last executing test programs: 16m16.990762279s ago: executing program 0 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a000163ce3ad1004167743e0025"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20084800) 16m16.775332276s ago: executing program 0 (id=3158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@report={0x4c, 0x20, 0x1, 0x70bd26, 0x25dfdbfe, {0x3c, {@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@multicast2, 0x4e22, 0x8, 0x4e23, 0xc7, 0xa, 0x0, 0x20, 0xad}}}, 0x4c}}, 0x804) 16m16.624731478s ago: executing program 0 (id=3161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0xfffffffd, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 16m16.474392731s ago: executing program 0 (id=3165): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@nouid32}, {@grpid}, {@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000f80)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 16m16.039883835s ago: executing program 0 (id=3172): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 16m15.126580749s ago: executing program 0 (id=3181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 16m14.687365344s ago: executing program 32 (id=3181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 2m23.325640916s ago: executing program 3 (id=17141): r0 = socket$inet6(0xa, 0x2, 0x11) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2m23.130622662s ago: executing program 3 (id=17145): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001540)={0x1, {0x80000000, 0xeb8, 0xf8e, 0xc37}}) 2m22.923421198s ago: executing program 3 (id=17149): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) 2m22.670658609s ago: executing program 3 (id=17154): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 2m22.355140254s ago: executing program 3 (id=17160): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x1f400000, 0x800, 0x9}}) 2m22.010759062s ago: executing program 3 (id=17167): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0xdfee) 2m21.769153691s ago: executing program 33 (id=17167): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0xdfee) 2.876316039s ago: executing program 5 (id=19080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.772355777s ago: executing program 5 (id=19082): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040), 0x4) 2.643733888s ago: executing program 5 (id=19083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x1, 0xa8aa70345edf717) 2.569925533s ago: executing program 5 (id=19085): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.466745181s ago: executing program 5 (id=19087): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 2.306676904s ago: executing program 5 (id=19089): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b41460860163209ea80010218780902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001540)={&(0x7f0000001500)=[{0x200, 0x1, 0xcd, &(0x7f00000012c0)="1331a1067cb619dd3ee6c3baf0e21e9d0a00e1cbc92b696360e4ce374ccd3a3f6a303f063fde684d743a582cc2b9cb1f515af6963f4d9a38d664598c1ff2a68476d98a7bafc74a084167e94f3b50613b9ac2eee7b226e946fd8c6a728c833048a66862e2d1af901fda7211072ec31b23a69655271b6ae466fbc91c4c5975ace47e91834e8ccb3c8c25e88d3e534194f1b1c4ec5c120db96720ddf0088c6d83a4683a1cd7e5adb8bd971c6e99cf51cc071bad158290ac0bbed0d256ab7f4df1572a33a14a6d920b19e97ed680b8"}, {0x9, 0x4001, 0x60, &(0x7f0000000240)="9c9bb7f73379000de3faa549f23f9b38daf1253e46ce4946c4a450282756d5fff6702aef533f889c51d42021a6b6ffca4fbd0a55864f127c4362b83cc9ef327baad3c913c917e2ad845435a7f02ccb39bd13f02cc6bbdf5bce85da7baaa9455b"}, {0x5, 0x1000, 0x1e, &(0x7f00000013c0)="c8bb97304830d9687726fae90261bb8c6e4934c2a389352d6384e42db359"}, {0x4, 0x8011, 0xf6, &(0x7f0000001400)="4c748e0d4d8035c1297b61c676afdb3b89b718de7667252b56caa1fba07447d3a2073fbc29a86e28604d84344f156ed502c0aea48df9c5be5a8bd160598729730513eefbc9495e78d610d730544549359fd7f2fd7223aad9346a9f553bbe9b3f79457abaaae8ac239c92e766ac6ed18b945fb5ac5f4540da9cf99c3408db1c35bd82d4fcc647b5c1c57e76945839d7246552ade0a320092d5a6de093684e41083069cc295b981151e3d8a9fe1d43045ca97a83f31a543433a77cd9cb048c88414683acbfa58827766f97d8fa1287a5bfa529b143fb064a38cff5fcb2586814d4e199d5170cebca4b96c305eae32c84b7d8ac94a771c0"}], 0x4}) 1.674355605s ago: executing program 4 (id=19097): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.61917665s ago: executing program 4 (id=19098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mlockall(0x7) 1.544619836s ago: executing program 4 (id=19099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc8b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x62, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1.49352015s ago: executing program 4 (id=19100): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde9089060000004e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8641200a8", 0x0, 0xf6d}, 0x28) 1.402514107s ago: executing program 4 (id=19101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x2) 1.386317188s ago: executing program 4 (id=19102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1fff, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "2ab7acc0"}]}}, 0x0}, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 718.880942ms ago: executing program 1 (id=19111): r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f0000000140)="df", 0x1}) 645.724188ms ago: executing program 1 (id=19112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 550.623855ms ago: executing program 2 (id=19113): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 466.697972ms ago: executing program 2 (id=19114): openat(0xffffffffffffff9c, &(0x7f00000079c0)='./file0\x00', 0x441, 0x104) r0 = open(&(0x7f0000000080)='./file1\x00', 0xa0340, 0x84) ioctl$BTRFS_IOC_DEFRAG(r0, 0x40049409, 0x3) 407.377167ms ago: executing program 2 (id=19115): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @local, 0xd}, 0x1c) listen(r0, 0x4) 339.306792ms ago: executing program 2 (id=19116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x208000, 0x120) getdents64(r0, 0x0, 0x0) 267.954468ms ago: executing program 2 (id=19117): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xffffffffffffffff) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x10, 0x2, &(0x7f0000000040)={0x16, "ed36eb5e1166320bbbae15e30c92bc61b6c8dd8da04c389e8475017077b597e2f0"}}) 242.69346ms ago: executing program 1 (id=19118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 188.296545ms ago: executing program 2 (id=19119): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfc, 0x6194, &(0x7f0000004a40)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QDmCErluFZECSgJKK4u48oUDJ/4CEBJHhDgiDvwBPXDlxokTkWwkUE8MWvt54tnNbu3U9s7az+slOTOfeWbtZ/a9sz8yM/sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/c73VloRceNnacFSxP9FJ6IdsTColyNiYXkpr9+NiOdipzmejYjeXMTg9jv/PB3xakR8dDZia3t9dbD48gH78e0//O23Pzjz1l9/37v4nz/e67w2ab3793/57z89ONw2AwAAQGmqqqpa6WP+ufT5vt10pwCAqciv/1WSl5/6+lf/eOvPs9QftVqtVqunUNdV4z2oFxGxUb/N4D2Dw/EAcMJsxMdNd4EGyb9o3Yg403QngJnWaroDHIut7fXVVsq3VX89WN5tz+eCDOW/0Xp0fcek6X5GzzGZ1uNrMzrxzIT+LEypD7Mk598ezf/Gbns/rXfc+U/LpPz7u5c+FSfn3xnNf8Tpyb89Nv9S5fy7T5R/R/4AAAAAADDD8v//LzV8/Hfu8JtyIJ90/Hd5Sn0AAAAAAAAAgKN22PH/HjH+HwAAAMyswWf1gV+f3Vs26bvYBsuvtyKeGlkfKEy6WGax6X4AAAAAAAAAAAAAQEm6u+fwXm9F9CLiqcXFqqoGP3Wj9ZM67O1PutK3H0rW9JM8AADs+ujsyLX8rYj5iLievuuvt7i4WFXzC4vVYrUwl9/P9ufmq4Xa59o8HSyb6x/gDXG3Xw1+2XztdnX7fV7er3309w3+Vr/qHKBjR6SX7s0JzQ2FDQDJ7qvRllekU6aqnp705gOG2P9PoaVYavpxxexr+mEKAAAAHL+qqqpW+jrvc+mYf7vpTgEAU5Ff/0ePCxyqbk9ojzia369Wq9VqtfpT1XXVeA/qRURs1G8zeM9gOH4AOGE24uOmu0CD5F+0bkQ813QngJnWaroDHIut7fXVVsq3VX89SOO753NBhvLfaO3cLt9+3HQ/o+eYTOvxtRmdeGZCf56dUh9mSc6/PZr/jd32flrvuPOflkn593cumStPzr8zmv+I05N/e2z+pcr5d58o/478AQAAAABghuX//19y/DdvMgAAAAAAAACcOFvb66v5utd8/P8zY9Zz/efplPNvPWn+C2le/idazr89kv8XR9br1OYfvrm3//9re331d/f++f95etD85/JMKz2yWukR0Up/qdVN08Ns3eM2e53+4C/1Wu1ON53zU/XeiVtxO9bi0tC67XR/7LWvDLUPetobar881N59rP3KUHsvfe9AtZDbL8Rq/Dhux9s77f3hu32s+X3un2qf9px/x/N/kXL+3drPIP/F1N4amQ48/LD92H5fn477O2/c+uwvLh3/5uxrMzqPtq1usH3nG+jPzn1yph8/vbt258L9m/fu3VmJNBlaejnS5Ijl/Hs7P3N7z/8v7LbnJ6D6/vrww/4T5z8rNqM7Mf8XavOD7X1pyn1rQs6/n35y/m+n9vH7/0nOf/L+/3ID/QEAAAAAAAAAAAAAAIBPUlXVziWib0TE1XT9T1PXZgIA05Vf/6skL1cfef39MxGz1B+1Wq1WF1jXVeO9Xi8i4i/12wzeM/x83C8DAGbZfyPi7013gsbIv2D5+/4G0xeb7gwwVXff/+CHN2/fXrtzt+meAAAAAAAAAACfVh7/c7k2/vOLEbE0st7Q+K9vxvJhx//s5plHA4we8UDfE2y2+512bbjx52NnfO4Lk8b/Ph+Pj/+dx8Tt1Ldjgt4+7f192uf2aZ8fu3QvrbEXetTk/J+vjXc+yP/cyPDrJYz/OjrmfQly/udrj+dB/l8YWa+ef/Wbmct/46ArbkZ7KP+L9977ycW773/wyq33br679u7aj66srFy6cvXqtWvXLr5z6/bapd1/j6fXMyDnn8e+dh5oWXL+OXP5lyXn/7lUy78sOf/Pp1r+Zcn55/d78i9Lzj9/9pF/WXL+L6Va/mXJ+X8p1fIvy9b2+twg/5dTLf+y5P3/y6mWf1ly/q+kWv5lyflfSLX8y5Lzv5jqA+Tv6+FPkZx/PsJl/y9Lzn8l1fIvS87/cqrlX5ac/5VUy78sOf9XUy3/suT8v5Jq+Zcl53811fIvS87/q6mWf1ly/tdSLf+y5Py/lmr5lyXn//VUy78sOf/XUi3/suT8v5Fq+Zcl5//NVMu/LDn/b6Va/mXJ+b+eavmXZe/7/82YMWMmzzT9zAQAAAAAAAAAAAAAjJrG6cRNbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNUaus74f+Jm9ee0QYiAEJ38Da8cY4yzZ9SW+8K8bE5IQEijNtaSX2K537Sz4Fq9dkjSSTQMlEo6KKqqmL9oCitpIVYVV8YJWKc2LqpdXTfuCvqmoKiE1qkIUUJHaimarmfM8j2dmZ2dmveP17Dmfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqLfhY9NfrmRZVv1T+2ttlr2t+vHqsbW1yz5ytbcQAAAAWKr/rf395nXpgv1d3Khumb993z98e25ubi77zODvDH9tbi5dMZZlw6uyrHZddPHfHq3ULxM8m41WBuo+H+iw+sEO1w91uH64w/UjHa5f1eH60Q7Xz9sB86zOfx5Tu7NNtQ/X5rs0uz4brl23qcWtnq2sGhiIP8upqdRuMzd8JJvJjmXT2WTD8vmyldryL2+oruueLK5roG5d66tHyI+eORy3oRL28aaGdV26z+iHH83GfvyjZw7/0ZnXb2w1O+6GhvvLt3PLxup2fjFckm9rJVuV9knczoG67Vzf4jkZbNjOSu121Y+bt/PNLrdz8NJmLqvm53w0G6h9/GptPw3V/1gv7af14bL/ujnLsvOXNrt5mXnrygayNQ2XDFx6fkbzI7J6H9VD6Z3Z0KKO0w1dHKfVObWp8Thtfk3E539DuN3QAttQ/zT98Asj8573xR6nUfVRL/RaaT4Ge/1a6ZdjMB4Xr9Ye9HMtj8FN4fE/s3nhY7DlsdPiGEyPu+4Y3NjpGBwYGaxtc3oSKrXbXDoGtzUsP1hbU6U2X9vc/hicOHP81MTsU09/eOb4oaPTR6dP7Ni2bXLHrl179uyZODJzbHoy//sy93b/W5MNpNfAxrDv4mvgg03L1h+qc9/o3etwtM3rcG3Tsr1+HQ41P7jK8rwg5x/T+WvjoepOH70wkC3wGqs9P1uX/jpMj7vudThU9zps+TWlxetwqIvXYXWZU1u7+55lqO5Pq224Ul8L1tYdg83fjzQfg73+fqRfjsHRcFz8y9aFvxasD9v73Phivx8ZnHcMpocb3nuql6Tv90f31Ear4/Km6hXXjGRnZ6dP3/rkoTNnTm/LwlgW76o7VpqP1zV1jymbd7wOLPp43T/zvuduanH52rCvRj9c/Wt0weequszOW9s/V7Wvbq33Z8Ol27Mwemy592err+bV/ZmyZJv9WV3mixNL/1485dK699/hBd5/Y+5/K19fuqtnB4eH8tfvYNo7ww3vx41P1VDtvatSW/ebE929Hw+HP8v9fnx9m/fjdU3L9vr9eLj5wcX340qnn3YsTfPzORqOk2OT7d+Pq8us277YY3Ko7fvxzWFWwv7/UEgKKRfVHTsLHbdpXUNDw+FxDcU1NB6nOxqWHw7ZrLqul7Zf3nG65eb8vgbTo7tkuY7TsaZle32cpverhY7TSqefvl2e5udzNBwX1+9of5xWl3ll59LfO1fHD+veO0c6HYPDgyPVbR5OB2H+fj+3Oh6Dt2aHs5PZsWyqdu1I7Xiq1NY1flt3x+BI+LPc75Xr2hyDW5qW7fUxmL6OLXTsVYbmP/geaH4+R8Nx8cJt7Y/B6jJ37u7t965bwiVpmbrvXZt/vrbQz7xuatpNV/JnXtXt/Ovd7X82W13m2J7F5sz2++mWcMk1+UUj9fup+fW70GtqKlue/bQubOfrexbeT9XtqS7ztb1dHk/7syw798QdtZ/3hn9f+bOz3/t2w7+7tPo3nXNP3PHGtUf+ZjHbD8DK91Y+1uRf6+r+Zaqbf/8HAAAAVoSY+wfCTOR/AAAAKIyY++P/Ck/kfwAAACiMmPuHwkxKkv/X3fn6zFvnstTMnwvi9Wk33JsvFzuuk+HzsblLqpff8eL0T/7iXHfrHsiy7Kf3/nrL5dfdG7crNxa28+JdjZfPv+G5rtZ/8OFLy9X3178e7j8+nm4Pg1YV3Mksy16+7vnaesYevVCbr9x7sDYfOP/cs9Vl3tybfx5v/9q78uV/P5R/9x851HD718J++EGYk/e13h/xdt+68KH1ux+5tL54u8rGt9ce9guP5fcbf0/OV5/Nl4/7eaHt/8uvvPSt6vJPfqD19p8baL39L4X7fTHM/35vvnz9c1D9PN7uS2H74/ri7W795ndbbv/FL+fLn7o7X+5gmHH9W8Lnm+5+faZ+fz1ZOdTwuLKP58vF9U9+77dq18f7i/ffvP2jBy407I/m4+OVf8rvZ6Jp+Xh5XE/0503rr95P/fEZ1//Sbx5s2M+d1n/xgdfeW73f5vXf0rTcYNPtm39j0x986fmW64vbs/9PTzU8nv33h9dxWP8Lj4XjMVz/Pxefb1hvdPD+xvefuPzX155reDzRPT/O13/x9qO1+e9jP/m9a9527dvPv7+677Ls1Qfz++u0/qN/eLJh+79xw9ba8xGvjx395vUvJK7/9OfHT5ycPTszVbdXa78755P59qwaXb2mur3XhffW5s8PnDzz+PTpscmxySwbK+6v0Lts3wzzjXycX+zttz4cns+bfvflNZv/8Svx8n9+KL/8wn35160PhuW+Gi5fmz9/c5Ulrv+FDTfUXt+VV/LPG3rsPbB+03/s6WrB8Pibvy+Ix/updz9e2w/V62pfN+Lreonb//2p/H6+E/brXPjNzBtvuLS++uXj70a48GD+el/y/gtvc/F5/ePwfH/qB/n9x+2Kj/f74fuY765rfL+Lx8d3zg0033/tt3icD+8n2fn8+rhU3N8X3ryh5ebF30OSnb+x9vlvp/u5cVEPcyGzT81OHJs5cfbJiTPTs2cmZp96+sDxk2dPnDlQ+12eBz7b6faX3p/W1N6fpqZ37cwmV2dZdjKbXIY3rCuz/dWPutv+Uw8fnto9uXlq+sihs0fOPHxq+vTRw7Ozh6enZjcfOnJk+vOdbj8ztW/b9r07dm8fPzoztW/P3r079o7PnDhZ3Yx8ozrYNfm58ROnD9RuMrtv595tt922c3L8+Mmp6X27JyfHz3a6fe1r03j11r82fnr62KEzM8enx2dnnp7et23vrl3bO/42wOOnjsyOTZw+e2Li7Oz06Yn8sYydqV1c/drX6fYU0+y/5t/PNqvkv4gv+/Qtu9LvZ6168QsL3lW+SNMvEH09/C6av3/HqT3dfB5z/3CYSUnyPwAAAJRBzP0jYSbyPwAAABRGzP2rwkzkfwAAACiMmPtHw0xKkv/1//X/u+v/59fr/5er/3/qibxXutL7/7E/r/9fDle5/7/k9ev/6/8Xr//ffX9+pW+//r/+P/P1W/8/5v7VWVbK/A8AAABlEHP/mjAT+R8AAAAKI+b+a8JM5H8AAAAojJj73xZmUpL8r//fVf9/e6fCVfH7/87/r/+frcz+f3xy9P9LY9H9+0ceavhU/z/Q/9f/1//X/9f/Z8mGF7zmavX/Y+6/NsykJPkfAAAAyiDm/reHmcj/AAAAUBgx918XZiL/AwAAQGHE3L82zKQk+V//3/n/9f/1/wvd/1/q+f/rNkb/f2Vw/v/2Ft3/X6X/313/f1T/fyX2/4d7u/393f/vuPn6/1wR/Xb+/5j73xFmUpL8DwAAAGUQc/87w0zkfwAAACiMmPvfFWYi/wMAAEBhxNx/fZhJSfK//r/+v/6//r/+f+v1dz7/f/6R/n9/0f9vz/n/O3D+/3L1/3u8/f3d/+/1+f+H72q+vf4/rfRb/z/m/neHmZQk/wMAAEAZxNx/Q5iJ/A8AAACFEXP/e8JM5H8AAAAojJj714WZlCT/6//r/+v/6//r/7def+f+f07/v7/o/7en/9+B/r/+v/5/d/3/Ft/86v/TSr/1/2PuvzHMpCT5HwAAAMog5v6bwkzkfwAAACiMmPv/X5iJ/A8AAACFEXP/+jCTkuR//X/9f/3/cvX/bxnR/9f/L7Zi9v97902J/n8H+v/6//r/XZ7/f77F9P9XdbozCqPf+v8x9783zKQk+R8AAADKIOb+94WZyP8AAABQGDH3vz/MRP4HAACAwoi5fyzMpCT5X/+/WP3/P/mrF96f6f/r/3dYf0H7//Ew0P8vuWL2/3tH/78D/X/9f/3/Zen/Ux791v+PuX9DmElJ8j8AAACUQcz9G8NM5H8AAAAojJj7bw4zkf8BAACgMGLu3xRmUpL8r/9frP5/pP+v/99u/QXt/yf6/+Wm/99C3YtU/78D/X/9/9L3/+N3v/r/9Ea/9f9j7v9AmElJ8j8AAACUQcz9m8NM5H8AAAAojJj7PxhmIv8DAABAYcTcvyXMpCT5X/9f/1//X/9f/7/1+vX/Vyb9//YW2/8f0f/X/9f/L1n/3/n/6a1+6//H3P+hMJOS5H8AAAAog5j7t4aZyP8AAABQGPH/b+b/71X+BwAAgCKKuX88zKQk+V//X/+/TP3/iv6//r/+f+Hp/7fn/P8d6P/r/+v/6//TU/3W/4+5/8NhJiXJ/wAAAFAGMfffGmYi/wMAAEBhxNw/EWYi/wMAAEBhxNw/GWZSkvyv/6//X6b+v/P/6//r/xef/n97+v8d6P/r/xet/59l+v9cVf3W/4+5f1uYSUnyPwAAAJRBzP3bw0zkfwAAACiMmPt3hJnI/wAAAFAYMffvDDMpSf7X/y9q/38u0//X/19o/fr/+v9Fpv/fnv5/B/r/+v9F6/87/z9XWb/1/2Puvy3MpCT5HwAAAMog5v5dYSbyPwAAABRGzP27w0xC/m/1/7oBAACAlSXm/j1hJiX593/9/4L0/3/j7xrW7fz/+v/t1t+b/v9q/f8w9f/7S0H7/80vi8um/9+B/r/+v/6//j891W/9/5j794aZlCT/AwAAQBnE3P+RMBP5HwAAAAoj5v7/H2Yi/wMAAEBhxNz/M2EmJcn/+v8F6f830f/X/2+3fuf/1/8vsoL2/3umUP3/Af1//f/+2n79f/1/5rvy/f/4UXf9/5j794WZlCT/AwAAQBnE3P+zYSbyPwAAABRGzP23h5nI/wAAAFAYMffvDzMpSf7X/9f/1//X/78y/f/bs2b92P+vHjz6/8Wi/99eofr/zv+v/99n26//r//PfP12/v+Y+z8aZlKS/A8AAABlEHP/HWEm8j8AAAAURsz9Hwszkf8BAACgMGLuvzPMpCT5X/9f/1//X//f+f9br1//f2XS/29P/78D/X/9f/1//X96qt/6/zH33xVmUpL8DwAAAGUQc//dYSbyPwAAABRGzP0fDzOR/wEAAKAwYu6/J8ykJPlf/1//X/9f/1//v/X69f9XJv3/9vT/O9D/1//X/9f/p6f6rf8fc/8nwkxKkv8BAACgDGLuvzfMRP4HAACAwoi5/74wE/kfAAAACiPm/k+GmZQk/+v/6//r/+v/6/+3Xr/+/8qk/9+e/n8H+v/6//r/+v/0VL/1/2Pu/1SYSUnyPwAAAJRBzP0/F2Yi/wMAAEBhxNz/6TAT+R8AAAAKI+b+nw8zKUn+1//X/++v/v/cufrb6f/r/2e96v9Xb9Rd/38k3o/+/8qk/9+e/n8HLfr/q/T/9f/1//X/uWz91v+Puf/+MJOS5H8AAAAog5j7Hwgzkf8BAACgMGLufzDMRP4HAACAwoi5/6Ewk5Lkf/3/Uvb/00Puv/6/8//r/zv/v/7/0uj/t6f/34Hz/+v/6//r/9NT/db/j7n/4TCTkuR/AAAAKIOY+x8JM5H/AQAAoDBi7v+FMBP5HwAAAAoj5v7PhJmUJP9fVv8/ll71/5MV1v/v4/P/F63/P9RwfJSp/z9a93ym41L/X/9/Gej/t6f/34H+v/5/P/f/w9G8eoHb6//Tj/qt/x9z/6NhJiXJ/wAAAFAGMff/YpiJ/A8AAACFEXP/L4WZyP8AAABQGDH3/3KYSUnyv/P/6//r/9f3/z/h/P/O/6//v8Lp/7en/9+B/r/+fz/3/zvQ/6cf9Vv/P+b+XwkzWTD4vfGfXTxMAAAAoI/E3P9YmElJ/v0fAAAAyiDm/gNhJvI/AAAAFEbM/QfDTEqS//X/m/v/8Yyq+v/l7P/3+vz/jceH/r/+v/7/lde7/v97rs0y/X/9f/1//f/l7P8P6P9TOP3W/4+5/1CYSUnyPwAAAJRBzP2/GmYi/wMAAEBhxNx/OMxE/gcAAIDCiLl/KsykiPm/uVR7dfv/w/3Z/3f+/8vt//9U/1//P9D/b03/f3k4/397+v8d6P/r/zv/v/4/PdVv/f+Y+6fDTIqY/wEAAKBc0o+DY+4/EmYi/wMAAEBhxNx/NMxE/gcAAIDCiLn/8TCTkuR/5//X/3f+/6vR/x9qWF7/P6f/r//fC/r/7en/d6D/r/+v/6//T0/1W/8/5v6ZMJOS5H8AAAAog5j7PxtmIv8DAABAYcTc/7kwE/kfAAAACiPm/mNhJiXJ//r/+v9l7/9Xsuy88//r/7dav/7/yqT/357+fwf6//r/+v/6//RUv/X/Y+4/HmZSkvwPAAAAZRBz/4kwE/kfgP9j7z6a7DqrPQ4f+9oKo8tHYMyIIYzMR2DKjCrGFMnkYJucweQcTM45J5NzztnkHE00VImStNaSWn20j8LpPnu/63km60pl3e62W771v6qfXwAAhpG7/15xi/0PAAAAw8jdf++4pcn+1//r/7v3/6udvP+/96/X/5+m/9f/b8O+/v6q9X/d+aLw8/b/d7zTtXfX/+v/9f+T9P/6f/0/55pb/5+7/z5xS5P9DwAAAB3k7r9v3GL/AwAAwDBy998vbrH/AQAAYBi5+6+NW5rsf/2//l//r//f0//frP/X/y+b9/+n6f830P/r//X/+n+2am79f+7++8ctTfY/AAAAdJC7/wFxi/0PAAAAw8jd/8C4xf4HAACAYeTuf1Dc0mT/6//1//r/pfT/R7z/f87Xo//X/6+j/5+m/99A/6//1//r/9mqufX/ufsfHLc02f8AAADQQe7+h8Qt9j8AAAAMI3f/Q+MW+x8AAACGkbv/YXFLk/2v/9f/6/+X0v8f0vv/+n/9/8LdtDrz74TD7v+PbOG/P6D/n3f/v1rp/6dccD+//stbzud/Hvp//T/7za3/z93/8LjlLqvVkUv9IgEAAIBZyd3/iLilyZ//AwAAQAe5+6+LW+x/AAAAGEbu/uvjlib7X/+v/9f/6//1/+s/vv5/mbz/P+3y+/873O6e9+jb/3v/f5r3/7fd/5/8ztD/s2xz6/9z998QtzTZ/wAAANBB7v5Hxi32PwAAAAwjd/+j4hb7HwAAAIaRu//RcUuT/a//H63//789v+6s/v9U7aL/1//r//X/o9P/T/P+/wan/jV3vH6o/9f/e/9f/8/lmVv/n7v/MXFLk/0PAAAAHeTuf2zcYv8DAADAMHL3Py5usf8BAABgGLn7Hx+3NNn/+v/R+v+9v877//r/dR9f/6//H5n+f5r+f4NR3v+/xO+aXffzl2vXn7/+X//PfnPr/3P3PyFuabL/AQAAoIPc/U+MW+x/AAAAGEbu/ifFLfY/AAAADCN3/5Pjlib7X/+v/19G/58fQf+v/z/4/j/p/5dJ/z9N/7/BKP3/Jdp1P7/0z1//r/9nv7n1/7n7nxK3NNn/AAAA0EHu/qfGLfY/AAAADCN3/9PiFvsfAAAAhpG7/+lxS5P9r//X/y+j//f+v/7f+//6/wuj/5+m/99A/6//1//r/9mqufX/uftvjFua7H8AAADoIHf/M+IW+x8AAACGkbv/mXGL/Q8AAADDyN3/rLilyf7X/+v/9f/6f/3/+o+v/18m/f80/f8G+n/9v/5f/89Wzaj/P+tXHVs9O25psv8BAACgg9z9z4lb7H8AAAAYRu7+58Yt9j8AAAAMI3f/8+KWJvtf/z+b/v9UzjdW/398tVrp/1dN+//jZ/3zrO9L/b/+/xDo/6fp/zc4+RvyxBX6f/2//l//z5Ycbv9/8t/50/89gNz9z49bmux/AAAA6CB3/wviFvsfAAAAhpG7/4Vxi/0PAAAAw8jd/6K4pcn+1//Ppv8/Zaz+3/v/535/dOr/vf+/n/7/cOj/p+n/N/D+v/5f/6//Z6sOt//f/OPc/S+Om45cfclfIgAAADAzuftfErc0+fN/AAAA6CB3/0vjFvsfAAAAFurGfT+Tu/9lcUuT/a//327/f+Ssn9P/6//P/f7Q/+v/9f8HT/8/Tf+/gf5f/6//1/+zVXPr/3P3vzxuabL/AQAAoIPc/TfFLfY/AAAADCN3/yviFvsfAAAAhpG7/5VxS5P9r//3/r/+X/+v/1//8fX/y6T/n6b/30D/r//fbf9/9Mz/eLD9//E1v17/z0G4iP7/xIkT1x14/5+7/1VxS5P9DwAAAB3k7n913GL/AwAAwDBy978mbrH/AQAAYBi5+18btzTZ//r/pv1/fqsvq/+/frXS/+v/9f/6/2n6/2n6/w30//p/7//r/9mqub3/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADAMHL3vyFusf8BAABgGLn73xi3NNn/+v+m/b/3//X/+v/D7v9vW+n/D8Ui+v91D2+Huff/N+j/9f8T2vX/d73znh/q//X/7De3/j93/5vilib7HwAAADrI3f/muMX+BwAAgGHk7n9L3GL/AwAAwDBy9781brqqyf7X/+v/9f/6f/3/+o9/yO//H1mtVvr/LVhE/z9h7v3/dt7/P/d3+Rn6f/3/kj9//b/+n/3m1v/n7n9b3NJk/wMAAEAHufvfHrfY/wAAADCM3P3viFvsfwAAABhG7v53xi1N9r/+X/+v/9f/D9//37CI/t/7/1ui/582j/7//PT/+v8lf/76f/0/F25X/X/u/nfFLU32PwAAAHSQu//dcYv9DwAAAMPI3f+euMX+BwAAgGHk7n9v3NJk/+v/9f8X0//n56n/H6v/Pzq7/v/Ynv99Td7/1/9vif5/mv5/A/2//l//f6P+n22a2/v/ufvfF7c02f8AAADQQe7+98et/9et/Q8AAADDyN3/gbjF/gcAAIBh5O7/YNzSZP/r//X/3v/X/w///r/+vxX9/zT9/wb6f/2//t/7/2zV3Pr/3P0filua7H8AAADoIHf/h+MW+x8AAACGkbv/I3GL/Q8AAADDyN1/c9zSZP/r//X/+n/9v/7/9D9D/f8Y9P/TDqf/P67/1/9XP39F/C7Q/+v/N/16xjS3/j93/0fjlib7HwAAADrI3f+xuMX+BwAAgGHk7v943GL/AwAAwCJdtebncvd/Im5psv/1//p//b/+X/+//uPr/5dpJ/1/flPo/73/H/r0/7ff86Olvf9/7v/90v/r/9m+ufX/ufs/Gbc02f8AAADQQe7+T8Ut9j8AAAAMI3f/p+MW+x8AAACGkbv/M3FLk/2v/9f/6//1//r/9R9f/79M3v+fpv/fQP+/0/fzl/756//1/+w3t/4/d/9n45Ym+x8AAAA6yN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwTu3+jMsa7n/9v/5f/6//1/+v//j6/2XS/0/T/2+g/9f/6//1/2zV3Pr/L5z6VcdWX4xbmux/AAAA6CB3/5fiFvsfAAAAhpG7/8txi/0PAAAAw8jd/5W4pcn+1//r/5fR/584ceI6/b/+f+/Xc6b/v0X/T9H/T9P/b6D/1//r//X/bNXc+v/c/V+NW5rsfwAAAOggd//X4hb7HwAAAIaRu//rcYv9DwAAAMPI3f+NuKXJ/tf/z6D/P6b/9/6//n/l/X/9/5bo/6fp/zcYsf8/duFf/q77+cu1689f/6//Z7+59f+5+78ZtzTZ/wAAANBB7v5vxS32PwAAAAwjd/+34xb7HwAAAIaRu/87cUuT/a//P7z+/+Tfuy7v/x9frf/89f/6f/2//v+g6f+n6f83GLH/vwi77ueX/vnr//X/7De3/j93/3fjlr3D7+qL+yoBAACAOcnd/724pcmf/wMAAEAHufu/H7fY/wAAADCM3P0/iFua7H/9/wze/x+w//f+//rvD/3/rPv/K/X/Y9D/T9P/b6D/1//r/7fU/+d3s/6/u7n1/7n7fxi3NNn/AAAA0EHu/h/FLfY/AAAADCN3/4/jFvsfAAAAhpG7/5a45az9v67tHoX+X/+v/9f/6//Xf3z9/zLp/6ddaP9/dHV5/X/S/+v/9f9d+3/v/3Pa3Pr/3P0/iVv8+T8AAAAsztXn+fnc/T+NW+x/AAAAGEbu/p/FLfY/AAAADCN3/8/jlluv3NWndKj0//p//b/+X/+//uPr/5dJ/z/N+/8b6P+30c9fo/8fo/9frfT/XL659f+5+38Rt/jzfwAAABhG7v5fxi32PwAAAAwjd/+v4hb7HwAAAIaRu//XcUuT/a//1/9fZv9/Ks3U/5+m/z9N/7+e/v9w6P+n6f830P97/1//7/1/tmpu/X/u/t/ELU32PwAAAHSQu/+3cYv9DwAAAMPI3f+7uMX+BwAAgGHk7v993NJk/++s/4+/1fr/xff/3v8/8P7/5Fen/9f/6/8vlP5/mv5/A/2//l//r/9nq+bW/+fu/0Pc0mT/AwAAQAe5+/8Yt9j/AAAAMIzc/X+KW+x/AAAAGEbu/j/HLU32v/f/9f/6/7n3/0O//79a6f/1/1um/5+m/1+v/kHp//X/+n/9P1s1t/4/d/9f4pYm+x8AAAA6yN3/17jF/gcAAIBh5O6/NW6x/wEAAGAYufv/Frc02f/6f/2//l//7/3/9R9f/79M+v9pu+z/7/b/mz+s9/933v/np6D/1//r/9mKufX/ufv/Hrc02f8AAADQQe7+f8Qt9j8AAAAMI3f/P+MW+x8AAACGkbv/X3FLk/2/of8/Wn+h/n+S/n/v56//X//9of/X/+v/D57+f9p0/3/W7+Zm7/8X/b/3//X/+n+2am79f+7+f8ctTfY/AAAAdJC7/7a4xf4HAACAYeTu/0/cYv8DAADAMHL3/zduabL/vf+/pP7/Gv2//l//r//X/2+g/5+2y/f/L4T+X/+/5M9f/6//Z7+59f+5+/8XAAD//1wjSv8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) 154.551947ms ago: executing program 1 (id=19120): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r0, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) 72.788284ms ago: executing program 1 (id=19121): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) pread64(r0, &(0x7f0000002080)=""/23, 0x17, 0x9) 0s ago: executing program 1 (id=19122): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rmdir(&(0x7f0000000140)='./file0\x00') kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 1119.233699][T10638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.247826][T10638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.492638][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.520511][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.549238][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.591243][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.764848][T10986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17296'. [ 1119.817372][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17296'. [ 1119.929289][T10990] netlink: zone id is out of range [ 1119.955278][T10993] loop4: detected capacity change from 0 to 512 [ 1119.967482][T10990] netlink: zone id is out of range [ 1119.972728][T10990] netlink: zone id is out of range [ 1120.017559][T10990] netlink: zone id is out of range [ 1120.030715][T10993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.045428][T10990] netlink: zone id is out of range [ 1120.056359][T10990] netlink: zone id is out of range [ 1120.061712][T10993] ext4 filesystem being mounted at /3482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.072466][T10990] netlink: zone id is out of range [ 1120.078032][T10990] netlink: zone id is out of range [ 1120.098177][T10993] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 1120.111132][T10993] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1120.121157][T10993] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.17297: Failed to acquire dquot type 0 [ 1120.143579][T10993] EXT4-fs (loop4): Remounting filesystem read-only [ 1120.267925][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.488804][T11011] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17303'. [ 1120.721197][T11024] bond0: Error: Cannot enslave bond to itself. [ 1121.557448][T11063] loop4: detected capacity change from 0 to 256 [ 1121.859820][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.866205][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.887913][T11076] loop4: detected capacity change from 0 to 512 [ 1121.898470][T11076] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1121.972744][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17331'. [ 1122.003120][T11076] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 1122.020557][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17331'. [ 1122.029698][T11079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17331'. [ 1122.052017][T11076] Quota error (device loop4): write_blk: dquota write failed [ 1122.059871][T11076] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1122.103790][T11076] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.17329: Failed to acquire dquot type 0 [ 1122.134558][T11076] EXT4-fs (loop4): 1 truncate cleaned up [ 1122.141861][T11076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.226343][T11076] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 5 index 2 [ 1122.260020][T11076] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 1122.297572][T11076] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.17329: Failed to acquire dquot type 1 [ 1122.303014][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1122.452728][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.152703][T11083] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1123.269899][T11133] loop4: detected capacity change from 0 to 512 [ 1123.287512][T11133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1123.343914][T11104] loop1: detected capacity change from 0 to 32768 [ 1123.356013][T11083] usb 6-1: Using ep0 maxpacket: 8 [ 1123.372651][T11133] EXT4-fs (loop4): 1 truncate cleaned up [ 1123.380347][T11133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.383284][T11083] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1123.399959][T11133] cifs: Unknown parameter 'dioread_lock' [ 1123.483226][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.495123][T11104] ea_get: invalid extended attribute [ 1123.501690][T11104] ffff88805f8c3170: 04 00 00 00 .... [ 1123.543472][T11083] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1123.559008][T11083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.567108][T11083] usb 6-1: Product: syz [ 1123.572201][T11083] usb 6-1: Manufacturer: syz [ 1123.576849][T11083] usb 6-1: SerialNumber: syz [ 1123.598279][T11083] usb 6-1: config 0 descriptor?? [ 1123.607038][T11083] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1124.028203][ T786] usb 6-1: USB disconnect, device number 2 [ 1124.086122][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17357'. [ 1124.661129][ T786] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1124.880782][ T786] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1124.891951][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.924125][ T786] usb 2-1: config 0 descriptor?? [ 1125.034610][ T5784] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1125.244536][ T5784] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1125.264992][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.299547][ T5784] usb 6-1: config 0 descriptor?? [ 1125.319287][ T5784] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1125.408457][ T786] ath6kl: Failed to submit usb control message: -71 [ 1125.415462][ T786] ath6kl: unable to send the bmi data to the device: -71 [ 1125.418382][T11181] loop4: detected capacity change from 0 to 32768 [ 1125.446167][ T786] ath6kl: Unable to send get target info: -71 [ 1125.454515][T11181] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.17365 (11181) [ 1125.473074][ T786] ath6kl: Failed to init ath6kl core: -71 [ 1125.505869][ T786] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1125.516599][T11181] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1125.521671][ T786] usb 2-1: USB disconnect, device number 76 [ 1125.566833][T11181] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1125.577240][T11181] BTRFS info (device loop4): force zlib compression, level 3 [ 1125.642219][T11181] BTRFS info (device loop4): force clearing of disk cache [ 1125.659335][T11181] BTRFS info (device loop4): setting nodatasum [ 1125.676087][T11181] BTRFS info (device loop4): use zlib compression, level 3 [ 1125.692937][T11181] BTRFS info (device loop4): allowing degraded mounts [ 1125.701855][T11181] BTRFS info (device loop4): enabling disk space caching [ 1125.714025][T11181] BTRFS info (device loop4): disk space caching is enabled [ 1125.777800][ T5784] gp8psk: usb out operation failed. [ 1125.799594][ T5784] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1125.844920][ T5784] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1125.875290][T11181] BTRFS info (device loop4): enabling ssd optimizations [ 1125.888213][ T5784] usb 6-1: USB disconnect, device number 3 [ 1125.916769][T11181] BTRFS info (device loop4): auto enabling async discard [ 1125.946832][T11181] BTRFS info (device loop4): rebuilding free space tree [ 1125.983263][T11181] BTRFS info (device loop4): disabling free space tree [ 1125.999167][T11226] bond7: entered promiscuous mode [ 1126.004518][T11226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1126.007647][T11181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1126.024715][T11181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1126.225715][T11181] BTRFS info (device loop4): balance: start -f -sprofiles=data|system|metadata|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0x1ffffffff800,usage=18446744073709551615,usage=4294967295..4294967295,drange=18446744073709551612..0 [ 1126.265697][T11181] BTRFS info (device loop4): balance: ended with status: 0 [ 1126.365901][T12737] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1126.521149][T11238] netlink: 'syz.2.17379': attribute type 2 has an invalid length. [ 1126.564200][T11241] netlink: 'syz.5.17382': attribute type 30 has an invalid length. [ 1126.610700][T11241] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1126.900635][T11251] binder: 11250:11251 ioctl c00c6211 0 returned -14 [ 1127.430301][ T27] audit: type=1326 audit(2000000860.623:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.5.17396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a5f8ebe9 code=0x7ffc0000 [ 1127.525476][ T27] audit: type=1326 audit(2000000860.623:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.5.17396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a5f8ebe9 code=0x7ffc0000 [ 1127.608219][ T27] audit: type=1326 audit(2000000860.623:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.5.17396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f30a5f8ebe9 code=0x7ffc0000 [ 1127.699599][ T27] audit: type=1326 audit(2000000860.623:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.5.17396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a5f8ebe9 code=0x7ffc0000 [ 1127.803351][ T27] audit: type=1326 audit(2000000860.623:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.5.17396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a5f8ebe9 code=0x7ffc0000 [ 1127.920920][T11293] netlink: 'syz.1.17405': attribute type 2 has an invalid length. [ 1127.950740][T11293] netlink: 'syz.1.17405': attribute type 8 has an invalid length. [ 1127.971856][T11293] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17405'. [ 1128.306406][T11306] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1128.336368][T11309] cgroup: subsys name conflicts with all [ 1128.506289][T11316] loop5: detected capacity change from 0 to 512 [ 1128.572091][T11316] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1128.641412][T11316] EXT4-fs (loop5): 1 truncate cleaned up [ 1128.649496][T11316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.678335][T11316] cifs: Unknown parameter 'dioread_lock' [ 1128.721031][T10638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.139617][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17429'. [ 1129.399858][T11355] loop5: detected capacity change from 0 to 512 [ 1129.424321][T11355] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1129.491742][T11355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.515233][T11355] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.659673][T11355] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.17434: corrupted xattr block 32: bad e_name length [ 1129.717270][T11371] program syz.4.17440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.901275][T10638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.027641][T11385] IPv6: NLM_F_CREATE should be specified when creating new route [ 1130.059824][T11385] IPv6: Can't replace route, no match found [ 1130.114613][T11389] loop1: detected capacity change from 0 to 64 [ 1130.199201][T11389] Trying to free block not in datazone [ 1130.206160][T11389] Trying to free block not in datazone [ 1130.254457][T11389] Trying to free block not in datazone [ 1130.260065][T11389] Trying to free block not in datazone [ 1130.285762][T11389] Trying to free block not in datazone [ 1130.291566][T11389] minix_free_block (loop1:6): bit already cleared [ 1130.305054][T11389] Trying to free block not in datazone [ 1130.316272][T11389] Trying to free block not in datazone [ 1130.608280][T11401] loop1: detected capacity change from 0 to 512 [ 1130.647812][T11401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1130.766373][T11401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.814802][T11401] ext4 filesystem being mounted at /4294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.964508][T11401] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.17455: corrupted xattr block 32: bad e_name length [ 1131.009984][T11417] loop4: detected capacity change from 0 to 64 [ 1131.167407][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.004650][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1132.231462][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1132.250355][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.282111][ T5878] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1132.302189][ T5878] usb 6-1: config 1 has no interface number 1 [ 1132.313014][ T5878] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1132.349492][ T5878] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1132.359650][ T5878] usb 6-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1132.399912][ T5878] usb 6-1: Product: syz [ 1132.404470][ T5878] usb 6-1: Manufacturer: syz [ 1132.409079][ T5878] usb 6-1: SerialNumber: syz [ 1132.721004][ T5878] usb 6-1: USB disconnect, device number 4 [ 1132.949549][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17482'. [ 1132.972655][T11488] netlink: 'syz.1.17482': attribute type 2 has an invalid length. [ 1132.982473][T11488] netlink: 'syz.1.17482': attribute type 1 has an invalid length. [ 1132.982617][T11490] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1133.276053][T11503] loop1: detected capacity change from 0 to 64 [ 1133.961186][ T786] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1134.164305][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 1134.175842][ T786] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1134.195857][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.229858][ T786] usb 3-1: config 0 descriptor?? [ 1134.274655][ T786] as10x_usb: device has been detected [ 1134.306658][ T786] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1134.375750][ T786] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1134.483897][ T786] as10x_usb: error during firmware upload part1 [ 1134.510673][ T786] Registered device nBox DVB-T Dongle [ 1134.527769][ T786] usb 3-1: USB disconnect, device number 76 [ 1134.658163][ T786] Unregistered device nBox DVB-T Dongle [ 1134.675436][ T786] as10x_usb: device has been disconnected [ 1134.925642][T11574] x_tables: unsorted underflow at hook 4 [ 1135.099221][T11582] loop1: detected capacity change from 0 to 1764 [ 1135.120606][T11583] netlink: 'syz.4.17523': attribute type 3 has an invalid length. [ 1135.163496][T17640] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1135.573396][T11602] loop4: detected capacity change from 0 to 2048 [ 1135.622615][T11602] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.663527][T11602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.17530: bg 0: block 120: padding at end of block bitmap is not set [ 1135.765569][T12737] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 1136.341954][T11608] loop5: detected capacity change from 0 to 32768 [ 1136.367403][T11608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.17532 (11608) [ 1136.442963][T11608] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1136.492058][T11608] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1136.521589][T11608] BTRFS info (device loop5): force zlib compression, level 3 [ 1136.554427][T11608] BTRFS info (device loop5): force clearing of disk cache [ 1136.576271][T11608] BTRFS info (device loop5): setting nodatasum [ 1136.617688][T11608] BTRFS info (device loop5): disabling tree log [ 1136.629767][T11608] BTRFS info (device loop5): enabling disk space caching [ 1136.647990][T11608] BTRFS info (device loop5): disk space caching is enabled [ 1136.894837][T11608] BTRFS info (device loop5): auto enabling async discard [ 1136.937545][T11608] BTRFS info (device loop5): rebuilding free space tree [ 1137.035507][T11608] BTRFS info (device loop5): disabling free space tree [ 1137.066214][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17552'. [ 1137.079952][T11608] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1137.107710][T11608] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1137.333410][T11608] BTRFS warning (device loop5): can't clear the compat_ro:1,compat_ro:4,compat_ro:6,compat_ro:7,compat_ro:11,compat_ro:12,compat_ro:13,compat_ro:15,compat_ro:20,compat_ro:21,compat_ro:26,compat_ro:31,compat_ro:33,compat_ro:36,compat_ro:37,compat_ro:40,compat_ro:44,compat_ro:45,compat_ro:47,compat_ro:48,compat_ro:52,compat_ro:53,compat_ro:54,compat_ro:56,compat_ro:57,compat_ro:59,compat_ro:60,compat_ro:61,compat_ro:62,compat_ro:63 feature bits while mounted [ 1137.489922][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1137.493226][T11688] loop1: detected capacity change from 0 to 2048 [ 1137.509948][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1137.602716][T10638] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1137.660844][T11688] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.770194][T11688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.17557: bg 0: block 120: padding at end of block bitmap is not set [ 1137.915915][ T5777] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 1139.124307][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17578'. [ 1139.796211][T11776] xt_hashlimit: max too large, truncated to 1048576 [ 1140.143205][T11795] loop1: detected capacity change from 0 to 128 [ 1140.184046][T11795] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1140.311408][T11795] ext4 filesystem being mounted at /4337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.470583][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1140.477728][T11808] pim6reg: entered allmulticast mode [ 1140.796243][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17605'. [ 1141.359441][T11851] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1141.411181][T11850] vxcan3: entered promiscuous mode [ 1141.430287][T11850] vxcan3: entered allmulticast mode [ 1141.640015][T11864] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1141.973415][T11883] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17628'. [ 1143.162192][T11934] loop5: detected capacity change from 0 to 512 [ 1143.201213][T11934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1143.245631][T11934] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1143.262010][T11934] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1143.635894][ T785] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1143.854212][T11928] loop4: detected capacity change from 0 to 32768 [ 1143.887235][ T785] usb 6-1: config index 0 descriptor too short (expected 24931, got 36) [ 1143.898876][ T785] usb 6-1: config 100 has too many interfaces: 114, using maximum allowed: 32 [ 1143.922168][T11928] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.17644 (11928) [ 1143.936623][ T785] usb 6-1: config 100 has an invalid descriptor of length 105, skipping remainder of the config [ 1143.948268][ T785] usb 6-1: config 100 has 0 interfaces, different from the descriptor's value: 114 [ 1143.961934][ T785] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1143.977097][T11928] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1143.998419][T11928] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1144.010049][ T785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.031626][T11928] BTRFS info (device loop4): enabling auto defrag [ 1144.052772][T11928] BTRFS info (device loop4): doing ref verification [ 1144.059870][T11928] BTRFS info (device loop4): max_inline at 0 [ 1144.090354][T11928] BTRFS info (device loop4): force clearing of disk cache [ 1144.111429][T11928] BTRFS info (device loop4): turning on sync discard [ 1144.142320][T11928] BTRFS info (device loop4): disabling free space tree [ 1144.260611][ T785] usb 6-1: USB disconnect, device number 5 [ 1144.355664][T11928] BTRFS info (device loop4): enabling ssd optimizations [ 1144.391075][T11928] BTRFS info (device loop4): rebuilding free space tree [ 1144.426720][T11989] loop1: detected capacity change from 0 to 16 [ 1144.481392][T11989] erofs: (device loop1): mounted with root inode @ nid 36. [ 1144.488888][T11928] BTRFS info (device loop4): disabling free space tree [ 1144.497337][T11928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1144.511503][T11928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1144.943914][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17661'. [ 1144.995615][T12737] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.312083][T12016] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1146.382108][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17682'. [ 1146.426156][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17682'. [ 1146.457752][T12065] netlink: 'syz.4.17683': attribute type 21 has an invalid length. [ 1146.487779][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17683'. [ 1147.035106][T12059] loop1: detected capacity change from 0 to 32768 [ 1147.047932][T12059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.17680 (12059) [ 1147.175703][T12059] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1147.214861][T12059] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1147.254481][T12059] BTRFS info (device loop1): force clearing of disk cache [ 1147.283150][T12059] BTRFS info (device loop1): enabling auto defrag [ 1147.289677][T12059] BTRFS info (device loop1): max_inline at 0 [ 1147.334440][T12059] BTRFS info (device loop1): enabling disk space caching [ 1147.353444][T12059] BTRFS info (device loop1): disk space caching is enabled [ 1147.455543][T12098] loop4: detected capacity change from 0 to 4096 [ 1147.482647][T12098] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1147.541263][T12059] BTRFS info (device loop1): enabling ssd optimizations [ 1147.576557][T12098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.622453][T12059] BTRFS info (device loop1): rebuilding free space tree [ 1147.720917][T12059] BTRFS info (device loop1): disabling free space tree [ 1147.727930][T12059] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1147.771950][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.786978][T12130] loop5: detected capacity change from 0 to 64 [ 1147.792563][T12059] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1148.124352][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1148.278778][T12142] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.17705'. [ 1148.918763][ T5844] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1149.143686][ T5844] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1149.159284][ T5844] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1149.173756][ T5844] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1149.194300][ T5844] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1149.216231][ T5878] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1149.248124][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1149.270341][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1149.314195][ T5844] usb 2-1: string descriptor 0 read error: -22 [ 1149.332399][ T5844] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1149.356793][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.377901][ T5844] usb 2-1: config 0 descriptor?? [ 1149.394025][T12157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1149.419983][ T5844] hub 2-1:0.0: bad descriptor, ignoring hub [ 1149.425969][ T5844] hub: probe of 2-1:0.0 failed with error -5 [ 1149.452187][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 1149.459500][ T5844] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 1149.481566][ T5878] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1149.491408][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.503631][ T5878] usb 6-1: Product: syz [ 1149.516008][ T5878] usb 6-1: Manufacturer: syz [ 1149.520643][ T5878] usb 6-1: SerialNumber: syz [ 1149.537306][ T5878] r8152-cfgselector 6-1: config 0 descriptor?? [ 1149.666123][ T5844] usb 2-1: USB disconnect, device number 77 [ 1149.934649][T12198] net_ratelimit: 336 callbacks suppressed [ 1149.934667][T12198] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1150.000474][ T5878] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1150.029371][ T5878] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 1150.070365][T12204] netlink: 'syz.4.17730': attribute type 16 has an invalid length. [ 1150.079488][T12204] netlink: 'syz.4.17730': attribute type 17 has an invalid length. [ 1150.226100][ T786] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1150.391647][T12214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17735'. [ 1150.414335][T12216] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17736'. [ 1150.435686][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 1150.443407][ T786] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1150.464209][ T786] usb 3-1: config 0 has no interface number 0 [ 1150.478397][ T786] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1150.507547][ T786] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1150.528616][ T786] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1150.538498][ T786] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1150.538524][ T786] usb 3-1: Product: syz [ 1150.538538][ T786] usb 3-1: SerialNumber: syz [ 1150.566111][ T786] usb 3-1: config 0 descriptor?? [ 1150.583463][ T786] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1150.587457][ T786] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input61 [ 1150.751604][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17741'. [ 1150.763878][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17741'. [ 1150.800785][T12225] ip6tnl5: entered promiscuous mode [ 1150.815675][T12225] ip6tnl5: entered allmulticast mode [ 1150.946696][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1151.210449][ T786] usb 3-1: USB disconnect, device number 77 [ 1151.221400][ T786] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1151.530223][T12254] loop4: detected capacity change from 0 to 4096 [ 1151.603009][T12252] loop5: detected capacity change from 0 to 4096 [ 1151.626310][T12254] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1151.661175][T12254] ntfs3: loop4: Failed to load $Extend (-22). [ 1151.680939][T12252] ntfs: volume version 3.1. [ 1151.686627][T12254] ntfs3: loop4: Failed to initialize $Extend. [ 1151.695045][T12252] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1151.713010][T12252] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota. [ 1151.723841][T12252] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1151.750068][T12252] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1151.765569][T12252] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 1151.776546][T12252] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1151.928770][T12261] netlink: 'syz.2.17758': attribute type 4 has an invalid length. [ 1152.716612][T12293] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1152.732992][T12295] netlink: 288 bytes leftover after parsing attributes in process `syz.1.17775'. [ 1154.232733][T12348] netlink: 'syz.1.17802': attribute type 8 has an invalid length. [ 1154.253128][T12348] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17802'. [ 1154.496239][T12358] tmpfs: Group quota inode hardlimit too large. [ 1154.947336][ T785] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1154.968556][T12379] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1155.177814][ T785] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1155.195273][ T785] usb 3-1: config 0 has no interface number 0 [ 1155.201584][ T785] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1155.205334][T12390] loop1: detected capacity change from 0 to 64 [ 1155.232078][ T785] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1155.256691][ T785] usb 3-1: config 0 interface 216 has no altsetting 0 [ 1155.263561][ T785] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1155.280480][T12390] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1155.306766][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.326602][ T785] usb 3-1: config 0 descriptor?? [ 1155.332483][T12364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1155.341234][ T785] usb 3-1: NFC: intf ffff88801ef45000 id ffffffff8d63c3c0 [ 1155.606282][ T785] usb 3-1: USB disconnect, device number 78 [ 1155.637424][T12404] loop4: detected capacity change from 0 to 2048 [ 1155.655615][T12404] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1155.695044][T12407] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.730082][T12404] syz.4.17828: attempt to access beyond end of device [ 1155.730082][T12404] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1155.744242][T12404] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 1155.763449][ T5784] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1155.942464][T12411] loop4: detected capacity change from 0 to 4096 [ 1155.962276][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1155.971149][ T5784] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1155.980647][ T5784] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1156.000517][ T5784] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1156.010762][ T5784] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1156.032942][ T5784] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1156.044585][ T5784] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1156.063001][T12411] ntfs: volume version 3.1. [ 1156.073056][T12411] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1156.083178][ T5784] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1156.092446][T12411] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 1156.102840][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.112711][T12411] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1156.128933][ T5784] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1156.136757][T12411] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1156.403049][ T5784] scsi host1: usb-storage 2-1:1.0 [ 1156.531235][T12428] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1156.547566][T12428] overlayfs: missing 'lowerdir' [ 1156.578489][T12430] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17839'. [ 1156.642175][ T5783] usb 2-1: USB disconnect, device number 78 [ 1157.038248][T12448] loop4: detected capacity change from 0 to 764 [ 1157.266567][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17853'. [ 1157.413541][T12466] netlink: 76 bytes leftover after parsing attributes in process `syz.5.17859'. [ 1157.426939][T12466] netlink: 76 bytes leftover after parsing attributes in process `syz.5.17859'. [ 1157.500465][T12471] tc_dump_action: action bad kind [ 1157.680149][T12479] netlink: 92 bytes leftover after parsing attributes in process `syz.5.17863'. [ 1158.041282][T12495] netlink: 'syz.4.17870': attribute type 3 has an invalid length. [ 1158.066162][T12495] netlink: 46 bytes leftover after parsing attributes in process `syz.4.17870'. [ 1158.080592][T12500] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1158.087860][T12501] ceph: No source [ 1158.236877][T12505] netlink: 22 bytes leftover after parsing attributes in process `syz.2.17877'. [ 1158.457310][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17882'. [ 1158.487321][ T5783] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1158.510535][T12519] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17883'. [ 1158.692841][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17888'. [ 1158.709880][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 1158.741753][ T5783] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 1158.750395][ T5783] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1158.773828][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.807131][ T5783] usb 2-1: config 0 has no interface number 0 [ 1158.823614][ T5783] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1158.844199][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.856862][T12532] loop4: detected capacity change from 0 to 256 [ 1158.863289][ T5783] usb 2-1: Product: syz [ 1158.876812][ T5783] usb 2-1: Manufacturer: syz [ 1158.882754][ T5783] usb 2-1: SerialNumber: syz [ 1158.890649][ T5783] usb 2-1: config 0 descriptor?? [ 1158.930289][T12532] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1159.144440][ T5783] usb 2-1: Found UVC 0.00 device syz (046c:14e0) [ 1159.158899][ T5783] usb 2-1: No valid video chain found. [ 1159.171233][ T5783] usb 2-1: USB disconnect, device number 79 [ 1159.206471][T12537] loop4: detected capacity change from 0 to 2048 [ 1159.281679][T12537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.299396][T12544] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1159.326951][T12525] loop5: detected capacity change from 0 to 40427 [ 1159.366779][T12525] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1159.377673][T12525] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1159.407462][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.435520][T12525] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1159.582355][T12525] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1159.590801][T12525] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1159.652579][T12556] loop4: detected capacity change from 0 to 2048 [ 1159.673865][T12556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1159.919792][T12563] xt_hashlimit: max too large, truncated to 1048576 [ 1159.926896][T12563] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 1159.967512][T12565] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1160.476282][T12582] comedi comedi3: dt2801: I/O port conflict (0x2,2) [ 1160.530308][T12579] loop4: detected capacity change from 0 to 4096 [ 1160.566786][T12579] __ntfs_warning: 7 callbacks suppressed [ 1160.566800][T12579] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1160.630357][T12579] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1160.658915][T12579] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1160.695372][T12579] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1160.727046][T12579] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1160.777042][T12579] ntfs: volume version 3.1. [ 1160.806797][T12579] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1160.878422][T12579] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1160.909026][T12579] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1161.062533][T12579] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1161.128301][T12602] usb usb8: usbfs: process 12602 (syz.1.17921) did not claim interface 0 before use [ 1161.130073][T12579] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1162.049657][T12645] sctp: [Deprecated]: syz.4.17940 (pid 12645) Use of int in max_burst socket option. [ 1162.049657][T12645] Use struct sctp_assoc_value instead [ 1162.054353][T12640] loop1: detected capacity change from 0 to 4096 [ 1162.373736][T12657] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17946'. [ 1163.028740][ T5844] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1163.103105][T12693] loop1: detected capacity change from 0 to 256 [ 1163.152188][T12693] FAT-fs (loop1): Directory bread(block 64) failed [ 1163.163989][T12693] FAT-fs (loop1): Directory bread(block 65) failed [ 1163.171764][T12693] FAT-fs (loop1): Directory bread(block 66) failed [ 1163.181419][T12693] FAT-fs (loop1): Directory bread(block 67) failed [ 1163.188153][T12693] FAT-fs (loop1): Directory bread(block 68) failed [ 1163.195735][T12693] FAT-fs (loop1): Directory bread(block 69) failed [ 1163.203598][T12693] FAT-fs (loop1): Directory bread(block 70) failed [ 1163.211166][T12693] FAT-fs (loop1): Directory bread(block 71) failed [ 1163.217907][T12693] FAT-fs (loop1): Directory bread(block 72) failed [ 1163.225709][T12693] FAT-fs (loop1): Directory bread(block 73) failed [ 1163.266205][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.296634][ T5844] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1163.316500][ T5844] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1163.331437][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.359100][ T5844] usb 6-1: config 0 descriptor?? [ 1163.376626][ T5844] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1163.392432][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 1163.411840][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1163.428605][ T5844] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1163.438581][ T5844] usb 6-1: media controller created [ 1163.445855][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.502787][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 1163.525134][ T5844] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1163.545070][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 1163.575322][ T5844] dvb-usb: schedule remote query interval to 150 msecs. [ 1163.602063][ T5844] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1163.627040][ T5844] usb 6-1: USB disconnect, device number 7 [ 1163.679572][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1164.027710][T12720] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1164.514820][T12741] SET target dimension over the limit! [ 1164.976964][T12767] ubi: mtd0 is already attached to ubi0 [ 1165.641561][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18014'. [ 1166.010075][T12822] netlink: 'syz.5.18023': attribute type 2 has an invalid length. [ 1166.116062][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18025'. [ 1166.125622][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18024'. [ 1166.651135][T12835] loop4: detected capacity change from 0 to 4096 [ 1166.666610][T12835] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1166.857827][T12845] netlink: 'syz.1.18034': attribute type 1 has an invalid length. [ 1167.059371][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18038'. [ 1167.109439][T12851] loop1: detected capacity change from 0 to 4096 [ 1167.153384][T12855] QAT: failed to copy from user cfg_data. [ 1167.177573][T12856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1167.271258][T12851] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 1167.277925][T12858] wg1 speed is unknown, defaulting to 1000 [ 1167.328522][T12851] Remounting filesystem read-only [ 1167.608118][T12841] loop5: detected capacity change from 0 to 32768 [ 1167.689216][T12841] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1167.915199][T12841] XFS (loop5): Ending clean mount [ 1167.939353][T12841] XFS (loop5): Quotacheck needed: Please wait. [ 1167.950228][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.025948][T12892] loop4: detected capacity change from 0 to 64 [ 1168.048809][T12841] XFS (loop5): Quotacheck: Done. [ 1168.092175][T10638] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1168.691963][T12912] sctp: [Deprecated]: syz.2.18062 (pid 12912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1168.691963][T12912] Use struct sctp_sack_info instead [ 1168.732699][T12914] netlink: 'syz.5.18064': attribute type 10 has an invalid length. [ 1168.862765][T12914] team0: Device veth1_macvtap failed to register rx_handler [ 1168.964473][T12922] loop4: detected capacity change from 0 to 256 [ 1169.450457][T12944] loop5: detected capacity change from 0 to 128 [ 1169.639462][T12950] loop1: detected capacity change from 0 to 256 [ 1169.759483][T12954] netlink: 180 bytes leftover after parsing attributes in process `syz.5.18084'. [ 1169.812602][T12956] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.272787][T12987] cgroup: release_agent respecified [ 1170.354222][ T27] audit: type=1400 audit(2000000900.780:2887): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12989 comm="syz.2.18100" [ 1170.373631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.544171][ T786] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1170.768841][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 1170.801443][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1170.824112][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1170.834307][ T786] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1170.852592][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.872371][T13013] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1170.872563][ T786] usb 2-1: Product: syz [ 1170.887038][ T786] usb 2-1: Manufacturer: syz [ 1170.891674][ T786] usb 2-1: SerialNumber: syz [ 1170.919441][ T786] usb 2-1: config 0 descriptor?? [ 1170.943499][ T786] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1170.960361][T13013] bond8: entered promiscuous mode [ 1170.976734][T13013] bond8: entered allmulticast mode [ 1171.001617][T13013] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1171.009789][T13022] x_tables: unsorted entry at hook 3 [ 1171.159937][ T786] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1171.187275][ T786] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 1171.427864][ T786] usb 2-1: USB disconnect, device number 80 [ 1172.273212][T13070] loop5: detected capacity change from 0 to 1024 [ 1172.475716][ T27] audit: type=1326 audit(2000000902.763:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.2.18142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1172.541652][ T27] audit: type=1326 audit(2000000902.763:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.2.18142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1172.567237][ T27] audit: type=1326 audit(2000000902.791:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.2.18142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1172.592016][ T27] audit: type=1326 audit(2000000902.791:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.2.18142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1172.614958][ T27] audit: type=1326 audit(2000000902.791:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.2.18142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1172.917668][T13095] delete_channel: no stack [ 1173.400727][T13118] loop1: detected capacity change from 0 to 512 [ 1173.506648][T13118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.582089][T13103] loop4: detected capacity change from 0 to 32768 [ 1173.583523][T13118] ext4 filesystem being mounted at /4461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.672393][T13126] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1173.694123][T13118] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.18162: Directory hole found for htree leaf block 0 [ 1173.712511][T13118] EXT4-fs (loop1): Remounting filesystem read-only [ 1173.744151][T13103] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1173.775630][T13130] loop5: detected capacity change from 0 to 64 [ 1173.797659][T13103] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 1173.879780][T13103] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1173.893952][T13103] OCFS2: File system is now read-only. [ 1173.897679][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.899451][T13103] (syz.4.18154,13103,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1173.917911][T13103] (syz.4.18154,13103,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1173.928113][T13103] (syz.4.18154,13103,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 1173.953092][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1173.954642][T13103] (syz.4.18154,13103,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1173.976439][ T42] Quota error (device loop1): write_blk: dquota write failed [ 1174.000132][T13103] (syz.4.18154,13103,0):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 1174.022370][T13103] (syz.4.18154,13103,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1174.024599][ T42] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1174.040180][T13103] (syz.4.18154,13103,0):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1174.045030][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1174.070326][T13103] (syz.4.18154,13103,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1174.072444][ T42] Quota error (device loop1): write_blk: dquota write failed [ 1174.091268][ T42] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1174.091922][T13103] (syz.4.18154,13103,0):ocfs2_mknod:298 ERROR: status = -5 [ 1174.108107][ T5783] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1174.125163][T13136] loop5: detected capacity change from 0 to 4096 [ 1174.136644][T13103] (syz.4.18154,13103,1):ocfs2_mknod:502 ERROR: status = -5 [ 1174.143986][T13103] (syz.4.18154,13103,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1174.226824][T13136] ntfs: volume version 3.1. [ 1174.260384][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18169'. [ 1174.321436][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.324764][T12737] ocfs2: Unmounting device (7,4) on (node local) [ 1174.353378][ T5783] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1174.386201][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.401474][ T5783] usb 3-1: Product: syz [ 1174.429879][ T5783] usb 3-1: Manufacturer: syz [ 1174.452228][ T5783] usb 3-1: SerialNumber: syz [ 1174.472902][ T5783] usb 3-1: config 0 descriptor?? [ 1174.498745][ T5783] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1174.691313][T13148] binfmt_misc: register: failed to install interpreter file ./file0 [ 1174.767435][ T5783] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1174.886415][T17640] udevd[17640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.941520][ T5783] usb 3-1: USB disconnect, device number 79 [ 1175.434854][T13176] loop4: detected capacity change from 0 to 128 [ 1176.217897][T10642] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 1176.587728][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18213'. [ 1176.906101][T13240] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 1176.910303][T13242] loop5: detected capacity change from 0 to 128 [ 1176.924990][T13240] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 1177.019005][T13240] bond9: entered allmulticast mode [ 1177.180210][T13249] loop4: detected capacity change from 0 to 4096 [ 1177.224566][T13249] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1177.404821][T13249] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 1177.596077][T13266] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18232'. [ 1177.606438][T13266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18232'. [ 1177.686136][T13269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18233'. [ 1177.784364][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18235'. [ 1177.813771][T13275] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18235'. [ 1177.913354][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18238'. [ 1178.687452][T13318] loop1: detected capacity change from 0 to 256 [ 1178.800429][T13318] FAT-fs (loop1): Directory bread(block 64) failed [ 1178.819949][T13318] FAT-fs (loop1): Directory bread(block 65) failed [ 1178.826650][T13318] FAT-fs (loop1): Directory bread(block 66) failed [ 1178.850950][T13318] FAT-fs (loop1): Directory bread(block 67) failed [ 1178.860520][T13318] FAT-fs (loop1): Directory bread(block 68) failed [ 1178.900134][T13318] FAT-fs (loop1): Directory bread(block 69) failed [ 1178.931079][T13318] FAT-fs (loop1): Directory bread(block 70) failed [ 1178.957794][T13318] FAT-fs (loop1): Directory bread(block 71) failed [ 1178.964513][T13318] FAT-fs (loop1): Directory bread(block 72) failed [ 1178.992692][T13318] FAT-fs (loop1): Directory bread(block 73) failed [ 1179.106908][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18263'. [ 1179.761609][T13367] sctp: [Deprecated]: syz.2.18279 (pid 13367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1179.761609][T13367] Use struct sctp_sack_info instead [ 1180.032347][T13373] wg1 speed is unknown, defaulting to 1000 [ 1180.510061][T13373] lo speed is unknown, defaulting to 1000 [ 1180.862499][T13383] loop5: detected capacity change from 0 to 40427 [ 1180.898226][T13383] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1180.935635][T13383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1180.952611][T13383] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 1181.023758][T13383] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1181.335727][T13394] netlink: 'syz.1.18290': attribute type 10 has an invalid length. [ 1181.351655][T13394] macvlan1: entered allmulticast mode [ 1181.368357][T13394] veth1_vlan: entered allmulticast mode [ 1181.379617][T13394] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 1181.403529][T13383] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1181.429476][T13383] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1181.789591][T13409] kAFS: unparsable volume name [ 1181.910433][T13413] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1182.165089][ T27] audit: type=1326 audit(2000000911.817:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.1.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457578ebe9 code=0x7ffc0000 [ 1182.219221][T13417] loop4: detected capacity change from 0 to 2048 [ 1182.251280][T13417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 1182.289960][ T27] audit: type=1326 audit(2000000911.817:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.1.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457578ebe9 code=0x7ffc0000 [ 1182.294781][T13421] netlink: 'syz.2.18304': attribute type 3 has an invalid length. [ 1182.335077][T13417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1182.393891][ T27] audit: type=1326 audit(2000000911.827:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.1.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f457578ebe9 code=0x7ffc0000 [ 1182.416422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.504211][ T27] audit: type=1326 audit(2000000911.827:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.1.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457578ebe9 code=0x7ffc0000 [ 1182.534816][ T27] audit: type=1326 audit(2000000911.827:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.1.18303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457578ebe9 code=0x7ffc0000 [ 1182.557346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.788526][T13433] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 13433 comm: syz.1.18309) [ 1182.832226][ T27] audit: type=1800 audit(2000000912.453:2898): pid=13433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18309" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=132577 res=0 errno=0 [ 1182.912342][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18312'. [ 1183.169978][ T5878] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1183.350863][T13457] lo: left promiscuous mode [ 1183.372171][T13457] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18320'. [ 1183.383048][T13457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.389409][ T5878] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1183.452058][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.479777][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1183.488830][ T5878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.554202][ T5878] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1183.577625][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1183.585672][ T5878] usb 3-1: Product: syz [ 1183.619017][ T5878] usb 3-1: Manufacturer: syz [ 1183.651479][ T5878] cdc_wdm 3-1:1.0: skipping garbage [ 1183.656922][ T5878] cdc_wdm 3-1:1.0: skipping garbage [ 1183.682929][ T5878] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1183.807106][T13474] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.18328'. [ 1183.817116][T13474] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1183.893730][ T5878] usb 3-1: USB disconnect, device number 80 [ 1184.069874][T13481] loop1: detected capacity change from 0 to 4096 [ 1184.095262][T13481] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1184.265865][T13481] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1184.270075][T13491] loop4: detected capacity change from 0 to 512 [ 1184.326747][T13491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.347521][T13491] ext4 filesystem being mounted at /3749/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.428378][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.724260][T13504] comedi: valid board names for 8255 driver are: [ 1184.758398][T13504] 8255 [ 1184.761226][T13504] comedi: valid board names for vmk80xx driver are: [ 1184.805473][T13504] vmk80xx [ 1184.808589][T13504] comedi: valid board names for usbduxsigma driver are: [ 1184.829648][T13511] loop5: detected capacity change from 0 to 512 [ 1184.838483][T13504] usbduxsigma [ 1184.841902][T13504] comedi: valid board names for usbduxfast driver are: [ 1184.849093][T13504] usbduxfast [ 1184.852560][T13504] comedi: valid board names for usbdux driver are: [ 1184.859406][T13504] usbdux [ 1184.862478][T13504] comedi: valid board names for ni6501 driver are: [ 1184.869162][T13504] ni6501 [ 1184.872494][T13504] comedi: valid board names for dt9812 driver are: [ 1184.879139][T13504] dt9812 [ 1184.883235][T13504] comedi: valid board names for ni_labpc_cs driver are: [ 1184.890471][T13504] ni_labpc_cs [ 1184.894646][T13504] comedi: valid board names for ni_daq_700 driver are: [ 1184.901950][T13504] ni_daq_700 [ 1184.905422][T13504] comedi: valid board names for labpc_pci driver are: [ 1184.913075][T13504] labpc_pci [ 1184.925362][T13504] comedi: valid board names for adl_pci9118 driver are: [ 1184.928509][T13511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.942337][T13504] pci9118dg [ 1184.948549][T13504] pci9118hg [ 1184.951852][T13504] pci9118hr [ 1184.955595][T13504] comedi: valid board names for 8255_pci driver are: [ 1184.962505][T13504] 8255_pci [ 1184.973745][T13511] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.994665][T13504] comedi: valid board names for s526 driver are: [ 1185.008402][T13504] s526 [ 1185.025045][T13504] comedi: valid board names for multiq3 driver are: [ 1185.032240][T13504] multiq3 [ 1185.035317][T13504] comedi: valid board names for pcmuio driver are: [ 1185.056560][T13504] pcmuio48 [ 1185.062399][T13504] pcmuio96 [ 1185.065547][T13504] comedi: valid board names for pcmmio driver are: [ 1185.087406][T13504] pcmmio [ 1185.090404][T13504] comedi: valid board names for pcmda12 driver are: [ 1185.100081][T13504] pcmda12 [ 1185.103431][T13504] comedi: valid board names for pcmad driver are: [ 1185.113419][T10638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.134188][T13504] pcmad12 [ 1185.166856][T13504] pcmad16 [ 1185.177676][T13504] comedi: valid board names for ni_labpc driver are: [ 1185.200340][T13504] lab-pc-1200 [ 1185.204269][T13504] lab-pc-1200ai [ 1185.207836][T13504] lab-pc+ [ 1185.210899][T13504] comedi: valid board names for atmio16 driver are: [ 1185.233125][T13504] atmio16 [ 1185.236275][T13504] atmio16d [ 1185.239406][T13504] comedi: valid board names for ni_at_ao driver are: [ 1185.289655][T13504] at-ao-6 [ 1185.292845][T13504] at-ao-10 [ 1185.295991][T13504] comedi: valid board names for ni_at_a2150 driver are: [ 1185.334385][T13504] ni_at_a2150 [ 1185.337820][T13504] comedi: valid board names for adq12b driver are: [ 1185.364256][T13504] adq12b [ 1185.367253][T13504] comedi: valid board names for mpc624 driver are: [ 1185.381009][T13504] mpc624 [ 1185.387176][T13504] comedi: valid board names for c6xdigio driver are: [ 1185.408534][T13504] c6xdigio [ 1185.411702][T13504] comedi: valid board names for aio_iiro_16 driver are: [ 1185.423456][T13504] aio_iiro_16 [ 1185.447486][T13504] comedi: valid board names for aio_aio12_8 driver are: [ 1185.454565][T13504] aio_aio12_8 [ 1185.468596][T13504] aio_ai12_8 [ 1185.474715][T13504] aio_ao12_4 [ 1185.493787][T13504] comedi: valid board names for fl512 driver are: [ 1185.526143][T13504] fl512 [ 1185.532514][T13504] comedi: valid board names for dmm32at driver are: [ 1185.564865][T13504] dmm32at [ 1185.622075][T13504] comedi: valid board names for dt282x driver are: [ 1185.638223][T13534] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1185.663014][T13504] dt2821 [ 1185.666064][T13504] dt2821-f [ 1185.669183][T13504] dt2821-g [ 1185.715187][T13504] dt2823 [ 1185.718282][T13504] dt2824-pgh [ 1185.756871][T13504] dt2824-pgl [ 1185.760212][T13504] dt2825 [ 1185.763160][T13504] dt2827 [ 1185.766130][T13504] dt2828 [ 1185.797665][T13504] dt2829 [ 1185.801884][T13504] dt21-ez [ 1185.804938][T13504] dt23-ez [ 1185.807967][T13504] dt24-ez [ 1185.815624][T13504] dt24-ez-pgl [ 1185.819027][T13504] comedi: valid board names for dt2817 driver are: [ 1185.827307][T13504] dt2817 [ 1185.830286][T13504] comedi: valid board names for dt2815 driver are: [ 1185.837404][T13504] dt2815 [ 1185.862973][T13504] comedi: valid board names for dt2814 driver are: [ 1185.888847][T13504] dt2814 [ 1185.906335][T13504] comedi: valid board names for dt2811 driver are: [ 1185.941706][T13504] dt2811-pgh [ 1185.945054][T13504] dt2811-pgl [ 1185.948362][T13504] comedi: valid board names for dt2801 driver are: [ 1185.977656][T13504] dt2801 [ 1185.985784][T13504] comedi: valid board names for das6402 driver are: [ 1185.995899][T13504] das6402-12 [ 1185.999310][T13504] das6402-16 [ 1186.017976][T13504] comedi: valid board names for das1800 driver are: [ 1186.043180][T13504] das-1701st [ 1186.055821][T13504] das-1701st-da [ 1186.064422][T13504] das-1702st [ 1186.077299][T13504] das-1702st-da [ 1186.102747][T13504] das-1702hr [ 1186.107341][T13504] das-1702hr-da [ 1186.118748][T13504] das-1701ao [ 1186.125520][T13504] das-1702ao [ 1186.133624][T13504] das-1801st [ 1186.138236][T13504] das-1801st-da [ 1186.145549][T13504] das-1802st [ 1186.150157][T13504] das-1802st-da [ 1186.158707][T13504] das-1802hr [ 1186.171571][T13504] das-1802hr-da [ 1186.181268][T13504] das-1801hc [ 1186.189421][T13504] das-1802hc [ 1186.201866][T13504] das-1801ao [ 1186.216665][T13504] das-1802ao [ 1186.224066][T13504] comedi: valid board names for das800 driver are: [ 1186.243949][T13504] das-800 [ 1186.251178][T13504] cio-das800 [ 1186.261782][T13504] das-801 [ 1186.269529][T13504] cio-das801 [ 1186.279838][T13504] das-802 [ 1186.289017][T13504] cio-das802 [ 1186.297817][T13504] cio-das802/16 [ 1186.309478][T13504] comedi: valid board names for isa-das08 driver are: [ 1186.334713][T13504] isa-das08 [ 1186.337965][T13504] das08-pgm [ 1186.341177][T13504] das08-pgh [ 1186.356840][T13504] das08-pgl [ 1186.360085][T13504] das08-aoh [ 1186.376419][T13504] das08-aol [ 1186.384612][T13504] das08-aom [ 1186.397671][T13504] das08/jr-ao [ 1186.409075][T13504] das08jr-16-ao [ 1186.412671][T13504] pc104-das08 [ 1186.416053][T13504] das08jr/16 [ 1186.431947][T13504] comedi: valid board names for das16m1 driver are: [ 1186.458594][T13504] das16m1 [ 1186.461692][T13504] comedi: valid board names for dac02 driver are: [ 1186.483959][T13504] dac02 [ 1186.486873][T13504] comedi: valid board names for rti802 driver are: [ 1186.493381][T13504] rti802 [ 1186.511705][T13504] comedi: valid board names for rti800 driver are: [ 1186.526811][T13504] rti800 [ 1186.529803][T13504] rti815 [ 1186.532864][T13504] comedi: valid board names for pcm3724 driver are: [ 1186.562304][T13504] pcm3724 [ 1186.565438][T13504] comedi: valid board names for pcl818 driver are: [ 1186.594137][T13504] pcl818l [ 1186.597229][T13504] pcl818h [ 1186.600282][T13504] pcl818hd [ 1186.619587][T13504] pcl818hg [ 1186.630301][T13504] pcl818 [ 1186.633364][T13504] pcl718 [ 1186.655061][T13504] pcm3718 [ 1186.658168][T13504] comedi: valid board names for pcl816 driver are: [ 1186.664680][T13504] pcl816 [ 1186.687429][T13504] pcl814b [ 1186.690500][T13504] comedi: valid board names for pcl812 driver are: [ 1186.708368][T13504] pcl812 [ 1186.711351][T13504] pcl812pg [ 1186.714473][T13504] acl8112pg [ 1186.717679][T13504] acl8112dg [ 1186.751136][T13504] acl8112hg [ 1186.754394][T13504] a821pgl [ 1186.757421][T13504] a821pglnda [ 1186.760890][T13504] a821pgh [ 1186.806501][T13504] a822pgl [ 1186.809592][T13504] a822pgh [ 1186.812628][T13504] a823pgl [ 1186.830117][T13504] a823pgh [ 1186.833208][T13504] pcl813 [ 1186.836187][T13504] pcl813b [ 1186.845539][T13504] acl8113 [ 1186.855217][T13504] iso813 [ 1186.869222][T13504] acl8216 [ 1186.872292][T13504] a826pg [ 1186.875240][T13504] comedi: valid board names for pcl730 driver are: [ 1186.902341][T13504] pcl730 [ 1186.905338][T13504] iso730 [ 1186.930331][T13504] acl7130 [ 1186.935268][T13504] pcm3730 [ 1186.938323][T13504] pcl725 [ 1186.963556][T13504] p8r8dio [ 1186.968186][T13504] acl7225b [ 1186.971326][T13504] p16r16dio [ 1186.989604][T13504] pcl733 [ 1186.992588][T13504] pcl734 [ 1186.995532][T13504] opmm-1616-xt [ 1187.010114][T13504] pearl-mm-p [ 1187.013435][T13504] ir104-pbf [ 1187.016728][T13504] comedi: valid board names for pcl726 driver are: [ 1187.044413][T13504] pcl726 [ 1187.047428][T13504] pcl727 [ 1187.069390][T13504] pcl728 [ 1187.086329][T13504] acl6126 [ 1187.089404][T13504] acl6128 [ 1187.092526][T13504] comedi: valid board names for pcl724 driver are: [ 1187.125551][T13504] pcl724 [ 1187.128547][T13504] pcl722 [ 1187.131494][T13504] pcl731 [ 1187.134449][T13504] acl7122 [ 1187.148576][T13504] acl7124 [ 1187.151647][T13504] pet48dio [ 1187.154770][T13504] pcmio48 [ 1187.162350][T13590] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1187.180039][T13504] onyx-mm-dio [ 1187.183462][T13504] comedi: valid board names for pcl711 driver are: [ 1187.217197][T13504] pcl711 [ 1187.220189][T13504] pcl711b [ 1187.227999][T13504] acl8112hg [ 1187.231246][T13504] acl8112dg [ 1187.243970][T13504] comedi: valid board names for amplc_pc263 driver are: [ 1187.250960][T13504] pc263 [ 1187.270178][T13504] comedi: valid board names for amplc_pc236 driver are: [ 1187.308302][T13504] pc36at [ 1187.311293][T13504] comedi: valid board names for amplc_dio200 driver are: [ 1187.345015][T13504] pc212e [ 1187.348015][T13504] pc214e [ 1187.368469][T13504] pc215e [ 1187.386269][T13504] pc218e [ 1187.392739][T13504] pc272e [ 1187.403450][T13504] comedi: valid board names for comedi_parport driver are: [ 1187.430893][T13504] comedi_parport [ 1187.439699][T13504] comedi: valid board names for comedi_test driver are: [ 1187.467378][T13504] comedi_test [ 1187.472425][T13504] comedi: valid board names for comedi_bond driver are: [ 1187.492545][T13504] comedi_bond [ 1187.570890][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.577896][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.887722][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18381'. [ 1188.185732][T13582] loop1: detected capacity change from 0 to 32768 [ 1188.215347][T13582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1188.249303][T13630] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18386'. [ 1188.284641][T13582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1188.384808][T13582] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1188.399332][T13628] loop4: detected capacity change from 0 to 2048 [ 1188.424318][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1188.442194][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1188.503922][T13637] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1188.601594][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 149ms [ 1188.620214][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 1188.637592][T13628] syz.4.18385: attempt to access beyond end of device [ 1188.637592][T13628] loop4: rw=0, sector=2102, nr_sectors = 2 limit=2048 [ 1188.660205][T13582] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1188.700190][T13628] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=12) [ 1188.729238][T13628] syz.4.18385: attempt to access beyond end of device [ 1188.729238][T13628] loop4: rw=0, sector=2102, nr_sectors = 2 limit=2048 [ 1188.779403][T13628] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=12) [ 1188.841833][T13628] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1189.728586][T13683] loop5: detected capacity change from 0 to 256 [ 1189.904143][T13683] FAT-fs (loop5): Directory bread(block 64) failed [ 1189.918605][T13683] FAT-fs (loop5): Directory bread(block 65) failed [ 1189.925279][T13683] FAT-fs (loop5): Directory bread(block 66) failed [ 1189.969012][T13683] FAT-fs (loop5): Directory bread(block 67) failed [ 1189.979973][T13683] FAT-fs (loop5): Directory bread(block 68) failed [ 1189.986538][T13683] FAT-fs (loop5): Directory bread(block 69) failed [ 1190.012187][T13683] FAT-fs (loop5): Directory bread(block 70) failed [ 1190.018775][T13683] FAT-fs (loop5): Directory bread(block 71) failed [ 1190.033471][T13683] FAT-fs (loop5): Directory bread(block 72) failed [ 1190.040053][T13683] FAT-fs (loop5): Directory bread(block 73) failed [ 1190.192161][T13702] batadv0: entered promiscuous mode [ 1190.223030][T13702] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1190.805492][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18420'. [ 1190.834239][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18420'. [ 1190.989301][T13739] xfrm0: entered promiscuous mode [ 1190.994405][T13739] xfrm0: entered allmulticast mode [ 1191.319348][ T27] audit: type=1400 audit(2000000920.395:2899): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=13752 comm="syz.5.18428" [ 1191.504374][T13763] netlink: 'syz.4.18433': attribute type 6 has an invalid length. [ 1192.105536][T13786] loop1: detected capacity change from 0 to 4096 [ 1192.137757][T13786] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1192.232704][T13786] ntfs3: loop1: Failed to load $Extend (-22). [ 1192.258255][T13786] ntfs3: loop1: Failed to initialize $Extend. [ 1192.281434][T13803] netlink: 9 bytes leftover after parsing attributes in process `syz.5.18448'. [ 1193.717920][T13864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18472'. [ 1194.855599][T13867] loop4: detected capacity change from 0 to 32768 [ 1194.918130][T13867] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1195.138486][T13867] XFS (loop4): Ending clean mount [ 1195.171911][T13867] XFS (loop4): Quotacheck needed: Please wait. [ 1195.320689][T13867] XFS (loop4): Quotacheck: Done. [ 1195.405620][T12737] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1195.828592][T11083] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1196.045029][T11083] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1196.059206][T11083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.078435][T11083] usb 6-1: Product: syz [ 1196.082658][T11083] usb 6-1: Manufacturer: syz [ 1196.095031][T11083] usb 6-1: SerialNumber: syz [ 1196.138656][T11083] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1196.192711][ T786] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1196.636682][T13978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18511'. [ 1196.683778][T11083] usb 6-1: USB disconnect, device number 8 [ 1197.329492][T14005] loop1: detected capacity change from 0 to 2048 [ 1197.370755][ T786] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1197.396558][T14005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.433663][ T786] ath9k_htc: Failed to initialize the device [ 1197.443196][T11083] usb 6-1: ath9k_htc: USB layer deinitialized [ 1197.661032][T13980] loop4: detected capacity change from 0 to 40427 [ 1197.706235][T13980] F2FS-fs (loop4): invalid crc value [ 1197.730150][T13980] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1197.966465][T13980] F2FS-fs (loop4): Start checkpoint disabled! [ 1197.984771][T13980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1198.820497][T14058] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1198.843370][T14058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1199.063613][ T27] audit: type=1326 audit(2000000927.635:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.4.18541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1199.146184][ T27] audit: type=1326 audit(2000000927.635:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.4.18541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1199.227129][ T27] audit: type=1326 audit(2000000927.644:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.4.18541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1199.304540][ T27] audit: type=1326 audit(2000000927.644:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.4.18541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1199.345472][ T5783] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1199.376150][ T27] audit: type=1326 audit(2000000927.644:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.4.18541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1199.440180][T14047] loop1: detected capacity change from 0 to 32768 [ 1199.460520][T14047] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.18535 (14047) [ 1199.544043][T14047] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1199.554596][ T5783] usb 3-1: Using ep0 maxpacket: 32 [ 1199.573996][ T5783] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1199.591356][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.612677][T14047] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1199.632486][ T5783] usb 3-1: Product: syz [ 1199.637459][ T5783] usb 3-1: Manufacturer: syz [ 1199.642100][ T5783] usb 3-1: SerialNumber: syz [ 1199.648377][T14047] BTRFS info (device loop1): enabling disk space caching [ 1199.655780][T14047] BTRFS info (device loop1): force clearing of disk cache [ 1199.708104][T14047] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1199.760681][T14047] BTRFS info (device loop1): use zstd compression, level 3 [ 1199.770494][T14047] BTRFS info (device loop1): disk space caching is enabled [ 1199.928073][ T5783] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1199.971305][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1199.999217][ T5783] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1200.039830][T14047] BTRFS info (device loop1): enabling ssd optimizations [ 1200.046836][T14047] BTRFS info (device loop1): auto enabling async discard [ 1200.107448][T14047] BTRFS info (device loop1): rebuilding free space tree [ 1200.209457][T14047] BTRFS info (device loop1): disabling free space tree [ 1200.214255][ T5783] usb 3-1: USB disconnect, device number 81 [ 1200.226167][T14117] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1200.249600][T14047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1200.251305][ T5783] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1200.288214][T14047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1200.339468][ T5783] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1200.394886][ T5783] visor 3-1:1.0: device disconnected [ 1200.428078][T14124] xt_TCPMSS: Only works on TCP SYN packets [ 1200.599743][ T5777] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1202.247295][T14153] loop1: detected capacity change from 0 to 40427 [ 1202.289190][T14153] F2FS-fs (loop1): invalid crc value [ 1202.342516][T14153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1202.469737][T14153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1202.966220][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18580'. [ 1203.828909][T14242] devtmpfs: Cannot enable quota on remount [ 1203.859422][T14245] loop1: detected capacity change from 0 to 64 [ 1204.130695][T14251] loop5: detected capacity change from 0 to 4096 [ 1204.143427][T14254] loop1: detected capacity change from 0 to 1024 [ 1204.177978][T14251] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1204.233610][T14251] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1204.325706][T14251] ntfs: volume version 3.1. [ 1204.334547][T14251] ntfs: (device loop5): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1204.360946][T14251] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 1204.385528][T14251] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1204.395025][T14254] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1204.419518][T14251] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1204.448702][T14254] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1204.568234][T14251] ntfs: (device loop5): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 1204.597471][T14251] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1204.617456][T13782] hfsplus: b-tree write err: -5, ino 4 [ 1205.073959][T14273] loop4: detected capacity change from 0 to 2048 [ 1205.091958][T14273] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1205.172930][T14277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1205.312610][T14273] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 1205.363518][T14273] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1205.454529][T14273] Remounting filesystem read-only [ 1205.491124][T14273] NILFS (loop4): error -5 truncating bmap (ino=15) [ 1205.590883][T12737] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1205.597711][T12737] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1205.631022][T12737] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 1205.653173][T12737] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 1205.670752][T12737] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 1205.683494][T12737] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1205.710209][T12737] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1205.734955][T12737] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1205.754760][T12737] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1205.769724][T12737] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1205.800695][T12737] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 1205.823233][T12737] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1205.855240][T12737] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1205.869673][T12737] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 1205.889425][T12737] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1206.153515][T14314] loop5: detected capacity change from 0 to 4096 [ 1206.189459][T14314] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1206.226029][T14321] tmpfs: Bad value for 'nr_inodes' [ 1206.232305][T14314] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1206.271853][T14314] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1206.308754][T14314] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1206.349489][T14314] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1206.367581][T14314] ntfs: volume version 3.1. [ 1206.374938][T14324] loop4: detected capacity change from 0 to 64 [ 1206.378180][T14314] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1206.397926][T14314] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1207.305238][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18638'. [ 1207.439016][T14365] loop1: detected capacity change from 0 to 764 [ 1207.447762][T14365] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1208.329621][T14405] loop1: detected capacity change from 0 to 512 [ 1209.750990][T14458] loop5: detected capacity change from 0 to 1024 [ 1209.799234][T14458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.868818][T10638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.495759][ T786] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1210.688881][ T786] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.699236][ T786] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1210.708295][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.723407][ T786] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1210.751597][T11083] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1210.944222][T11083] usb 3-1: Using ep0 maxpacket: 32 [ 1210.950929][T11083] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1210.959179][T11083] usb 3-1: config 0 has no interface number 0 [ 1210.968543][T11083] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1210.978165][T11083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.986186][T11083] usb 3-1: Product: syz [ 1210.990633][T11083] usb 3-1: Manufacturer: syz [ 1210.995286][T11083] usb 3-1: SerialNumber: syz [ 1211.001949][T11083] usb 3-1: config 0 descriptor?? [ 1211.443293][T11083] radio-si470x 3-1:0.35: DeviceID=0xbcc4 ChipID=0xfbfe [ 1211.657253][T11083] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1211.672618][T11083] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1211.685600][T11083] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 1211.735820][T11083] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1211.758166][T11083] usb 3-1: USB disconnect, device number 82 [ 1211.824486][ T786] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1211.985130][T14519] loop4: detected capacity change from 0 to 512 [ 1212.040632][ T786] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1212.062080][T14519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.080591][ T786] stv0680 2-1:4.0: last error: 0, command = 0x56 [ 1212.098300][ T786] usb 2-1: USB disconnect, device number 81 [ 1212.106933][T14519] ext4 filesystem being mounted at /3811/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.178706][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.731954][T14543] loop4: detected capacity change from 0 to 1024 [ 1212.755639][T14543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.809708][T14543] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1212.873789][T14543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.085437][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.115946][T14560] loop5: detected capacity change from 0 to 128 [ 1213.123246][T14560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1213.160854][T14560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1213.190034][T14560] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1213.234741][T14560] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1213.276411][T14560] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.312626][T14560] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 1213.412074][T14560] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 1213.518805][T10638] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1213.796553][T14577] loop5: detected capacity change from 0 to 4096 [ 1213.916913][T14585] bridge: RTM_NEWNEIGH with invalid ether address [ 1213.957327][T14577] ntfs3: loop5: failed to convert "0000" to iso8859-2 [ 1214.145982][T14588] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18743'. [ 1214.426315][T14581] loop4: detected capacity change from 0 to 32768 [ 1214.451527][T14581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.18739 (14581) [ 1214.489918][T14581] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1214.501230][T14581] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1214.510384][T14581] BTRFS info (device loop4): force clearing of disk cache [ 1214.518291][T14581] BTRFS info (device loop4): enabling ssd optimizations [ 1214.529088][T14581] BTRFS info (device loop4): using spread ssd allocation scheme [ 1214.549677][T14581] BTRFS info (device loop4): using free space tree [ 1214.600649][ T786] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1214.661452][T14581] BTRFS info (device loop4): auto enabling async discard [ 1214.671533][T14581] BTRFS info (device loop4): rebuilding free space tree [ 1214.702495][T14581] BTRFS info (device loop4): checking UUID tree [ 1214.805168][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.834176][ T786] usb 6-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 1214.863076][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.886632][ T786] usb 6-1: config 0 descriptor?? [ 1214.901901][T12737] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1215.361125][ T786] sony 0003:054C:0002.0002: item fetching failed at offset 5/7 [ 1215.379844][T14638] loop4: detected capacity change from 0 to 2048 [ 1215.418898][ T786] sony 0003:054C:0002.0002: parse failed [ 1215.431946][ T786] sony: probe of 0003:054C:0002.0002 failed with error -22 [ 1215.504073][T14638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1215.576284][ T786] usb 6-1: USB disconnect, device number 9 [ 1215.759604][T14642] loop1: detected capacity change from 0 to 512 [ 1215.789095][T14642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1215.810226][T14642] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1215.824139][T14642] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.18762: Block bitmap for bg 0 marked uninitialized [ 1215.873143][T14642] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1215.910516][T14642] EXT4-fs (loop1): 1 orphan inode deleted [ 1215.932328][T14642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1216.022627][T14642] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1216.044781][T14642] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1216.070500][T14642] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.18762: Block bitmap for bg 0 marked uninitialized [ 1216.161418][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.310236][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18767'. [ 1216.696841][T14670] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1216.865568][T14675] program syz.4.18775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.088837][T14664] loop1: detected capacity change from 0 to 32768 [ 1217.212127][T14664] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1217.273320][T14683] netlink: 'syz.4.18778': attribute type 1 has an invalid length. [ 1217.432605][T14685] loop5: detected capacity change from 0 to 256 [ 1217.468356][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1217.594638][T14689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1217.664888][T14685] FAT-fs (loop5): Directory bread(block 64) failed [ 1217.722014][T14685] FAT-fs (loop5): Directory bread(block 65) failed [ 1217.748735][T14685] FAT-fs (loop5): Directory bread(block 66) failed [ 1217.776164][T14685] FAT-fs (loop5): Directory bread(block 67) failed [ 1217.782956][T14693] vivid-000: disconnect [ 1217.786054][T14685] FAT-fs (loop5): Directory bread(block 68) failed [ 1217.797654][T14692] vivid-000: reconnect [ 1217.804656][T14685] FAT-fs (loop5): Directory bread(block 69) failed [ 1217.828847][T14685] FAT-fs (loop5): Directory bread(block 70) failed [ 1217.835432][T14685] FAT-fs (loop5): Directory bread(block 71) failed [ 1217.862200][T14685] FAT-fs (loop5): Directory bread(block 72) failed [ 1217.868780][T14685] FAT-fs (loop5): Directory bread(block 73) failed [ 1218.201869][T14699] sp0: Synchronizing with TNC [ 1218.453009][T14691] loop4: detected capacity change from 0 to 32768 [ 1218.529863][T14691] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1218.698923][T12737] ocfs2: Unmounting device (7,4) on (node local) [ 1218.817459][T14697] loop1: detected capacity change from 0 to 32768 [ 1218.930376][T14697] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1219.020984][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1219.020999][ T27] audit: type=1326 audit(2000000946.306:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.090931][ T27] audit: type=1326 audit(2000000946.306:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.157943][ T5777] (syz-executor,5777,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 1219.167798][T14722] loop4: detected capacity change from 0 to 2048 [ 1219.175204][ T27] audit: type=1326 audit(2000000946.334:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.202528][ T27] audit: type=1326 audit(2000000946.334:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.225977][ T27] audit: type=1326 audit(2000000946.334:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.267663][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1219.379214][ T27] audit: type=1326 audit(2000000946.334:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.429268][ T27] audit: type=1326 audit(2000000946.334:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.475989][T17640] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1219.502014][T14722] loop4: detected capacity change from 0 to 2048 [ 1219.517067][ T27] audit: type=1326 audit(2000000946.334:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.2.18795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x7ffc0000 [ 1219.545476][T17640] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1219.609899][ T786] kernel read not supported for file /swradio5 (pid: 786 comm: kworker/1:2) [ 1219.840515][T17640] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1220.124908][T14749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18808'. [ 1220.445303][T14766] loop5: detected capacity change from 0 to 128 [ 1220.509926][ T27] audit: type=1800 audit(2000000947.690:2914): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18816" name="file2" dev="loop5" ino=1048790 res=0 errno=0 [ 1220.535973][T14766] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1220.543883][T14766] FAT-fs (loop5): Filesystem has been set read-only [ 1220.702073][T14776] loop1: detected capacity change from 0 to 256 [ 1220.733901][T14776] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1220.813126][T14776] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1220.840515][T14776] FAT-fs (loop1): Filesystem has been set read-only [ 1220.854641][ T5878] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1220.976587][T14786] netlink: 'syz.5.18826': attribute type 21 has an invalid length. [ 1221.059232][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1221.085723][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.100817][ T5878] usb 3-1: config 0 descriptor?? [ 1221.113192][ T5878] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1221.313239][ T27] audit: type=1326 audit(2000000948.438:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.4.18832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1221.760178][ T5878] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1221.773318][ T5878] pwc: recv_control_msg error -71 req 02 val 2700 [ 1221.782846][ T5878] pwc: recv_control_msg error -71 req 04 val 1600 [ 1221.790180][ T5878] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1221.798713][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 1221.806398][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 1221.814343][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 1221.822786][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 1221.833168][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 1221.843188][ T5878] pwc: recv_control_msg error -71 req 06 val 0600 [ 1221.853319][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 1221.879473][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 1221.900941][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 1221.910880][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 1221.923529][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 1221.930900][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 1221.944387][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 1221.951992][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 1221.972617][ T5878] pwc: Registered as video103. [ 1221.999658][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 1222.050247][ T5878] usb 3-1: USB disconnect, device number 83 [ 1222.371774][T14830] loop1: detected capacity change from 0 to 256 [ 1222.390733][T14830] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1222.419102][T14830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1222.521908][ T3392] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1222.647168][T14841] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18849'. [ 1222.656681][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18849'. [ 1222.671534][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18849'. [ 1222.691534][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18849'. [ 1222.756552][T14845] ieee802154 phy0 wpan0: encryption failed: -22 [ 1222.779321][ T3392] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.799099][ T3392] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1222.821377][ T3392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.821879][T14847] loop1: detected capacity change from 0 to 512 [ 1222.838025][ T3392] usb 6-1: config 0 descriptor?? [ 1222.862136][ T3392] pwc: Askey VC010 type 2 USB webcam detected. [ 1222.889226][T14847] EXT4-fs: Ignoring removed nobh option [ 1222.912768][T14847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1222.971180][T14847] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.18851: iget: bad i_size value: 38620345925642 [ 1223.005959][T14847] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.18851: couldn't read orphan inode 15 (err -117) [ 1223.030618][T14847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.089805][T14847] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.18851: bg 0: block 5: invalid block bitmap [ 1223.112052][T14847] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1223.204189][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.515098][ T3392] pwc: recv_control_msg error -71 req 02 val 2700 [ 1223.534774][ T3392] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1223.565713][ T3392] pwc: recv_control_msg error -71 req 04 val 1000 [ 1223.572367][T14868] loop4: detected capacity change from 0 to 512 [ 1223.590644][T14868] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1223.593089][ T3392] pwc: recv_control_msg error -71 req 04 val 1300 [ 1223.625290][T14868] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1223.638873][ T3392] pwc: recv_control_msg error -71 req 04 val 1400 [ 1223.644216][T14868] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.18860: Block bitmap for bg 0 marked uninitialized [ 1223.659778][T14868] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1223.669338][T14868] EXT4-fs (loop4): 1 orphan inode deleted [ 1223.676349][T14868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1223.684608][ T3392] pwc: recv_control_msg error -71 req 02 val 2000 [ 1223.715935][T14868] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1223.728373][T14868] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1223.733585][ T3392] pwc: recv_control_msg error -71 req 02 val 2100 [ 1223.756094][T14868] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.18860: Block bitmap for bg 0 marked uninitialized [ 1223.797061][ T3392] pwc: recv_control_msg error -71 req 04 val 1500 [ 1223.833962][ T3392] pwc: recv_control_msg error -71 req 02 val 2500 [ 1223.843191][ T3392] pwc: recv_control_msg error -71 req 02 val 2400 [ 1223.844825][T14872] sp0: Synchronizing with TNC [ 1223.866765][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.876671][ T3392] pwc: recv_control_msg error -71 req 02 val 2600 [ 1223.891085][ T3392] pwc: recv_control_msg error -71 req 02 val 2900 [ 1223.898356][ T3392] pwc: recv_control_msg error -71 req 02 val 2800 [ 1223.907226][ T3392] pwc: recv_control_msg error -71 req 04 val 1100 [ 1223.914791][ T3392] pwc: recv_control_msg error -71 req 04 val 1200 [ 1223.946579][ T3392] pwc: Registered as video103. [ 1223.956283][ T3392] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 1224.005572][ T3392] usb 6-1: USB disconnect, device number 10 [ 1224.273495][T14883] Bluetooth: MGMT ver 1.22 [ 1224.911115][T14902] sp0: Synchronizing with TNC [ 1225.090270][T14891] loop5: detected capacity change from 0 to 32768 [ 1225.102538][T14891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.18870 (14891) [ 1225.177730][T14891] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1225.191440][T14891] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1225.200478][T14891] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1225.213177][T14891] BTRFS info (device loop5): turning on sync discard [ 1225.221798][T14891] BTRFS info (device loop5): turning on flush-on-commit [ 1225.230352][T14891] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1225.246328][T14891] BTRFS info (device loop5): trying to use backup root at mount time [ 1225.257293][T14891] BTRFS info (device loop5): using free space tree [ 1225.321215][ T58] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 1225.376604][T14891] BTRFS error (device loop5): failed to load root extent [ 1225.384301][T14891] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1225.476821][T14929] program syz.1.18888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1225.526415][T10638] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1225.765668][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18882'. [ 1226.446138][T10642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1226.660697][T14957] netlink: 312 bytes leftover after parsing attributes in process `syz.5.18894'. [ 1226.792803][T14961] netlink: 'syz.5.18896': attribute type 4 has an invalid length. [ 1227.009364][T14969] futex_wake_op: syz.5.18900 tries to shift op by 32; fix this program [ 1227.113459][T14971] netlink: 'syz.1.18901': attribute type 3 has an invalid length. [ 1227.799250][T14979] loop1: detected capacity change from 0 to 40427 [ 1227.810017][T14996] loop4: detected capacity change from 0 to 512 [ 1227.824519][T14979] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1227.832444][T14979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1227.874333][T14979] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1227.890657][T14996] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1227.935445][T14996] EXT4-fs (loop4): 1 truncate cleaned up [ 1227.953892][T14996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.058200][T14979] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1228.067253][T14979] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1228.115229][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.117577][T14979] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1228.889829][T15008] loop4: detected capacity change from 0 to 32768 [ 1228.974018][T15008] jfs_lookup: iget failed on inum 4 [ 1228.982767][T15008] jfs_lookup: iget failed on inum 4 [ 1229.104059][T15026] IPVS: Error connecting to the multicast addr [ 1229.458199][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18932'. [ 1229.548021][T15042] loop4: detected capacity change from 0 to 1024 [ 1229.570220][T15042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1229.599379][T15042] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1229.637891][T15042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.712116][T15042] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.18933: missing EA_INODE flag [ 1229.746886][T15042] EXT4-fs (loop4): Remounting filesystem read-only [ 1229.787493][T15052] loop1: detected capacity change from 0 to 1024 [ 1229.828851][T12737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.833146][T11083] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 1229.848978][T11083] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 1229.858893][T11083] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 1229.862399][T15052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.884319][T11083] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.01 Device [syz1] on syz0 [ 1229.995865][T15059] loop4: detected capacity change from 0 to 1024 [ 1230.007217][T15052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.18937: bg 0: block 88: padding at end of block bitmap is not set [ 1230.075510][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.080814][T15059] hfsplus: bad catalog entry type [ 1230.129166][T15057] fido_id[15057]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1230.190526][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1231.547593][T15105] loop4: detected capacity change from 0 to 2048 [ 1231.590724][T15105] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1231.605746][T15105] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1231.615716][T15105] UDF-fs: Scanning with blocksize 512 failed [ 1231.656515][T15105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.744737][T15097] loop1: detected capacity change from 0 to 32768 [ 1231.782269][T15097] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1231.986112][T15097] XFS (loop1): Ending clean mount [ 1232.084129][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1232.155388][ T786] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1232.405060][ T786] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1232.417202][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.439965][ T786] usb 3-1: config 0 descriptor?? [ 1232.793076][T15136] loop1: detected capacity change from 0 to 4096 [ 1232.899947][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1232.914403][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1232.929902][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1232.939290][T15130] loop4: detected capacity change from 0 to 32768 [ 1232.946876][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1232.968755][T15130] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.18967 (15130) [ 1232.986738][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1233.015058][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1233.019549][T15130] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1233.035039][ T786] betop 0003:11C0:5506.0004: unknown main item tag 0x0 [ 1233.049360][T15130] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1233.070616][T15130] BTRFS info (device loop4): using free space tree [ 1233.081358][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18971'. [ 1233.091769][ T786] betop 0003:11C0:5506.0004: hidraw0: USB HID v10.00 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 1233.104237][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18971'. [ 1233.119489][T15138] netlink: 'syz.1.18971': attribute type 14 has an invalid length. [ 1233.128277][T15138] netlink: 'syz.1.18971': attribute type 12 has an invalid length. [ 1233.145100][ T786] betop 0003:11C0:5506.0004: no inputs found [ 1233.165137][ T786] usb 3-1: USB disconnect, device number 84 [ 1233.218402][T15139] fido_id[15139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1233.238068][T15130] BTRFS info (device loop4): enabling ssd optimizations [ 1233.249768][T15130] BTRFS info (device loop4): auto enabling async discard [ 1233.387804][T15157] loop1: detected capacity change from 0 to 64 [ 1233.449482][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1233.449497][ T27] audit: type=1800 audit(2000000959.803:2922): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18972" name="bus" dev="loop1" ino=1 res=0 errno=0 [ 1233.476826][T12737] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1233.783007][ T27] audit: type=1326 audit(2000000960.112:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1233.857667][ T27] audit: type=1326 audit(2000000960.112:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1233.952933][ T27] audit: type=1326 audit(2000000960.112:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1234.003730][ T27] audit: type=1326 audit(2000000960.112:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1234.088795][T15168] loop1: detected capacity change from 0 to 4096 [ 1234.095498][ T27] audit: type=1326 audit(2000000960.112:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1234.154586][ T27] audit: type=1326 audit(2000000960.112:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1234.204103][T15171] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1234.233674][ T27] audit: type=1326 audit(2000000960.112:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15161 comm="syz.4.18973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e258ebe9 code=0x7ffc0000 [ 1234.421210][T15177] loop1: detected capacity change from 0 to 512 [ 1234.457564][T15177] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1234.697961][T15185] loop1: detected capacity change from 0 to 2048 [ 1234.744383][T15185] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1234.761776][T15185] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1234.771016][T15185] UDF-fs: Scanning with blocksize 512 failed [ 1234.782813][T15185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1234.853096][T15191] loop4: detected capacity change from 0 to 128 [ 1234.884150][T15191] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1234.930421][T15191] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1234.953416][T15191] ext4 filesystem being mounted at /3891/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.211184][T15191] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1235.307499][T12737] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1235.706867][T15219] loop5: detected capacity change from 0 to 2048 [ 1235.778404][T15219] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1235.821397][T15219] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1235.829110][T15219] UDF-fs: Scanning with blocksize 512 failed [ 1235.872214][T15219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.379811][T15238] loop1: detected capacity change from 0 to 4096 [ 1236.391073][T15238] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1236.742375][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19014'. [ 1236.893217][T15240] loop5: detected capacity change from 0 to 32768 [ 1236.911000][T15240] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.19009 (15240) [ 1236.941353][T15240] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1236.965465][T15240] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1236.985217][T15240] BTRFS info (device loop5): using free space tree [ 1237.093565][T15240] BTRFS info (device loop5): enabling ssd optimizations [ 1237.100576][T15240] BTRFS info (device loop5): auto enabling async discard [ 1237.192589][T10638] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1237.639602][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19023'. [ 1237.841900][ T5783] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1238.034233][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 1238.041987][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 1238.053733][ T5783] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1238.099041][ T5783] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1238.108218][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1238.129322][ T5783] usb 2-1: Product: syz [ 1238.133911][ T5783] usb 2-1: Manufacturer: syz [ 1238.138536][ T5783] usb 2-1: SerialNumber: syz [ 1238.146407][ T5783] usb 2-1: config 0 descriptor?? [ 1238.153341][T15286] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1238.211493][T15300] loop5: detected capacity change from 0 to 4096 [ 1238.226523][T15300] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1238.243932][T15300] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1238.261062][T15300] ntfs3: loop5: failed to replay log file. Can't mount rw! [ 1238.405128][ T5783] usb 2-1: USB disconnect, device number 82 [ 1238.955923][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19037'. [ 1238.985516][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19037'. [ 1239.023290][T15317] netlink: 'syz.5.19037': attribute type 18 has an invalid length. [ 1239.068713][T15319] loop1: detected capacity change from 0 to 512 [ 1239.136047][T15319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.183851][T15319] ext4 filesystem being mounted at /4695/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.292570][T15319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.19038: bg 0: block 64: padding at end of block bitmap is not set [ 1239.380652][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.802299][T15325] loop4: detected capacity change from 0 to 32768 [ 1239.908630][T15325] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1240.084106][T15325] XFS (loop4): Ending clean mount [ 1240.243612][T12737] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1241.096015][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19054'. [ 1242.245416][T15365] loop1: detected capacity change from 0 to 65536 [ 1242.284816][T15365] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1242.350943][T15382] loop4: detected capacity change from 0 to 32768 [ 1242.366219][T15382] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.19064 (15382) [ 1242.386425][T15365] XFS (loop1): Ending clean mount [ 1242.444256][T15382] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1242.466508][ T5777] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1242.495591][T15382] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1242.518129][T15382] BTRFS info (device loop4): using free space tree [ 1242.784771][T15382] BTRFS info (device loop4): enabling ssd optimizations [ 1242.802162][T15382] BTRFS info (device loop4): auto enabling async discard [ 1242.970027][T12737] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1243.175642][T17640] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (17640) [ 1243.320897][T15418] loop1: detected capacity change from 0 to 1024 [ 1243.351600][T15418] EXT4-fs: inline encryption not supported [ 1243.389370][T15418] EXT4-fs: Ignoring removed i_version option [ 1243.431295][T15418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1243.534086][T15418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1243.707254][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.111945][T15429] loop1: detected capacity change from 0 to 64 [ 1244.326602][T15436] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1244.353018][T15435] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1244.477146][T15441] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1244.505863][T15441] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1244.522705][T15441] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1244.562460][T15441] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1244.570130][T15441] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1244.578689][T15441] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1244.594765][T15441] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1244.612437][T15441] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1244.618947][T15441] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1244.635382][T15441] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1244.642362][T15441] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1244.648852][T15441] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1244.673125][T15441] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1244.689663][T15441] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1244.705182][T11083] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1244.711236][T15441] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1244.732131][T15441] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1244.751420][T15441] comedi comedi3: 8255: I/O port conflict (0xffffffffffffcadb,4) [ 1244.767182][T15441] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1244.908341][T11083] usb 2-1: Using ep0 maxpacket: 32 [ 1244.933026][T11083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.967088][T11083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.984223][T11083] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1244.993322][T11083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.015623][T11083] usb 2-1: config 0 descriptor?? [ 1245.218182][T15471] sp0: Synchronizing with TNC [ 1245.317781][ T27] audit: type=1326 audit(2000000970.907:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15472 comm="syz.2.19092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e78ebe9 code=0x0 [ 1245.480118][T11083] smartjoyplus 0003:0925:8866.0005: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 1245.507926][T11083] smartjoyplus 0003:0925:8866.0005: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1245.710333][T11083] usb 2-1: USB disconnect, device number 83 [ 1246.421913][T15505] loop1: detected capacity change from 0 to 256 [ 1246.434043][T15505] exfat: Deprecated parameter 'namecase' [ 1246.441339][T15505] exfat: Deprecated parameter 'utf8' [ 1246.472214][T15505] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1246.601092][T15510] loop1: detected capacity change from 0 to 1024 [ 1246.661613][T15510] hfsplus: walked past end of dir [ 1247.474778][T15538] loop1: detected capacity change from 0 to 64 [ 1247.566487][T13782] ------------[ cut here ]------------ [ 1247.572215][T13782] kernel BUG at fs/hfs/inode.c:449! [ 1247.577679][T13782] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1247.583965][T13782] CPU: 1 PID: 13782 Comm: kworker/u4:8 Not tainted 6.6.102-syzkaller #0 [ 1247.592391][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1247.602550][T13782] Workqueue: writeback wb_workfn (flush-7:1) [ 1247.608555][T13782] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 1247.614118][T13782] Code: c7 c1 e0 d2 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 e0 d2 ee 96 e8 36 05 86 ff e9 6c fe ff ff e8 1c be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 1247.633740][T13782] RSP: 0018:ffffc9000444f360 EFLAGS: 00010293 [ 1247.639817][T13782] RAX: ffffffff8256cd04 RBX: ffff88805b350828 RCX: ffff88806c520000 [ 1247.647889][T13782] RDX: 0000000000000000 RSI: ffffffff8cf38480 RDI: 0000000000000000 [ 1247.655880][T13782] RBP: ffffc9000444f4f0 R08: ffff88806c520000 R09: 0000000000000003 [ 1247.663886][T13782] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1247.671873][T13782] R13: 1ffff92000889e70 R14: ffff88805b3507d8 R15: 0000000000000000 [ 1247.679857][T13782] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1247.688796][T13782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1247.695398][T13782] CR2: 00007ffdc7422db8 CR3: 0000000063f86000 CR4: 00000000003506e0 [ 1247.703480][T13782] Call Trace: [ 1247.706860][T13782] [ 1247.709803][T13782] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1247.715203][T13782] ? __rwlock_init+0x150/0x150 [ 1247.720030][T13782] __writeback_single_inode+0x705/0xee0 [ 1247.725613][T13782] writeback_sb_inodes+0x77c/0xef0 [ 1247.730753][T13782] ? queue_io+0x560/0x560 [ 1247.735165][T13782] ? rcu_is_watching+0x15/0xb0 [ 1247.739949][T13782] wb_writeback+0x450/0xba0 [ 1247.744470][T13782] ? queue_io+0x331/0x560 [ 1247.748795][T13782] ? percpu_ref_tryget+0x250/0x250 [ 1247.753899][T13782] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1247.759869][T13782] ? _raw_spin_unlock_irq+0x23/0x50 [ 1247.765181][T13782] wb_workfn+0x3ff/0xe20 [ 1247.769432][T13782] ? inode_wait_for_writeback+0x200/0x200 [ 1247.775175][T13782] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1247.781160][T13782] ? read_lock_is_recursive+0x20/0x20 [ 1247.786522][T13782] ? _raw_spin_unlock_irq+0x23/0x50 [ 1247.791711][T13782] ? process_scheduled_works+0x957/0x15b0 [ 1247.797427][T13782] ? process_scheduled_works+0x957/0x15b0 [ 1247.803151][T13782] process_scheduled_works+0xa45/0x15b0 [ 1247.808732][T13782] ? assign_work+0x400/0x400 [ 1247.813329][T13782] ? assign_work+0x39e/0x400 [ 1247.817923][T13782] worker_thread+0xa55/0xfc0 [ 1247.822512][T13782] kthread+0x2fa/0x390 [ 1247.826583][T13782] ? pr_cont_work+0x560/0x560 [ 1247.831260][T13782] ? kthread_blkcg+0xd0/0xd0 [ 1247.835951][T13782] ret_from_fork+0x48/0x80 [ 1247.840375][T13782] ? kthread_blkcg+0xd0/0xd0 [ 1247.844978][T13782] ret_from_fork_asm+0x11/0x20 [ 1247.849747][T13782] [ 1247.852769][T13782] Modules linked in: [ 1247.861068][T13782] ---[ end trace 0000000000000000 ]--- [ 1247.869819][T13782] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 1247.875522][T13782] Code: c7 c1 e0 d2 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 e0 d2 ee 96 e8 36 05 86 ff e9 6c fe ff ff e8 1c be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 1247.895890][T13782] RSP: 0018:ffffc9000444f360 EFLAGS: 00010293 [ 1247.902029][T13782] RAX: ffffffff8256cd04 RBX: ffff88805b350828 RCX: ffff88806c520000 [ 1247.910164][T13782] RDX: 0000000000000000 RSI: ffffffff8cf38480 RDI: 0000000000000000 [ 1247.918529][T13782] RBP: ffffc9000444f4f0 R08: ffff88806c520000 R09: 0000000000000003 [ 1247.928563][T13782] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1247.936616][T13782] R13: 1ffff92000889e70 R14: ffff88805b3507d8 R15: 0000000000000000 [ 1247.944903][T13782] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1247.953845][T13782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1247.960572][T13782] CR2: 00007f3e9f4e56c0 CR3: 000000001ef2e000 CR4: 00000000003506f0 [ 1247.968846][T13782] Kernel panic - not syncing: Fatal exception [ 1247.975131][T13782] Kernel Offset: disabled [ 1247.979444][T13782] Rebooting in 86400 seconds..