit: type=1326 audit(1777396989.408:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.1.20740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1680.274253][ T26] audit: type=1326 audit(1777396989.426:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.1.20740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1680.309441][ T26] audit: type=1326 audit(1777396989.426:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.1.20740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1680.383936][T18637] overlayfs: workdir and upperdir must be separate subtrees [ 1680.392886][ T26] audit: type=1326 audit(1777396989.426:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.1.20740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a39cdd9 code=0x7ffc0000 [ 1680.415647][ T3598] usb 6-1: Using ep0 maxpacket: 8 [ 1680.434492][ T3598] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1680.457273][ T3598] usb 6-1: config 0 has no interface number 0 [ 1680.487524][ T3598] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1680.500214][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.514712][ T3598] usb 6-1: Product: syz [ 1680.518912][ T3598] usb 6-1: Manufacturer: syz [ 1680.543373][ T3598] usb 6-1: SerialNumber: syz [ 1680.549819][ T3598] usb 6-1: config 0 descriptor?? [ 1680.679997][T18650] netlink: 'syz.4.20749': attribute type 3 has an invalid length. [ 1680.782225][ T3598] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1680.803348][ T3598] usb 6-1: No valid video chain found. [ 1680.821066][ T3598] usb 6-1: USB disconnect, device number 45 [ 1680.948511][T18656] loop4: detected capacity change from 0 to 2048 [ 1680.975632][T18656] NILFS (loop4): invalid segment: Inconsistency found [ 1680.986376][T18656] NILFS (loop4): trying rollback from an earlier position [ 1681.027273][T18656] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 1681.238795][T31788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1681.472907][T31788] usb 2-1: Using ep0 maxpacket: 16 [ 1681.481760][T31788] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1681.506287][T31788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.514314][T31788] usb 2-1: Product: syz [ 1681.529576][T31788] usb 2-1: Manufacturer: syz [ 1681.540363][T31788] usb 2-1: SerialNumber: syz [ 1681.577120][T31788] r8152-cfgselector 2-1: config 0 descriptor?? [ 1682.027009][T31788] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1682.036509][T31788] r8152-cfgselector 2-1: bad CDC descriptors [ 1682.055071][T31788] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1682.078386][T31788] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 1682.166511][T18707] netlink: 'syz.4.20776': attribute type 7 has an invalid length. [ 1682.185355][T18707] netlink: 'syz.4.20776': attribute type 8 has an invalid length. [ 1682.408181][T18721] loop3: detected capacity change from 0 to 64 [ 1682.743187][T18732] netlink: 'syz.5.20788': attribute type 2 has an invalid length. [ 1682.809457][T18736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20790'. [ 1683.562222][T18773] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1683.715618][T18778] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1684.070904][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20820'. [ 1684.842107][T18831] loop4: detected capacity change from 0 to 256 [ 1684.853779][T18833] xt_cluster: node mask cannot exceed total number of nodes [ 1684.857720][T18831] exfat: Deprecated parameter 'utf8' [ 1684.891694][T18831] exfat: Deprecated parameter 'utf8' [ 1684.911671][T18831] exfat: Deprecated parameter 'utf8' [ 1684.966910][T18831] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1685.026489][T18831] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 1685.068975][T18831] exFAT-fs (loop4): Filesystem has been set read-only [ 1685.221393][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20845'. [ 1685.235385][T18848] device bridge5 entered promiscuous mode [ 1685.601711][T18866] loop1: detected capacity change from 0 to 8 [ 1685.675249][T18866] SQUASHFS error: Unable to read inode 0xe3 [ 1685.749079][ T4314] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1685.789342][T18872] loop1: detected capacity change from 0 to 128 [ 1685.952336][T18877] loop1: detected capacity change from 0 to 256 [ 1685.962635][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.979226][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1685.992535][ T4314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1686.007335][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1686.037439][ T4314] usb 4-1: SerialNumber: syz [ 1686.074494][ T4314] usb 4-1: 0:2 : does not exist [ 1686.507039][ T4310] usb 4-1: USB disconnect, device number 40 [ 1686.589182][T18878] loop5: detected capacity change from 0 to 32768 [ 1686.649949][T18895] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 1686.661900][T18895] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1686.677913][T18878] XFS (loop5): Mounting V5 Filesystem [ 1686.760776][T18878] XFS (loop5): Ending clean mount [ 1686.846445][T24286] XFS (loop5): Unmounting Filesystem [ 1687.042721][ T4341] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1687.047088][T18908] loop5: detected capacity change from 0 to 512 [ 1687.065179][T18908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1687.075925][T18908] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1687.083910][T18908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 1687.100837][T18908] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 1687.110608][T18908] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1687.119759][T18908] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1687.144244][T18908] EXT4-fs error (device loop5): __ext4_remount:6650: comm syz.5.20869: Abort forced by user [ 1687.157026][T18908] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 1687.188071][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1687.237175][ T4341] usb 5-1: Using ep0 maxpacket: 16 [ 1687.247637][ T4341] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1687.276415][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.314668][ T4341] usb 5-1: Product: syz [ 1687.318930][ T4341] usb 5-1: Manufacturer: syz [ 1687.324382][ T4341] usb 5-1: SerialNumber: syz [ 1687.339018][ T4341] usb 5-1: config 0 descriptor?? [ 1687.360265][T18913] loop5: detected capacity change from 0 to 4096 [ 1687.377336][T18913] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1687.435434][T18917] netlink: 'syz.0.20873': attribute type 1 has an invalid length. [ 1687.443764][T18917] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20873'. [ 1687.568360][ T4341] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 1687.582444][ T4341] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1687.798440][ T4341] usb 5-1: USB disconnect, device number 8 [ 1687.901960][ T4312] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1688.041968][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20884'. [ 1688.052266][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20884'. [ 1688.146355][ T4312] usb 6-1: Using ep0 maxpacket: 16 [ 1688.162290][ T4312] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1688.191161][ T4312] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 1688.213227][ T4312] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1688.252181][ T4312] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1688.266385][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1688.274894][ T4312] usb 6-1: SerialNumber: syz [ 1688.300074][T18921] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1688.324423][T18921] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1688.584631][ T4312] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1688.629844][ T4312] usb 6-1: USB disconnect, device number 46 [ 1689.542657][T19003] loop5: detected capacity change from 0 to 8 [ 1689.560616][T19003] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1689.580245][T19003] cramfs: Error -3 while decompressing! [ 1689.585841][T19003] cramfs: ffffffff96d91248(26)->ffff88804d750000(4096) [ 1689.615851][ T4376] udevd[4376]: incorrect cramfs checksum on /dev/loop5 [ 1689.645822][T19003] cramfs: bad data blocksize 524314 [ 1689.680072][T19003] cramfs: bad data blocksize 4294442596 [ 1689.704660][T19003] cramfs: Error -3 while decompressing! [ 1689.707096][ T4376] udevd[4376]: incorrect cramfs checksum on /dev/loop5 [ 1689.721064][T19003] cramfs: ffffffff96d91248(26)->ffff88804d750000(4096) [ 1689.845188][T19014] loop1: detected capacity change from 0 to 8 [ 1689.852082][T19014] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1689.895054][ T4995] udevd[4995]: incorrect cramfs checksum on /dev/loop1 [ 1689.924378][T19014] cramfs: bad data blocksize 4294934200 [ 1689.957049][T19014] cramfs: bad data blocksize 4294934200 [ 1689.984090][ T4376] udevd[4376]: incorrect cramfs checksum on /dev/loop1 [ 1689.991174][ T26] audit: type=1800 audit(1777396998.575:672): pid=19014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20921" name="file1" dev="loop1" ino=33092 res=0 errno=0 [ 1690.124876][T19026] loop5: detected capacity change from 0 to 512 [ 1690.227684][T19026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1690.287874][T19026] ext4 filesystem being mounted at /2457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.644022][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1691.650346][ T4312] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1691.754462][T19103] loop4: detected capacity change from 0 to 2048 [ 1691.784473][T19106] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1691.816192][T19103] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1691.846944][T19103] Remounting filesystem read-only [ 1691.876767][ T4312] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.913989][ T4312] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1691.960960][ T4312] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1692.002434][ T4312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.034769][ T4312] usb 6-1: Product: syz [ 1692.045568][ T4312] usb 6-1: Manufacturer: syz [ 1692.067249][ T4312] usb 6-1: SerialNumber: syz [ 1692.098167][ T4312] cdc_ncm 6-1:1.0: skipping garbage [ 1692.117296][ T4312] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 1692.138918][ T4312] cdc_ncm 6-1:1.0: bind() failure [ 1692.204490][ T4312] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1692.243876][ T4312] cdc_ncm 6-1:1.1: bind() failure [ 1692.370842][ T4312] usb 6-1: USB disconnect, device number 47 [ 1692.523924][T19133] netlink: 'syz.1.20977': attribute type 10 has an invalid length. [ 1692.546838][T19134] netlink: 'syz.4.20978': attribute type 21 has an invalid length. [ 1692.563143][T19136] netlink: 'syz.3.20979': attribute type 13 has an invalid length. [ 1693.291869][ T26] audit: type=1326 audit(1777397001.661:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.370377][ T26] audit: type=1326 audit(1777397001.699:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.483894][ T26] audit: type=1326 audit(1777397001.699:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.554715][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20999'. [ 1693.567320][ T26] audit: type=1326 audit(1777397001.708:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.660173][ T26] audit: type=1326 audit(1777397001.708:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.745701][ T26] audit: type=1326 audit(1777397001.708:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.819227][ T26] audit: type=1326 audit(1777397001.708:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1693.927345][ T26] audit: type=1326 audit(1777397001.708:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.5.20994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fda99cdd9 code=0x7ffc0000 [ 1694.288411][T19205] overlayfs: conflicting options: userxattr,metacopy=on [ 1694.338264][T19209] loop4: detected capacity change from 0 to 64 [ 1694.629239][T19218] loop1: detected capacity change from 0 to 256 [ 1694.733039][T19218] FAT-fs (loop1): Directory bread(block 64) failed [ 1694.739637][T19218] FAT-fs (loop1): Directory bread(block 65) failed [ 1694.808335][T19218] FAT-fs (loop1): Directory bread(block 66) failed [ 1694.832735][T19218] FAT-fs (loop1): Directory bread(block 67) failed [ 1694.865315][T19218] FAT-fs (loop1): Directory bread(block 68) failed [ 1694.889660][T19218] FAT-fs (loop1): Directory bread(block 69) failed [ 1694.896298][T19218] FAT-fs (loop1): Directory bread(block 70) failed [ 1694.938567][T19218] FAT-fs (loop1): Directory bread(block 71) failed [ 1694.975311][T19218] FAT-fs (loop1): Directory bread(block 72) failed [ 1694.981876][T19218] FAT-fs (loop1): Directory bread(block 73) failed [ 1695.003666][T19233] unsupported nlmsg_type 40 [ 1695.240549][T19245] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21032'. [ 1695.434435][T19247] device wlan0 entered promiscuous mode [ 1695.464732][T19247] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1696.030021][T19281] netlink: 'syz.4.21051': attribute type 27 has an invalid length. [ 1696.084883][T19285] SET target dimension over the limit! [ 1696.524443][T19305] loop3: detected capacity change from 0 to 2048 [ 1696.604021][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1696.733652][T19315] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 1697.325309][T19345] ubi: mtd0 is already attached to ubi31 [ 1697.349945][ T7462] kworker/dying (7462) used greatest stack depth: 15896 bytes left [ 1697.613408][T19359] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 1698.086775][T19381] device bond6 entered promiscuous mode [ 1698.092600][T19381] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1698.158560][T19386] netlink: 'syz.0.21105': attribute type 10 has an invalid length. [ 1698.194385][T19388] loop3: detected capacity change from 0 to 256 [ 1698.596835][T19394] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1699.005705][T19418] IPv6: NLM_F_CREATE should be specified when creating new route [ 1699.095819][T19422] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1699.299285][T19426] loop3: detected capacity change from 0 to 2048 [ 1699.335794][T19426] /dev/loop3: Can't open blockdev [ 1700.044610][ T26] audit: type=1326 audit(1777397007.985:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.4.21140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x0 [ 1700.412375][T19483] loop4: detected capacity change from 0 to 512 [ 1700.432955][T19483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1700.552365][T19483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1700.575847][T19483] ext4 filesystem being mounted at /4216/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.667388][T19483] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1700.683685][T19483] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1700.705801][T19483] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.21150: Failed to acquire dquot type 0 [ 1700.827936][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 1700.920338][T19504] netlink: 12296 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1700.959936][T19504] netlink: 164 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1700.986681][ T26] audit: type=1326 audit(1777397008.864:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.036737][ T26] audit: type=1326 audit(1777397008.864:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.068817][ T4314] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1701.143683][ T26] audit: type=1326 audit(1777397008.883:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.218343][ T26] audit: type=1326 audit(1777397008.883:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.270829][ T26] audit: type=1326 audit(1777397008.883:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.273454][ T4314] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1701.324144][T19513] loop5: detected capacity change from 0 to 8192 [ 1701.352412][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.359426][ T26] audit: type=1326 audit(1777397008.883:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.402667][T19513] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1701.403320][ T4314] usb 2-1: config 0 descriptor?? [ 1701.425673][ T26] audit: type=1326 audit(1777397008.883:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19508 comm="syz.0.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1701.427109][ T4314] cp210x 2-1:0.0: cp210x converter detected [ 1701.517877][T19513] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1701.527122][T19513] REISERFS (device loop5): using ordered data mode [ 1701.635491][T19513] reiserfs: using flush barriers [ 1701.654005][T19513] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1701.677210][ T4314] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1701.750793][T19513] REISERFS (device loop5): checking transaction log (loop5) [ 1701.775544][T19513] REISERFS (device loop5): Using tea hash to sort names [ 1701.817512][T19513] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1701.994812][ T4314] usb 2-1: USB disconnect, device number 20 [ 1702.027271][ T4314] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1702.031678][T19540] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1702.060708][ T4314] cp210x 2-1:0.0: device disconnected [ 1702.822013][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1702.957542][T19555] infiniband !yz!: set down [ 1702.992194][T19555] infiniband !yz!: added team_slave_0 [ 1703.070782][T19574] device netdevsim0 left promiscuous mode [ 1703.089425][T19574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1703.230073][T19555] RDS/IB: !yz!: added [ 1703.253245][T19583] cgroup: No subsys list or none specified [ 1703.259776][T19555] smc: adding ib device !yz! with port count 1 [ 1703.289980][T19555] smc: ib device !yz! port 1 has pnetid [ 1703.576965][T19591] dlm: Unknown command passed to DLM device : 8 [ 1703.576965][T19591] [ 1704.230620][T19620] netlink: 72 bytes leftover after parsing attributes in process `syz.5.21211'. [ 1704.257770][T19620] netlink: 72 bytes leftover after parsing attributes in process `syz.5.21211'. [ 1704.501048][T19626] loop5: detected capacity change from 0 to 16 [ 1704.543641][T19626] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1704.857737][T19634] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 1704.868876][T19616] loop1: detected capacity change from 0 to 32768 [ 1704.890529][ T4314] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1704.895329][T19616] XFS: noikeep mount option is deprecated. [ 1704.968484][T19616] XFS (loop1): Mounting V5 Filesystem [ 1705.080399][ T4314] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1705.104801][T19616] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1705.120910][ T4314] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.134359][T19648] loop5: detected capacity change from 0 to 4096 [ 1705.152004][T19648] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1705.179723][T19616] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1705.194257][ T4314] usb 4-1: config 220 has no interface number 2 [ 1705.244188][ T4314] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1705.276140][ T4314] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1705.278321][T19616] XFS (loop1): Starting recovery (logdev: internal) [ 1705.289350][ T4314] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1705.298149][ T4314] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1705.341152][ T4314] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1705.346446][T19648] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1705.351865][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.372043][ T4314] usb 4-1: Product: syz [ 1705.376652][ T4314] usb 4-1: Manufacturer: syz [ 1705.384371][ T4314] usb 4-1: SerialNumber: syz [ 1705.421952][T19616] XFS (loop1): Ending recovery (logdev: internal) [ 1705.643018][ T4314] usb 4-1: selecting invalid altsetting 0 [ 1705.666234][ T4314] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1705.696716][ T4314] usb 4-1: No valid video chain found. [ 1705.752351][ T4268] XFS (loop1): Unmounting Filesystem [ 1705.762141][ T4314] usb 4-1: selecting invalid altsetting 0 [ 1705.778802][ T4314] usbtest: probe of 4-1:220.1 failed with error -22 [ 1705.821159][ T4314] usb 4-1: USB disconnect, device number 41 [ 1706.028232][T19672] ubi: mtd0 is already attached to ubi31 [ 1706.042796][T19674] netlink: 88 bytes leftover after parsing attributes in process `syz.5.21237'. [ 1706.086887][ T8556] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1706.296480][ T8556] usb 5-1: Using ep0 maxpacket: 16 [ 1706.303491][ T8556] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.354516][ T8556] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1706.407590][ T8556] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.438518][ T8556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.459266][T19688] x_tables: unsorted underflow at hook 2 [ 1706.466947][ T8556] usb 5-1: Product: syz [ 1706.499566][ T8556] usb 5-1: Manufacturer: syz [ 1706.504206][ T8556] usb 5-1: SerialNumber: syz [ 1706.770934][ T8556] usb 5-1: 0:2 : does not exist [ 1706.795862][ T8556] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1706.842438][ T8556] usb 5-1: USB disconnect, device number 9 [ 1706.877483][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1706.972969][T31788] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1707.209504][T31788] usb 2-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1707.230058][T31788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1707.248745][T31788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1707.273024][T31788] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1707.302447][T31788] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1707.333386][T31788] usb 2-1: Product: syz [ 1707.337650][T31788] usb 2-1: Manufacturer: syz [ 1707.342268][T31788] usb 2-1: SerialNumber: syz [ 1707.371569][T31788] usb 2-1: config 0 descriptor?? [ 1707.396680][T19728] loop5: detected capacity change from 0 to 256 [ 1707.479589][T19728] FAT-fs (loop5): Directory bread(block 64) failed [ 1707.486568][T19728] FAT-fs (loop5): Directory bread(block 65) failed [ 1707.493299][T19728] FAT-fs (loop5): Directory bread(block 66) failed [ 1707.515258][T19728] FAT-fs (loop5): Directory bread(block 67) failed [ 1707.532891][T19728] FAT-fs (loop5): Directory bread(block 68) failed [ 1707.553400][T19728] FAT-fs (loop5): Directory bread(block 69) failed [ 1707.564304][T19728] FAT-fs (loop5): Directory bread(block 70) failed [ 1707.574999][T19728] FAT-fs (loop5): Directory bread(block 71) failed [ 1707.585859][T19728] FAT-fs (loop5): Directory bread(block 72) failed [ 1707.596575][T19728] FAT-fs (loop5): Directory bread(block 73) failed [ 1707.886976][T31788] usb 2-1: USB disconnect, device number 21 [ 1708.778534][T19781] xt_TCPMSS: Only works on TCP SYN packets [ 1708.919883][T19785] netlink: 'syz.0.21289': attribute type 10 has an invalid length. [ 1708.952831][T19785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21289'. [ 1709.003645][T19785] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1709.133660][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21294'. [ 1709.210722][T19796] tc_dump_action: action bad kind [ 1709.555117][T19818] loop5: detected capacity change from 0 to 2048 [ 1709.591630][T19818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1709.965099][T19828] loop1: detected capacity change from 0 to 4096 [ 1710.015387][T19828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1710.092887][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1710.273383][ T3598] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1710.293268][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 1710.293281][ T26] audit: type=1326 audit(1777397017.563:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19842 comm="syz.4.21316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1710.390694][ T26] audit: type=1326 audit(1777397017.591:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19842 comm="syz.4.21316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1710.462156][ T26] audit: type=1326 audit(1777397017.591:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19842 comm="syz.4.21316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1710.479916][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21321'. [ 1710.500787][T19852] afs: Unknown parameter 'dont_hash' [ 1710.507467][ T3598] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1710.530708][ T3598] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 1710.530984][ T26] audit: type=1326 audit(1777397017.591:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19842 comm="syz.4.21316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e39cdd9 code=0x7ffc0000 [ 1710.549913][ T3598] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1710.646582][ T3598] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1710.662887][T19856] loop3: detected capacity change from 0 to 512 [ 1710.673923][ T3598] usb 6-1: config 129 has no interface number 0 [ 1710.686025][ T3598] usb 6-1: config 129 has no interface number 1 [ 1710.699752][T19856] /dev/loop3: Can't open blockdev [ 1710.734635][ T3598] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1710.802288][ T3598] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1710.839622][ T3598] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1710.894199][ T3598] usb 6-1: config 129 interface 135 has no altsetting 0 [ 1710.901362][ T3598] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1710.949830][ T3598] usb 6-1: string descriptor 0 read error: -22 [ 1710.956108][ T3598] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1710.973514][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.035844][ T3598] usb 6-1: MIDIStreaming interface descriptor not found [ 1711.408986][ T3598] usb 6-1: USB disconnect, device number 48 [ 1711.457317][T19849] loop1: detected capacity change from 0 to 40427 [ 1711.519645][T19849] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1711.545874][T19849] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1711.563645][T19849] F2FS-fs (loop1): invalid crc value [ 1711.618021][T19849] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1711.660166][T19880] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21332'. [ 1711.809871][T19849] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1711.835580][T19849] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1711.912514][T19849] syz.1.21318: attempt to access beyond end of device [ 1711.912514][T19849] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1712.349662][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21342'. [ 1712.401320][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21342'. [ 1712.632709][T19914] netlink: 'syz.3.21345': attribute type 12 has an invalid length. [ 1713.247317][T19943] loop1: detected capacity change from 0 to 8 [ 1713.288988][T19943] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1713.326635][ T4376] udevd[4376]: incorrect cramfs checksum on /dev/loop1 [ 1713.350179][T19943] cramfs: Error -3 while decompressing! [ 1713.369797][T19943] cramfs: ffffffff96d91248(26)->ffff88804d8f0000(4096) [ 1713.424706][T19943] cramfs: Error -5 while decompressing! [ 1713.435372][T19943] cramfs: ffffffff96d91262(26)->ffff88804d8f1000(4096) [ 1713.456824][ T3933] device veth0_macvtap left promiscuous mode [ 1713.468172][T19943] cramfs: Error -3 while decompressing! [ 1713.476877][T19943] cramfs: ffffffff96d9127c(16)->ffff88804d8f2000(4096) [ 1713.491750][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1713.502131][T19943] cramfs: Error -3 while decompressing! [ 1713.521870][T19943] cramfs: ffffffff96d91248(26)->ffff88804d8f0000(4096) [ 1713.544956][ T26] audit: type=1800 audit(1777397020.613:781): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21357" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1713.615314][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21362'. [ 1713.640417][T19955] Zero length message leads to an empty skb [ 1714.324315][T19984] netlink: 'syz.0.21375': attribute type 10 has an invalid length. [ 1714.551032][T19992] xt_connbytes: Forcing CT accounting to be enabled [ 1714.992194][T20009] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 1715.024373][T20009] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1715.180331][ T3598] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1715.267749][T20021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21389'. [ 1715.301667][T20021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21389'. [ 1715.394457][ T3598] usb 6-1: Using ep0 maxpacket: 16 [ 1715.403720][ T3598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.454973][ T3598] usb 6-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 1715.494831][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.524793][ T3598] usb 6-1: Product: syz [ 1715.550073][T20034] loop3: detected capacity change from 0 to 256 [ 1715.566024][ T3598] usb 6-1: Manufacturer: syz [ 1715.576213][ T3598] usb 6-1: SerialNumber: syz [ 1715.587694][T20034] /dev/loop3: Can't open blockdev [ 1715.593451][ T3598] usb 6-1: config 0 descriptor?? [ 1715.652480][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1715.840571][ T3598] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1716.003705][ T4314] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1716.082208][ T3598] usb 6-1: USB disconnect, device number 49 [ 1716.218112][ T4314] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 1716.226241][ T4314] usb 5-1: config 0 has no interface number 0 [ 1716.248848][ T4314] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1716.278037][ T4314] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1716.293680][ T4314] usb 5-1: config 0 interface 96 has no altsetting 0 [ 1716.308827][T20063] device netdevsim0 entered promiscuous mode [ 1716.330474][ T4314] usb 5-1: New USB device found, idVendor=0b57, idProduct=058d, bcdDevice=33.74 [ 1716.350311][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.363269][ T4314] usb 5-1: Product: syz [ 1716.367643][ T4314] usb 5-1: Manufacturer: syz [ 1716.372313][ T4314] usb 5-1: SerialNumber: syz [ 1716.384623][T20063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1716.421341][ T4314] usb 5-1: config 0 descriptor?? [ 1716.531888][T20070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1716.655380][ T4314] usb 5-1: USB disconnect, device number 10 [ 1716.721630][T20078] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1716.941871][ T26] audit: type=1326 audit(1777397023.784:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.045154][ T26] audit: type=1326 audit(1777397023.784:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.141523][ T26] audit: type=1326 audit(1777397023.784:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.186339][T20097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1717.235777][ T26] audit: type=1326 audit(1777397023.784:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.258428][T20102] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1717.318484][ T26] audit: type=1326 audit(1777397023.821:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.455863][ T26] audit: type=1326 audit(1777397023.821:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.497215][ T26] audit: type=1326 audit(1777397023.821:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.572020][T20114] kAFS: unable to lookup cell '(,c¾Ì' [ 1717.572464][ T26] audit: type=1326 audit(1777397023.821:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1717.680854][ T26] audit: type=1326 audit(1777397023.821:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20087 comm="syz.0.21419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1718.705143][T20153] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1719.377766][T20184] loop3: detected capacity change from 0 to 512 [ 1719.393014][T20185] loop1: detected capacity change from 0 to 256 [ 1719.410220][T20184] /dev/loop3: Can't open blockdev [ 1719.483637][T20188] netlink: 'syz.5.21469': attribute type 12 has an invalid length. [ 1719.723674][T20197] loop3: detected capacity change from 0 to 64 [ 1719.797173][T20201] QAT: failed to copy from user. [ 1719.830785][T20197] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1719.831544][T20195] loop5: detected capacity change from 0 to 4096 [ 1720.116169][T24286] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1720.173687][T24286] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1721.243129][T20259] loop5: detected capacity change from 0 to 512 [ 1721.312775][T20267] rdma_rxe: rxe_register_device failed with error -23 [ 1721.330240][T20259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1721.359841][T20259] ext4 filesystem being mounted at /2568/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1721.370415][T20267] rdma_rxe: failed to add team_slave_0 [ 1721.386762][T20259] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.21505: invalid size [ 1721.454398][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1721.624559][T20276] xt_TCPMSS: Only works on TCP SYN packets [ 1721.779667][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21517'. [ 1721.826928][T20289] loop1: detected capacity change from 0 to 1024 [ 1721.949437][T20289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1722.018557][T20299] xt_nfacct: accounting object `syz0' does not exist [ 1722.105706][T20303] loop4: detected capacity change from 0 to 2048 [ 1722.135453][T20303] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1722.148067][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 1722.213065][T20303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1722.392804][T20313] device batadv0 entered promiscuous mode [ 1722.848277][T20333] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1723.006456][T20343] loop4: detected capacity change from 0 to 64 [ 1723.778606][T20375] loop3: detected capacity change from 0 to 512 [ 1723.794804][T20375] EXT4-fs: Ignoring removed orlov option [ 1723.813692][T20375] EXT4-fs: Ignoring removed bh option [ 1723.840928][T20375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1723.893896][ T26] audit: type=1326 audit(1777397030.294:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1723.901463][T20375] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1723.930911][T20375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1723.973559][T20375] EXT4-fs: Ignoring removed orlov option [ 1724.007617][T20375] EXT4-fs: Ignoring removed bh option [ 1724.016255][ T26] audit: type=1326 audit(1777397030.322:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.079133][ T26] audit: type=1326 audit(1777397030.322:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.112203][ T26] audit: type=1326 audit(1777397030.322:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.149904][ T26] audit: type=1326 audit(1777397030.322:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.175446][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1724.235277][ T26] audit: type=1326 audit(1777397030.322:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.257699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.344543][T20393] netlink: 'syz.4.21566': attribute type 2 has an invalid length. [ 1724.352570][ T26] audit: type=1326 audit(1777397030.322:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1724.442776][ T26] audit: type=1326 audit(1777397030.322:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20378 comm="syz.0.21560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fec3799cdd9 code=0x7ffc0000 [ 1725.111898][ T4314] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1725.332583][T20432] loop1: detected capacity change from 0 to 4096 [ 1725.352328][ T4314] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1725.362744][ T4314] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1725.371126][ T4314] usb 4-1: Product: syz [ 1725.375495][ T4314] usb 4-1: Manufacturer: syz [ 1725.380229][ T4314] usb 4-1: SerialNumber: syz [ 1725.386435][T20432] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1725.414308][ T4314] usb 4-1: config 0 descriptor?? [ 1725.441511][T20432] ntfs3: loop1: Failed to load $MFT. [ 1725.650305][ T4314] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 1725.875310][ T4314] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1725.900672][ T4314] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1725.967434][ T4314] peak_usb: probe of 4-1:0.0 failed with error -71 [ 1725.980858][ T4314] usb 4-1: USB disconnect, device number 42 [ 1726.125886][T20453] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1726.265649][T20444] loop5: detected capacity change from 0 to 32768 [ 1726.393804][T20444] XFS (loop5): Mounting V5 Filesystem [ 1726.586670][T20444] XFS (loop5): Ending clean mount [ 1726.610647][T20444] XFS (loop5): Quotacheck needed: Please wait. [ 1726.744231][T20444] XFS (loop5): Quotacheck: Done. [ 1726.888901][T24286] XFS (loop5): Unmounting Filesystem [ 1727.795088][T20480] loop3: detected capacity change from 0 to 32768 [ 1727.837802][T20480] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1727.870276][T20480] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1727.912918][T20522] binder: 20520:20522 ioctl c018620c 200000000700 returned -22 [ 1727.928311][T20480] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1727.979550][T20519] loop4: detected capacity change from 0 to 4096 [ 1728.031597][T20519] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1728.081651][T20480] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1728.146970][T20519] ntfs: volume version 3.1. [ 1728.201525][T20519] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1728.525928][T20536] loop5: detected capacity change from 0 to 1024 [ 1728.649375][T20536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1728.785058][T20536] EXT4-fs warning (device loop5): ext4_rmdir:3243: inode #11: comm syz.5.21624: empty directory 'file1' has too many links (111) [ 1729.073367][T24286] EXT4-fs (loop5): unmounting filesystem. [ 1729.313954][T20573] loop1: detected capacity change from 0 to 512 [ 1729.356492][T20573] EXT4-fs: Ignoring removed nobh option [ 1729.380467][T20573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1729.391021][ T4314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1729.480776][T20573] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1729.501563][T20573] EXT4-fs (loop1): 1 truncate cleaned up [ 1729.509732][T20582] netlink: 'syz.3.21641': attribute type 49 has an invalid length. [ 1729.524040][T20573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1729.602075][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 1729.610218][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.635024][ T4314] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1729.639991][T20573] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1729.665665][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1729.699696][ T4314] usb 5-1: Product: syz [ 1729.720625][ T4314] usb 5-1: config 0 descriptor?? [ 1729.749950][ T4314] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1729.791538][ T4268] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /4418/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1729.875544][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1729.943520][ T4268] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1729.982097][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.025763][ T4268] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /4418/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1730.115925][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.122739][ T4268] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1730.173987][T20607] netlink: 272 bytes leftover after parsing attributes in process `syz.5.21652'. [ 1730.186022][ T4314] gspca_spca501: reg write: error -71 [ 1730.193610][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.195344][ T4314] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1730.200458][ T4268] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /4418/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1730.251613][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.275885][ T4268] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1730.319769][ T4314] spca501: probe of 5-1:0.0 failed with error -22 [ 1730.357891][ T4314] usb 5-1: USB disconnect, device number 11 [ 1730.364496][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.387392][ T4268] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /4418/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1730.479099][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.485898][ T4268] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1730.587645][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.606272][ T4268] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /4418/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1730.686516][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 1730.703448][ T4268] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1730.810230][T20628] netlink: 'syz.5.21660': attribute type 32 has an invalid length. [ 1730.895122][T20630] loop3: detected capacity change from 0 to 512 [ 1730.928592][T20630] /dev/loop3: Can't open blockdev [ 1731.330697][T20646] loop5: detected capacity change from 0 to 1764 [ 1731.861509][ T4679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.890162][ T4679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.918208][ T4679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38717 - 0 [ 1731.929044][ T4679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 58665 - 0 [ 1732.096812][ T4679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.132400][ T4679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.134606][T20674] loop4: detected capacity change from 0 to 1764 [ 1732.181792][ T4679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38717 - 0 [ 1732.209797][ T4679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 58665 - 0 [ 1732.384172][ T4679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.426271][ T4679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.446691][ T4679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38717 - 0 [ 1732.468899][ T4679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 58665 - 0 [ 1732.978885][T20699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1732.995977][T20699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1733.007595][T20699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1733.024304][T20699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1733.033027][T20699] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1733.040377][T20699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1733.460256][T20714] netlink: 'syz.4.21700': attribute type 2 has an invalid length. [ 1733.460277][T20714] netlink: 'syz.4.21700': attribute type 1 has an invalid length. [ 1733.460297][T20714] netlink: 'syz.4.21700': attribute type 2 has an invalid length. [ 1733.460310][T20714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21700'. [ 1733.792115][T20721] netlink: 'syz.5.21703': attribute type 1 has an invalid length. [ 1734.665483][T20697] chnl_net:caif_netlink_parms(): no params data found [ 1734.944081][T20736] loop5: detected capacity change from 0 to 32768 [ 1734.968600][T20736] [ 1734.968600][T20736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1734.968600][T20736] [ 1735.122551][T20768] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1735.132990][ T4321] [ 1735.132990][ T4321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1735.132990][ T4321] [ 1735.141076][T20768] overlayfs: missing 'lowerdir' [ 1735.148755][T20697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.158152][ T4321] [ 1735.158152][ T4321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1735.158152][ T4321] [ 1735.168718][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.169760][T20697] device bridge_slave_0 entered promiscuous mode [ 1735.214703][T24286] [ 1735.214703][T24286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1735.214703][T24286] [ 1735.236082][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1735.261031][T24286] [ 1735.261031][T24286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1735.261031][T24286] [ 1735.334869][ T107] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 1735.346623][ T107] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 1735.355046][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 1735.362250][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1735.372309][ T107] RIP: 0010:lmLogSync+0x14b/0x9e0 [ 1735.377348][ T107] Code: 8d b8 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 03 6d e0 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e7 6c e0 fe 49 8b 3f e8 cf 8c b8 fe [ 1735.396962][ T107] RSP: 0018:ffffc9000250fc60 EFLAGS: 00010206 [ 1735.403041][ T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 11e066135a4e5f00 [ 1735.411026][ T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.419003][ T107] RBP: ffffc9000250fd68 R08: ffffc9000250fbc7 R09: ffffc9000250fb84 [ 1735.426985][ T107] R10: dffffc0000000000 R11: fffff520004a1f79 R12: ffff888077e1c000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1735.434965][ T107] R13: ffffc9000250fcc0 R14: ffff88807b90f238 R15: 0000000000000030 [ 1735.442946][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1735.451887][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1735.458477][ T107] CR2: 00007f52a254da08 CR3: 000000005cc05000 CR4: 00000000003506f0 [ 1735.466457][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1735.474437][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1735.482414][ T107] Call Trace: [ 1735.485691][ T107] [ 1735.488625][ T107] ? txEnd+0x2d4/0x520 [ 1735.492705][ T107] ? lmWriteRecord+0x1ac0/0x1ac0 [ 1735.497668][ T107] ? __rwlock_init+0x140/0x140 [ 1735.502441][ T107] jfs_syncpt+0x77/0x90 [ 1735.506610][ T107] txEnd+0x2e1/0x520 [ 1735.510523][ T107] jfs_lazycommit+0x5a0/0xa70 [ 1735.515215][ T107] ? txFreelock+0x5a0/0x5a0 [ 1735.519730][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1735.525634][ T107] ? do_task_dead+0xd0/0xd0 [ 1735.530145][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1735.536032][ T107] ? __kthread_parkme+0x162/0x1c0 [ 1735.541051][ T107] kthread+0x29d/0x330 [ 1735.545104][ T107] ? txFreelock+0x5a0/0x5a0 [ 1735.549600][ T107] ? kthread_blkcg+0xd0/0xd0 [ 1735.554178][ T107] ret_from_fork+0x1f/0x30 [ 1735.558594][ T107] [ 1735.561607][ T107] Modules linked in: [ 1735.587919][ T107] ---[ end trace 0000000000000000 ]--- [ 1735.593652][T20697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.603506][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.629878][ T107] RIP: 0010:lmLogSync+0x14b/0x9e0 [ 1735.636361][T20697] device bridge_slave_1 entered promiscuous mode [ 1735.642048][ T107] Code: 8d b8 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 03 6d e0 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e7 6c e0 fe 49 8b 3f e8 cf 8c b8 fe [ 1735.681131][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.687456][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.695276][ T1267] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1735.802458][ T107] RSP: 0018:ffffc9000250fc60 EFLAGS: 00010206 [ 1735.808567][ T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 11e066135a4e5f00 [ 1735.866581][ T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.874611][ T107] RBP: ffffc9000250fd68 R08: ffffc9000250fbc7 R09: ffffc9000250fb84 [ 1735.910352][ T107] R10: dffffc0000000000 R11: fffff520004a1f79 R12: ffff888077e1c000 [ 1735.918362][ T107] R13: ffffc9000250fcc0 R14: ffff88807b90f238 R15: 0000000000000030 [ 1735.960152][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1736.008492][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.015116][ T107] CR2: 0000558b09355008 CR3: 000000006841c000 CR4: 00000000003506e0 [ 1736.059264][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1736.067265][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1736.101816][ T107] Kernel panic - not syncing: Fatal exception [ 1736.116345][ T107] Kernel Offset: disabled [ 1736.120670][ T107] Rebooting in 86400 seconds..