last executing test programs: 2.123588669s ago: executing program 3 (id=8279): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) 2.05121615s ago: executing program 3 (id=8281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) 2.03302769s ago: executing program 2 (id=8283): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x1e, 0x0, 0x310) 1.962262562s ago: executing program 3 (id=8286): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x4005, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c00"], 0x2, 0xc47, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/Gy3FlYxWTJwoThoXm7ZIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj0zrAsnFhyKnnogWNoKiB7YIkFPAYGbfUkuatBlRlCjp+2zqtzv73sx789YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN9/5dKZ59ODbgUAcD9dGfvKmbPu/wDwWLnq//8BAAAAAAAAAAAAAOCwS1HEk5Fi/sp6mqjed9Qvt/tu3R4fHtm52rFU1TxSlS9/6s+fPXf+iy8MXejm5fbsh9S/1z4Tr41dvdR4ee7m/ML04uL0VGN8tj05NzW95z3st/52g9UJaNx8/dbU9euLjbPPndvy8e2B9/ufODlwceiZ0093y44Pj4yM3SlS7y1fu+uGdOw2w+NoFHE6Ujz73Z+kVkQUsf9zUb+/Y7/dsaoTg1UnxodHqo7MtFuzS+WHo90TUUQ0eio1u+do57GIWt997cPumhHLZfPLBg+W3Rubby20rs1MN0ZbC0vtpfbc7GjqtLbsTyOKuJAiViJirf+Du+uLImqR4tsn1tO1iDjSPQ9fqCYG796O4gD7uAdlOxt9ESvFQzBmh1h/FPFqpPjpO6diMl9nqmvN5yNeLfP7EW+V+VJEKr8Y5yPe2+F7xMOpFkX8ZTn+F9fTVHU96F5XLn+18eXZ63M9ZbvXlV/y/vCBK8UDuj8c25b3xyG/NtWjiFZ1xV9Pd/+bHQAAAAAAAAAAAAAAAADutWNRxKcjxSv/8cfVvOKo5qWfuDj0BwO/0jtn/KmP2E9Z9rmIWC72Nif3aJ4YOJpGU3rAc4kfZ/Uo4k/y/L9vPujGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdU2kletcUb8/eaFxtXZvprArbXfu3u2b6xsbGRiN1splzIudyzpWcqznXOlnN+6/qF7l+zomcyzlXcq7mXMsZR3L9nM2cEzmXc67kXM25ljNquX7OZs6JnMs5V3Ku5lzLGYdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdJEUX8PFJ86+vrKVJENCMmopOr/Q+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fjD5ua2WkSk6t+OU+Uv56N5tMyPR3OozJeieSlnq8pa85sPoP3sT18q4keRor/+9uaA5/Hv67zb/BrEW9+48+4ztU4e6X448H7/EydPXBwa+fWndnuddmrA4OX27K3bjfHhkZGxns21fPSP92wbyMct7k3XiYjFN958vTUzM71w9y/Kr8AuH21sbPxZeZT9HuKQvEi1XXv6WL4oh/YQNOMAO1g7FM14YIPLo668/78XKX7n3f/s3vCr+39ts8TmHT5+9qd37v8vbt/RHu//te318v2/vKfvdP9/smfbi/l3I321iPrSzfm+kxH1xTfePN2+2boxfWN69vyZM18aGvrSuTN9RyPq19sz0z2v9n+uAAAAAAAAAAAAAAAAAO6rVMTvRYrWj9ZTIyJuV/O1Bi4OPXP66SNxpJpvtWXe9mtjVy81Xp67Ob8wvbg4PdUYn21Pzk1N7/Vw9Wq61/jwyIF05iMdO+D2H6u/PDf/xkL7xh8t7fj58fqla4tLC63JnT+OY1FENHu3DFYNHh8eqRo9027NVlVHd5xM/8vrS0X8V6SYPN9In8vb8vz/7TP8t8z/X96+owOa//+xnm3lMVMq4meR4rf/6qn4XNXO4/GBc5bL/V2kGLzw2Vwujpblum3oPFegMzOwLPt/keKffr61bHc+5JN3yj6/5xP7kCjH/0Sk+N5ffCd+I2/b+vyHncf/+PYdHdD4f6Jn2/EtzyvYd9fJ4386Urz05Nvxm3nbhz3/o/vsjVO58ObzOQ5o/D/Zs20gH/e37k3XAQAAAAAAAAAAHmp9qYi/jxQ/GKmlF/K2vfz9v6ntOzqgv//1qZ5tU/dmvaKPfLHvkwoAAAAAh0RfKuLHkeLG0tubc6i3zv/umf/5u3fmfw6nbZ9Wf873q9VzA+7ln//1GsjHndh/twEAAAAAAAAAAAAAAAAAAOBQSamIF/J66hPVfP6pXddTX40Ur/zPs7lcOlmW664DP1D9Wr8yN3v60szM3GRrqXVtZroxNt+anC7rfiJSrP/tZ3PdolpfvbvefGeN93otIqq12Bcixcg/dMt21mLvrk3eWQ+8sxZ7WfZjkeK//3Fr2e461p+8U/ZsWfZvIsXX/mXnsifvlD1Xlv1OpPjh1xrdssfLst3no37qTtnnJueKAxgVAAAAAAAAAAAAAAAAAAAAHjd9qYg/jxT/e3Nlcy5/Xv+/r+dt5a1v9Kz3v83tap3/gWr9/91e3836/9VzBZZ3OyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyaUhTxZqSYv7KeVvvL9x31y+3ZW7fHh0d2rnYsVTWPVOXLn/rzZ8+d/+ILQxe6+eH177VPx2tjVy81Xp67Ob8wvbg4PdUYn21Pzk1N73kPu9ev31WLBqsT0Lj5+q2p69cXG2efO7fl49sD7/c/cXLg4tAzp5/ulh0fHhkZ6ylT67urI+8o7bL9aBTx15Hi2e/+JP2gP6KIDz0Xe/IR352DdqzqxGDVifHhkaojM+3W7FL54Wj3RBQRjZ5Kze45ug9jsS/NiOWy+WWDB8vujc23FlrXZqYbo62FpfZSe252NHVaW/anEUVcSBErEbHW/8Hd9UURr0eKb59YT//aH3Gkex6+cGXsK2fO7t6O4gD7uAdlOxt9ESvFQzBmh1h/FPHPkeKn75yKf+uPqEXnJz4f8WqZ3494KzrjncovxvmI93b4HvFwqkUR/1+O/8X19E5/eT3oXlcuf7Xx5dnrcz1lu9eVh/7+cD8d8mtTPYr4YXXFX0//7r9rAAAAAAAAAAAAAAAAgEOkiF+LFC++eypV84M35xS3Z280rrauzXSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545DM3QMAAAAAAAAAAAAAAAAAAB4tRfVPim99fT1t9HfWl56ITq5aD/SR94sAAAD//8or9Fc=") 1.878717703s ago: executing program 2 (id=8289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000d"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1.704610495s ago: executing program 2 (id=8294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @random="19ba5f2f5470"}}]}]}]}, 0x70}}, 0x8000) 1.575512157s ago: executing program 3 (id=8296): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x58bb, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0xb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 1.558557487s ago: executing program 0 (id=8299): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r0, 0x0, 0x0, 0x800) 1.464973909s ago: executing program 2 (id=8301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x1, 0xfffffffd, 0x0, {{@in=@multicast2, @in6=@remote, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x16}, {@in6=@mcast1, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0x9}, {0x0, 0x3, 0xb}, 0x70bd27, 0x4000, 0xa}}, 0xf0}}, 0x0) 1.441168929s ago: executing program 3 (id=8303): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.440663699s ago: executing program 0 (id=8304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf3aef3f4a65b26bf}}, 0x1c}}, 0x0) 1.39154704s ago: executing program 2 (id=8305): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x0, 0x0, 0x50424752}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.284587702s ago: executing program 0 (id=8309): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000680)=[{0x4d, 0x0, 0x0, 0x10}]}, 0x10) 1.214007023s ago: executing program 2 (id=8311): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030102bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001405240101000c241b04000200a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.081460905s ago: executing program 0 (id=8314): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x181800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 900.782257ms ago: executing program 0 (id=8317): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x140f, 0x1, 0x70bd2c, 0x35dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) 809.867298ms ago: executing program 0 (id=8321): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x68, 0x60, 0x36, 0x20, 0xe7e, 0x1001, 0xa317, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x98, 0x7, 0x2, 0xdf, 0x2b, 0x9f, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 686.173291ms ago: executing program 1 (id=8324): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000030003c000203000000100000000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 614.210921ms ago: executing program 1 (id=8326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 427.834994ms ago: executing program 1 (id=8329): pipe2$9p(&(0x7f0000004600)={0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x409, 0xffffffffffffffff) 355.156775ms ago: executing program 4 (id=8331): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 324.751305ms ago: executing program 4 (id=8332): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1804000000000000000000000000030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb7030000080000002403000000000000850000008200000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 307.209776ms ago: executing program 1 (id=8333): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000001ac0)) 248.185817ms ago: executing program 4 (id=8334): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) 227.310647ms ago: executing program 1 (id=8335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) 158.962868ms ago: executing program 4 (id=8336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 112.423579ms ago: executing program 1 (id=8337): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000940)={0x2, 0x3, 0xfe, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}, @sadb_lifetime={0x4, 0x4, 0x3, 0x5, 0x2, 0x5}]}, 0x78}, 0x1, 0x7}, 0x0) 53.96125ms ago: executing program 4 (id=8338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ab00)=@newtaction={0x48, 0x26, 0xd1b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x48}}, 0x0) 35.71264ms ago: executing program 3 (id=8339): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x57, 0x0, 0x0, 0x1, 0x0, 0x81}}, 0x120) 0s ago: executing program 4 (id=8340): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000002140)={{0x3, 0x0, 0x1, 0x0, 0xfffffff7}, 0x40, 0x3}) kernel console output (not intermixed with test programs): uct=0101, bcdDevice= 0.40 [ 676.524816][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.552660][ T1110] usb 5-1: Product: syz [ 676.582308][ T1110] usb 5-1: Manufacturer: syz [ 676.584019][T19882] Option ' ' to dns_resolver key: bad/missing value [ 676.587358][T18666] usb 2-1: config 32 has an invalid descriptor of length 55, skipping remainder of the config [ 676.618362][ T1110] usb 5-1: SerialNumber: syz [ 676.648216][T18666] usb 2-1: too many endpoints for config 32 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 676.689474][T18666] usb 2-1: config 32 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 676.735368][T18666] usb 2-1: config 32 interface 0 has no altsetting 0 [ 676.742343][T18666] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 676.751620][T18666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.791257][T19884] loop2: detected capacity change from 0 to 4096 [ 676.842493][T19884] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 676.852494][T19884] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.02 Gb > volume size 0.00 Gb. Mount in read-only [ 676.911193][T18649] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 676.939338][ T1110] usb 5-1: 0:2 : does not exist [ 677.002305][ T1110] usb 5-1: USB disconnect, device number 36 [ 677.018498][T19892] loop3: detected capacity change from 0 to 16 [ 677.023358][T18666] usb 2-1: string descriptor 0 read error: -71 [ 677.037625][T18666] hub 2-1:32.0: bad descriptor, ignoring hub [ 677.048188][T18666] hub: probe of 2-1:32.0 failed with error -5 [ 677.065625][ T5554] udevd[5554]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.122936][T19892] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 23300) [ 677.128327][T18666] usb 2-1: USB disconnect, device number 31 [ 677.217452][ T4824] udevd[4824]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 677.236513][ T4824] udevd[4824]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 677.265034][T18649] usb 1-1: config 0 has an invalid interface number: 70 but max is 0 [ 677.302448][T18649] usb 1-1: config 0 has no interface number 0 [ 677.322767][T18649] usb 1-1: config 0 interface 70 has no altsetting 0 [ 677.429015][T19904] loop3: detected capacity change from 0 to 128 [ 677.479819][T18649] usb 1-1: New USB device found, idVendor=12d1, idProduct=0a0f, bcdDevice=7a.b9 [ 677.504329][T18649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.518052][T18649] usb 1-1: Product: syz [ 677.522228][T18649] usb 1-1: Manufacturer: 㑧郍∞ꉔ왴Eፌ᫼ᄞ፽ㄓꐞᦋ⸋걓冲繞㇙焖蚾鐿䍍੗葉꫞殫贼䈭榚Ž㱳ꪔ濵󟵺 [ 677.541978][T18649] usb 1-1: SerialNumber: syz [ 677.551449][T18649] usb 1-1: config 0 descriptor?? [ 677.594185][T19906] loop4: detected capacity change from 0 to 8192 [ 677.678756][T19906] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 677.733949][T19906] REISERFS (device loop4): using ordered data mode [ 677.772437][ T21] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 677.782036][T19906] reiserfs: using flush barriers [ 677.814768][T19906] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 3841982494, max trans age 30 [ 677.871943][T18649] option 1-1:0.70: GSM modem (1-port) converter detected [ 677.897038][T19906] REISERFS (device loop4): checking transaction log (loop4) [ 677.898936][T18666] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 677.917320][T18649] usb 1-1: USB disconnect, device number 33 [ 677.928588][T19906] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 677.933501][T18649] option 1-1:0.70: device disconnected [ 678.001375][T19906] REISERFS (device loop4): Remounting filesystem read-only [ 678.037496][T19906] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 678.085947][T19913] loop3: detected capacity change from 0 to 40427 [ 678.195876][T19913] F2FS-fs (loop3): invalid crc value [ 678.206650][ T21] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 678.221349][ T21] usb 3-1: config 8 has no interface number 0 [ 678.231816][ T21] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 678.243385][ T21] usb 3-1: config 8 interface 177 has no altsetting 0 [ 678.250219][ T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 678.260393][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.262873][T18666] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 678.280081][T19913] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 678.300226][T19908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 678.336660][T18666] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.358419][T18666] usb 2-1: config 0 has no interface number 0 [ 678.364645][T18666] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 678.430403][T18666] usb 2-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 678.483839][T18666] usb 2-1: config 0 interface 242 has no altsetting 0 [ 678.506590][T19913] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 678.542529][T19913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 678.593293][ T21] usb 3-1: string descriptor 0 read error: -71 [ 678.613194][ T21] ir_toy 3-1:8.177: required endpoints not found [ 678.647909][ T21] usb 3-1: USB disconnect, device number 26 [ 678.672940][T18666] usb 2-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 678.710899][T18666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.719065][T18666] usb 2-1: Product: syz [ 678.751033][T18666] usb 2-1: Manufacturer: syz [ 678.766349][T18666] usb 2-1: SerialNumber: syz [ 678.790227][T18666] usb 2-1: config 0 descriptor?? [ 679.025010][T19918] loop0: detected capacity change from 0 to 32768 [ 679.084053][T19918] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.6887 (19918) [ 679.103358][T18649] usb 2-1: USB disconnect, device number 32 [ 679.209205][T19918] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 679.242423][T19918] BTRFS info (device loop0): using free space tree [ 679.248969][T19918] BTRFS info (device loop0): has skinny extents [ 679.372715][T19923] loop4: detected capacity change from 0 to 32768 [ 679.392032][T19923] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.6890 (19923) [ 679.440587][T19923] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 679.454175][ T8416] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 679.488157][T19923] BTRFS info (device loop4): using free space tree [ 679.517404][T19923] BTRFS info (device loop4): has skinny extents [ 679.576824][T19918] BTRFS info (device loop0): enabling ssd optimizations [ 679.739528][T19925] loop2: detected capacity change from 0 to 40427 [ 679.755532][T19925] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 679.759885][T19923] BTRFS info (device loop4): enabling ssd optimizations [ 679.798530][T19925] F2FS-fs (loop2): invalid crc value [ 679.809553][ T8416] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.819772][T19925] F2FS-fs (loop2): invalid crc value [ 679.825191][T19925] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 679.865847][ T8416] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.943648][ T8416] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 679.970280][ T8416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.008308][ T8416] usb 4-1: config 0 descriptor?? [ 680.274145][ T8416] usb 4-1: USB disconnect, device number 39 [ 680.460899][T19969] loop1: detected capacity change from 0 to 32768 [ 680.509211][ T4824] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (4824) [ 680.523111][ T5554] udevd[5554]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.560577][T19969] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop1 scanned by syz.1.6894 (19969) [ 680.576971][T19973] loop2: detected capacity change from 0 to 32768 [ 680.635689][T19969] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 680.675063][T19969] BTRFS info (device loop1): using free space tree [ 680.697141][T19969] BTRFS info (device loop1): has skinny extents [ 680.892396][T19969] BTRFS info (device loop1): enabling ssd optimizations [ 681.197921][T19987] loop0: detected capacity change from 0 to 32768 [ 681.308873][T20014] loop4: detected capacity change from 0 to 128 [ 681.343445][T20012] loop2: detected capacity change from 0 to 4096 [ 681.362881][T20012] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 681.364357][T19987] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop0 scanned by syz.0.6893 (19987) [ 681.449127][T19987] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 681.506193][T19987] BTRFS info (device loop0): using free space tree [ 681.516073][T19987] BTRFS info (device loop0): has skinny extents [ 681.664541][T20024] loop1: detected capacity change from 0 to 128 [ 681.673451][T18403] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 681.888983][T20041] loop1: detected capacity change from 0 to 16 [ 681.934532][T19987] BTRFS info (device loop0): enabling ssd optimizations [ 682.045101][T20041] erofs: (device loop1): mounted with root inode @ nid 36. [ 682.055934][T18403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 682.223659][T18403] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 682.235963][T20026] loop2: detected capacity change from 0 to 32768 [ 682.247713][T18403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.279658][T18403] usb 4-1: Product: syz [ 682.283938][T18403] usb 4-1: Manufacturer: syz [ 682.317404][T18403] usb 4-1: SerialNumber: syz [ 682.327677][T20026] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop2 scanned by syz.2.6909 (20026) [ 682.340492][T18403] usb 4-1: config 0 descriptor?? [ 682.426966][T20026] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 682.475928][T20026] BTRFS info (device loop2): using free space tree [ 682.492581][T20026] BTRFS info (device loop2): has skinny extents [ 682.557228][T20054] loop1: detected capacity change from 0 to 16 [ 682.566988][T20021] loop4: detected capacity change from 0 to 32768 [ 682.610998][T18403] usb 4-1: USB disconnect, device number 40 [ 682.676596][T20021] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.6908 (20021) [ 682.774095][T20054] erofs: (device loop1): mounted with root inode @ nid 36. [ 682.829045][T20048] loop0: detected capacity change from 0 to 32768 [ 682.865916][T20021] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 682.885440][T20048] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 scanned by syz.0.6911 (20048) [ 682.894762][T20021] BTRFS info (device loop4): using free space tree [ 682.906885][T20021] BTRFS info (device loop4): has skinny extents [ 682.926380][T20026] BTRFS info (device loop2): enabling ssd optimizations [ 682.938175][T20048] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 683.060205][T20048] BTRFS info (device loop0): using free space tree [ 683.099690][T20048] BTRFS info (device loop0): has skinny extents [ 683.240146][ T4824] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 9 /dev/loop2 scanned by udevd (4824) [ 683.425287][T20021] BTRFS info (device loop4): enabling ssd optimizations [ 683.603319][T20048] BTRFS info (device loop0): enabling ssd optimizations [ 683.814849][T20076] loop1: detected capacity change from 0 to 32768 [ 683.905564][T20100] loop2: detected capacity change from 0 to 32768 [ 683.988294][T20100] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop2 scanned by syz.2.6916 (20100) [ 684.200102][T20103] loop3: detected capacity change from 0 to 32768 [ 684.253523][T20123] loop4: detected capacity change from 0 to 8 [ 684.284820][T20123] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 684.314227][T20123] cramfs: wrong endianness [ 684.379653][T20100] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 684.438584][T20100] BTRFS info (device loop2): using free space tree [ 684.470598][T20103] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop3 scanned by syz.3.6917 (20103) [ 684.515487][T20100] BTRFS info (device loop2): has skinny extents [ 684.547323][ T5554] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 9 /dev/loop0 scanned by udevd (5554) [ 684.576597][T20103] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 684.596762][T20103] BTRFS info (device loop3): using free space tree [ 684.604094][T20103] BTRFS info (device loop3): has skinny extents [ 684.919185][T20152] loop0: detected capacity change from 0 to 4096 [ 684.955955][T20167] loop1: detected capacity change from 0 to 2048 [ 684.972551][T20100] BTRFS info (device loop2): enabling ssd optimizations [ 685.050596][T20103] BTRFS info (device loop3): enabling ssd optimizations [ 685.078361][T20152] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 685.097383][T20167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.169399][T20167] ext4 filesystem being mounted at /1337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.454671][ T4825] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 9 /dev/loop2 scanned by udevd (4825) [ 685.493114][T20127] loop4: detected capacity change from 0 to 32768 [ 685.507228][T20176] loop1: detected capacity change from 0 to 1024 [ 685.594798][T20178] loop0: detected capacity change from 0 to 1024 [ 685.727444][T20176] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 685.788223][T20178] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.875119][T20127] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 685.890253][T20178] ext4 filesystem being mounted at /1341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.901508][T20127] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 685.949785][T20127] XFS (loop4): DAX and reflink cannot be used together! [ 686.190008][T20198] loop0: detected capacity change from 0 to 2048 [ 686.296737][T20198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 686.335406][T20198] ext4 filesystem being mounted at /1342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.436142][T18658] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 686.564696][T20190] loop3: detected capacity change from 0 to 40427 [ 686.631100][T20190] F2FS-fs (loop3): project quota file already specified [ 686.708678][T20203] loop0: detected capacity change from 0 to 512 [ 686.769333][T20203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 686.780297][T18658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.794965][T18658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.884695][T20206] loop3: detected capacity change from 0 to 1024 [ 686.949355][T18658] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.965165][T18658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.992997][T20195] loop2: detected capacity change from 0 to 32768 [ 686.999862][T18658] usb 2-1: Product: syz [ 687.003162][T20206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.004028][T18658] usb 2-1: Manufacturer: syz [ 687.019615][T18658] usb 2-1: SerialNumber: syz [ 687.048613][T20209] loop4: detected capacity change from 0 to 512 [ 687.074857][T20195] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.6929 (20195) [ 687.143473][T20211] loop0: detected capacity change from 0 to 512 [ 687.157687][T20195] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 687.164491][T20209] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 687.172873][T20195] BTRFS info (device loop2): using free space tree [ 687.191542][T20195] BTRFS info (device loop2): has skinny extents [ 687.255557][T20211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.325925][T20211] ext4 filesystem being mounted at /1344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.331887][T18658] usb 2-1: 0:2 : does not exist [ 687.461022][T18658] usb 2-1: USB disconnect, device number 33 [ 687.536892][T20195] BTRFS info (device loop2): enabling ssd optimizations [ 687.565804][T20235] loop4: detected capacity change from 0 to 2048 [ 687.741906][T20235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.920514][T20243] loop1: detected capacity change from 0 to 512 [ 688.103271][T20243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 688.149079][T20225] loop3: detected capacity change from 0 to 32768 [ 688.239715][T20225] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.6935 (20225) [ 688.306838][T20246] loop2: detected capacity change from 0 to 2048 [ 688.355176][T20248] loop4: detected capacity change from 0 to 512 [ 688.361157][T20225] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 688.363224][T20239] loop0: detected capacity change from 0 to 40427 [ 688.388017][T20225] BTRFS info (device loop3): using free space tree [ 688.401205][T20225] BTRFS info (device loop3): has skinny extents [ 688.444186][T20239] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 688.449387][T20248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 688.453886][T20246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 688.697487][T20225] BTRFS info (device loop3): enabling ssd optimizations [ 688.756279][T20246] ext4 filesystem being mounted at /1413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.874658][T20258] loop1: detected capacity change from 0 to 4096 [ 688.980463][T20275] loop4: detected capacity change from 0 to 4096 [ 689.101254][T20258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.142540][T20275] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.412663][T20283] loop3: detected capacity change from 0 to 2048 [ 689.529344][T20283] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.684691][T20290] loop0: detected capacity change from 0 to 512 [ 689.815110][T20290] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.901023][T20290] ext4 filesystem being mounted at /1347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.010956][T20287] loop4: detected capacity change from 0 to 32768 [ 690.038358][T20287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.6947 (20287) [ 690.146819][T20287] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 690.212244][T20287] BTRFS info (device loop4): using free space tree [ 690.219919][T20297] loop0: detected capacity change from 0 to 2048 [ 690.248728][T20287] BTRFS info (device loop4): has skinny extents [ 690.313077][T20297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 690.362938][T20297] ext4 filesystem being mounted at /1348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.387747][T20280] loop2: detected capacity change from 0 to 32768 [ 690.490394][T20280] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6945 (20280) [ 690.531653][T20287] BTRFS info (device loop4): enabling ssd optimizations [ 690.580203][T20285] loop1: detected capacity change from 0 to 32768 [ 690.592862][T20280] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 690.640421][T20285] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 690.648379][T20285] dlm: no local IP address has been set [ 690.705449][T20285] dlm: cannot start dlm midcomms -107 [ 690.711069][T20280] BTRFS info (device loop2): using free space tree [ 690.725761][T20285] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 690.734688][T20280] BTRFS info (device loop2): has skinny extents [ 690.841789][T20295] loop3: detected capacity change from 0 to 32768 [ 690.954858][T20295] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 691.033472][ T4608] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop4 scanned by udevd (4608) [ 691.049939][T20295] dlm: no local IP address has been set [ 691.055738][T20295] dlm: cannot start dlm midcomms -107 [ 691.062742][T20295] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 691.080636][T20280] BTRFS info (device loop2): enabling ssd optimizations [ 691.646836][ T4824] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (4824) [ 692.206240][T20334] loop0: detected capacity change from 0 to 32768 [ 692.251329][T20334] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 692.279436][T20334] dlm: no local IP address has been set [ 692.306541][T20334] dlm: cannot start dlm midcomms -107 [ 692.325307][T20334] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 692.597909][T20348] loop4: detected capacity change from 0 to 32768 [ 692.655627][T20348] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 692.699844][T20348] dlm: no local IP address has been set [ 692.705420][T20348] dlm: cannot start dlm midcomms -107 [ 692.752202][T20348] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 693.195978][T20353] loop2: detected capacity change from 0 to 32768 [ 693.227547][T20355] loop0: detected capacity change from 0 to 32768 [ 693.260053][T20353] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 693.268239][T20353] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 693.277624][T20355] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.6956 (20355) [ 693.334334][T20355] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 693.356414][T20353] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 693.385118][T20355] BTRFS info (device loop0): using free space tree [ 693.387916][T10303] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 693.405674][T10303] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 693.412540][T20355] BTRFS info (device loop0): has skinny extents [ 693.641915][T10303] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 253ms [ 693.675366][T10303] gfs2: fsid=syz:syz.0: jid=0: Done [ 693.690716][T20355] BTRFS info (device loop0): enabling ssd optimizations [ 693.706249][T20353] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 693.901098][T20346] loop3: detected capacity change from 0 to 131072 [ 693.992610][T20380] loop1: detected capacity change from 0 to 1024 [ 694.315037][T20384] loop1: detected capacity change from 0 to 1024 [ 694.500861][T20386] loop0: detected capacity change from 0 to 64 [ 694.623429][T20388] loop1: detected capacity change from 0 to 1024 [ 694.866990][T20392] loop0: detected capacity change from 0 to 1024 [ 695.358660][T20382] loop3: detected capacity change from 0 to 32768 [ 695.458692][T20382] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.6960 (20382) [ 695.527305][T20382] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 695.556723][T20382] BTRFS info (device loop3): using free space tree [ 695.593787][T20382] BTRFS info (device loop3): has skinny extents [ 695.673762][T20390] loop2: detected capacity change from 0 to 32768 [ 695.734667][T20396] loop0: detected capacity change from 0 to 32768 [ 695.780678][T20390] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop2 scanned by syz.2.6963 (20390) [ 695.889168][T20396] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop0 scanned by syz.0.6966 (20396) [ 695.923601][T20390] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 695.999367][T20390] BTRFS info (device loop2): using free space tree [ 696.005942][T20390] BTRFS info (device loop2): has skinny extents [ 696.006703][T20382] BTRFS info (device loop3): enabling ssd optimizations [ 696.022048][T20396] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 696.034884][T20396] BTRFS info (device loop0): using free space tree [ 696.044713][T20396] BTRFS info (device loop0): has skinny extents [ 696.312505][T20396] BTRFS info (device loop0): enabling ssd optimizations [ 696.469928][T20390] BTRFS info (device loop2): enabling ssd optimizations [ 696.487704][T20457] loop4: detected capacity change from 0 to 132 [ 696.831308][ T4608] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 9 /dev/loop0 scanned by udevd (4608) [ 697.044010][T20463] loop4: detected capacity change from 0 to 2364 [ 697.556090][T20473] loop2: detected capacity change from 0 to 21 [ 697.621770][T20473] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 697.625948][T20454] loop3: detected capacity change from 0 to 32768 [ 697.737790][T20454] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.6967 (20454) [ 697.856542][T20475] loop2: detected capacity change from 0 to 256 [ 697.874896][T20454] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 697.891386][T20454] BTRFS info (device loop3): using free space tree [ 697.917999][T20454] BTRFS info (device loop3): has skinny extents [ 698.099606][T20485] loop2: detected capacity change from 0 to 21 [ 698.171155][T20485] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 698.225440][T20469] loop4: detected capacity change from 0 to 32768 [ 698.291011][T20454] BTRFS info (device loop3): enabling ssd optimizations [ 698.317868][T20469] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.6973 (20469) [ 698.442823][T20469] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 698.497250][T20469] BTRFS info (device loop4): using free space tree [ 698.503809][T20469] BTRFS info (device loop4): has skinny extents [ 699.071319][T20469] BTRFS info (device loop4): enabling ssd optimizations [ 699.790559][T20498] loop2: detected capacity change from 0 to 32768 [ 699.886857][T20498] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 699.925296][T20498] dlm: no local IP address has been set [ 699.930890][T20498] dlm: cannot start dlm midcomms -107 [ 699.951625][T20471] loop0: detected capacity change from 0 to 131072 [ 699.968302][T20498] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 700.089847][T20471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 700.171691][T20507] loop1: detected capacity change from 0 to 32768 [ 700.216929][T20507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 700.275853][T20507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 700.292687][T20471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 700.325915][T20533] loop4: detected capacity change from 0 to 128 [ 700.345627][T20507] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 700.384555][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 700.398546][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 700.627625][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 700.650488][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 700.668978][T20507] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 700.789396][T20540] loop4: detected capacity change from 0 to 2048 [ 701.359412][T20537] loop2: detected capacity change from 0 to 32768 [ 701.432360][T20537] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 701.460916][T20537] CPU: 0 PID: 20537 Comm: syz.2.6986 Not tainted 5.15.188-syzkaller #0 [ 701.469198][T20537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.479276][T20537] Call Trace: [ 701.482564][T20537] [ 701.485509][T20537] dump_stack_lvl+0x168/0x230 [ 701.490224][T20537] ? show_regs_print_info+0x20/0x20 [ 701.495456][T20537] ? load_image+0x3b0/0x3b0 [ 701.499993][T20537] sysfs_create_dir_ns+0x252/0x280 [ 701.505129][T20537] ? __lock_acquire+0x7c60/0x7c60 [ 701.510170][T20537] ? sysfs_warn_dup+0xa0/0xa0 [ 701.515126][T20537] ? do_raw_spin_unlock+0x11d/0x230 [ 701.520343][T20537] kobject_add_internal+0x662/0xd00 [ 701.525578][T20537] kobject_init_and_add+0x122/0x190 [ 701.530801][T20537] ? lockdep_softirqs_off+0x420/0x420 [ 701.536201][T20537] ? kobject_add+0x210/0x210 [ 701.540816][T20537] ? __init_swait_queue_head+0xa5/0x150 [ 701.546394][T20537] gfs2_sys_fs_add+0x234/0x480 [ 701.551187][T20537] ? gfs2_recover_set+0x240/0x240 [ 701.556242][T20537] ? snprintf+0xd7/0x120 [ 701.560508][T20537] ? __free_pages+0x95/0x1a0 [ 701.565126][T20537] ? vscnprintf+0x80/0x80 [ 701.569492][T20537] gfs2_fill_super+0x128d/0x1f50 [ 701.574467][T20537] ? gfs2_reconfigure+0xcd0/0xcd0 [ 701.579520][T20537] ? preempt_count_add+0x8d/0x190 [ 701.584572][T20537] ? sb_set_blocksize+0xa5/0xe0 [ 701.589441][T20537] get_tree_bdev+0x3f1/0x610 [ 701.594042][T20537] ? gfs2_reconfigure+0xcd0/0xcd0 [ 701.599091][T20537] gfs2_get_tree+0x4d/0x1e0 [ 701.603618][T20537] vfs_get_tree+0x88/0x270 [ 701.608055][T20537] do_new_mount+0x24a/0xa40 [ 701.612602][T20537] __se_sys_mount+0x2d6/0x3c0 [ 701.617308][T20537] ? __x64_sys_mount+0xc0/0xc0 [ 701.622088][T20537] ? lockdep_hardirqs_on+0x94/0x140 [ 701.627312][T20537] ? __x64_sys_mount+0x1c/0xc0 [ 701.632109][T20537] do_syscall_64+0x4c/0xa0 [ 701.636548][T20537] ? clear_bhb_loop+0x30/0x80 [ 701.641247][T20537] ? clear_bhb_loop+0x30/0x80 [ 701.645948][T20537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 701.651867][T20537] RIP: 0033:0x7f74d21410ca [ 701.656305][T20537] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.675941][T20537] RSP: 002b:00007f74cffa6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 701.684393][T20537] RAX: ffffffffffffffda RBX: 00007f74cffa6ef0 RCX: 00007f74d21410ca [ 701.692380][T20537] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f74cffa6eb0 [ 701.700365][T20537] RBP: 00002000000124c0 R08: 00007f74cffa6ef0 R09: 0000000000000000 [ 701.708353][T20537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 701.716344][T20537] R13: 00007f74cffa6eb0 R14: 00000000000124a6 R15: 0000200000012540 [ 701.724353][T20537] [ 701.817030][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.823383][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.029934][T20537] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 702.043260][T20537] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 702.047904][T20545] loop0: detected capacity change from 0 to 512 [ 702.209229][T20545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 702.226013][T20545] ext4 filesystem being mounted at /1357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.475780][T20554] loop0: detected capacity change from 0 to 2048 [ 702.714409][T20558] loop0: detected capacity change from 0 to 1024 [ 702.887897][T20549] loop3: detected capacity change from 0 to 32768 [ 702.958712][T20549] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 scanned by syz.3.6990 (20549) [ 703.035274][T20549] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 703.051587][T20560] loop0: detected capacity change from 0 to 128 [ 703.078667][T20549] BTRFS info (device loop3): using free space tree [ 703.107116][T20549] BTRFS info (device loop3): has skinny extents [ 703.218352][T20566] loop0: detected capacity change from 0 to 512 [ 703.334533][T20549] BTRFS info (device loop3): enabling ssd optimizations [ 703.542254][T20583] loop0: detected capacity change from 0 to 256 [ 703.582250][T20557] loop2: detected capacity change from 0 to 32768 [ 703.622030][T20557] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop2 scanned by syz.2.6992 (20557) [ 703.879815][T20557] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 703.912197][T20557] BTRFS info (device loop2): using free space tree [ 703.928832][T20557] BTRFS info (device loop2): has skinny extents [ 703.999912][T20586] loop3: detected capacity change from 0 to 2048 [ 704.461046][T20607] loop4: detected capacity change from 0 to 512 [ 704.461697][T20588] loop0: detected capacity change from 0 to 32768 [ 704.495025][T20557] BTRFS info (device loop2): enabling ssd optimizations [ 704.872288][T20614] loop4: detected capacity change from 0 to 2048 [ 705.021038][T20616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.108102][T20612] loop0: detected capacity change from 0 to 8192 [ 705.308344][T20618] loop4: detected capacity change from 0 to 512 [ 705.538825][T20622] loop0: detected capacity change from 0 to 732 [ 705.733648][T20624] loop4: detected capacity change from 0 to 4096 [ 706.051575][T20626] loop0: detected capacity change from 0 to 8192 [ 706.121260][T20626] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 706.734866][T20630] loop1: detected capacity change from 0 to 32768 [ 707.014328][T20634] loop1: detected capacity change from 0 to 4096 [ 707.180258][T20634] ntfs: volume version 3.1. [ 707.541115][T20638] loop3: detected capacity change from 0 to 4096 [ 707.755539][T20640] loop1: detected capacity change from 0 to 4096 [ 707.820879][T20642] loop3: detected capacity change from 0 to 128 [ 707.857985][T20640] ntfs: volume version 3.1. [ 708.224817][T20644] loop1: detected capacity change from 0 to 4096 [ 708.293790][T20644] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 708.632369][T20650] loop2: detected capacity change from 0 to 4096 [ 708.697318][T20650] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 708.726337][T20648] loop1: detected capacity change from 0 to 8192 [ 708.779797][T20648] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 709.209344][T20654] loop1: detected capacity change from 0 to 4096 [ 709.321387][T20654] ntfs: volume version 3.1. [ 709.615426][T20646] loop3: detected capacity change from 0 to 65536 [ 709.740581][T20652] loop2: detected capacity change from 0 to 32768 [ 709.839840][T20659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.870347][T20652] (syz.2.7020,20652,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 709.907618][T20652] (syz.2.7020,20652,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 710.167545][T20663] loop3: detected capacity change from 0 to 4096 [ 710.524731][T20656] loop4: detected capacity change from 0 to 32768 [ 710.625125][T20656] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 710.649559][T20656] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 710.695547][T20656] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 710.740480][ T4200] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 710.757237][ T4200] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 710.832856][T20661] loop0: detected capacity change from 0 to 32768 [ 710.861796][T20661] (syz.0.7024,20661,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 710.912521][T20661] (syz.0.7024,20661,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 711.015717][ T4200] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 277ms [ 711.051312][T20665] loop2: detected capacity change from 0 to 32768 [ 711.069302][ T4200] gfs2: fsid=syz:syz.0: jid=0: Done [ 711.087046][T20656] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 711.115405][T20665] (syz.2.7026,20665,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 711.138529][T20665] (syz.2.7026,20665,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 712.157523][T20667] loop3: detected capacity change from 0 to 65536 [ 712.217881][T20667] (syz.3.7027,20667,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 712.241883][T20667] (syz.3.7027,20667,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 712.311508][T20669] loop0: detected capacity change from 0 to 32768 [ 712.367036][T20669] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 712.397528][T20669] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 712.467080][T20669] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 712.520913][ T4200] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 712.540371][ T4200] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 712.741683][ T4200] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 215ms [ 712.767913][ T4200] gfs2: fsid=syz:syz.0: jid=0: Done [ 712.774795][T20669] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 714.145334][T20675] loop3: detected capacity change from 0 to 65536 [ 714.187470][T20675] (syz.3.7031,20675,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 714.240252][T20675] (syz.3.7031,20675,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 714.835165][T20683] loop0: detected capacity change from 0 to 32768 [ 714.923314][T20683] (syz.0.7033,20683,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 714.992155][T20683] (syz.0.7033,20683,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 715.171504][T20685] loop3: detected capacity change from 0 to 32768 [ 715.178784][T20689] loop0: detected capacity change from 0 to 128 [ 715.239294][T20685] (syz.3.7034,20685,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 715.255168][T20689] omfs: Invalid superblock (7b3184f9) [ 715.284240][T20685] (syz.3.7034,20685,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 715.713491][T20693] loop0: detected capacity change from 0 to 8192 [ 715.788942][T20693] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 715.817631][T20693] REISERFS (device loop0): using ordered data mode [ 715.832827][T20693] reiserfs: using flush barriers [ 715.870369][T20693] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 715.943024][T20693] REISERFS (device loop0): checking transaction log (loop0) [ 716.260291][T20693] REISERFS (device loop0): Using tea hash to sort names [ 716.277788][T20693] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 716.549634][T20687] loop2: detected capacity change from 0 to 65536 [ 716.598357][T20687] (syz.2.7035,20687,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 716.645703][T20687] (syz.2.7035,20687,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 717.156620][T20691] loop3: detected capacity change from 0 to 65536 [ 717.180873][T20691] (syz.3.7037,20691,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 717.222650][T20691] (syz.3.7037,20691,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 717.397615][T20696] loop4: detected capacity change from 0 to 65536 [ 717.492485][T20696] (syz.4.7039,20696,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 717.527134][T20696] (syz.4.7039,20696,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 718.192696][T20704] loop3: detected capacity change from 0 to 32768 [ 718.790133][T20708] loop3: detected capacity change from 0 to 16384 [ 718.843399][T20708] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 718.880411][T20708] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 719.029132][T20711] loop3: detected capacity change from 0 to 8 [ 719.251550][T20715] loop1: detected capacity change from 0 to 1 [ 719.259291][T20713] loop3: detected capacity change from 0 to 8 [ 719.338403][T20715] attempt to access beyond end of device [ 719.338403][T20715] loop1: rw=2048, want=8, limit=1 [ 719.369010][T20715] SQUASHFS error: Failed to read block 0x0: -5 [ 719.412239][T20715] unable to read squashfs_super_block [ 719.512308][T20717] loop3: detected capacity change from 0 to 1 [ 719.565656][T20717] attempt to access beyond end of device [ 719.565656][T20717] loop3: rw=2048, want=8, limit=1 [ 719.614829][T20717] SQUASHFS error: Failed to read block 0x0: -5 [ 719.641677][T20717] unable to read squashfs_super_block [ 719.653727][T20719] loop1: detected capacity change from 0 to 3 [ 719.694869][T20719] attempt to access beyond end of device [ 719.694869][T20719] loop1: rw=2048, want=8, limit=3 [ 719.726106][T20719] SQUASHFS error: Failed to read block 0x0: -5 [ 719.744967][T20719] unable to read squashfs_super_block [ 719.793101][T20721] loop3: detected capacity change from 0 to 8 [ 720.087024][T20725] loop3: detected capacity change from 0 to 2048 [ 720.165310][T20725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.378671][T20727] loop0: detected capacity change from 0 to 2048 [ 720.433632][T20727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.639009][T20733] loop0: detected capacity change from 0 to 128 [ 720.687495][T20733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 720.737728][T20733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.840814][T20735] loop4: detected capacity change from 0 to 256 [ 720.942871][T20735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 720.960380][T20737] loop0: detected capacity change from 0 to 128 [ 720.979005][T20735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 721.006067][T20735] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 721.006364][T20737] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 721.024186][T20735] UDF-fs: Scanning with blocksize 512 failed [ 721.046239][T20735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 721.077875][T20737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.087233][T20735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.173938][T20729] loop3: detected capacity change from 0 to 32768 [ 721.333641][T20739] loop0: detected capacity change from 0 to 256 [ 721.382085][T20739] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 721.421917][T20739] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 721.421983][T20741] loop4: detected capacity change from 0 to 2048 [ 721.468831][T20739] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 721.476637][T20742] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.518740][T20739] UDF-fs: Scanning with blocksize 512 failed [ 721.554721][T20739] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 721.561441][T20741] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 721.607172][T20739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.617218][T20741] UDF-fs: Scanning with blocksize 512 failed [ 721.686672][T20741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.886288][T20744] loop0: detected capacity change from 0 to 4096 [ 721.933953][T20744] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 721.978661][T20746] loop4: detected capacity change from 0 to 512 [ 721.995819][T20744] UDF-fs: Scanning with blocksize 512 failed [ 722.045290][T20746] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.078819][T20744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.081606][T20746] UDF-fs: Scanning with blocksize 512 failed [ 722.092801][T20748] loop3: detected capacity change from 0 to 4096 [ 722.115899][T20746] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.149929][T20746] UDF-fs: Scanning with blocksize 1024 failed [ 722.186697][T20746] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.204430][T20748] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 722.213228][T20746] UDF-fs: Scanning with blocksize 2048 failed [ 722.223065][T20748] UDF-fs: Scanning with blocksize 512 failed [ 722.253194][T20746] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 722.290514][T20746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.318526][T20748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.422898][T20752] loop0: detected capacity change from 0 to 512 [ 722.478149][T20752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 722.538924][T20752] UDF-fs: Scanning with blocksize 512 failed [ 722.563478][T20754] loop4: detected capacity change from 0 to 512 [ 722.593434][T20752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 722.628185][T20752] UDF-fs: Scanning with blocksize 1024 failed [ 722.642462][T20754] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.645720][T20756] loop3: detected capacity change from 0 to 2048 [ 722.665714][T20752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 722.673141][T20752] UDF-fs: Scanning with blocksize 2048 failed [ 722.693039][T20754] UDF-fs: Scanning with blocksize 512 failed [ 722.715823][T20754] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.723995][T20752] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 722.745648][T20756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.758137][T20754] UDF-fs: Scanning with blocksize 1024 failed [ 722.768000][T20754] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 722.775657][T20754] UDF-fs: Scanning with blocksize 2048 failed [ 722.799673][T20752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.832815][T20754] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 722.900056][T20758] loop3: detected capacity change from 0 to 128 [ 722.924074][T20754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.972039][T20758] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 723.005323][T20758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.022267][T20761] loop1: detected capacity change from 0 to 256 [ 723.038439][T20762] loop0: detected capacity change from 0 to 512 [ 723.084835][T20761] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 723.094624][T20762] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 723.102006][T20762] UDF-fs: Scanning with blocksize 512 failed [ 723.129820][T20762] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 723.137945][T20762] UDF-fs: Scanning with blocksize 1024 failed [ 723.151380][T20762] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 723.159105][T20764] loop4: detected capacity change from 0 to 2048 [ 723.175969][T20761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.205586][T20762] UDF-fs: Scanning with blocksize 2048 failed [ 723.241928][T20762] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 723.257744][T20766] loop3: detected capacity change from 0 to 512 [ 723.300039][T20762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.481096][T20772] loop0: detected capacity change from 0 to 256 [ 723.599889][T20776] loop3: detected capacity change from 0 to 128 [ 723.775417][T20774] loop1: detected capacity change from 0 to 8192 [ 723.806460][T20780] loop3: detected capacity change from 0 to 512 [ 723.812673][T20770] loop4: detected capacity change from 0 to 8192 [ 723.897835][T20770] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 723.908290][T20770] UDF-fs: Scanning with blocksize 512 failed [ 723.931475][T20770] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 723.988405][T20770] UDF-fs: Scanning with blocksize 1024 failed [ 724.011543][T20770] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 724.034513][T20770] UDF-fs: Scanning with blocksize 2048 failed [ 724.066575][T20770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.111838][T20784] loop3: detected capacity change from 0 to 128 [ 724.182240][T20787] loop1: detected capacity change from 0 to 512 [ 724.243014][T20778] loop0: detected capacity change from 0 to 16384 [ 724.307341][T20792] loop3: detected capacity change from 0 to 128 [ 724.310091][T20788] loop2: detected capacity change from 0 to 2048 [ 724.334971][T20790] loop4: detected capacity change from 0 to 512 [ 724.353421][T20778] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 724.375457][T20778] UDF-fs: Scanning with blocksize 512 failed [ 724.424465][T20794] loop1: detected capacity change from 0 to 512 [ 724.453418][T20778] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 724.477889][T20778] UDF-fs: Scanning with blocksize 1024 failed [ 724.536863][T20778] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 724.572674][T20778] UDF-fs: Scanning with blocksize 2048 failed [ 724.597322][T20796] loop3: detected capacity change from 0 to 512 [ 724.647985][T20778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.666811][T20800] loop2: detected capacity change from 0 to 512 [ 724.741456][T20799] loop4: detected capacity change from 0 to 2048 [ 724.788454][T20802] loop1: detected capacity change from 0 to 2048 [ 724.818980][T20804] loop3: detected capacity change from 0 to 128 [ 725.060157][T20809] loop2: detected capacity change from 0 to 128 [ 725.148030][T20812] loop3: detected capacity change from 0 to 512 [ 725.532104][T20818] loop2: detected capacity change from 0 to 2048 [ 725.620891][T20810] loop1: detected capacity change from 0 to 16384 [ 725.695494][T20810] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 725.702914][T20810] UDF-fs: Scanning with blocksize 512 failed [ 725.782847][T20810] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 725.809373][T20822] loop2: detected capacity change from 0 to 256 [ 725.827607][T20810] UDF-fs: Scanning with blocksize 1024 failed [ 725.843330][T20810] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 725.850731][T20810] UDF-fs: Scanning with blocksize 2048 failed [ 725.882882][T20822] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 725.928817][T20822] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 725.954681][T20810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.979154][T20822] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 726.026030][T20822] UDF-fs: Scanning with blocksize 512 failed [ 726.074384][T20822] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 726.128389][T20822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.915519][T20824] loop1: detected capacity change from 0 to 32768 [ 727.836247][T20828] loop1: detected capacity change from 0 to 32768 [ 729.866421][T20836] loop3: detected capacity change from 0 to 65536 [ 729.996133][T20836] XFS (loop3): Mounting V5 Filesystem [ 730.133979][T20836] XFS (loop3): Ending clean mount [ 730.197524][ T4275] XFS (loop3): Unmounting Filesystem [ 730.306649][T20838] loop2: detected capacity change from 0 to 32768 [ 730.478442][T20838] XFS (loop2): Mounting V5 Filesystem [ 730.631255][T20838] XFS (loop2): Ending clean mount [ 730.716128][ T4269] XFS (loop2): Unmounting Filesystem [ 731.066342][T20856] loop3: detected capacity change from 0 to 2048 [ 731.166155][T20856] loop3: p1 p2 p3 [ 731.384478][ T4825] udevd[4825]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 731.397199][ T4824] udevd[4824]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 731.403996][ T5554] udevd[5554]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 731.431413][T20860] loop1: detected capacity change from 0 to 1024 [ 731.508685][ T4824] udevd[4824]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 731.532004][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 731.533022][ T5554] udevd[5554]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 731.593890][T20860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 732.629693][T20858] loop2: detected capacity change from 0 to 65536 [ 732.726985][T20858] XFS (loop2): Mounting V5 Filesystem [ 732.827080][T20858] XFS (loop2): Ending clean mount [ 732.941834][ T4269] XFS (loop2): Unmounting Filesystem [ 734.443945][T20880] loop2: detected capacity change from 0 to 32768 [ 734.588859][T20880] XFS (loop2): Mounting V5 Filesystem [ 734.678783][T20880] XFS (loop2): Ending clean mount [ 734.734989][ T4269] XFS (loop2): Unmounting Filesystem [ 736.516568][T20898] loop2: detected capacity change from 0 to 65536 [ 736.635073][T20898] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 737.656318][T20892] loop0: detected capacity change from 0 to 131072 [ 737.743429][T20890] loop3: detected capacity change from 0 to 131072 [ 737.771302][T20892] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 740.862145][T20920] loop2: detected capacity change from 0 to 512 [ 741.447826][T20930] netlink: 'syz.2.7134': attribute type 1 has an invalid length. [ 741.486537][T20930] netlink: 'syz.2.7134': attribute type 9 has an invalid length. [ 741.630751][T20918] loop1: detected capacity change from 0 to 131072 [ 741.770715][T20918] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 742.222280][T20926] loop3: detected capacity change from 0 to 32768 [ 742.296158][T20926] loop3: p9 p11 p16 [ 742.435764][T20958] netlink: 'syz.4.7146': attribute type 1 has an invalid length. [ 742.492119][T20958] netlink: 'syz.4.7146': attribute type 9 has an invalid length. [ 742.864487][ T4825] udevd[4825]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 742.864598][ T4824] udevd[4824]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 742.893466][T20981] syz.0.7157 uses old SIOCAX25GETINFO [ 742.903997][ T5554] udevd[5554]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 743.030757][T20985] loop2: detected capacity change from 0 to 1024 [ 743.111848][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7163'. [ 743.261244][T20997] loop0: detected capacity change from 0 to 128 [ 743.375286][T20997] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 743.394593][T20997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.877349][T21030] netlink: 'syz.4.7181': attribute type 10 has an invalid length. [ 743.921383][T21030] device veth1_macvtap left promiscuous mode [ 744.020562][T21030] bridge0: port 3(macsec0) entered blocking state [ 744.041269][T21030] bridge0: port 3(macsec0) entered disabled state [ 744.060170][T21030] device macsec0 entered promiscuous mode [ 744.109528][T21035] loop3: detected capacity change from 0 to 4096 [ 744.145221][T21003] loop2: detected capacity change from 0 to 32768 [ 744.322526][T21023] loop1: detected capacity change from 0 to 32768 [ 744.325036][T21048] veth1_vlan: mtu greater than device maximum [ 744.342703][T21003] XFS (loop2): Mounting V5 Filesystem [ 744.403051][T21023] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 744.403051][T21023] [ 744.513850][T21023] ialloc: diAlloc returned -5! [ 744.573104][T21003] XFS (loop2): Ending clean mount [ 744.752325][ T4269] XFS (loop2): Unmounting Filesystem [ 744.804145][T21073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7196'. [ 744.865692][T21073] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7196'. [ 745.070918][ T8416] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 745.380295][T21097] netlink: 'syz.0.7210': attribute type 30 has an invalid length. [ 745.415627][ T8416] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 745.444178][ T8416] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 745.475450][ T8416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.527586][T21075] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 745.737533][T21114] loop4: detected capacity change from 0 to 512 [ 745.751255][ T8416] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 745.775542][ T8416] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input61 [ 745.831396][ T8416] usb 2-1: USB disconnect, device number 34 [ 745.837516][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 745.870012][T21114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 745.927923][T21114] ext4 filesystem being mounted at /1571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.417881][T21152] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 746.476519][T21153] netlink: 'syz.1.7233': attribute type 1 has an invalid length. [ 746.521345][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7234'. [ 746.634069][T21157] Zero length message leads to an empty skb [ 746.736582][T21165] loop1: detected capacity change from 0 to 256 [ 746.772721][T21159] loop2: detected capacity change from 0 to 4096 [ 746.809054][T21169] loop4: detected capacity change from 0 to 128 [ 746.809057][T21111] loop0: detected capacity change from 0 to 65536 [ 746.831721][T21159] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 746.857709][T21165] FAT-fs (loop1): Directory bread(block 64) failed [ 746.877499][T21165] FAT-fs (loop1): Directory bread(block 65) failed [ 746.910647][T21165] FAT-fs (loop1): Directory bread(block 66) failed [ 746.941921][T21165] FAT-fs (loop1): Directory bread(block 67) failed [ 746.953797][T21165] FAT-fs (loop1): Directory bread(block 68) failed [ 746.961205][T21111] XFS (loop0): Mounting V5 Filesystem [ 746.969487][T21165] FAT-fs (loop1): Directory bread(block 69) failed [ 746.972102][T21169] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.986106][T21165] FAT-fs (loop1): Directory bread(block 70) failed [ 747.003950][T21165] FAT-fs (loop1): Directory bread(block 71) failed [ 747.019607][T21169] ext4 filesystem being mounted at /1576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.024895][T21165] FAT-fs (loop1): Directory bread(block 72) failed [ 747.087067][T21165] FAT-fs (loop1): Directory bread(block 73) failed [ 747.322732][T21111] XFS (loop0): Ending clean mount [ 747.359241][T21192] loop4: detected capacity change from 0 to 1024 [ 747.399736][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7248'. [ 747.427880][ T4270] XFS (loop0): Unmounting Filesystem [ 747.712382][T21210] overlayfs: missing 'workdir' [ 747.742221][T21203] loop4: detected capacity change from 0 to 4096 [ 747.750741][T21206] capability: warning: `syz.1.7257' uses 32-bit capabilities (legacy support in use) [ 747.828845][T21203] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 747.932606][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7262'. [ 747.961739][T21220] binder: 21219:21220 ioctl c0306201 200000001940 returned -14 [ 748.109463][T21226] device netdevsim0 entered promiscuous mode [ 748.591523][T21248] loop3: detected capacity change from 0 to 4096 [ 748.603355][ T4330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 748.648389][T21248] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 748.888962][ T4330] usb 2-1: Using ep0 maxpacket: 8 [ 748.891482][T21268] loop0: detected capacity change from 0 to 128 [ 749.007310][T21275] loop3: detected capacity change from 0 to 64 [ 749.078723][ T4330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 749.089739][T21278] loop2: detected capacity change from 0 to 512 [ 749.096026][T21275] hfs: filesystem is marked locked, mounting read-only. [ 749.141994][T21278] EXT4-fs (loop2): Ignoring removed orlov option [ 749.187333][T21278] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 749.210071][ T4330] usb 2-1: config 4 interface 0 has no altsetting 0 [ 749.239414][T21283] netlink: 'syz.0.7293': attribute type 2 has an invalid length. [ 749.286007][T21278] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.7291: Attempting to read directory block (0) that is past i_size (256) [ 749.378141][T21256] loop4: detected capacity change from 0 to 32768 [ 749.405109][T21278] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 749.428372][T21256] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 749.437811][T21278] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,inode_readahead_blks=0x0000000000000002,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 749.460211][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.470620][ T4330] usb 2-1: string descriptor 0 read error: -22 [ 749.473262][T21256] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 749.479245][ T4330] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 749.535342][T21256] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 749.540381][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.593619][T18649] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 749.600414][T18649] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 749.621471][ T4330] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 749.655933][ T4330] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 749.671753][ T4330] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 749.679718][ T4330] usb 2-1: media controller created [ 749.720544][T18649] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 749.731275][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.748316][T18649] gfs2: fsid=syz:syz.0: jid=0: Done [ 749.768827][T21256] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 750.001112][T21299] device ipip0 entered promiscuous mode [ 750.070709][T21285] loop3: detected capacity change from 0 to 32768 [ 750.108093][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7303'. [ 750.152025][ T4330] usb 2-1: USB disconnect, device number 35 [ 750.231018][T21313] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.338785][T21285] XFS (loop3): Mounting V5 Filesystem [ 750.487595][T21285] XFS (loop3): Ending clean mount [ 750.552574][ T4275] XFS (loop3): Unmounting Filesystem [ 751.216705][T21368] fuse: blksize only supported for fuseblk [ 751.230327][T21372] Cannot find add_set index 0 as target [ 751.238123][T21371] loop3: detected capacity change from 0 to 512 [ 751.303926][T21371] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 751.412335][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7337'. [ 751.450831][T21371] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.7330: Unimplemented hash flags: 0x0001 [ 751.470504][T21371] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7330: Corrupt directory, running e2fsck is recommended [ 751.518173][T21318] loop4: detected capacity change from 0 to 40427 [ 751.628783][T21394] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 751.634596][T21395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7340'. [ 751.647936][T21318] F2FS-fs (loop4): invalid crc value [ 751.662885][T21395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7340'. [ 751.688066][T21394] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 751.732579][T21318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 751.852229][T21410] usb usb8: usbfs: process 21410 (syz.0.7346) did not claim interface 5 before use [ 751.895202][T21318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 751.964265][T21413] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7347'. [ 752.165100][T21419] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7352'. [ 752.425312][T21433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7358'. [ 752.503538][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7361'. [ 752.546929][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7361'. [ 752.595973][T21437] netlink: 'syz.1.7361': attribute type 6 has an invalid length. [ 752.945734][T21397] loop3: detected capacity change from 0 to 32768 [ 752.999977][T21462] netlink: 'syz.1.7373': attribute type 1 has an invalid length. [ 753.038712][T21397] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 753.038712][T21397] [ 753.040783][T21455] loop2: detected capacity change from 0 to 4096 [ 753.105157][T21397] ialloc: diAlloc returned -5! [ 753.130973][T21469] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 753.170997][T21455] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 753.198507][T21469] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 753.213107][T21455] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 753.268838][T21455] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 753.331218][T21455] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 753.440648][T21455] ntfs: volume version 3.1. [ 753.487716][T21484] loop1: detected capacity change from 0 to 512 [ 753.611287][T21484] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 753.651030][T21492] loop3: detected capacity change from 0 to 1764 [ 753.659169][T21484] ext4 filesystem being mounted at /1416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.886691][T21505] loop1: detected capacity change from 0 to 64 [ 753.944306][ T4330] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 754.014981][T21505] attempt to access beyond end of device [ 754.014981][T21505] loop1: rw=0, want=65536, limit=64 [ 754.092531][T21505] Buffer I/O error on dev loop1, logical block 32767, async page read [ 754.146705][T21505] attempt to access beyond end of device [ 754.146705][T21505] loop1: rw=0, want=65536, limit=64 [ 754.205360][T21505] Buffer I/O error on dev loop1, logical block 32767, async page read [ 754.213888][ T4330] usb 3-1: Using ep0 maxpacket: 8 [ 754.400702][ T4330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.445881][T21539] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 754.522186][ T4330] usb 3-1: config 4 interface 0 has no altsetting 0 [ 754.742316][T21530] loop0: detected capacity change from 0 to 32768 [ 754.788677][T21530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7401 (21530) [ 754.806717][ T4330] usb 3-1: string descriptor 0 read error: -22 [ 754.816108][ T4330] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 754.857943][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.881783][T21530] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 754.899626][T21530] BTRFS info (device loop0): using free space tree [ 754.915596][ T4330] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 754.921153][T21530] BTRFS info (device loop0): has skinny extents [ 754.938301][ T4330] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 754.974566][ T4330] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 755.005381][ T4330] usb 3-1: media controller created [ 755.097662][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.163985][T21530] BTRFS info (device loop0): enabling ssd optimizations [ 755.185253][T21584] xt_TCPMSS: Only works on TCP SYN packets [ 755.343329][T21590] loop4: detected capacity change from 0 to 16 [ 755.371527][T21590] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 755.427768][ T8416] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 755.514269][T18666] usb 3-1: USB disconnect, device number 27 [ 755.586932][T21594] tmpfs: Bad value for 'mpol' [ 755.660201][ T8416] usb 2-1: Using ep0 maxpacket: 8 [ 755.780751][ T8416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.859601][T21604] netlink: 'syz.4.7438': attribute type 3 has an invalid length. [ 755.876049][ T8416] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 755.887548][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7438'. [ 755.897179][ T8416] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 755.897205][ T8416] usb 2-1: Manufacturer: syz [ 755.898831][ T8416] usb 2-1: config 0 descriptor?? [ 755.930312][ T8416] appledisplay 2-1:0.0: Could not find int-in endpoint [ 755.946576][ T8416] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 756.093059][T21614] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7432'. [ 756.115164][T21616] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.7433'. [ 756.145732][ T8416] usb 2-1: USB disconnect, device number 36 [ 756.616144][T21635] loop4: detected capacity change from 0 to 512 [ 756.737797][T21635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 756.778203][T21635] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7443: bg 0: block 248: padding at end of block bitmap is not set [ 756.802210][T21644] loop2: detected capacity change from 0 to 256 [ 756.809339][T21635] Quota error (device loop4): write_blk: dquota write failed [ 756.830147][T21610] loop3: detected capacity change from 0 to 32768 [ 756.840701][T21635] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 756.857630][T21646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7449'. [ 756.867226][T21646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7449'. [ 756.881739][T21610] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 756.890154][T21610] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 756.897094][T21635] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.7443: Failed to acquire dquot type 1 [ 756.938808][T21610] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 756.965581][ T8416] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 756.983374][ T8416] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 757.003931][T21635] EXT4-fs (loop4): 1 truncate cleaned up [ 757.010839][T21650] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 757.053285][T21635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 757.168210][ T8416] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 198ms [ 757.207279][ T8416] gfs2: fsid=syz:syz.0: jid=0: Done [ 757.212551][T21610] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 757.495203][T15489] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 757.895806][T15489] usb 3-1: unable to get BOS descriptor or descriptor too short [ 757.946124][T21689] device xfrm0 entered promiscuous mode [ 757.966934][T15489] usb 3-1: not running at top speed; connect to a high speed hub [ 757.978102][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7468'. [ 758.033547][T21692] loop0: detected capacity change from 0 to 1024 [ 758.063339][T15489] usb 3-1: config 56 has an invalid interface number: 129 but max is 0 [ 758.071639][T15489] usb 3-1: config 56 has no interface number 0 [ 758.087411][T15489] usb 3-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 758.106510][T15489] usb 3-1: config 56 interface 129 has no altsetting 0 [ 758.208542][T21692] hfsplus: keylen 65060 too large [ 758.237852][T21700] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (39) [ 758.253162][T21692] hfsplus: xattr searching failed [ 758.280495][T21702] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7474'. [ 758.290739][T15489] usb 3-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2 [ 758.320828][T15489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.342940][T15489] usb 3-1: Product: syz [ 758.360036][T15489] usb 3-1: Manufacturer: syz [ 758.378028][T15489] usb 3-1: SerialNumber: syz [ 758.436405][T21655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 758.498463][T21709] loop0: detected capacity change from 0 to 1024 [ 758.551123][T21713] loop1: detected capacity change from 0 to 1024 [ 758.629815][T21709] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 758.643161][T21720] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 758.686850][T21720] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 758.690121][T21709] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 758.741882][T21720] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 758.769932][T15489] option 3-1:56.129: GSM modem (1-port) converter detected [ 758.801374][T15489] usb 3-1: USB disconnect, device number 28 [ 758.825019][ T1277] hfsplus: b-tree write err: -5, ino 4 [ 758.828565][T15489] option 3-1:56.129: device disconnected [ 759.081478][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.087873][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.096981][T21740] loop0: detected capacity change from 0 to 256 [ 759.509993][T21756] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.703887][ T8416] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 759.726151][T21738] loop4: detected capacity change from 0 to 32768 [ 759.840259][T21738] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 759.867157][T21771] sctp: [Deprecated]: syz.3.7507 (pid 21771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.867157][T21771] Use struct sctp_sack_info instead [ 759.962603][T21738] (syz.4.7492,21738,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 760.014070][T21738] (syz.4.7492,21738,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 760.029186][T21738] (syz.4.7492,21738,1):ocfs2_mknod:502 ERROR: status = -117 [ 760.058997][ T8416] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 760.060165][T21738] (syz.4.7492,21738,1):ocfs2_create:676 ERROR: status = -117 [ 760.067189][ T8416] usb 1-1: config 0 has no interface number 0 [ 760.109306][T21781] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7512'. [ 760.119047][T21780] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7511'. [ 760.167434][ T4281] (syz-executor,4281,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 760.217603][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 760.291275][ T8416] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 760.319584][ T8416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.342287][ T8416] usb 1-1: Product: syz [ 760.346477][ T8416] usb 1-1: Manufacturer: syz [ 760.372472][ T8416] usb 1-1: SerialNumber: syz [ 760.402191][ T8416] usb 1-1: config 0 descriptor?? [ 760.544606][T21801] loop3: detected capacity change from 0 to 1024 [ 760.584439][ T8416] mvusb_mdio: probe of 1-1:0.112 failed with error -5 [ 760.664411][ T8416] usb 1-1: USB disconnect, device number 34 [ 760.685136][T21811] netlink: set zone limit has 8 unknown bytes [ 760.773649][T21815] comedi comedi4: bad chanlist[0]=0x0000b8eb chan=47339 range length=2 [ 760.888064][T19974] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 760.902492][T21826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7534'. [ 760.998983][T21831] netlink: 'syz.4.7537': attribute type 6 has an invalid length. [ 761.223384][T19974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.225175][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7545'. [ 761.242321][T21845] loop2: detected capacity change from 0 to 64 [ 761.256222][T19974] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.280266][T19974] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 761.295951][T19974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.344533][T19974] usb 2-1: config 0 descriptor?? [ 761.383103][T19974] qmi_wwan 2-1:0.0: bogus CDC Union: master=0, slave=2 [ 761.390096][T19974] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 761.593793][T18666] usb 2-1: USB disconnect, device number 37 [ 761.637897][T21868] loop0: detected capacity change from 0 to 1764 [ 761.847379][T19974] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 762.108227][T19974] usb 4-1: Using ep0 maxpacket: 16 [ 762.369542][T19974] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 762.396500][T19974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.433824][T19974] usb 4-1: Product: syz [ 762.444020][T19974] usb 4-1: Manufacturer: syz [ 762.458426][T19974] usb 4-1: SerialNumber: syz [ 762.472800][T19974] r8152-cfgselector 4-1: config 0 descriptor?? [ 762.597912][T21883] loop2: detected capacity change from 0 to 32768 [ 762.709200][T21883] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 762.724307][T21883] (syz.2.7562,21883,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 762.737637][T21883] (syz.2.7562,21883,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 762.745674][T21883] (syz.2.7562,21883,1):ocfs2_mknod:502 ERROR: status = -117 [ 762.754997][T21883] (syz.2.7562,21883,1):ocfs2_create:676 ERROR: status = -117 [ 762.794018][T18666] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 762.804608][ T4269] (syz-executor,4269,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 762.845728][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 762.934345][T21923] kAFS: No cell specified [ 762.939067][T19974] r8152-cfgselector 4-1: Unknown version 0x0000 [ 762.953588][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7582'. [ 762.975990][T19974] r8152-cfgselector 4-1: USB disconnect, device number 41 [ 763.094572][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7584'. [ 763.104997][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7584'. [ 763.180421][T18666] usb 1-1: config 0 interface 0 has no altsetting 0 [ 763.187102][T18666] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 763.222073][T18666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.242002][T18666] usb 1-1: config 0 descriptor?? [ 763.506890][T18666] (null): keene_cmd_main failed (-71) [ 763.534929][T18666] video4linux radio48: keene_cmd_main failed (-71) [ 763.552490][T18666] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 763.598049][T18666] usb 1-1: USB disconnect, device number 35 [ 763.687354][T21956] loop2: detected capacity change from 0 to 4096 [ 763.756060][T21956] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 763.819022][T21956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 763.837406][T21967] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7602'. [ 764.148767][T21978] loop3: detected capacity change from 0 to 64 [ 764.214280][T21983] loop0: detected capacity change from 0 to 8 [ 764.281071][T21983] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 764.301048][ T4825] udevd[4825]: incorrect cramfs checksum on /dev/loop0 [ 764.377420][ T4825] udevd[4825]: incorrect cramfs checksum on /dev/loop0 [ 764.390483][T21981] loop2: detected capacity change from 0 to 4096 [ 764.554964][T21981] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 764.878013][T21954] loop1: detected capacity change from 0 to 32768 [ 764.917201][T21954] gfs2: fsid=gfs2: Trying to join cluster "lock_dlm", "gfs2" [ 764.942852][T21954] gfs2: fsid=gfs2: no fsname found [ 765.313846][T22017] loop1: detected capacity change from 0 to 512 [ 765.411143][T22029] loop2: detected capacity change from 0 to 256 [ 765.422783][T22017] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 765.441849][T22017] EXT4-fs (loop1): orphan cleanup on readonly fs [ 765.528531][T22017] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.7627: corrupted inode contents [ 765.531614][T21989] loop0: detected capacity change from 0 to 40427 [ 765.562846][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.572319][T22017] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.7627: mark_inode_dirty error [ 765.599915][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.610010][T22017] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.7627: corrupted inode contents [ 765.622286][T21989] F2FS-fs (loop0): invalid crc value [ 765.629167][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.636633][T22017] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.7627: mark_inode_dirty error [ 765.648733][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.653402][T22036] loop4: detected capacity change from 0 to 1764 [ 765.691748][T22017] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.7627: corrupted inode contents [ 765.706122][T21989] F2FS-fs (loop0): Found nat_bits in checkpoint [ 765.739446][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.753582][T22017] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 765.781528][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.788065][T22017] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.7627: corrupted inode contents [ 765.837148][T18666] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 765.854734][T21989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 765.880126][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.895723][T22017] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.7627: mark_inode_dirty error [ 765.908535][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 765.928706][T22017] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 765.962114][T22017] EXT4-fs (loop1): Remounting filesystem read-only [ 766.033518][T22017] EXT4-fs (loop1): 1 truncate cleaned up [ 766.086145][T22017] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,discard,. Quota mode: writeback. [ 766.331148][T18666] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 766.349596][T18666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.386690][T18666] usb 4-1: Product: syz [ 766.396779][T18666] usb 4-1: Manufacturer: syz [ 766.424284][T18666] usb 4-1: SerialNumber: syz [ 766.445935][T22060] loop4: detected capacity change from 0 to 256 [ 766.447868][T18666] usb 4-1: config 0 descriptor?? [ 766.464027][T22061] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7647'. [ 766.505445][T18666] hub 4-1:0.0: bad descriptor, ignoring hub [ 766.541007][T18666] hub: probe of 4-1:0.0 failed with error -5 [ 766.560524][T22060] FAT-fs (loop4): Directory bread(block 64) failed [ 766.562597][T18666] f81232 4-1:0.0: f81534a converter detected [ 766.596463][T22060] FAT-fs (loop4): Directory bread(block 65) failed [ 766.604870][T22060] FAT-fs (loop4): Directory bread(block 66) failed [ 766.647940][T22060] FAT-fs (loop4): Directory bread(block 67) failed [ 766.654611][T22060] FAT-fs (loop4): Directory bread(block 68) failed [ 766.707159][T22060] FAT-fs (loop4): Directory bread(block 69) failed [ 766.709686][T18666] usb 4-1: f81534a converter now attached to ttyUSB0 [ 766.714590][T22060] FAT-fs (loop4): Directory bread(block 70) failed [ 766.729334][T22060] FAT-fs (loop4): Directory bread(block 71) failed [ 766.741150][T22060] FAT-fs (loop4): Directory bread(block 72) failed [ 766.747718][T22060] FAT-fs (loop4): Directory bread(block 73) failed [ 767.020479][T18649] usb 4-1: USB disconnect, device number 42 [ 767.032988][T18649] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 767.055503][T18649] f81232 4-1:0.0: device disconnected [ 767.095259][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7657'. [ 767.354950][T22102] netlink: 420 bytes leftover after parsing attributes in process `syz.4.7666'. [ 767.541176][T22112] netlink: 'syz.3.7672': attribute type 1 has an invalid length. [ 767.595779][T22112] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.7672'. [ 767.613462][T22118] device bridge1 entered promiscuous mode [ 767.736104][T22125] device lo entered promiscuous mode [ 767.766147][T22125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.944320][T22140] loop1: detected capacity change from 0 to 1024 [ 768.003858][T22140] EXT4-fs (loop1): Ignoring removed orlov option [ 768.016968][T22140] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 768.062686][T22140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 768.089940][T22140] System zones: 0-1, 3-36 [ 768.128455][T22140] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 768.152121][T10303] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 768.341661][T22166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.359287][T22166] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 768.386650][T22166] bond0: (slave gre0): Error -95 calling set_mac_address [ 768.409255][T10303] usb 4-1: Using ep0 maxpacket: 8 [ 768.549011][T10303] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 768.561405][T22175] loop4: detected capacity change from 0 to 2048 [ 768.568088][T10303] usb 4-1: config 0 has no interface number 1 [ 768.591903][T10303] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 768.613661][T10303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 768.650662][T22175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 768.714734][ T4825] udevd[4825]: incorrect nilfs2 checksum on /dev/loop4 [ 768.735622][T22188] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 768.780326][T22175] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 768.791774][T10303] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 768.810561][T10303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.818594][T10303] usb 4-1: Product: syz [ 768.862639][T10303] usb 4-1: Manufacturer: syz [ 768.887967][T10303] usb 4-1: SerialNumber: syz [ 768.901458][T22175] Remounting filesystem read-only [ 768.909531][T10303] usb 4-1: config 0 descriptor?? [ 768.918501][T22175] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 768.979621][T10303] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 769.196523][ T2424] pvrusb2: Invalid read control endpoint [ 769.199091][T10303] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 769.248908][ T2424] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 769.305035][ T2424] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 769.318650][T22212] netlink: 'syz.2.7712': attribute type 10 has an invalid length. [ 769.359724][T22212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7712'. [ 769.397668][T10303] usb 4-1: USB disconnect, device number 43 [ 769.627766][T22227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7718'. [ 769.835092][T15489] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 770.082025][T15489] usb 3-1: Using ep0 maxpacket: 8 [ 770.150958][T22204] loop1: detected capacity change from 0 to 32768 [ 770.212412][T22204] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.7709 (22204) [ 770.274264][T22252] afs: Unknown parameter 'fowner' [ 770.302620][T22204] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 770.338799][T22204] BTRFS info (device loop1): turning off barriers [ 770.365059][T22204] BTRFS info (device loop1): ignoring bad roots [ 770.385122][T15489] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 770.407456][T22204] BTRFS info (device loop1): force clearing of disk cache [ 770.415256][T15489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.453318][T22263] netlink: 'syz.4.7730': attribute type 30 has an invalid length. [ 770.461895][T15489] usb 3-1: Product: syz [ 770.466072][T15489] usb 3-1: Manufacturer: syz [ 770.472050][T22204] BTRFS info (device loop1): turning on async discard [ 770.480026][T22204] BTRFS info (device loop1): setting nodatacow, compression disabled [ 770.488465][T15489] usb 3-1: SerialNumber: syz [ 770.509531][T15489] usb 3-1: config 0 descriptor?? [ 770.525481][T22204] BTRFS info (device loop1): turning on flush-on-commit [ 770.545861][T15489] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 770.559262][T22204] BTRFS info (device loop1): using free space tree [ 770.598706][T22204] BTRFS info (device loop1): has skinny extents [ 770.858483][T22300] netlink: 'syz.4.7736': attribute type 1 has an invalid length. [ 770.888069][T22300] netlink: 'syz.4.7736': attribute type 2 has an invalid length. [ 770.891697][T22204] BTRFS info (device loop1): enabling ssd optimizations [ 770.896425][ T4330] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 770.950351][T15489] gspca_sn9c20x: Write register 1001 failed -71 [ 770.957989][T15489] gspca_sn9c20x: Device initialization failed [ 770.964154][T15489] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 770.973229][T15489] usb 3-1: USB disconnect, device number 29 [ 771.159120][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 771.280605][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 771.298207][T22320] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7743'. [ 771.398916][T22324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 771.409333][T22324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 771.427262][T22324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 771.506455][ T4330] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 771.558354][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.588023][ T4330] usb 1-1: Product: syz [ 771.592228][ T4330] usb 1-1: Manufacturer: syz [ 771.596846][ T4330] usb 1-1: SerialNumber: syz [ 771.643105][ T4330] usb 1-1: config 0 descriptor?? [ 771.662341][T22332] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 771.692072][ T4330] usbtouchscreen: probe of 1-1:0.0 failed with error -12 [ 771.718784][T22332] bond0: (slave gre0): Error -95 calling set_mac_address [ 771.886325][T18656] usb 1-1: USB disconnect, device number 36 [ 771.995122][T22354] netlink: 'syz.4.7761': attribute type 21 has an invalid length. [ 772.024312][T22354] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7761'. [ 772.163418][T22363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 772.275544][T22374] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 772.305849][T22374] bond0: (slave gre0): Error -95 calling set_mac_address [ 772.396802][T22384] loop2: detected capacity change from 0 to 64 [ 772.605232][T22397] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7776'. [ 772.618281][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7776'. [ 772.829816][T22412] loop2: detected capacity change from 0 to 256 [ 772.914841][T22418] loop3: detected capacity change from 0 to 256 [ 772.937132][T22412] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 773.025899][ T4330] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 773.053692][T22418] FAT-fs (loop3): Directory bread(block 64) failed [ 773.080194][T22418] FAT-fs (loop3): Directory bread(block 65) failed [ 773.086892][T22418] FAT-fs (loop3): Directory bread(block 66) failed [ 773.125087][T22424] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7787'. [ 773.144213][T22418] FAT-fs (loop3): Directory bread(block 67) failed [ 773.191307][T22418] FAT-fs (loop3): Directory bread(block 68) failed [ 773.218435][T22418] FAT-fs (loop3): Directory bread(block 69) failed [ 773.266159][T22418] FAT-fs (loop3): Directory bread(block 70) failed [ 773.283733][ T4330] usb 2-1: Using ep0 maxpacket: 8 [ 773.307894][T22422] loop0: detected capacity change from 0 to 4096 [ 773.312501][T22418] FAT-fs (loop3): Directory bread(block 71) failed [ 773.349787][T22418] FAT-fs (loop3): Directory bread(block 72) failed [ 773.356386][T22418] FAT-fs (loop3): Directory bread(block 73) failed [ 773.376679][T22422] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 773.405359][ T4330] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 773.423584][ T4330] usb 2-1: config 0 has no interface number 1 [ 773.440326][ T4330] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 773.489723][ T4330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 773.600086][T22422] ntfs3: loop0: failed to convert "c46c" to iso8859-4 [ 773.660581][T22438] loop2: detected capacity change from 0 to 512 [ 773.712618][ T4330] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 773.726670][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.754675][ T4330] usb 2-1: Product: syz [ 773.758861][ T4330] usb 2-1: Manufacturer: syz [ 773.765545][T22438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 773.788671][T22445] netlink: 'syz.3.7797': attribute type 21 has an invalid length. [ 773.820854][ T4330] usb 2-1: SerialNumber: syz [ 773.852249][ T4330] usb 2-1: config 0 descriptor?? [ 773.891393][ T4330] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 774.095090][T22459] affs: No valid root block on device nbd4 [ 774.114039][ T4330] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 774.159156][T22463] Unsupported ieee802154 address type: 0 [ 774.217990][ C1] sd 0:0:1:0: tag#1032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 774.227900][ C1] sd 0:0:1:0: tag#1032 CDB: Verify(10) [ 774.233380][ C1] sd 0:0:1:0: tag#1032 CDB[00]: 2f 65 3d b1 4c 87 bb 4c b7 a9 8c 8f 3f 59 df 1a [ 774.242457][ C1] sd 0:0:1:0: tag#1032 CDB[10]: 0c bf cf 70 fe 68 eb 31 46 84 62 08 44 50 6c e3 [ 774.251537][ C1] sd 0:0:1:0: tag#1032 CDB[20]: 1f [ 774.252668][T22467] loop4: detected capacity change from 0 to 64 [ 774.309548][ T4330] usb 2-1: USB disconnect, device number 38 [ 774.327277][ T4330] pvrusb2: Device being rendered inoperable [ 774.338160][ T4330] pvrusb2: Device being rendered inoperable [ 774.383052][T22467] hfs: request for non-existent node 16777216 in B*Tree [ 774.432097][T22467] hfs: request for non-existent node 16777216 in B*Tree [ 774.730329][T22453] loop3: detected capacity change from 0 to 32768 [ 774.744860][T22453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7801 (22453) [ 774.817697][T22453] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 774.866060][T22453] BTRFS info (device loop3): setting nodatacow, compression disabled [ 774.915137][T22453] BTRFS info (device loop3): turning on sync discard [ 774.921864][T22453] BTRFS info (device loop3): enabling disk space caching [ 774.943235][T22453] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 774.980012][T22453] BTRFS info (device loop3): trying to use backup root at mount time [ 775.026528][T22453] BTRFS error (device loop3): cannot disable free space tree [ 775.084456][T22453] BTRFS error (device loop3): open_ctree failed: -22 [ 775.450570][T22521] loop0: detected capacity change from 0 to 512 [ 775.652279][T22538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.667466][T22521] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.7833: casefold flag without casefold feature [ 775.713103][T22539] cgroup: Invalid name [ 775.753636][T22521] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.7833: couldn't read orphan inode 15 (err -117) [ 775.815496][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7842'. [ 775.837505][T22521] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 775.892422][T22551] netlink: 11 bytes leftover after parsing attributes in process `syz.4.7846'. [ 775.921166][T22550] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1008285695) [ 775.929621][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7846'. [ 775.994208][T22554] loop2: detected capacity change from 0 to 256 [ 775.995759][T22555] xt_hashlimit: overflow, try lower: 3/0 [ 776.004565][T22550] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 776.291330][T22577] loop2: detected capacity change from 0 to 64 [ 776.452683][T22587] netlink: 'syz.4.7865': attribute type 5 has an invalid length. [ 776.489815][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7865'. [ 776.682876][T22611] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7876'. [ 776.910407][T22628] Cannot find del_set index 0 as target [ 776.919984][T22631] xt_hashlimit: overflow, try lower: 3/0 [ 777.244742][T22661] loop1: detected capacity change from 0 to 64 [ 777.357974][T22669] loop0: detected capacity change from 0 to 512 [ 777.497720][T22669] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nombcache,nolazytime,,errors=continue. Quota mode: writeback. [ 777.578670][T22669] ext4 filesystem being mounted at /1550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 777.849707][T22673] loop3: detected capacity change from 0 to 32768 [ 778.082754][T22708] loop1: detected capacity change from 0 to 8 [ 778.184437][T22708] SQUASHFS error: zlib decompression failed, data probably corrupt [ 778.205280][T22708] SQUASHFS error: Failed to read block 0x9b: -5 [ 778.223490][T22708] SQUASHFS error: Unable to read metadata cache entry [99] [ 778.230786][T22708] SQUASHFS error: Unable to read inode 0x127 [ 778.298598][T18652] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 778.540671][T18665] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 778.642803][T18652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.792109][T18665] usb 3-1: Using ep0 maxpacket: 32 [ 778.829783][T18652] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 778.852983][T18652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.881165][T18652] usb 5-1: Product: syz [ 778.890680][T18652] usb 5-1: Manufacturer: syz [ 778.904755][T18652] usb 5-1: SerialNumber: syz [ 778.913474][T18665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.929695][T18652] usb 5-1: config 0 descriptor?? [ 778.935318][T18665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.971489][T18665] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 778.996905][T18665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.008550][T18652] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 779.014835][T18652] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 779.039878][T18665] usb 3-1: config 0 descriptor?? [ 779.082415][T18665] hub 3-1:0.0: USB hub found [ 779.095625][T22747] xt_l2tp: missing protocol rule (udp|l2tpip) [ 779.215082][ T4330] usb 5-1: USB disconnect, device number 37 [ 779.286549][T18665] hub 3-1:0.0: 1 port detected [ 779.324899][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7947'. [ 779.408484][T22744] loop1: detected capacity change from 0 to 32768 [ 779.423400][T22744] XFS: noikeep mount option is deprecated. [ 779.470061][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7949'. [ 779.479714][T18665] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 779.480530][T22744] XFS (loop1): Mounting V5 Filesystem [ 779.487192][T18665] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 779.500143][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7949'. [ 779.557103][T22744] XFS (loop1): Ending clean mount [ 779.564605][T22744] XFS (loop1): Quotacheck needed: Please wait. [ 779.593951][T18665] usbhid 3-1:0.0: can't add hid device: -71 [ 779.599940][T18665] usbhid: probe of 3-1:0.0 failed with error -71 [ 779.640085][T22744] XFS (loop1): Quotacheck: Done. [ 779.646233][T18665] usb 3-1: USB disconnect, device number 30 [ 779.732987][ T4271] XFS (loop1): Unmounting Filesystem [ 779.971469][T22784] nvme_fabrics: missing parameter 'transport=%s' [ 779.971659][T22784] nvme_fabrics: missing parameter 'nqn=%s' [ 780.127425][T22788] loop0: detected capacity change from 0 to 1024 [ 780.232769][T22788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 780.255543][T22788] ext4 filesystem being mounted at /1577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.303936][T22804] kAFS: Can only specify source 'none' with -o dyn [ 780.339048][T22806] x_tables: unsorted underflow at hook 2 [ 780.448159][T22814] x_tables: duplicate entry at hook 3 [ 780.619683][T22831] loop4: detected capacity change from 0 to 64 [ 780.679399][T22833] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 780.710900][T22831] attempt to access beyond end of device [ 780.710900][T22831] loop4: rw=0, want=47226, limit=64 [ 780.731313][T22833] openvswitch: netlink: Actions may not be safe on all matching packets [ 780.745998][T22831] Buffer I/O error on dev loop4, logical block 23612, async page read [ 780.755600][T22831] attempt to access beyond end of device [ 780.755600][T22831] loop4: rw=0, want=47226, limit=64 [ 780.784268][T22831] Buffer I/O error on dev loop4, logical block 23612, async page read [ 781.056217][T22853] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7987'. [ 781.108437][ T4200] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 781.122888][T22853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7987'. [ 781.127183][T22857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7989'. [ 781.147815][T22851] loop2: detected capacity change from 0 to 4096 [ 781.189471][T22851] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 781.209910][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.262339][T22851] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 781.347748][T22851] ntfs: volume version 3.1. [ 781.414810][T22871] loop3: detected capacity change from 0 to 128 [ 781.454834][T22851] ntfs: (device loop2): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 781.507234][ T4200] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 781.530495][T22871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 781.560656][ T4200] usb 1-1: config 0 has no interface number 0 [ 781.566826][ T4200] usb 1-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 781.588117][T22871] ext4 filesystem being mounted at /1471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.625089][ T4200] usb 1-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 781.671346][ T4200] usb 1-1: config 0 interface 7 has no altsetting 0 [ 781.688208][ T4200] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 781.737008][ T4200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.796964][ T4200] usb 1-1: config 0 descriptor?? [ 781.849778][T22842] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 781.930590][T22893] (syz.2.8006,22893,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 781.963939][T22893] (syz.2.8006,22893,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 782.044229][T22895] loop4: detected capacity change from 0 to 256 [ 782.091955][ T4200] usb 1-1: string descriptor 0 read error: -71 [ 782.098849][ T4200] usb 1-1: Error in usbnet_get_endpoints (-22) [ 782.148156][ T4200] usb 1-1: USB disconnect, device number 37 [ 782.171677][T22895] FAT-fs (loop4): Directory bread(block 64) failed [ 782.199064][T22877] loop1: detected capacity change from 0 to 32768 [ 782.206826][T22895] FAT-fs (loop4): Directory bread(block 65) failed [ 782.232169][T22895] FAT-fs (loop4): Directory bread(block 66) failed [ 782.243028][T22905] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8012'. [ 782.257328][T22895] FAT-fs (loop4): Directory bread(block 67) failed [ 782.276713][T22895] FAT-fs (loop4): Directory bread(block 68) failed [ 782.350537][T22895] FAT-fs (loop4): Directory bread(block 69) failed [ 782.373427][T22895] FAT-fs (loop4): Directory bread(block 70) failed [ 782.379982][T22877] XFS (loop1): Mounting V5 Filesystem [ 782.379990][T22895] FAT-fs (loop4): Directory bread(block 71) failed [ 782.380067][T22895] FAT-fs (loop4): Directory bread(block 72) failed [ 782.403738][T22895] FAT-fs (loop4): Directory bread(block 73) failed [ 782.538951][T22923] loop4: detected capacity change from 0 to 128 [ 782.648437][T22923] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 782.714939][T22877] XFS (loop1): Ending clean mount [ 782.738289][T22877] XFS (loop1): Quotacheck needed: Please wait. [ 782.815766][ T4281] sysv_free_block: flc_count > flc_size [ 782.831739][T22877] XFS (loop1): Quotacheck: Done. [ 782.850002][ T4281] sysv_free_block: flc_count > flc_size [ 782.862856][ T4281] sysv_free_block: flc_count > flc_size [ 782.862990][T22939] loop0: detected capacity change from 0 to 16 [ 782.868935][ T4281] sysv_free_block: flc_count > flc_size [ 782.868946][ T4281] sysv_free_block: flc_count > flc_size [ 782.868955][ T4281] sysv_free_block: flc_count > flc_size [ 782.868965][ T4281] sysv_free_block: flc_count > flc_size [ 782.914702][ T4271] XFS (loop1): Unmounting Filesystem [ 782.942272][T22939] erofs: (device loop0): mounted with root inode @ nid 36. [ 783.012905][T22939] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 783.033143][ T4281] sysv_free_block: flc_count > flc_size [ 783.038721][ T4281] sysv_free_block: flc_count > flc_size [ 783.079055][ T4281] sysv_free_block: flc_count > flc_size [ 783.088291][ T4281] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 783.360113][T22953] loop2: detected capacity change from 0 to 64 [ 783.391103][T22951] device wlan0 entered promiscuous mode [ 783.513650][T22957] loop1: detected capacity change from 0 to 8 [ 783.624640][T22957] SQUASHFS error: Failed to read block 0x738: -5 [ 783.650615][T22957] SQUASHFS error: Unable to read metadata cache entry [736] [ 783.699772][T22969] loop2: detected capacity change from 0 to 1024 [ 783.743334][T22973] loop4: detected capacity change from 0 to 64 [ 783.782457][T22977] dlm: no local IP address has been set [ 783.808937][T22977] dlm: cannot start dlm midcomms -107 [ 783.883706][T10546] hfsplus: b-tree write err: -5, ino 4 [ 784.028050][T10546] attempt to access beyond end of device [ 784.028050][T10546] loop4: rw=1, want=268435470, limit=64 [ 784.067731][T10546] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 784.352893][T22996] loop0: detected capacity change from 0 to 4096 [ 784.400510][T23007] loop4: detected capacity change from 0 to 1024 [ 784.401131][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 784.427818][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 784.496637][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 784.504546][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 784.529471][T23007] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 784.554442][T23007] EXT4-fs error (device loop4): ext4_get_journal_inode:5158: inode #32: comm syz.4.8059: iget: special inode unallocated [ 784.589463][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 784.634195][T23007] EXT4-fs (loop4): no journal found [ 784.639671][T23007] EXT4-fs (loop4): can't get journal size [ 784.650537][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 784.667913][T23007] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,noblock_validity,sysvgroups,,errors=continue. Quota mode: none. [ 784.698477][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 784.716945][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 784.725471][T23007] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.8059: bad inode number: 12 [ 784.729847][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 784.745271][T22996] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 784.893811][T23023] loop1: detected capacity change from 0 to 2048 [ 784.998696][T23023] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 785.044802][T23033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8072'. [ 785.075086][ T5554] udevd[5554]: incorrect nilfs2 checksum on /dev/loop1 [ 785.083881][T23035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 785.144589][T23023] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=104, inode=16, rec_len=24, name_len=128 [ 785.171425][T23038] loop0: detected capacity change from 0 to 256 [ 785.179176][T23041] loop4: detected capacity change from 0 to 16 [ 785.219581][T23023] Remounting filesystem read-only [ 785.249808][T23041] erofs: (device loop4): mounted with root inode @ nid 36. [ 785.278191][T23041] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 785.611028][T23059] dlm: no local IP address has been set [ 785.642485][T23059] dlm: cannot start dlm midcomms -107 [ 785.770088][T23067] bond0: option lp_interval: invalid value (0) [ 785.793614][T23067] bond0: option lp_interval: allowed values 1 - 2147483647 [ 785.889004][T23039] loop2: detected capacity change from 0 to 32768 [ 786.019004][T23083] loop4: detected capacity change from 0 to 64 [ 786.076882][T23085] netlink: 'syz.1.8097': attribute type 1 has an invalid length. [ 786.096900][T23085] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.8097'. [ 786.158369][T23083] attempt to access beyond end of device [ 786.158369][T23083] loop4: rw=0, want=130064, limit=64 [ 786.195096][T23083] Buffer I/O error on dev loop4, logical block 65031, async page read [ 786.432074][T23109] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 786.541603][T23117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8113'. [ 786.562862][T23120] ip6t_srh: unknown srh match flags 4001 [ 786.666967][T23129] loop3: detected capacity change from 0 to 8 [ 786.675164][ T26] audit: type=1326 audit(1752555116.331:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 786.752910][ T26] audit: type=1326 audit(1752555116.363:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74d213f929 code=0x50000 [ 786.761944][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8122'. [ 786.796290][T23129] SQUASHFS error: Failed to read block 0x6e6: -5 [ 786.816771][T23129] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 786.839097][T23129] SQUASHFS error: Unable to read inode 0xa7 [ 786.854386][T23135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.854891][ T26] audit: type=1326 audit(1752555116.363:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74d213f929 code=0x50000 [ 786.935582][ T26] audit: type=1326 audit(1752555116.395:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.003134][T23142] libceph: resolve '4.' (ret=-3): failed [ 787.015986][T23144] netlink: 'syz.0.8126': attribute type 8 has an invalid length. [ 787.033516][T23147] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 787.050205][ T26] audit: type=1326 audit(1752555116.395:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.182240][ T26] audit: type=1326 audit(1752555116.395:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.302189][ T26] audit: type=1326 audit(1752555116.395:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.431078][T23159] loop4: detected capacity change from 0 to 64 [ 787.473419][T23154] loop1: detected capacity change from 0 to 4096 [ 787.488259][ T26] audit: type=1326 audit(1752555116.395:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.622771][ T26] audit: type=1326 audit(1752555116.395:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.758583][ T26] audit: type=1326 audit(1752555116.395:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23126 comm="syz.2.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d213f929 code=0x50000 [ 787.812650][T23167] CIFS mount error: No usable UNC path provided in device string! [ 787.812650][T23167] [ 787.834885][T23166] loop4: detected capacity change from 0 to 1024 [ 787.844617][T23167] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 788.509418][T23155] loop0: detected capacity change from 0 to 32768 [ 788.760951][T23202] loop3: detected capacity change from 0 to 2048 [ 788.906246][T23202] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 788.916165][T23210] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 788.959700][T23202] Remounting filesystem read-only [ 788.997463][T23202] NILFS (loop3): mounting fs with errors [ 789.413900][T23226] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 789.477848][T23228] cgroup: subsys name conflicts with all [ 789.520480][T23230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8160'. [ 789.582219][T23230] openvswitch: netlink: EtherType 0 is less than min 600 [ 789.922151][T23254] loop0: detected capacity change from 0 to 2048 [ 790.073020][T23254] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 790.093143][T23278] loop1: detected capacity change from 0 to 256 [ 790.160671][T23284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.374635][T23296] netlink: 1476 bytes leftover after parsing attributes in process `syz.0.8198'. [ 790.577205][T23319] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 790.652312][ T4330] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 790.908314][ T4330] usb 2-1: Using ep0 maxpacket: 32 [ 790.964088][T23346] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 790.984374][T23350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 790.990580][T23353] netlink: 'syz.3.8225': attribute type 10 has an invalid length. [ 791.032112][T23350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 791.045644][T23353] team0: Device veth1_vlan failed to register rx_handler [ 791.053957][ T4330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.167400][ T23] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 791.209269][T23353] syz.3.8225 (23353) used greatest stack depth: 20168 bytes left [ 791.244040][ T4330] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 791.270461][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.316766][T23359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8229'. [ 791.328176][ T4330] usb 2-1: Product: syz [ 791.345590][ T4330] usb 2-1: Manufacturer: syz [ 791.379743][ T4330] usb 2-1: SerialNumber: syz [ 791.407811][ T4330] usb 2-1: config 0 descriptor?? [ 791.421513][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 791.487882][ T4330] usb 2-1: bad CDC descriptors [ 791.493014][ T4330] usb 2-1: unsupported MDLM descriptors [ 791.553875][ T23] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 791.574256][ T23] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 791.579851][T23369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8234'. [ 791.606199][T23369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8234'. [ 791.617067][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 791.630463][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8234'. [ 791.637507][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 791.651089][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.714264][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 791.733997][T23379] binder: 23375:23379 ioctl c018620c 2000000001c0 returned -22 [ 791.763601][ T4330] usb 2-1: USB disconnect, device number 39 [ 791.897386][ T23] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 791.916061][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.943407][ T23] usb 1-1: Product: syz [ 791.957428][ T23] usb 1-1: Manufacturer: syz [ 791.980460][ T23] usb 1-1: SerialNumber: syz [ 791.986960][ T23] usb 1-1: config 0 descriptor?? [ 792.034618][T23396] device bond0 entered promiscuous mode [ 792.054015][T23396] device bond_slave_0 entered promiscuous mode [ 792.065173][ T23] hub 1-1:0.0: bad descriptor, ignoring hub [ 792.071102][ T23] hub: probe of 1-1:0.0 failed with error -5 [ 792.077219][T23396] device bond_slave_1 entered promiscuous mode [ 792.106110][T23401] usb usb5: usbfs: process 23401 (syz.2.8250) did not claim interface 0 before use [ 792.274909][T23412] loop1: detected capacity change from 0 to 164 [ 792.372280][ T23] usb 1-1: USB disconnect, device number 38 [ 792.570164][T23430] device batadv1 entered promiscuous mode [ 792.885345][T23451] loop0: detected capacity change from 0 to 1024 [ 793.131596][T23470] loop4: detected capacity change from 0 to 128 [ 793.219012][T23473] loop3: detected capacity change from 0 to 2048 [ 793.230726][T23470] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 793.251122][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8289'. [ 793.263055][T23470] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 793.342684][T23473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.481331][T23485] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 794.142832][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 794.519188][T23553] ip6t_rpfilter: unknown options [ 794.524912][ T23] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 794.533237][T23507] loop3: detected capacity change from 0 to 40427 [ 794.536012][ T23] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 794.574502][T23507] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 794.588365][ T23] usb 3-1: config 220 has no interface number 2 [ 794.590452][T18665] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 794.621780][ T23] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 794.627149][T23507] F2FS-fs (loop3): invalid crc value [ 794.675545][T23507] F2FS-fs (loop3): Found nat_bits in checkpoint [ 794.720928][ T23] usb 3-1: config 220 interface 0 has no altsetting 0 [ 794.739648][ T23] usb 3-1: config 220 interface 76 has no altsetting 0 [ 794.774035][ T23] usb 3-1: config 220 interface 1 has no altsetting 0 [ 794.846563][T23507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 794.870143][T18665] usb 1-1: Using ep0 maxpacket: 32 [ 794.963487][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 794.981052][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.987750][T18665] usb 1-1: config 0 has an invalid interface number: 152 but max is 0 [ 794.997454][ T23] usb 3-1: Product: syz [ 795.009317][ T23] usb 3-1: Manufacturer: syz [ 795.014299][T18665] usb 1-1: config 0 has no interface number 0 [ 795.018122][ T23] usb 3-1: SerialNumber: syz [ 795.035865][T18665] usb 1-1: config 0 interface 152 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1024 [ 795.052609][T18665] usb 1-1: config 0 interface 152 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 795.062950][T18665] usb 1-1: config 0 interface 152 has no altsetting 0 [ 795.083557][ T4275] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 795.091502][ T4275] #PF: supervisor instruction fetch in kernel mode [ 795.098004][ T4275] #PF: error_code(0x0010) - not-present page [ 795.103989][ T4275] PGD 5eac9067 P4D 5eac9067 PUD 0 [ 795.109113][ T4275] Oops: 0010 [#1] PREEMPT SMP KASAN [ 795.114318][ T4275] CPU: 0 PID: 4275 Comm: syz-executor Not tainted 5.15.188-syzkaller #0 [ 795.122654][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.132714][ T4275] RIP: 0010:0x0 [ 795.136191][ T4275] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 795.143911][ T4275] RSP: 0018:ffffc90002f6f6d8 EFLAGS: 00010282 [ 795.149986][ T4275] RAX: 1ffffffff142dc83 RBX: ffffea000177b540 RCX: ffffffff8a16e418 [ 795.157965][ T4275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000177b540 [ 795.165950][ T4275] RBP: ffffc90002f6f8d0 R08: dffffc0000000000 R09: fffff940002ef6a9 [ 795.173945][ T4275] R10: fffff940002ef6a9 R11: 1ffffd40002ef6a8 R12: ffff88801f57db10 [ 795.181927][ T4275] R13: 0000000000000001 R14: ffff88805532e000 R15: ffff88802aa8c000 [ 795.189908][ T4275] FS: 000055558d648500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 795.198841][ T4275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.205434][ T4275] CR2: ffffffffffffffd6 CR3: 0000000063178000 CR4: 00000000003506f0 [ 795.206345][T23587] loop1: detected capacity change from 0 to 64 [ 795.213419][ T4275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.213434][ T4275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.213447][ T4275] Call Trace: [ 795.238784][ T4275] [ 795.241727][ T4275] f2fs_update_meta_page+0x45/0x60 [ 795.246853][ T4275] do_checkpoint+0x1aa9/0x4010 [ 795.251644][ T4275] ? trace_f2fs_write_checkpoint+0x1c0/0x1c0 [ 795.257620][ T4275] ? mutex_unlock+0x10/0x10 [ 795.262122][ T4275] ? mutex_lock_nested+0x17/0x20 [ 795.267056][ T4275] ? __f2fs_save_inmem_curseg+0x22c/0x380 [ 795.272781][ T4275] ? up_write+0x1bb/0x420 [ 795.277113][ T4275] f2fs_write_checkpoint+0x12e6/0x1a80 [ 795.282583][ T4275] ? f2fs_get_sectors_written+0x4f0/0x4f0 [ 795.288300][ T4275] ? preempt_count_add+0x8d/0x190 [ 795.293325][ T4275] f2fs_issue_checkpoint+0x2d8/0x440 [ 795.298603][ T4275] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 795.304794][ T4275] ? sync_inodes_sb+0x8be/0x920 [ 795.309654][ T4275] ? filemap_fdatawrite_wbc+0x178/0x240 [ 795.315323][ T4275] ? rcu_is_watching+0x11/0xa0 [ 795.320083][ T4275] ? f2fs_sync_fs+0x1db/0x380 [ 795.324761][ T4275] sync_filesystem+0x1be/0x220 [ 795.329523][ T4275] generic_shutdown_super+0x6b/0x300 [ 795.334819][ T4275] kill_block_super+0x7c/0xe0 [ 795.339517][ T4275] kill_f2fs_super+0x2ed/0x3a0 [ 795.344277][ T4275] ? unregister_shrinker+0x247/0x300 [ 795.349556][ T4275] ? f2fs_mount+0x40/0x40 [ 795.353898][ T4275] ? kfree+0x4a/0x2a0 [ 795.357887][ T4275] ? up_write+0x1bb/0x420 [ 795.362215][ T4275] ? unregister_shrinker+0x247/0x300 [ 795.367610][ T4275] deactivate_locked_super+0x93/0xf0 [ 795.372895][ T4275] cleanup_mnt+0x418/0x4d0 [ 795.377309][ T4275] ? lockdep_hardirqs_on+0x94/0x140 [ 795.382510][ T4275] task_work_run+0x125/0x1a0 [ 795.387100][ T4275] exit_to_user_mode_loop+0x10f/0x130 [ 795.392472][ T4275] exit_to_user_mode_prepare+0xb1/0x140 [ 795.398026][ T4275] syscall_exit_to_user_mode+0x16/0x40 [ 795.403573][ T4275] do_syscall_64+0x58/0xa0 [ 795.407996][ T4275] ? clear_bhb_loop+0x30/0x80 [ 795.412676][ T4275] ? clear_bhb_loop+0x30/0x80 [ 795.417353][ T4275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.423253][ T4275] RIP: 0033:0x7f827a7fec57 [ 795.427682][ T4275] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 795.447408][ T4275] RSP: 002b:00007ffc5fced8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 795.455864][ T4275] RAX: 0000000000000000 RBX: 00007f827a87f925 RCX: 00007f827a7fec57 [ 795.463838][ T4275] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5fced9b0 [ 795.471807][ T4275] RBP: 00007ffc5fced9b0 R08: 0000000000000000 R09: 0000000000000000 [ 795.479890][ T4275] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5fceea40 [ 795.487876][ T4275] R13: 00007f827a87f925 R14: 00000000000bfbff R15: 00007ffc5fceea80 [ 795.495892][ T4275] [ 795.498929][ T4275] Modules linked in: [ 795.502836][ T4275] CR2: 0000000000000000 [ 795.507009][ T4275] ---[ end trace c7d0e5bf52d42b22 ]--- [ 795.512457][ T4275] RIP: 0010:0x0 [ 795.515924][ T4275] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 795.523635][ T4275] RSP: 0018:ffffc90002f6f6d8 EFLAGS: 00010282 [ 795.529704][ T4275] RAX: 1ffffffff142dc83 RBX: ffffea000177b540 RCX: ffffffff8a16e418 [ 795.537689][ T4275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000177b540 [ 795.545656][ T4275] RBP: ffffc90002f6f8d0 R08: dffffc0000000000 R09: fffff940002ef6a9 [ 795.553632][ T4275] R10: fffff940002ef6a9 R11: 1ffffd40002ef6a8 R12: ffff88801f57db10 [ 795.561758][ T4275] R13: 0000000000000001 R14: ffff88805532e000 R15: ffff88802aa8c000 [ 795.569747][ T4275] FS: 000055558d648500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 795.578669][ T4275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.585263][ T4275] CR2: ffffffffffffffd6 CR3: 0000000063178000 CR4: 00000000003506f0 [ 795.593243][ T4275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.601221][ T4275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.609189][ T4275] Kernel panic - not syncing: Fatal exception [ 795.615580][ T4275] Kernel Offset: disabled [ 795.619916][ T4275] Rebooting in 86400 seconds..