last executing test programs: 10m48.349353184s ago: executing program 2 (id=7342): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000001500)=0x2e74, 0x4) 10m48.101183666s ago: executing program 2 (id=7345): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0xe000, 0x8b, 0x11, 0x0, @empty, @empty}, {0x24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "4bd3985fe13e3b2cf9e5f574d97d9dabe997744e388aacf4c421e77eec6d3c52", "e865081bd433660a1cf980a8d7d82f77", {"a6c5bc0ea08e90567ad54a7c004a26d6", "00ca815c13362287ca5682f383fbb4aa"}}}}}}}, 0x0) 10m47.872692727s ago: executing program 2 (id=7348): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getxattr(0x0, 0x0, 0x0, 0x0) 10m47.531672274s ago: executing program 2 (id=7352): syz_mount_image$exfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000580)={[{@errors_continue}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@errors_remount}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10m47.103978902s ago: executing program 2 (id=7359): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x3, 0xffffffff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 10m46.507553594s ago: executing program 2 (id=7369): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300021a0000000000000000000000020008000800000066000000000000000f0018"], 0xd0}, 0x1, 0x7}, 0x0) 10m45.693235981s ago: executing program 32 (id=7369): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300021a0000000000000000000000020008000800000066000000000000000f0018"], 0xd0}, 0x1, 0x7}, 0x0) 8m13.13053034s ago: executing program 4 (id=9307): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 8m12.774516024s ago: executing program 4 (id=9311): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0x0, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'pim6reg\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @private=0xa010102, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2e, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 8m12.262740852s ago: executing program 4 (id=9320): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0xffffffffffffff3a}, './file0\x00'}) 8m12.073316343s ago: executing program 4 (id=9324): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qzrPwA8Vq769z8AAAAAAAAAAAAAABx0KYp4MlLMXVlL49Xzjvrldt+t22NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebs98QP377bPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291sjoAjZuv35q8fn2hcfb5c5tevj3wfv8TxwcuDj576plu2bGh4eHRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE2NBw1ZHpdmtmsXxxpHsgiohGT6Vm9xhtPxZR63ugfdhZM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b97d31RRC1SfOfYWroWEYe6x+GL1cTgndtR7GMfd6FsZ6MvYrl4BMbsAOuPIl6NFD9750RM5PNMda75QsSrZf4g4q0yX4pI5QfjfMR723yOeDTVooi/LMf/4lqarM4H3fPK5a81vjJzfbanbPe88hGvD3edKR7S9eHIlnwwDvi5qR5FtKoz/lq69292AAAAAAAAAAAAAAAAALjfjkQRn4kUr/zHn1TziqOal37s4uAfDvxq75zxpz9kP2XZ5yNiqdjdnNzDeWLgSBpJ6SHPJX6c1aOIP83z/771sBsDAAAAAAAAAAAAAAAAAADwWCviJ5HixXdPpOXoXVO8PXOjcbV1bbqzKmx37d/umunr6+vrjdTJZs7xnEs5l3Ou5FzNGUWun7OZczznUs7lnCs5V3PGoVw/ZzPneM6lnMs5V3Ku5oxarp+zmXM851LO5ZwrOVdzxgFZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OOkiCJ+ESm+/Y21FCkimhHj0cmV/ofdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+H6kaPxR8862WkSk6v+OE+Uf56N5uMxPRnOwzJeieSlnq8pa81sPof3sTV8q4seRor/+9p0Bz+Pf13l252MQb31z49lna5081H1x4P3+J44fuzg4/BtP7/Q4bdeAk5fbM7duN8aGhodHezbX8rt/smfbQH7f4v50nYhYeOPN11vT01Pz9/6g/Ajsofoj9CDVHpeeelA9iNqBaMbD6TuPgfL6/16k+N13/7N7we9c/+vxK51nd67w8fM/27j+v7h1R7u8/te21svX//Kavt31/8mebS/m70b6ahH1xZtzfccj6gtvvHmqfbN1Y+rG1Mz506e/PDj45XOn+w5H1K+3p6d6Ht2XwwUAAAAAAAAAAAAAAADw4KQifj9StH68lhoRcbuarzVwcfDZU88cikPVfKtN87ZfG716qfHy7M25+amFhanJxthMe2J2cmq3b1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2rx+tX7q2sDjfmtj+5TgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVr5nSkX8PFL8zl89HZ+v2nk07jpmudzfRYqTFz6Xy8Xhsly3DZ37CnRmBpZl/y9S/NMvNpftzod8cqPsmV0f2EdEOf7HIsX3/+K78Zt52+b7P2w//ke37mifxv+pnm1HN92vYM9dJ4//qUjx0pNvx2/lbR90/4/uvTdO5MJ37s+xT+P/qZ5tA/l9f/v+dB0AAAAAAAAAAOCR1peK+PtI8cPhWnohb9vN7/9Nbt3RPv3+16d7tk3en/WKPvTBng8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLa8Wv2c79eq+wbcz5//9RrI7zu+924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dTHq/n8kzuup74SKV75n+dyuXS8LNddB36g+rN+ZXbm1KXp6dmJ1mLr2vRUY3SuNTFV1n0qUqz97edy3aJaX7273nxnjfeNtdjnI8XwP3TLdtZi765N/tRG2TNl2U9Eiv/+x81lu+tYf2qj7Nmy7N9Eiq//y/Zlj2+UPVeW/W6k+NHXG92yR8uy3fujfnqj7PMTs8U+jAoAAAAAAAAAAAAAAAAAAACPm75UxJ9Hiv+9uXxnLn9e/7+v52nlrW/2rPe/xe1qnf+Bav3/nR7fy/r/1X0FlnZ6VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S+fd9Qvt2du3R4bGt6+2pFU1TxUlS+/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UBaNx8/dbk9esLjbPPn9v08u2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3zu98l7bD9cBTx15Hiue/9NP2wP6KIvR+LD/ns7LcjVSdOVp0YGxquOjLdbs0sli+OdA9EEdHoqdTsHqMHMBZ70oxYKptfNvhk2b3RudZ869r0VGOkNb/YXmzPzoykTmvL/jSiiAspYjkiVvvv3l1fFPF6pPjOsbX0r/0Rh7rH4YtXRr96+uzO7Sj2sY+7ULaz0RexXDwCY3aA9UcR/xwpfvbOifi3/ohadL7iCxGvlvmDiLeiM96p/GCcj3hvm88Rj6ZaFPH/5fhfXEvv9Jfng+555fLXGl+ZuT7bU7Z7XuleH8q/eo/k9eFBOuDnpnoU8aPqjL+W/t3fawAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD78wpbs/caFxtXZvuTOvrzv3rzpleX19fb6RONnOO51zKuZxzJedqzihy/ZzNMuvr6+P5+VLO5ZwrOVdzxqFcP2cz53jOpZzLOVdyruaMWq6fs5lzPOdSzuWcKzlXc8YBmbsHAAAAAAAAAAAAAAAAAAB8vBTVfym+/Y21tN7fWV96PDq5Yj3Qj71fBgAA//8Ntfb5") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m11.532564232s ago: executing program 4 (id=9332): syz_mount_image$fuse(0x0, 0x0, 0x1080800, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB='d'], 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:N,']) 8m10.634297567s ago: executing program 4 (id=9344): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 8m10.122776526s ago: executing program 33 (id=9344): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 1m41.796961053s ago: executing program 6 (id=14797): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x6}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1m41.56581881s ago: executing program 6 (id=14802): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1m40.764506263s ago: executing program 6 (id=14813): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) 1m40.418003688s ago: executing program 6 (id=14818): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m40.094523794s ago: executing program 6 (id=14822): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@dmode={'dmode', 0x3d, 0x6}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@fileset={'fileset', 0x3d, 0x3ff}}, {@uid}, {@gid}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 1m39.733147592s ago: executing program 6 (id=14828): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0xfc5f) 1m39.277832884s ago: executing program 34 (id=14828): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0xfc5f) 3.860827598s ago: executing program 7 (id=16088): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) 3.663259039s ago: executing program 7 (id=16092): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000400)={[{@quota}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@nointegrity}, {}, {@errors_continue}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000002b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x2000) 3.58739362s ago: executing program 1 (id=16094): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="32d625e9", 0x4}], 0x1) 3.35014558s ago: executing program 1 (id=16098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) 3.113296403s ago: executing program 1 (id=16100): r0 = syz_open_dev$video(&(0x7f0000000040), 0x20000b, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc058565d, &(0x7f0000000240)={0x4, 0xa}) 2.97898628s ago: executing program 1 (id=16103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10dc}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2.762568558s ago: executing program 3 (id=16107): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@rand_addr=' \x01\x00', @multicast2, 0x20, 0x18}}) 2.734627857s ago: executing program 1 (id=16108): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5952, &(0x7f0000005c80)="$eJzs3XuQXFX9IPBzu3synZk8JgF+RJDJEMhPBDUTXoWP0uj6KkAqFpYSNgoDmWA0CakkCASU4IILBVhoaSnqH2ghtWi0qIJVIiXy2IRVlGJ1qS2kVnfRP9xClpRAlrJc51czc09Pz52+c3u6e0ISPp9K5vY5fft7zr339O37Pd0zHQAAAHhd2Hvjtv3nHfOBX31x+JXrPvyzTdeH3vJYfTWu0Jcur3qtesiB1F1ZMrbMjos3XfODPw9c+r5f3tvz/Vf3rDt+/e/ff8SlD37m7N13fPuRl+ff/8/niuLG8XTyRDl5IQmh+vN9X//SnieOHq1LQgjlpG9nCIuSxY8sSjIhBv8eQliXFpZk7rzvldPWjy6vv6V7Uv3CzHrG++tbNR1nO/ZfeUr4w3vX3PCbpT/+Udeu53dOrJJU68ZTCAsurn98Vwhhbvp/VBxtcTzGQbs6hNBT97izCvp1QpP9X5FTPjZdzkmXvQVx4v3LMuVSZr1sOerKLHsK2mtXXj9aXa/IvEw5ezJqV14/Y/2idPnTdHnyDOOX4/8klJJQqXV/YzIxRkLdcUtCMnYsq7VyqXZsQ7r9mXKSKZcy5XJXZrvG2k0HWjlJJtfH9TL18XRcSeuPrz9XN3B+Tv0b0mU1faK+Gsshe2Nc75Qbte0aE/u1b5q+HAilunNQo/ragU8PRm9a15ssnvKYkQbifXvW3Lq8vPbRvX05/UjuTdL4SUvxd/x60bxP/fDmK7Kv67X4F5fS+KWW4v/xnCdfvPDm730rN/7tMX65pfinPtTzwjmP3bgsd//si/un0lL8oecev23pkZfsyu3/nTF+taX4q3Y/2T1//0MP5/Z/MO6fuS3Ff/adH/zTPU8/8Hxu/BDj97QUf+3uLV/u7t9/Um78h+P+6W1t/Ly068xn+vv/MpAX/6kYf35L8e/eecc77lp4y9m5x3d13D99LcU/98QHb5i3/4Hj8s6dyZ2deuUEeH06Ir3Guiktt5pntqsuX/jmQGX8mm9e+n9+JxvKXHyOtrOgk/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRw1Cn/9UP/++N9L1TScnd649nS+DLWzwkhmRtC2LZ9aOv2DZsvG/jM5Vds3Ty0cWBo+8Dw5u1brx44/S0DW4e3bBy6evTewbeeNv64xSEZXybHTWm7e2RkpNQ3uS629+9O3PWH5Wf9n7+GMHjU7/oruf1fccemu45s8DMjWTXynk1XnPe7M76bbldf2q++Bv0aGRkZCTn9+r8X/OOur+7780khDP7LdP16/Nl3/2JSh8YqJuKkSt1hvEPdSU/DftR6nfYn7q/K+g0bhwen37+jjy/nbMe/v+b5v6+/6iv/GN+/1dztaHL/zl01srH0jTXn/v9vXDteUdSv1+q4F+3vuBWxf3H/VdP9vSDdrgU521XJ2a4bf/Pw0z8/5uaXd4bByktLp7ZdtF1d6QDoSt7QVLuxhZ5k0aT6arp+POLxcSu2b9qyYtvVO966YdPQZcOXDW9++8rTV545eMaZZ6wY2/IVHd7+2P6/Nrn9B2Y8Lfzczp/Gn82Np6J+Fe2P0X4V74/6HuU9/3rO/9LX3n7HY+eNVxSN87h27XySLntGj/PKUDfepu6rRttVtB9CCAON9sOLL58djv4fG24oOg/VH5n6nxnJqpEnlv3tu2d9Z8m7xisOyHm+vkMtnudrvZ7oz9j+qqbHY+Qg3b/doZxuV2/Dfq184rGuW/f+9fO1/s2ZE64a2r5968rxn/PSns5Ljm3Yr2xt3K6lYz/LId0toTZMG4zXUV1hvH/Z82dcPbtXe9P7epPFDbcrK963Z82ty8trH92bt6eTe8dbnBvmjy+TN+asuTHzwHKtw43aP1iff0Xjo/9D37n/4/f/5PQp4+PU8Z9F25XkbNePn777a9//yn/8See260PvfrLvb//z08vHKw6V80qt12l/kvrzyqkhFD3/lobG25H7/Cs13p6i51+2nYn1G8cbyJR7Q7ml5+upD/W8cM5jNy7Lfb7ua/b5eu2kUrng+Tqz8VOetfGTfX4llcn9mL3n16SBkqwa+eVNR+x85LrVx4xXFI3r2tqNxvVpTeQfOdv1iwuf6b984D/8986dN37wlvsu+v3Qqi+MV7R+3oh96cxxr6b7t5qzf2u9jnln/f5926WXb1w3Xn/wXv+my4L8J55Ktl2947NDGzcOb93W3HY1+3oa28nu5VZfT+PZbXHBdpWmbNfs3WhmfzX7fIv9X9fy/pr8fOsNSUuvCzt+vWjep3548xV9Ux6VNnRxKY1fain+H8958sULb/7et3Lj3x7jV1qKP/Tc47ctPfKSXbnx70zS+NWW4q/a/WT3/P0PPZwbfzD2f25L8Z995wf/dM/TDzyfGz/E+L2t7f+Xdp35TH//X3LjP5Wk7YxeI4Vw3yunrR8vJ6Erfb7FfnRN6lfIlpNMuZQpl+vLpfG51loD5SSZXB/XS+uPr+tLI5/IqY9XYdUl48tXYzlkb0xff7Ap1Z37G9UXXacCABzu4vv/8Ro0vv8/nF4o5c80wIR287AlOXFjHjYxnzNn0v1L0vjx8XEesP9tYXB0ef3A+IX+TN9HiM+H7DxnbOekEybHaHWes2j+fVmmHPs1Pl9eqctDU1PzmkpoYv59ajvTz79nNr94fnzgpindGqibt8oev650xqzR5x0y/a2MRsgbH9l5sfh5jv4FYfVYe02Oj+znaOJxyH6OJrZzTObE2ernaNodH7Hb04yPsS4Xv78x9fiFafbvxPFrHC17/GZwvKuj68/2+7MdmDdseEo7cPOGs/t+mHnJnPjpE+xgnzeM9XE7Kk3OJ348p75T84nxdBH7tW+avhwI5hOBw1XM/+NrxGj+P3oB/v8y6xVdh2avGmO83M8JlRv3p3HeMXExPfVzej0tvY6v3b3ly939+0/Kvc55uNnP/WyZVOop+NxP0X5cnikX7secCZqifC/bTlG+l/1cRm+Y39J+v3vnHe+4a+EtZ+fu99XjL6TF+/1rk0rzC/b7IZAvNI4vX3hd5AuzPX/2muUj6QefZisf+VhO/UzzkZ4pN2rbNeaQy0e6Dmy/AIBDR8z/a++fpfn//4orpNcRRXnryZlyjJebt+Zcn+TlrR9Jl1dl1u9Nf6NiptfN55744A3z9j9wXG7ecmezeeh/mlTqK8xD28ubc/OI1Z35vHhuHlHLs9rLE3P7X8sT28vTc+PX8vT28uglOdffE3l0e/MAufu/Ng9wqOe5BfN1mcZisdn5usM2j05/fXa28ujzc+pnmkf3TrlR264x8mgAgNdWzP/jZVzM/x/LrNfu++y5eUGHrtuzfw+kFv+pA5VXznbe137e2jB+h97/Lc7rZ3te4lDPi2d7Xmhsnqw7zNI82SGXF9et1JG8eE4mlrwYAICDUMz/56bl/Py/vfykUf7WNSk/Ofzz86RBfPn5oZKfH+rzX7P7OZlDLv/3vnhD8n8AgMNbzP/jrz3Gv//3X9Jy9u/Wvx7y9IZ5ljy9OE+vyNNzx0/TeXrn59nC1M8BHLTzAF2H4zzA3In1zQMAAPBa6BrLlKb+nv0n02X29+zzfi//wpz1m1VJL48v2b51ePiiK7asG9o+fNHmy9cNb7voyq0btm8f3jy+Xrt5Y27ekuaNXaGS7o/G62XztoXp30NYmPP3ELLrx7DHjt2Y+vcQss3OLfg7AhPHr7n+5h2/0jTrNxofecc7L/4nctaPasf/0k+fetH6bRdt2Lxh+4ahjRt2DE9ebzRr7ZnB92bG3TKj70vN/JiiNPPv7+xMP0pT+tGV7o+872dPMv1YlPZkUd73H+T0+1f/7aufO3HkH/eEMHhU+Y1t7b9k1ch/vmD4I9v3/m7LaP9L0/a/tmbar6LvK82uH7ensvHybdtPWX/5FZuz3yjZmjifUaqVZ+lzDenTv9zk/MTanPqZfk6hPOXGwanp+QkAACaJ7//H69n4/uFX0guoWN9knj6n3c955+bpg83l6dnvJSvK07Prx+1tNk+vtpmnZ9svytMbrd8oT8/Lu/Pifyxn/Zlqfj6nvc955I6Ti5sbJ9nvMygaJ9n1ZzpOkjbHSbb9onHSaP1G4yTvuNfiT/46vfDRnPXzND8e2vtcTu54uL258fDmTLloPGTXn+l4KLU5HrLtF42HRus3Gg95xzcv/nk56zdr8vgYHRhj42L4oisv3/rZuvVm+/sv2u/f7H7/R6ua7//s/n7W7Pd/dj9XNvv9b+9zZbn9f6q9mbDm+z+73+/SqgM2X5u+ThZ9/qxoHndNTv1M53HnTLlxcDKPC6+dmP/Ht3ti/n9Luuz020CH/vekHabfYzb34Pges6LrGK/n0zR2EPB6DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCc7sqSseXeG7ftP++YD/zqi8OvXPfhn226/k3X/ODPA5e+75f39nz/1T3rjl//+/cfcemDnzl79x3ffuTl+ff/87nCwH1jPysnp8VqCMkLSQjVn+/7+pf2PHH0aF0SQignfTtDWJQsfmRRkokw+PcQwrpaPyffed8rp60fXV5/S/ek+oWZINntCr3l2J/6foZwVeEWcQiqpuNsx/4rTwl/eO+aG36z9Mc/6tr1/M6JVZJq3XgKYcHF9Y/vCiHMTf+PiqNtSXxwulwdQuipe9xZBf06ocn+r8gpH5su56TL3oI48f5lmXIps162HHVllj0F7bUrrx+trldkXqacPRm1K6+fsX5Ruvxpujx5hvHL8X8SSkmo1Lq/MZkYI6HuuCUhGTuW1Vq5VDu2Id3+TDnJlEuZcrkrs11j7aYDrZwkk+vjepn6eDqupPXH15+rGzg/p/4N6bKaPlFfjeWQvTGud8qN2naNif3aN01fDoRS3TmoUX3twKcHozet600WT3nMSAPxvj1rbl1eXvvo3r6cfiT3Jmn8pKX4O369aN6nfnjzFUvy4l9cSuOXWor/x3OefPHCm7/3rdz4t8f45Zbin/pQzwvnPHbjstz9sy/un0pL8Yeee/y2pUdesiu3/3fG+NWW4q/a/WT3/P0PPZzb/8G4f+a2FP/Zd37wT/c8/cDzufFDjN/TUvy1u7d8ubt//0m58R+O+6e3tfHz0q4zn+nv/8tAXvynYvz5o/F7Zhr/7p13vOOuhbecnXt8V8f909dS/8898cEb5u1/4Li8c2dyZ6deOQFen45Ir7FuSsut5pntqssXvjlQGb/mm5f+n9/JhjJG21kwi/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8/fba0z95wXs+uqaShJDkrDPSQLyvPGfVqoGZNVke/TH03OO3LT3ykl31dyxpaQsAAACAIjEPL9VqqmFJuDKZG45tuH6cIzg2lpLJ9dk5hBgnO0fQapxSh+KUOxSn0qE4XR2KM6dDcbo7FKdaEKcamoszd5o4ldFR0WR/eqbtT/NxejsUZ16H4szvUJwFHYqzsENx+qaN0/w4XNShOIs7FOeIDsU5skNxjupQnH+pr+xuPc7RHepPdk55puNwfrrmMXlxxm6UC+NUknLtjkbz6Uen7RzXZju9Be3ML3o9brKduU22c0LmcaUZtlNtsp1/bbOdpMl23txmO6WCduK4vSrbv9hOLDU5/q/uUJwdHYpzTYfiXNuhOJ/vUJwvdCjOdW3GAWhWzP8n8r2+0F15V+hJzzjZWYCY7y4d+zn19S7vhBTjvTFTP6coXjZRz8RbOtP+ZScQMvGWZeq7JsWr1PKRaeJV6+Mtz9xZuL3ZCYVM/07O1HcXxctOLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALPrttad/8oL3fHRNSMLov4ZGGoj3leesWjXQQrt71ty6vLz20b31dd2VFgIBAAAAhWIe3lWrqYbuysrQncyZtF41nQeopuVy3/iyf0FYPbpMBkpj5Z5k0bSPq6SPW7F905YV267e8dYNm4YuG75sePPbV56+8szBM848Y8X6DRuHB8d/htBdEC+EMDb9sO3qHZ8d2rhxeOu28cps/5ekj1uSlpP0cf1vC4Ojy+vT/i8uaK80pb3Zu1F89AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o1d+wuR66rjAH7uzOzMdNvYlf6bhmYz5E+JWjSJW0m1dC4IFtokZCnITHUtwSZY3DShTUqsYxuwrQmK0BIIkTwYicXW4kv/2CL2D4FIjQbcGKQt2gd9UFqtpCUPkjKyu3NnZyZzM9uxNG38fB7mzpzzO+d3zzwsfO8sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLCm6mMT1cp4bTgKIUqpafSQzGXzcVw+W4Ns7+GvPrfth4XRUyvaxwq5gY4AAAAA9JHk8KHWSDEUctmQDVfOfFoS2ibCXO4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/0zVxyaqlfHahVEIUUpNo4dkLpuP4/IAfV9/+4nPvTI6+vf2sdIA+wAAAAD9JTk80xophlJYGoaiKzvqkmcDC7vWd9cl+yyaZ133s4O0uqXzrLt6nnWf6FO3vnndGQAAAOCjL8n/udbISCjkFqTm/65c3wgpdYu7+mSb10H+VwAAAAD43yT5v9AaKYVCrtTK6/1+x0/y/pKuumR9v9/tk/XLU9b3+z1/XfPqd3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OiYqo9NVCvjtWwUQpRS0+ghmcvm47j8HvplmtfVzw//8+bDDy5pnyvkBjoCAAAA0EeSw+eidzEUcsNhKFw4k/tHbzzw1JefemYshDAb8/P5sHPj9u13rZ59TepWHT089IMjb37njLpVs6/n7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD7Zqo+NlGtjNcuiEKIUmoaPSRz2Xwclwfo+9oXvvTXx048+0b7WGmAfQAAAID+khw+l/2LoRTyIR8un/nUnvWnZbrWpz0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM4fd3/r3m9unJzcdJc33njjTevNuf7LBAAAvN8Whyg03qMrNpzruwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4MpupjE9XKeK0YhRCl1DR6SOay+TguD9A3fu5YYcGp519sHysNsA8AAADQX5LD57J/MZTCUBgKl8186vVMYCb/j3yANwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8qEzVxyaqlfHagiiEKKWm0UMyl83HcXmAvo/u2v/5Qxd//6b2sUJugI0AAACAvpIcnm+NFEMh98lQCFc1P092LoiyzWvv5wJz67Z1LBue97p6x7rsvNft7jpZrnma2XXFZL+R2WtrXfnMdeW2daXQal/uWBf2dqxa0Oc+AwAAAJxDSf4vtEZGQiFXaMu5P+uoH5FzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAUU/WxiWplvBZFIUQpNY0ekrlsPo7LA/S993cfv+hrP9+zo32sNMA+AAAAQH9JDp/L/sVQCovCx8KimdwfRjrrk7p/VU8feuTff1sRwsrLj4/mQqaz7MfJm9+8dsML3S+huzoTwsXNflFKv9/+4ZF7ljVOPxbCysuyV+VSz9O7X+eWcePp6qZ1248c39b36wEAAIDzQpL/h1ojI6GQuzM1/yfJuzv/p5kJ4Bffs+uXlzZfm4m8a0VmpNkvk9Lvi8ue+MvyNf94czr/n63fZ/ZvOXRpR8PZkTa7MiGEuFHZsmP98WsPZpJTz/bPdvVPvpevfPuN/2ze+fDp2f7FUGyOL8z16n/ma5cL4sZkZl9t7bv76p39cynnf/D3L5749cI970z3f3vxcKv/1Wc5/9n7D9/y0N7r9h9e39k/hFDu1f+td24KV/zpjge6zz/ctXH7N9/+2iWKG0eXnDy45kDp+s7+UVf/5Pv/xYlH9/704e89k/RP/ldkxdL59s909X959yW7Xrp/w8LO/pmU879w6yujW8vf/WP3+W/v2DWXehdnnv/xa5687dWN8X3dUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOeXqfrYRLUyXstEIUQpNY0ekrlsPo7LA/R9/eZjb9265yc/ah8rDbAPAAAA0F+Sw+eyfzGUQj7kw/BM7n+6umnd9iPHt4WR2dmoec1Nbr17+6c2b91x5+3n6M4BAACA+Uryf641MhIKuWVhqJn/K1t2rD9+7cFMkv8zSf7ffMfkppWhVffy7kt2vXT/hoWt5wQhzPxbQHG67rNzdTfecGzk5J+/sbxn3eq5uqNLTh5cc6B0fVIXkrrpyVWh9Xzi8WuevO3VjfF9rftr3+/TX9862Xw8kew7fMtDe6/bf3h96xzN6/B0/aq5usnMvtrad/fVk7ps81psnhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONNUfWyiWhmvhWwIUUpNo4dkLpuP4/IAfdcu+9UDF516dlH7WCE3wEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoK+/UXIlUVxwH8nJnddtzZ1V0N2orW1YrCHpKCiHqpqAiNEHoyJCzNhygIIgp7aA2NxIpegqwXiQqqLYSC3CTRYo3+SS89VFBgPQQiLZSD9FCxM+dOs9e5TV4tCj8fuJw95977vb97z5k7OwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8rwz0jTXbg9sebNx23k2fPH7Pscduee/+LZc8+voPExtu+Hj34CvHZzYu2/T1jUs27L131fTOFw/8MvzOb4d7Bj/Salakbi2EeDSGUHt/9rknZj49Z24shhCqcWQyhNG4+MBozCWs/DWEsLFd5/ydbx+7ctNcu2XHwLzxRbmQ/H2FejWrp2Vkfr38t+UXSS+1dM7mxsOXhW+vX7v186Vvvdk/dWSyI7LWsZ5CWLi+8/z+EMKCtM3JVttYrp41IYTBjvOu7lHXhX+z/ssL+uen9qzU1nvkZPuX5/qV3HH5fqY/1w72uN6pKqqj7HG9DOX6J7vOeimqMxsfTe27qV1xkvnVbIuhEkNfu/z74p9rJHTMWwyxOZe1dr/SntuQ7j/Xj7l+Jdev9ufuq3ndtNCqMc4fz47LjWev4740vqzzXd3F7QXj56a2lj6ox7N+yP/RUj/hj/Z9NWV1zf5FLf+GSsc7qNt4e+LTZNTTWD0uPuGc37vI9s2sferi6roPDo4U1BF3x5QfS+Vv/mx06M43tj80VpS/vpLyK6Xyv1t96Kc7tr/0QmH+s1l+tVT+FfsGj67+cNvywuczmz2fvlL5dx3+6OmlZ9891W2um/m7svxaqfzrpg8NDDf27S+sf2X2fBaUyv/m2pu/f+3LPUcK80OWP1gqf930A88MjDcuLczf3/oo1JsrtMT6+Xnqqq/Gx3+cKMr/Inv+w13yY8/8Vyd3XvPyoh2rCtfnmuz5jJSq/9aL9m4dauy5oOjdGXedrm9OgDPTkvQ/1pOpX/Z35qnq+L3w/ERf6xtoKG3Dp/NCOXPXWfgP5gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAAA//+F1yo0") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.529741055s ago: executing program 3 (id=16112): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 2.501325336s ago: executing program 7 (id=16113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x101, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000004c0)) 2.47511068s ago: executing program 0 (id=16114): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 2.329905384s ago: executing program 0 (id=16115): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) 2.300380064s ago: executing program 3 (id=16116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x40d, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x401}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) 2.189290757s ago: executing program 7 (id=16118): syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x2000010, &(0x7f0000000040)=ANY=[@ANYBLOB='allow_utime=00000000000000004,\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x11a7, &(0x7f0000002440)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 2.120010387s ago: executing program 0 (id=16119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000800008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.093539985s ago: executing program 3 (id=16120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x2c}}, 0x8c0) 1.909502228s ago: executing program 0 (id=16122): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xe25, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, 0x0) 1.872179788s ago: executing program 3 (id=16123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.772881989s ago: executing program 5 (id=16124): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.598205391s ago: executing program 0 (id=16125): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000880)={0x14, 0x4, &(0x7f0000000800)="b4b89f28"}) 1.597756578s ago: executing program 3 (id=16126): r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000040)={[{@grpquota}, {@nouuid}, {@sysvgroups}, {@discard}]}, 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x9, 0x8001, 0x63cc}) 1.542008745s ago: executing program 7 (id=16127): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@gid}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) 1.381419881s ago: executing program 5 (id=16128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000280)) 1.208107233s ago: executing program 5 (id=16129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c00001800378013000300717472283414"], 0x2c}}, 0x0) 1.126073771s ago: executing program 0 (id=16130): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 963.737506ms ago: executing program 5 (id=16131): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 662.828124ms ago: executing program 5 (id=16132): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x7fffffffffffffff, 0x4da2}) 474.156113ms ago: executing program 5 (id=16133): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x59, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x42, &(0x7f0000000000)=@generic={0x8, 0x0, 0x3a, "b3b0dacf", "a52a7bb4c81a0e381ff2015adb863393e0fa25177ecb895d77b37c47ce7a6e8e4111fc7a97503510f493bb1a1b6855d735ab765df54fe6349a04"}) 69.357835ms ago: executing program 1 (id=16134): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x8c0, &(0x7f00000000c0)={[{@journal_async_commit}, {@heartbeat_none}, {@err_ro}, {@heartbeat_none}, {@user_xattr}, {@localflocks}, {@heartbeat_none}, {@err_cont}]}, 0x1, 0x444a, &(0x7f00000088c0)="$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") 0s ago: executing program 7 (id=16135): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000080)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nodioread_nolock}, {@nolazytime}, {@grpid}, {@stripe}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}, {@fowner_eq}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0x15}}, {@appraise_type}, {@hash}]}, 0x0, 0x511, &(0x7f00000004c0)="$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") mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2810e8, 0x0) kernel console output (not intermixed with test programs): 1389.513846][ T30] audit: type=1326 audit(1325.402:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.6.14748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f0015d8e929 code=0x7ffc0000 [ 1389.539506][ T30] audit: type=1326 audit(1325.402:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.6.14748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0015d8e929 code=0x7ffc0000 [ 1389.565656][ T30] audit: type=1326 audit(1325.402:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.6.14748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0015d8e929 code=0x7ffc0000 [ 1389.588036][ T5541] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1389.776479][ T5541] usb 1-1: Using ep0 maxpacket: 8 [ 1389.804454][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.819588][ T5541] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.851314][ T5541] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1389.879942][ T8617] loop1: detected capacity change from 0 to 512 [ 1389.896512][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1389.925772][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1389.963216][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1390.023634][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1390.081441][ T5541] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1390.140386][ T8617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.170949][ T5541] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1390.209496][ T5541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.289628][ T5541] usb 1-1: Product: syz [ 1390.293862][ T5541] usb 1-1: Manufacturer: syz [ 1390.314329][ T5541] usb 1-1: SerialNumber: syz [ 1390.337979][ T5541] usb 1-1: config 0 descriptor?? [ 1390.354538][ T8591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1390.366612][ T8617] Quota error (device loop1): do_check_range: Getting block 262146 out of range 1-5 [ 1390.376771][ T5541] ati_remote 1-1:0.0: Initializing ati_remote hardware failed. [ 1390.377081][ T5541] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5 [ 1390.502259][ T8617] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1390.568131][ T8617] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.14752: Failed to acquire dquot type 0 [ 1390.692573][ T8623] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1390.716425][ T5541] usb 1-1: USB disconnect, device number 33 [ 1390.860603][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.021001][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14766'. [ 1391.642961][ T8677] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1392.125252][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1392.125286][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1392.125305][ T8699] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1392.665910][ T8723] loop6: detected capacity change from 0 to 256 [ 1392.782406][ T8723] FAT-fs (loop6): Directory bread(block 64) failed [ 1392.789115][ T8723] FAT-fs (loop6): Directory bread(block 65) failed [ 1392.823759][ T8723] FAT-fs (loop6): Directory bread(block 66) failed [ 1392.830351][ T8723] FAT-fs (loop6): Directory bread(block 67) failed [ 1392.889811][ T8723] FAT-fs (loop6): Directory bread(block 68) failed [ 1392.896404][ T8723] FAT-fs (loop6): Directory bread(block 69) failed [ 1392.951110][ T8723] FAT-fs (loop6): Directory bread(block 70) failed [ 1392.992328][ T8723] FAT-fs (loop6): Directory bread(block 71) failed [ 1393.044760][ T8723] FAT-fs (loop6): Directory bread(block 72) failed [ 1393.077063][ T8723] FAT-fs (loop6): Directory bread(block 73) failed [ 1393.146585][ T30] audit: type=1326 audit(1328.910:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.14807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x0 [ 1393.356238][ T8747] binfmt_misc: register: failed to install interpreter file ./file0 [ 1393.474949][ T8749] loop3: detected capacity change from 0 to 1024 [ 1393.493581][ T8749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1393.518427][ T8749] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1393.582527][ T8749] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1393.613191][ T8749] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1393.634425][ T8749] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 3: comm syz.3.14812: lblock 3 mapped to illegal pblock 3 (length 1) [ 1393.656369][ T8749] Quota error (device loop3): write_blk: dquota write failed [ 1393.683088][ T8749] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 1393.742370][ T8749] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.14812: Failed to acquire dquot type 0 [ 1393.782970][ T8749] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 3: comm syz.3.14812: lblock 3 mapped to illegal pblock 3 (length 1) [ 1393.815913][ T8761] loop6: detected capacity change from 0 to 64 [ 1393.844031][ T8763] libceph: resolve 'c' (ret=-3): failed [ 1393.852278][ T8761] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1393.882372][ T8749] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.14812: Failed to acquire dquot type 0 [ 1393.958035][ T8749] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.14812: Freeing blocks not in datazone - block = 0, count = 4096 [ 1394.002700][ T8749] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 3: comm syz.3.14812: lblock 3 mapped to illegal pblock 3 (length 1) [ 1394.033444][ T8749] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.14812: Failed to acquire dquot type 0 [ 1394.051208][T28296] VFS: Lookup of '`' in minix loop6 would have caused loop [ 1394.061345][ T8749] EXT4-fs (loop3): 1 orphan inode deleted [ 1394.072033][T28296] VFS: Lookup of '`' in minix loop6 would have caused loop [ 1394.087287][ T8743] 9pnet_fd: p9_fd_create_tcp (8743): problem connecting socket to 127.0.0.1 [ 1394.093966][ T8749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1394.223958][ T8749] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.14812: iget: bad extended attribute block 6 [ 1394.455873][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.562795][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.796089][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.892647][ T8785] loop1: detected capacity change from 0 to 764 [ 1394.931037][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14834'. [ 1394.941977][ T8785] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1394.964673][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.025422][ T8790] macsec0: left allmulticast mode [ 1395.035282][ T8790] macsec0: left promiscuous mode [ 1395.051392][ T8790] bridge0: port 3(macsec0) entered disabled state [ 1395.156375][ T8790] bridge_slave_1: left allmulticast mode [ 1395.182582][ T8790] bridge_slave_1: left promiscuous mode [ 1395.204374][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.272146][ T8790] bridge_slave_0: left allmulticast mode [ 1395.278116][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.614190][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.676509][ T5541] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1395.827256][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1395.831893][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1395.834950][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1395.840844][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1395.843180][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1395.886274][T26959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1395.894454][T26959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1395.897461][ T5541] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1395.897506][ T5541] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1395.897532][ T5541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.902687][T26959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1395.907129][T26959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1395.912393][T26959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1395.915994][ T5541] usb 4-1: config 0 descriptor?? [ 1396.055467][ T8817] loop1: detected capacity change from 0 to 256 [ 1396.363291][ T5541] video4linux radio48: keene_cmd_main failed (-71) [ 1396.402944][ T5541] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1396.410431][ T8826] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1396.440047][ T5541] usb 4-1: USB disconnect, device number 8 [ 1396.558152][ T8830] loop5: detected capacity change from 0 to 512 [ 1396.702462][ T8830] __quota_error: 3 callbacks suppressed [ 1396.702485][ T8830] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1396.752063][ T8830] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1396.795119][ T8830] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.14852: Failed to acquire dquot type 1 [ 1396.840750][ T8830] EXT4-fs (loop5): 1 truncate cleaned up [ 1396.875353][ T8830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1396.956012][ T8830] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1396.970100][ T8830] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1397.005389][ T8830] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.14852: Failed to acquire dquot type 1 [ 1397.131019][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14858'. [ 1397.144862][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.437577][ T30] audit: type=1326 audit(1332.924:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.14862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1397.496404][ T30] audit: type=1326 audit(1332.952:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.14862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1397.545217][ T30] audit: type=1326 audit(1332.952:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.14862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1397.603282][ T30] audit: type=1326 audit(1332.952:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.14862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1397.660923][ T8858] netlink: 228 bytes leftover after parsing attributes in process `syz.3.14866'. [ 1397.690203][ T30] audit: type=1326 audit(1332.952:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.14862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1397.917782][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14869'. [ 1398.092680][T26959] Bluetooth: hci2: command tx timeout [ 1398.408987][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.446130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.461444][ T13] bond0 (unregistering): Released all slaves [ 1398.533353][ T13] bond1 (unregistering): Released all slaves [ 1398.569476][ T13] bond2 (unregistering): Released all slaves [ 1398.598871][ T8814] vxcan1 speed is unknown, defaulting to 1000 [ 1398.802074][ T13] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 1399.429155][ T8918] netlink: 'syz.0.14892': attribute type 1 has an invalid length. [ 1399.804836][ T8814] wlan0 speed is unknown, defaulting to 1000 [ 1399.837268][ T8814] wg1 speed is unknown, defaulting to 1000 [ 1400.107416][ T8944] kernel read not supported for file /  (pid: 8944 comm: syz.3.14902) [ 1400.144230][ T30] audit: type=1800 audit(1335.450:418): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14902" name=200120 dev="mqueue" ino=117693 res=0 errno=0 [ 1400.306297][T26959] Bluetooth: hci2: command tx timeout [ 1400.807125][ T5541] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1400.869859][ T8976] netlink: 140 bytes leftover after parsing attributes in process `syz.5.14916'. [ 1400.881251][ T8976] netlink: 140 bytes leftover after parsing attributes in process `syz.5.14916'. [ 1400.982198][ T5541] usb 1-1: Using ep0 maxpacket: 16 [ 1400.998994][ T5541] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1401.020706][ T5541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.029324][ T5541] usb 1-1: Product: syz [ 1401.040623][ T8980] netlink: 'syz.1.14918': attribute type 7 has an invalid length. [ 1401.047720][ T5541] usb 1-1: Manufacturer: syz [ 1401.064493][ T5541] usb 1-1: SerialNumber: syz [ 1401.069374][ T8980] netlink: 'syz.1.14918': attribute type 8 has an invalid length. [ 1401.106377][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1401.121634][ T5541] usb 1-1: config 0 descriptor?? [ 1401.162492][ T5541] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1401.318036][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1401.331917][ T8814] chnl_net:caif_netlink_parms(): no params data found [ 1401.352010][ T5541] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 1401.362288][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.394888][ T5541] visor 1-1:0.0: probe with driver visor failed with error -5 [ 1401.405417][ T43] usb 4-1: Product: syz [ 1401.409626][ T43] usb 4-1: Manufacturer: syz [ 1401.441657][ T43] usb 4-1: SerialNumber: syz [ 1401.554865][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1401.578868][ T5542] usb 1-1: USB disconnect, device number 34 [ 1401.598565][ T5541] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1401.801774][ T1210] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1402.002145][ T1210] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1402.030989][ T1210] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.053074][ T1210] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.075704][ T1210] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1402.079367][ T5913] usb 4-1: USB disconnect, device number 9 [ 1402.099845][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1402.119427][ T1210] usb 2-1: Product: syz [ 1402.127784][ T1210] usb 2-1: Manufacturer: syz [ 1402.137714][ T8979] loop5: detected capacity change from 0 to 32768 [ 1402.154177][ T1210] usb 2-1: SerialNumber: syz [ 1402.223827][ T1210] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input98 [ 1402.254483][ T13] hsr_slave_0: left promiscuous mode [ 1402.289703][ T13] hsr_slave_1: left promiscuous mode [ 1402.313020][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.343274][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.467026][ T1210] usb 2-1: USB disconnect, device number 41 [ 1402.509316][ T8979] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1402.509347][ T8979] allowing incompatible features above 0.0: (unknown version) [ 1402.509361][ T8979] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1402.543479][T26959] Bluetooth: hci2: command tx timeout [ 1402.624596][ T1210] appletouch 2-1:1.0: input: appletouch disconnected [ 1402.720690][ T8979] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 1402.729041][ T8979] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 1402.762831][ T10] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1402.781264][ T8979] bcachefs (loop5): Version upgrade required: [ 1402.781264][ T8979] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1402.781264][ T8979] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1402.781264][ T8979] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1402.860426][ T5541] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1402.867541][ T5541] ath9k_htc: Failed to initialize the device [ 1402.886109][ T8979] bcachefs (loop5): dropping and reconstructing all alloc info [ 1402.908399][ T5913] usb 4-1: ath9k_htc: USB layer deinitialized [ 1402.939098][ T8979] bcachefs (loop5): accounting_read... done [ 1402.963618][ T8979] bcachefs (loop5): alloc_read... done [ 1402.971667][ T8979] bcachefs (loop5): snapshots_read... done [ 1402.990425][ T10] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1403.016416][ T10] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1403.038723][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.072520][ T10] usb 1-1: config 8 has no interface number 0 [ 1403.089968][ T10] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1403.114930][ T10] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1403.186880][ T10] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1403.207527][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.217575][ T10] usb 1-1: Product: syz [ 1403.221819][ T10] usb 1-1: Manufacturer: syz [ 1403.227066][ T10] usb 1-1: SerialNumber: syz [ 1403.524726][ T10] usb 1-1: USB disconnect, device number 35 [ 1403.947051][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1404.033249][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1404.603351][ T5541] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1404.758167][T26959] Bluetooth: hci2: command tx timeout [ 1404.792252][ T5541] usb 1-1: Using ep0 maxpacket: 8 [ 1404.847985][ T5541] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1404.856376][ T5541] usb 1-1: config 0 has no interface number 0 [ 1404.863196][ T5541] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 51986, setting to 1024 [ 1404.874627][ T5541] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1404.896342][ T5541] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1404.907500][ T5541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.915678][ T5541] usb 1-1: Product: syz [ 1404.919967][ T5541] usb 1-1: Manufacturer: syz [ 1404.932490][ T5541] usb 1-1: SerialNumber: syz [ 1404.954939][ T5541] usb 1-1: config 0 descriptor?? [ 1404.983753][ T9033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1404.999587][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.011709][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.019297][ T8814] bridge_slave_0: entered allmulticast mode [ 1405.026829][ T8814] bridge_slave_0: entered promiscuous mode [ 1405.037627][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.051283][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.058639][ T8814] bridge_slave_1: entered allmulticast mode [ 1405.067139][ T8814] bridge_slave_1: entered promiscuous mode [ 1405.233598][ T5541] ath6kl: Failed to submit usb control message: -71 [ 1405.240303][ T5541] ath6kl: unable to send the bmi data to the device: -71 [ 1405.274593][ T5541] ath6kl: Unable to send get target info: -71 [ 1405.285425][ T5541] ath6kl: Failed to init ath6kl core: -71 [ 1405.296221][ T5541] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1405.309761][ T9036] loop3: detected capacity change from 0 to 2048 [ 1405.327287][ T5541] usb 1-1: USB disconnect, device number 36 [ 1405.376002][ T9036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1405.394793][ T8814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.451617][ T8814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.684587][ T8814] team0: Port device team_slave_0 added [ 1405.728599][ T8814] team0: Port device team_slave_1 added [ 1406.120698][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.146243][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.223066][ T8814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.300776][ T9055] bridge3: entered promiscuous mode [ 1406.510982][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.522962][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.598164][ T8814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.749474][ T9074] mac80211_hwsim hwsim8 þÿ: renamed from wlan0 [ 1407.072605][ T8814] hsr_slave_0: entered promiscuous mode [ 1407.079317][ T8814] hsr_slave_1: entered promiscuous mode [ 1407.106510][ T8814] debugfs: 'hsr0' already exists in 'hsr' [ 1407.112327][ T8814] Cannot create hsr debugfs directory [ 1407.219875][ T5541] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1407.415256][ T5541] usb 6-1: Using ep0 maxpacket: 16 [ 1407.439162][ T5541] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1407.461971][ T5541] usb 6-1: config 0 has no interface number 0 [ 1407.503598][ T5541] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1407.534497][ T5541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.556325][ T5541] usb 6-1: Product: syz [ 1407.579567][ T5541] usb 6-1: Manufacturer: syz [ 1407.583244][ T9107] netlink: 'syz.1.14960': attribute type 1 has an invalid length. [ 1407.588391][ T5541] usb 6-1: SerialNumber: syz [ 1407.638610][ T5541] usb 6-1: config 0 descriptor?? [ 1407.662050][ T5541] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1407.932240][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14966'. [ 1408.084727][ T5541] gspca_spca1528: reg_w err -71 [ 1408.092032][ T8299] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1408.133306][ T8814] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1408.141939][ T5541] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1408.178110][ T8814] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1408.186042][ T5541] usb 6-1: USB disconnect, device number 33 [ 1408.217721][ T8814] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1408.236280][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14968'. [ 1408.281195][ T8299] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1408.288312][ T8814] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1408.299366][ T8299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.342054][ T8299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1408.350979][ T8299] usb 4-1: config 1 has no interface number 0 [ 1408.384652][ T8299] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1408.425685][ T8299] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1408.443435][ T8299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.475966][ T8299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.490711][ T8299] usb 4-1: Product: syz [ 1408.506883][ T8299] usb 4-1: Manufacturer: syz [ 1408.511628][ T8299] usb 4-1: SerialNumber: syz [ 1408.691858][ T9145] loop1: detected capacity change from 0 to 64 [ 1408.725506][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.882885][ T8814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.928754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.935976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.996290][ T5913] usb 4-1: USB disconnect, device number 10 [ 1409.019453][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.026709][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.300119][ T30] audit: type=1326 audit(1344.020:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.5.14979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1409.322031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.325918][ T677] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1409.336215][ T5541] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1409.372766][ T30] audit: type=1326 audit(1344.057:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.5.14979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1409.394637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.432387][ T30] audit: type=1326 audit(1344.067:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.5.14979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1409.483270][ T9168] loop5: detected capacity change from 0 to 128 [ 1409.493402][ T30] audit: type=1326 audit(1344.067:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.5.14979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1409.515900][ T5541] usb 2-1: Using ep0 maxpacket: 32 [ 1409.527858][ T5541] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1409.546362][ T5541] usb 2-1: config 0 has no interface number 0 [ 1409.573740][ T5541] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1409.576172][ T677] usb 1-1: Using ep0 maxpacket: 8 [ 1409.595242][ T30] audit: type=1326 audit(1344.067:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.5.14979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1409.618071][ T5541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.648401][ T5541] usb 2-1: Product: syz [ 1409.650653][ T677] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1409.669995][ T5541] usb 2-1: Manufacturer: syz [ 1409.692609][ T5541] usb 2-1: SerialNumber: syz [ 1409.710718][ T677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.734008][ T5541] usb 2-1: config 0 descriptor?? [ 1409.763387][ T677] usb 1-1: config 0 descriptor?? [ 1409.997994][ T5541] radio-si470x 2-1:0.35: this is not a si470x device. [ 1410.019651][ T677] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1410.067963][ T8814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.216368][ T5541] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1410.246734][ T677] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1410.267936][ T5541] usb 2-1: USB disconnect, device number 42 [ 1410.283146][ T677] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1410.329134][ T677] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1410.388182][ T677] usb 1-1: USB disconnect, device number 37 [ 1411.075841][ T8814] veth0_vlan: entered promiscuous mode [ 1411.123195][ T8814] veth1_vlan: entered promiscuous mode [ 1411.333008][ T8814] veth0_macvtap: entered promiscuous mode [ 1411.406315][ T8814] veth1_macvtap: entered promiscuous mode [ 1411.519210][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.567835][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.611100][ T996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.659901][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.672136][ T9193] loop3: detected capacity change from 0 to 32768 [ 1411.685210][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.724285][ T9193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14985 (9193) [ 1411.724919][ T3079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.807769][ T9193] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1411.831240][ T9193] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1411.854800][ T5913] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1411.869843][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14997'. [ 1411.896548][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14997'. [ 1411.912181][ T9193] BTRFS info (device loop3): using free-space-tree [ 1412.051325][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 1412.059137][ T5913] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1412.081523][ T5913] usb 6-1: config 0 has no interface number 0 [ 1412.093776][ T5913] usb 6-1: config 0 interface 244 altsetting 2 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 1412.128042][ T5913] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.155865][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.158420][ T9193] BTRFS info (device loop3): rebuilding free space tree [ 1412.173539][ T5913] usb 6-1: config 0 interface 244 has no altsetting 0 [ 1412.177720][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14999'. [ 1412.188749][ T5913] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1412.211326][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.235625][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.243390][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14999'. [ 1412.261888][ T5913] usb 6-1: Product: syz [ 1412.279874][ T5913] usb 6-1: Manufacturer: syz [ 1412.287786][ T5913] usb 6-1: SerialNumber: syz [ 1412.308530][ T5913] usb 6-1: config 0 descriptor?? [ 1412.322810][ T5913] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 1412.338826][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.354868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.556645][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1412.588422][ T5913] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 1412.615665][ T5913] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 1412.658003][ T5913] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1412.838962][ T677] usb 6-1: USB disconnect, device number 34 [ 1413.098479][ T8299] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1413.147797][ T9272] netlink: 'syz.3.15006': attribute type 2 has an invalid length. [ 1413.217461][ T1210] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1413.292830][ T8299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.344285][ T8299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.371613][ T8299] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1413.391760][ T8299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.430122][ T1210] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1413.449239][ T1210] usb 1-1: config 0 has no interface number 0 [ 1413.463520][ T8299] usb 8-1: config 0 descriptor?? [ 1413.504652][ T1210] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1413.561322][ T1210] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1413.601517][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.618037][ T9256] loop1: detected capacity change from 0 to 32768 [ 1413.618520][ T1210] usb 1-1: Product: syz [ 1413.633463][ T1210] usb 1-1: Manufacturer: syz [ 1413.638130][ T1210] usb 1-1: SerialNumber: syz [ 1413.656225][ T9256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15002 (9256) [ 1413.669176][ T1210] usb 1-1: config 0 descriptor?? [ 1413.706287][ T9256] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1413.759251][ T8299] usbhid 8-1:0.0: can't add hid device: -71 [ 1413.772094][ T9256] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1413.780982][ T8299] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1413.805008][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15009'. [ 1413.815504][ T9256] BTRFS info (device loop1): using free-space-tree [ 1413.850604][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15009'. [ 1413.852085][ T8299] usb 8-1: USB disconnect, device number 2 [ 1413.887866][ T9284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1413.923854][ T1210] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1413.959587][ T1210] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1413.985636][ T1210] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1414.008865][ T1210] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1414.029925][ T1210] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1414.064014][ T1210] usb 1-1: USB disconnect, device number 38 [ 1414.078561][ T1210] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1414.090620][ T1210] keyspan 1-1:0.133: device disconnected [ 1414.184031][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1414.226352][ T9304] loop5: detected capacity change from 0 to 512 [ 1414.278947][ T9304] EXT4-fs: Ignoring removed mblk_io_submit option [ 1414.386065][ T9304] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.15010: inode #13: comm syz.5.15010: iget: illegal inode # [ 1414.441311][ T9304] EXT4-fs (loop5): Remounting filesystem read-only [ 1414.461925][ T9304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.561974][ T9310] loop7: detected capacity change from 0 to 1024 [ 1414.676602][ T9310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1414.678888][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.706619][ T1210] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1414.738459][ T9310] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1414.840319][ T9310] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1414.885312][ T9310] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1414.908014][ T9310] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 3: comm syz.7.15013: lblock 3 mapped to illegal pblock 3 (length 1) [ 1414.928626][ T1210] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 1414.962098][ T1210] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 1414.976054][ T1210] usb 4-1: config 0 has no interface number 1 [ 1414.982646][ T1210] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1414.994372][ T9310] Quota error (device loop7): write_blk: dquota write failed [ 1414.996957][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1415.012344][ T9321] program syz.5.15014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1415.020463][ T1210] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1415.054419][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.065595][ T9310] Quota error (device loop7): find_free_dqentry: Can't write quota data block 3 [ 1415.073440][ T1210] usb 4-1: Product: syz [ 1415.084175][ T1210] usb 4-1: Manufacturer: syz [ 1415.107302][ T1210] usb 4-1: SerialNumber: syz [ 1415.112507][ T9310] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1415.123196][ T677] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1415.138708][ T1210] usb 4-1: config 0 descriptor?? [ 1415.189356][ T1210] usb-storage 4-1:0.127: USB Mass Storage device detected [ 1415.193994][ T9310] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15013: Failed to acquire dquot type 0 [ 1415.264098][ T9310] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 3: comm syz.7.15013: lblock 3 mapped to illegal pblock 3 (length 1) [ 1415.284887][ T1210] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1415.335168][ T677] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.359298][ T677] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1415.373169][ T9310] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1415.385151][ T9310] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15013: Failed to acquire dquot type 0 [ 1415.402400][ T1210] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1415.439983][ T677] usb 2-1: string descriptor 0 read error: -22 [ 1415.450046][ T677] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1415.466202][ T9308] loop3: detected capacity change from 0 to 1024 [ 1415.476939][ T1210] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1415.484881][ T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.499756][ T677] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1415.525768][ T9310] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.15013: Freeing blocks not in datazone - block = 0, count = 4096 [ 1415.526777][ T677] usb 2-1: MIDIStreaming interface descriptor not found [ 1415.616815][ T9308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.632507][ T9310] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 3: comm syz.7.15013: lblock 3 mapped to illegal pblock 3 (length 1) [ 1415.687321][ T9310] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1415.713726][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15021'. [ 1415.752559][ T1210] usb 4-1: USB disconnect, device number 11 [ 1415.773101][ T9310] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15013: Failed to acquire dquot type 0 [ 1415.831524][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15021'. [ 1415.860917][ T9310] EXT4-fs (loop7): 1 orphan inode deleted [ 1415.887579][ T677] usb 2-1: USB disconnect, device number 43 [ 1415.939324][ T9310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1416.073477][ T9310] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.15013: iget: bad extended attribute block 6 [ 1416.135890][ T8814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.576976][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.830932][ T1210] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1416.843865][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15034'. [ 1416.887137][ T9375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1417.042862][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.057993][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1417.092318][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.133168][ T1210] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1417.162990][ T1210] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1417.214026][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.245856][ T1210] usb 1-1: Product: syz [ 1417.250459][ T1210] usb 1-1: Manufacturer: syz [ 1417.277324][ T1210] usb 1-1: SerialNumber: syz [ 1417.343031][ T1210] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1417.365052][ T1210] cdc_ncm 1-1:1.0: bind() failure [ 1417.556724][ T1210] usb 1-1: USB disconnect, device number 39 [ 1417.584608][ T9402] netlink: 'syz.3.15042': attribute type 3 has an invalid length. [ 1417.790677][ T9408] usb usb7: usbfs: process 9408 (syz.7.15045) did not claim interface 0 before use [ 1417.811436][ T9409] netlink: 'syz.5.15044': attribute type 5 has an invalid length. [ 1418.068181][ T9422] overlayfs: overlapping lowerdir path [ 1418.379896][ T9428] loop5: detected capacity change from 0 to 4096 [ 1418.414610][ T9428] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1418.548209][ T9428] ntfs3(loop5): ino=19, mi_enum_attr [ 1418.592446][ T9428] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1418.691778][ T9428] ntfs3(loop5): failed to convert "c46c" to maccyrillic [ 1418.710886][ T9428] ntfs3(loop5): ino=20, mi_enum_attr [ 1418.761638][ T9443] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.960716][ T9449] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 1418.987730][ T1210] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1418.996784][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15062'. [ 1419.006999][ T9449] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547521) [ 1419.028617][ T9449] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1419.190707][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 1419.211263][ T1210] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1419.224417][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.253524][ T1210] usb 4-1: Product: syz [ 1419.265343][ T1210] usb 4-1: Manufacturer: syz [ 1419.280437][ T1210] usb 4-1: SerialNumber: syz [ 1419.292094][ T9420] loop7: detected capacity change from 0 to 32768 [ 1419.314821][ T9420] btrfs: Deprecated parameter 'usebackuproot' [ 1419.333867][ T9420] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1419.348117][ T1210] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1419.368153][ T1210] r8152-cfgselector 4-1: config 0 descriptor?? [ 1419.397674][ T9420] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 5607187b-1206-4d19-b880-7428f8d66c63 [ 1419.447407][ T9420] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15049 (9420) [ 1419.534945][ T9464] loop1: detected capacity change from 0 to 64 [ 1419.558555][ T9420] BTRFS info (device loop7 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1419.629528][ T9420] BTRFS info (device loop7 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 1419.703981][ T9420] BTRFS info (device loop7 state S): disk space caching is enabled [ 1419.762199][ T9420] BTRFS warning (device loop7 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1419.842465][ T9420] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 1419.861484][ T1210] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 1419.922972][ T9420] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 1420.022755][ T9420] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 1420.078821][ T9420] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 1420.114920][ T9420] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 1420.138895][ T9420] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 1420.173293][ T9475] loop1: detected capacity change from 0 to 4096 [ 1420.194893][ T9420] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 1420.271303][ T9475] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1420.436154][ T9420] btrfs: Deprecated parameter 'usebackuproot' [ 1420.477622][ T9420] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1420.558699][ T9420] BTRFS warning (device loop7 state MCS): remount supports changing free space tree only from RO to RW [ 1420.576112][ T9475] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1420.596638][ T9420] BTRFS info (device loop7 state MCS): enabling free space tree [ 1420.663504][ T9420] BTRFS info (device loop7 state MCS): force clearing of disk cache [ 1420.692556][ T9420] BTRFS info (device loop7 state MCS): trying to use backup root at mount time [ 1420.741073][ T9420] BTRFS info (device loop7 state MCS): disabling disk space caching [ 1420.868181][ T8814] BTRFS info (device loop7 state CS): last unmount of filesystem 5607187b-1206-4d19-b880-7428f8d66c63 [ 1420.894128][ T9507] program syz.3.15075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.413907][ T1210] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1421.570519][ T9519] loop1: detected capacity change from 0 to 4096 [ 1421.607788][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 1421.628347][ T1210] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1421.638448][ T9519] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1421.662806][ T1210] usb 4-1: config 0 has no interface number 0 [ 1421.668996][ T1210] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1421.738573][ T1210] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1421.765365][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.791506][ T1210] usb 4-1: Product: syz [ 1421.795762][ T1210] usb 4-1: Manufacturer: syz [ 1421.833393][ T1210] usb 4-1: SerialNumber: syz [ 1421.897809][ T1210] usb 4-1: config 0 descriptor?? [ 1421.955873][ T9531] netlink: 136 bytes leftover after parsing attributes in process `syz.0.15087'. [ 1422.414800][ T1210] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1422.443650][ T30] audit: type=1326 audit(1356.323:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.15094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1422.543586][ T1210] usb 4-1: USB disconnect, device number 13 [ 1422.550236][ T30] audit: type=1326 audit(1356.323:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.15094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1422.617042][ T30] audit: type=1326 audit(1356.323:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.15094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1422.663722][ T9553] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1422.670601][ T30] audit: type=1326 audit(1356.323:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.15094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1422.695309][ T30] audit: type=1326 audit(1356.323:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.0.15094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1422.718195][ T9553] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1422.725613][ T9553] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1422.772894][ T9556] autofs4:pid:9556:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.33), cmd(0xc0189375) [ 1422.810520][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15100'. [ 1422.844415][ T9556] autofs4:pid:9556:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1422.937595][ T9563] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1422.977032][ T9565] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1423.010230][ T9565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1423.317307][ T9575] C: renamed from team_slave_0 [ 1423.345097][ T9575] netlink: 'syz.0.15109': attribute type 1 has an invalid length. [ 1423.374610][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15110'. [ 1423.384603][ T9575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1424.129063][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15123'. [ 1424.171171][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15123'. [ 1424.265656][ T9612] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 1424.414169][ T9617] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15129'. [ 1424.463622][ T9617] netlink: 48 bytes leftover after parsing attributes in process `syz.7.15129'. [ 1424.501961][ T9573] loop1: detected capacity change from 0 to 40427 [ 1424.508986][ T9617] netlink: 48 bytes leftover after parsing attributes in process `syz.7.15129'. [ 1424.535642][ T9573] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1424.567457][ T9573] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1424.589810][ T9573] F2FS-fs (loop1): invalid crc value [ 1424.666635][ T9623] loop5: detected capacity change from 0 to 2048 [ 1424.678022][ T9626] loop3: detected capacity change from 0 to 512 [ 1424.750717][ T9623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.845483][ T9635] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1424.957914][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.123692][ T9573] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1425.185374][ T9573] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1425.217048][ T9573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1425.365476][ T9573] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1425.723251][ T9665] loop7: detected capacity change from 0 to 24 [ 1425.738532][ T9665] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1425.767390][ T9665] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1425.834215][ T9665] romfs: read error for inode 0x70040 [ 1425.924392][ T1210] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1426.132688][ T1210] usb 6-1: Using ep0 maxpacket: 32 [ 1426.171437][ T1210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.206567][ T1210] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1426.234299][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.242360][ T1210] usb 6-1: Product: syz [ 1426.267055][ T1210] usb 6-1: Manufacturer: syz [ 1426.271733][ T1210] usb 6-1: SerialNumber: syz [ 1426.310431][ T1210] usb 6-1: config 0 descriptor?? [ 1426.327556][ T9681] loop3: detected capacity change from 0 to 128 [ 1426.581369][ T5542] usb 6-1: USB disconnect, device number 35 [ 1426.752457][ T9695] netlink: 5 bytes leftover after parsing attributes in process `syz.7.15159'. [ 1426.786162][ T9698] netlink: 'syz.0.15161': attribute type 6 has an invalid length. [ 1426.906004][ T9703] loop1: detected capacity change from 0 to 16 [ 1426.947613][ T9703] erofs (device loop1): mounted with root inode @ nid 36. [ 1426.947845][ T9704] loop3: detected capacity change from 0 to 512 [ 1427.020002][ T9704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1427.377449][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.444346][ T9703] erofs (device loop1): corrupted dir block 72 @ nid 36 [ 1427.580769][ T9723] loop7: detected capacity change from 0 to 1024 [ 1427.776041][ T9728] netlink: 'syz.1.15173': attribute type 7 has an invalid length. [ 1427.783941][ T9728] netlink: 'syz.1.15173': attribute type 5 has an invalid length. [ 1427.869875][ T9728] netlink: 17 bytes leftover after parsing attributes in process `syz.1.15173'. [ 1427.998069][ T9735] netlink: 'syz.5.15176': attribute type 28 has an invalid length. [ 1428.006036][ T9735] netlink: 'syz.5.15176': attribute type 29 has an invalid length. [ 1428.074917][ T9735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15176'. [ 1428.245738][ T9743] loop3: detected capacity change from 0 to 1764 [ 1428.356828][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.521734][ T1210] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1428.553750][ T5542] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1428.698915][ T1210] usb 8-1: Using ep0 maxpacket: 8 [ 1428.710098][ T1210] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1428.727170][ T5542] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1428.737334][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.750813][ T5542] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 1428.767546][ T5542] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.782065][ T1210] usb 8-1: config 0 descriptor?? [ 1428.795711][ T5542] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 1428.827610][ T5542] usb 4-1: config 3 has no interface number 0 [ 1428.847005][ T5542] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 1428.859925][ T5542] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1428.873645][ T5542] usb 4-1: config 3 interface 8 has no altsetting 0 [ 1428.885864][ T5542] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 1428.911227][ T5542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.928599][ T5542] usb 4-1: Product: syz [ 1428.939032][ T5542] usb 4-1: Manufacturer: syz [ 1428.943696][ T5542] usb 4-1: SerialNumber: syz [ 1429.016647][ T1210] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1429.091326][ T9754] loop1: detected capacity change from 0 to 32768 [ 1429.198167][ T9754] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1429.211529][ T5542] appledisplay 4-1:3.8: Error while getting initial brightness: -71 [ 1429.233612][ T1210] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1429.251530][ T1210] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1429.264295][ T5542] appledisplay 4-1:3.8: probe with driver appledisplay failed with error -71 [ 1429.276794][ T5542] usbhid 4-1:3.8: can't add hid device: -22 [ 1429.284463][ T1210] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1429.293638][ T5542] usbhid 4-1:3.8: probe with driver usbhid failed with error -22 [ 1429.313409][ T1210] usb 8-1: USB disconnect, device number 3 [ 1429.330177][ T5542] usb 4-1: USB disconnect, device number 14 [ 1429.364270][ T30] audit: type=1800 audit(1362.788:429): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15184" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 1429.473165][ T5852] ocfs2: Unmounting device (7,1) on (node local) [ 1430.512921][ T9806] loop1: detected capacity change from 0 to 512 [ 1430.612042][ T9806] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1430.634926][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15209'. [ 1430.690357][ T9806] EXT4-fs (loop1): 1 truncate cleaned up [ 1430.772528][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15213'. [ 1430.784962][ T9806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1430.904560][ T9806] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1431.171727][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.472128][ T9842] ALSA: mixer_oss: invalid OSS volume '' [ 1431.477866][ T9842] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù' [ 1431.546483][ T9842] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«Ö…­ŸãB@§%hq¤az8' [ 1431.555028][ T9842] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l' [ 1431.574958][ T9850] loop3: detected capacity change from 0 to 1024 [ 1431.609760][ T9842] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r' [ 1431.635774][ T9842] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü' [ 1431.649283][ T9842] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y' [ 1431.670229][ T9850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.687818][ T9852] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1431.701258][ T9842] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\h A2O:õÁ‹³L±âí' [ 1431.750779][ T9842] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê' [ 1431.759172][ T9842] ALSA: mixer_oss: invalid OSS volume '&õ' [ 1431.810923][ T9842] ALSA: mixer_oss: invalid OSS volume '­EºI޲]a¸Çg³LKèŸRmrð¥ÝN{ûšk' [ 1431.841189][ T9842] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“b|Ÿá&èznF%ŸþíìE' [ 1431.866052][ T9842] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë' [ 1431.888524][ T9842] ALSA: mixer_oss: invalid OSS volume '1gE' [ 1432.008016][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.290572][ T30] audit: type=1326 audit(1365.520:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.3.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1432.396362][ T30] audit: type=1326 audit(1365.520:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.3.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1432.538112][ T30] audit: type=1326 audit(1365.576:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.3.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1432.601724][ T30] audit: type=1326 audit(1365.576:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.3.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1432.648827][ T1217] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1432.722326][ T30] audit: type=1326 audit(1365.576:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.3.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1432.833711][ T1217] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1432.851624][ T1217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.872000][ T1217] usb 8-1: Product: syz [ 1432.879829][ T1217] usb 8-1: Manufacturer: syz [ 1432.906163][ T1217] usb 8-1: SerialNumber: syz [ 1432.922730][ T1217] usb 8-1: config 0 descriptor?? [ 1433.202040][ T1217] hso 8-1:0.0: Failed to find BULK IN ep [ 1433.227886][ T1217] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1433.418935][ T1217] usb 8-1: USB disconnect, device number 4 [ 1433.484787][ T9921] loop3: detected capacity change from 0 to 512 [ 1433.541744][ T9921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1433.595913][ T9921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 1433.634032][ T9921] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.15251: invalid indirect mapped block 2683928664 (level 1) [ 1433.670410][ T9921] EXT4-fs (loop3): Remounting filesystem read-only [ 1433.730333][ T9921] EXT4-fs (loop3): 1 truncate cleaned up [ 1433.762198][ T9921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.849292][ T9921] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #2: comm syz.3.15251: directory missing '.' [ 1433.904870][ T9908] loop5: detected capacity change from 0 to 32768 [ 1434.003606][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.296974][ T9951] loop7: detected capacity change from 0 to 128 [ 1434.299757][ T9908] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 1434.347646][ T9954] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1434.372152][ T9951] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1434.415659][ T9908] allowing incompatible features above 0.0: (unknown version) [ 1434.475300][ T9908] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1434.545654][ T9908] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 1434.625967][ T9908] bcachefs (loop5): initializing new filesystem [ 1434.757509][ T9908] bcachefs (loop5): going read-write [ 1434.974420][ T9908] bcachefs (loop5): initializing freespace [ 1435.765195][T10003] loop3: detected capacity change from 0 to 64 [ 1435.860873][T23344] bcachefs (loop5): clean shutdown complete, journal seq 23 [ 1436.659188][T10030] loop7: detected capacity change from 0 to 764 [ 1436.739804][T10030] Symlink component flag not implemented [ 1436.765079][T10030] Symlink component flag not implemented [ 1436.775961][T10030] Symlink component flag not implemented (129) [ 1436.800575][T10030] Symlink component flag not implemented (6) [ 1437.307853][T10048] loop7: detected capacity change from 0 to 256 [ 1437.390920][T10048] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1437.780893][T10064] autofs4:pid:10064:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1438.063089][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.100554][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.138596][T10070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1438.757839][T10093] loop7: detected capacity change from 0 to 2048 [ 1438.889597][T10098] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1439.025582][T10101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1439.032916][T10101] IPv6: NLM_F_CREATE should be set when creating new route [ 1439.040347][T10101] IPv6: NLM_F_CREATE should be set when creating new route [ 1439.081398][T10103] loop5: detected capacity change from 0 to 64 [ 1439.526734][T10116] netlink: 'syz.7.15318': attribute type 1 has an invalid length. [ 1439.776369][T10126] netlink: 'syz.3.15321': attribute type 8 has an invalid length. [ 1440.261159][T10150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15331'. [ 1440.302948][T10150] netlink: 'syz.0.15331': attribute type 2 has an invalid length. [ 1440.973847][T10179] tmpfs: Bad value for 'mpol' [ 1441.027181][T10181] xt_TCPMSS: Only works on TCP SYN packets [ 1441.669232][T10158] loop7: detected capacity change from 0 to 32768 [ 1441.775391][ T5541] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1441.982076][ T5541] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1442.009534][ T5541] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1442.042860][ T5541] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1442.085813][ T5541] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1442.095281][ T5541] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1442.106345][ T5541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.136068][ T5541] usb 6-1: Product: syz [ 1442.148088][ T5541] usb 6-1: Manufacturer: syz [ 1442.170871][ T5541] usb 6-1: SerialNumber: syz [ 1442.227222][ T5541] smsusb:smsusb_probe: board id=8, interface number 0 [ 1442.491409][ T5541] smsusb:smsusb_probe: Device initialized with return code -19 [ 1442.719734][ T5541] usb 6-1: USB disconnect, device number 36 [ 1442.875352][T10232] netlink: 'syz.1.15363': attribute type 6 has an invalid length. [ 1443.432606][ T1217] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1443.489562][T10260] xt_bpf: check failed: parse error [ 1443.678454][ T1217] usb 4-1: config 0 has an invalid interface number: 75 but max is 0 [ 1443.686602][ T1217] usb 4-1: config 0 has no interface number 0 [ 1443.747483][ T1217] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=cd.d2 [ 1443.767335][T10271] fuse: Invalid rootmode [ 1443.792121][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.879781][ T1217] usb 4-1: config 0 descriptor?? [ 1444.097300][T10283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.135411][T10283] batadv_slave_0: entered promiscuous mode [ 1444.148209][ T1217] usb 4-1: string descriptor 0 read error: -71 [ 1444.157201][ T1217] usb 4-1: Found UVC 0.00 device (1bcf:0b40) [ 1444.170346][T10283] batadv_slave_0: entered allmulticast mode [ 1444.217594][ T1217] usb 4-1: Forcing UVC version to 1.0a [ 1444.238807][ T1217] usb 4-1: No valid video chain found. [ 1444.261406][ T1217] usb 4-1: USB disconnect, device number 15 [ 1444.284975][T10292] netlink: 'syz.0.15384': attribute type 1 has an invalid length. [ 1444.326502][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15384'. [ 1444.912428][T10312] loop3: detected capacity change from 0 to 256 [ 1445.098209][T10312] FAT-fs (loop3): Directory bread(block 64) failed [ 1445.115796][T10312] FAT-fs (loop3): Directory bread(block 65) failed [ 1445.133652][T10312] FAT-fs (loop3): Directory bread(block 66) failed [ 1445.140213][T10312] FAT-fs (loop3): Directory bread(block 67) failed [ 1445.195718][T10312] FAT-fs (loop3): Directory bread(block 68) failed [ 1445.202310][T10312] FAT-fs (loop3): Directory bread(block 69) failed [ 1445.270522][T10312] FAT-fs (loop3): Directory bread(block 70) failed [ 1445.277481][T10312] FAT-fs (loop3): Directory bread(block 71) failed [ 1445.328118][T10312] FAT-fs (loop3): Directory bread(block 72) failed [ 1445.372697][T10312] FAT-fs (loop3): Directory bread(block 73) failed [ 1445.380204][T10325] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1445.407159][T10325] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1445.610339][T10291] loop7: detected capacity change from 0 to 40427 [ 1445.677573][T10291] F2FS-fs: heap/no_heap options were deprecated [ 1445.728285][T10291] F2FS-fs (loop7): invalid crc value [ 1445.750504][T10291] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1446.027853][T10291] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1446.072739][T10291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1446.146920][ T1217] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1446.372203][ T1217] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1446.391799][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.409224][ T1217] usb 2-1: Product: syz [ 1446.413456][ T1217] usb 2-1: Manufacturer: syz [ 1446.419088][ T1217] usb 2-1: SerialNumber: syz [ 1446.445590][ T1217] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1446.500635][ T677] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1446.584625][T10357] ALSA: mixer_oss: invalid OSS volume 'u' [ 1446.702875][T10362] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1446.728985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.819610][T10362] CIFS mount error: No usable UNC path provided in device string! [ 1446.819610][T10362] [ 1446.871241][T10362] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1447.027167][ T1210] usb 2-1: USB disconnect, device number 44 [ 1447.041894][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1447.078798][T10368] loop3: detected capacity change from 0 to 1024 [ 1447.126344][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15422'. [ 1447.141872][T10373] netlink: 52 bytes leftover after parsing attributes in process `syz.5.15422'. [ 1447.217277][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1447.680878][ T677] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1447.702607][ T677] ath9k_htc: Failed to initialize the device [ 1447.722366][ T1210] usb 2-1: ath9k_htc: USB layer deinitialized [ 1448.191809][T10386] loop7: detected capacity change from 0 to 32768 [ 1448.226578][T10386] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15427 (10386) [ 1448.267197][T10386] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1448.288996][T10386] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 1448.309976][T10386] BTRFS info (device loop7): disk space caching is enabled [ 1448.314922][T10382] loop3: detected capacity change from 0 to 32768 [ 1448.354432][T10386] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1448.574858][T10386] BTRFS info (device loop7): rebuilding free space tree [ 1448.613710][T10413] loop5: detected capacity change from 0 to 2048 [ 1448.663311][T10386] BTRFS info (device loop7): disabling free space tree [ 1448.723107][T10386] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1448.765760][T10434] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1448.779714][T10386] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1448.846695][T10413] NILFS (loop5): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 1449.101679][T10440] loop1: detected capacity change from 0 to 128 [ 1449.140659][ T8814] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1449.212216][T10440] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1449.510683][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1450.134226][T10461] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 1450.174255][T10461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1450.550880][T10474] vlan0: entered promiscuous mode [ 1451.071940][ T30] audit: type=1326 audit(1383.100:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.15475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1451.142401][ T30] audit: type=1326 audit(1383.100:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.15475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1451.206385][ T30] audit: type=1326 audit(1383.128:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.15475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1451.228352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.331281][ T30] audit: type=1326 audit(1383.128:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.0.15475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe79e78e929 code=0x7ffc0000 [ 1451.353223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.361098][T10507] loop3: detected capacity change from 0 to 256 [ 1451.455381][T10507] FAT-fs (loop3): Directory bread(block 64) failed [ 1451.471958][T10507] FAT-fs (loop3): Directory bread(block 65) failed [ 1451.489926][T10509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.517664][T10507] FAT-fs (loop3): Directory bread(block 66) failed [ 1451.527696][T10507] FAT-fs (loop3): Directory bread(block 67) failed [ 1451.546437][T10507] FAT-fs (loop3): Directory bread(block 68) failed [ 1451.574778][T10507] FAT-fs (loop3): Directory bread(block 69) failed [ 1451.605868][T10507] FAT-fs (loop3): Directory bread(block 70) failed [ 1451.616900][T10507] FAT-fs (loop3): Directory bread(block 71) failed [ 1451.626990][T10507] FAT-fs (loop3): Directory bread(block 72) failed [ 1451.634287][T10507] FAT-fs (loop3): Directory bread(block 73) failed [ 1451.943823][T10494] loop1: detected capacity change from 0 to 32768 [ 1452.218749][ T677] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1452.432137][ T677] usb 8-1: Using ep0 maxpacket: 16 [ 1452.450231][ T677] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.495551][ T677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 1452.532872][ T677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.565870][ T677] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.627861][ T677] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1452.661554][ T677] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1452.702391][ T677] usb 8-1: Manufacturer: syz [ 1452.740038][ T677] usb 8-1: config 0 descriptor?? [ 1452.911739][T10556] loop3: detected capacity change from 0 to 164 [ 1452.966393][T10556] ISOFS: unable to read i-node block [ 1452.983889][T10556] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1452.985130][ T677] usb 8-1: USB disconnect, device number 5 [ 1453.108446][T10561] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1453.267359][T10568] netlink: 'syz.3.15507': attribute type 1 has an invalid length. [ 1453.297876][T10568] netlink: 'syz.3.15507': attribute type 2 has an invalid length. [ 1453.742633][T10590] dvmrp0: entered allmulticast mode [ 1453.989303][T10595] loop1: detected capacity change from 0 to 4096 [ 1454.037647][T10595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.102732][T10595] Quota error (device loop1): do_check_range: Getting block 65282 out of range 1-5 [ 1454.169330][T10595] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1454.215412][T10595] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.15518: Failed to acquire dquot type 0 [ 1454.426731][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.823991][T10631] loop7: detected capacity change from 0 to 1024 [ 1455.138900][T10643] netlink: 'syz.5.15541': attribute type 15 has an invalid length. [ 1455.258182][T10648] xt_hashlimit: max too large, truncated to 1048576 [ 1455.532905][T10660] loop7: detected capacity change from 0 to 512 [ 1455.607864][T10660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.846121][ T8814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.915065][T10679] netlink: 'syz.0.15558': attribute type 1 has an invalid length. [ 1455.923129][T10678] loop5: detected capacity change from 0 to 512 [ 1455.944851][T10679] netlink: 'syz.0.15558': attribute type 2 has an invalid length. [ 1455.991781][T10679] netlink: 'syz.0.15558': attribute type 1 has an invalid length. [ 1456.018255][T10681] netlink: 'syz.3.15560': attribute type 1 has an invalid length. [ 1456.056021][T10681] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15560'. [ 1456.090266][T10678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.235982][T10678] EXT4-fs error (device loop5): ext4_xattr_block_find:1869: inode #15: comm syz.5.15557: corrupted xattr block 33: invalid ea_ino [ 1456.261357][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15564'. [ 1456.288630][T10678] EXT4-fs (loop5): Remounting filesystem read-only [ 1456.313055][T10689] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1456.500133][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.530977][ T996] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1456.541956][T10702] loop1: detected capacity change from 0 to 64 [ 1456.558064][ T996] Quota error (device loop5): write_blk: dquota write failed [ 1456.582665][ T996] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 1456.633080][ T996] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1456.665615][ T996] Quota error (device loop5): write_blk: dquota write failed [ 1456.673154][ T996] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 1456.755817][ T996] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 1456.785951][ T996] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1457.066766][T10719] netlink: 132 bytes leftover after parsing attributes in process `syz.7.15577'. [ 1457.701183][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15589'. [ 1457.815462][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15593'. [ 1457.853629][T10752] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (255) [ 1458.272276][T10772] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15602'. [ 1458.368323][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15604'. [ 1458.411140][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15604'. [ 1458.850495][T10765] loop3: detected capacity change from 0 to 32768 [ 1458.873150][T10765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15599 (10765) [ 1458.929451][T10765] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1458.983632][T10765] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1458.994719][T10765] BTRFS info (device loop3): using free-space-tree [ 1459.179021][T10765] BTRFS info (device loop3): rebuilding free space tree [ 1459.375322][T10819] loop5: detected capacity change from 0 to 16 [ 1459.416092][T10819] erofs (device loop5): mounted with root inode @ nid 36. [ 1459.469969][T10777] loop1: detected capacity change from 0 to 32768 [ 1459.534548][T10777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15605 (10777) [ 1459.607263][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1459.608774][T10777] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1459.705999][T10777] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1459.736561][T10777] BTRFS info (device loop1): using free-space-tree [ 1459.845854][T10834] netlink: 'syz.7.15625': attribute type 46 has an invalid length. [ 1460.127055][ T1210] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1460.303035][ T1210] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1460.344275][ T1210] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.410499][ T1210] usb 1-1: config 220 has no interface number 2 [ 1460.434214][ T1210] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 1460.479791][ T1210] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 1460.526928][ T1210] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1460.548203][ T5852] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1460.558748][ T1210] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1460.566137][ T1210] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1460.573702][ T1210] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1460.584714][T10861] netlink: 'syz.5.15630': attribute type 21 has an invalid length. [ 1460.605014][ T1210] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1460.654764][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.682890][ T1210] usb 1-1: Product: syz [ 1460.691705][ T1210] usb 1-1: Manufacturer: syz [ 1460.711539][ T1210] usb 1-1: SerialNumber: syz [ 1461.003795][ T1210] usb 1-1: selecting invalid altsetting 0 [ 1461.022964][ T1210] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1461.043407][ T1210] usb 1-1: No valid video chain found. [ 1461.087942][ T1210] usb 1-1: selecting invalid altsetting 0 [ 1461.117560][T10877] loop7: detected capacity change from 0 to 512 [ 1461.153561][ T1210] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1461.178813][T10877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1461.248834][ T1210] usb 1-1: USB disconnect, device number 40 [ 1461.278946][T10877] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1461.358265][T10877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1461.444819][T10877] System zones: 0-1, 15-15, 18-18, 34-34 [ 1461.450884][T10877] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1461.506695][T10877] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1461.532031][T10877] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1461.551641][T10877] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1461.565718][T10877] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15637: bg 0: block 40: padding at end of block bitmap is not set [ 1461.612471][T10891] netlink: 'syz.1.15643': attribute type 24 has an invalid length. [ 1461.693963][T10877] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1461.762694][T10877] EXT4-fs (loop7): 1 truncate cleaned up [ 1461.770244][T10877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1461.793406][T10893] loop3: detected capacity change from 0 to 1024 [ 1461.935648][T10877] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1461.943388][T10893] syz.3.15644: attempt to access beyond end of device [ 1461.943388][T10893] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1461.954564][T10877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1461.984199][T10893] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 1461.994994][T10893] syz.3.15644: attempt to access beyond end of device [ 1461.994994][T10893] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1462.050039][T10893] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 1462.192749][ T8814] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.758786][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.852687][ T1210] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1462.958533][T10905] loop1: detected capacity change from 0 to 32768 [ 1463.028656][ T1210] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1463.048322][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.076706][ T1210] usb 4-1: Product: syz [ 1463.082353][ T5541] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1463.109196][ T1210] usb 4-1: Manufacturer: syz [ 1463.120114][ T1210] usb 4-1: SerialNumber: syz [ 1463.134958][T10905] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 1463.134987][T10905] allowing incompatible features above 0.0: (unknown version) [ 1463.135002][T10905] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1463.157529][ T1210] usb 4-1: config 0 descriptor?? [ 1463.163061][ T677] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1463.175251][ T1210] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1463.245097][T10905] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1463.257353][ T5541] usb 6-1: Using ep0 maxpacket: 32 [ 1463.267837][T10905] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1463.284917][ T5541] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1463.297946][ T5541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.310278][T10905] bcachefs (loop1): Version upgrade required: [ 1463.310278][T10905] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1463.310278][T10905] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1463.310278][T10905] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1463.365915][ T677] usb 8-1: Using ep0 maxpacket: 16 [ 1463.384072][ T5541] usb 6-1: Product: syz [ 1463.393323][ T5541] usb 6-1: Manufacturer: syz [ 1463.398573][ T5541] usb 6-1: SerialNumber: syz [ 1463.424060][ T677] usb 8-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1463.444209][ T677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.461879][T10905] bcachefs (loop1): dropping and reconstructing all alloc info [ 1463.469615][ T677] usb 8-1: Product: syz [ 1463.473895][ T677] usb 8-1: Manufacturer: syz [ 1463.478526][ T677] usb 8-1: SerialNumber: syz [ 1463.509420][T10905] bcachefs (loop1): accounting_read... [ 1463.511074][ T677] usb 8-1: config 0 descriptor?? [ 1463.525424][T10905] done [ 1463.532134][T10905] bcachefs (loop1): alloc_read... done [ 1463.545390][T10905] bcachefs (loop1): snapshots_read... done [ 1463.563144][T10905] bcachefs (loop1): check_allocations... [ 1463.569481][T10952] netlink: 'syz.0.15670': attribute type 10 has an invalid length. [ 1463.583498][T10952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15670'. [ 1463.597090][T10952] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1463.607822][T10905] done [ 1463.624490][T10905] bcachefs (loop1): going read-write [ 1463.651426][ T1210] usb 4-1: USB disconnect, device number 16 [ 1463.658095][ T5541] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1463.682415][ T5541] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1463.689897][T10905] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 1463.731826][ T5541] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1463.782749][ T677] snd-usb-hiface 8-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1463.875880][ T677] usb 6-1: USB disconnect, device number 37 [ 1463.903494][ T677] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1463.904803][ T5852] bcachefs (loop1): unclean shutdown complete, journal seq 13 [ 1463.927557][ T677] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1463.939103][ T677] visor 6-1:1.0: device disconnected [ 1463.995369][ T1217] usb 8-1: USB disconnect, device number 6 [ 1464.971751][T10987] loop5: detected capacity change from 0 to 1024 [ 1465.097523][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1465.535330][ T5541] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1465.701418][T10974] loop3: detected capacity change from 0 to 32768 [ 1465.713457][ T5541] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1465.751296][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1465.767987][ T5541] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 1465.784309][T10974] XFS: noikeep mount option is deprecated. [ 1465.808181][ T5541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 1465.852860][ T5541] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1465.859782][T10974] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1465.876594][ T5541] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1465.930892][ T5541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.938940][ T5541] usb 1-1: Product: syz [ 1465.973095][ T5541] usb 1-1: Manufacturer: syz [ 1465.978305][ T5541] usb 1-1: SerialNumber: syz [ 1465.998950][ T5541] usb 1-1: config 0 descriptor?? [ 1466.016880][T10997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1466.043157][ T5541] usb 1-1: ucan: probing device on interface #0 [ 1466.049560][ T5541] usb 1-1: ucan: invalid endpoint configuration [ 1466.055842][ T5541] usb 1-1: ucan: probe failed; try to update the device firmware [ 1466.117527][T10974] XFS (loop3): Ending clean mount [ 1466.179478][T10974] XFS (loop3): Quotacheck needed: Please wait. [ 1466.272409][ T677] usb 1-1: USB disconnect, device number 41 [ 1466.281022][T10974] XFS (loop3): Quotacheck: Done. [ 1466.334252][T11027] loop1: detected capacity change from 0 to 8 [ 1466.343285][T11027] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1466.432056][T11031] loop5: detected capacity change from 0 to 512 [ 1466.489778][T11031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1466.511537][ T6021] udevd[6021]: incorrect cramfs checksum on /dev/loop1 [ 1466.519493][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1466.616780][T11031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1466.827601][T11031] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1466.921692][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.131391][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15710'. [ 1467.289631][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15711'. [ 1467.668974][T11067] netlink: 'syz.0.15719': attribute type 8 has an invalid length. [ 1467.865421][ T1217] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1468.043814][ T1217] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 1468.057787][ T1217] usb 4-1: config 0 has no interface number 0 [ 1468.084378][T11080] loop5: detected capacity change from 0 to 4096 [ 1468.086953][ T1217] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1468.123838][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.131905][ T1217] usb 4-1: Product: syz [ 1468.137185][T11080] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1468.158182][ T1217] usb 4-1: Manufacturer: syz [ 1468.162847][ T1217] usb 4-1: SerialNumber: syz [ 1468.193321][T11088] Cannot find del_set index 2 as target [ 1468.193412][ T1217] usb 4-1: config 0 descriptor?? [ 1468.259142][ T1217] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1468.312635][T11080] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1468.692750][ T1217] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1468.718743][ T1217] gspca_pac7302 4-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 1468.811731][ T1217] usb 4-1: USB disconnect, device number 17 [ 1468.993282][T11115] tmpfs: Bad value for 'mpol' [ 1469.156127][T11121] loop5: detected capacity change from 0 to 512 [ 1469.162862][ T677] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1469.206312][T11121] EXT4-fs: Ignoring removed orlov option [ 1469.224477][T11121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1469.267076][T11121] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1469.312040][T11121] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.15746: bg 0: block 248: padding at end of block bitmap is not set [ 1469.329653][ T677] usb 8-1: Using ep0 maxpacket: 32 [ 1469.337148][ T677] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.363627][ T677] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1469.374051][T11121] Quota error (device loop5): write_blk: dquota write failed [ 1469.381559][T11121] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1469.391836][ T677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.401073][ T677] usb 8-1: Product: syz [ 1469.407157][ T677] usb 8-1: Manufacturer: syz [ 1469.411798][ T677] usb 8-1: SerialNumber: syz [ 1469.421554][ T677] usb 8-1: config 0 descriptor?? [ 1469.428273][T11121] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.15746: Failed to acquire dquot type 1 [ 1469.437023][ T677] usb 8-1: bad CDC descriptors [ 1469.459252][ T677] usb 8-1: unsupported MDLM descriptors [ 1469.478539][T11121] EXT4-fs (loop5): 1 truncate cleaned up [ 1469.512366][T11121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1469.582629][T11121] EXT4-fs: Ignoring removed orlov option [ 1469.597111][T11121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1469.620950][T11121] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1469.653813][T11121] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.15746: Abort forced by user [ 1469.676879][ T677] usb 8-1: USB disconnect, device number 7 [ 1469.684335][T11121] EXT4-fs (loop5): Remounting filesystem read-only [ 1469.708052][T11121] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1469.861789][T23344] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.982860][T11148] loop3: detected capacity change from 0 to 1024 [ 1470.085150][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.095489][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15761'. [ 1470.106537][T11154] netlink: 3 bytes leftover after parsing attributes in process `syz.5.15761'. [ 1470.260924][T11148] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1470.269232][T11148] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1470.355700][T11148] overlayfs: missing 'lowerdir' [ 1470.535232][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.637646][T11167] loop7: detected capacity change from 0 to 1024 [ 1470.831289][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1471.193728][T11184] loop5: detected capacity change from 0 to 2048 [ 1471.225385][T11184] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1471.280609][T11189] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1471.613940][T11200] openvswitch: netlink: Message has 4 unknown bytes. [ 1472.178061][T11225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15795'. [ 1472.409222][ T1210] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1472.546605][T11235] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15800'. [ 1472.563677][T11197] loop1: detected capacity change from 0 to 32768 [ 1472.592392][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 1472.611785][ T1210] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1472.636284][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.671872][ T1210] usb 1-1: config 0 descriptor?? [ 1472.694214][ T1210] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1473.143217][ T1210] gspca_vc032x: reg_w err -71 [ 1473.150031][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.155365][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.180889][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.186237][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.216052][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.231349][ T5541] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1473.249267][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.261529][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.301902][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.316717][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.332907][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.341374][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.359208][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.369900][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.375237][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.387123][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.393934][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.399675][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.410455][ T1210] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.420568][ T1210] gspca_vc032x: Unknown sensor... [ 1473.426127][ T5541] usb 6-1: Using ep0 maxpacket: 16 [ 1473.441009][ T5541] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1473.456456][ T1210] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1473.468025][ T5541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.476072][ T5541] usb 6-1: Product: syz [ 1473.496998][ T1210] usb 1-1: USB disconnect, device number 42 [ 1473.524938][ T5541] usb 6-1: Manufacturer: syz [ 1473.529614][ T5541] usb 6-1: SerialNumber: syz [ 1473.542627][T11263] netlink: 'syz.7.15814': attribute type 10 has an invalid length. [ 1473.579239][ T5541] usb 6-1: config 0 descriptor?? [ 1473.587746][T11263] team0: Device ipvlan1 failed to register rx_handler [ 1473.599690][T11265] MTD: Couldn't look up '': -22 [ 1473.630992][ T5541] s2255 6-1:0.0: Could not find bulk-in endpoint [ 1473.647343][ T5541] Sensoray 2255 driver load failed: 0xfffffff4 [ 1473.677942][ T5541] s2255 6-1:0.0: probe with driver s2255 failed with error -12 [ 1473.873828][ T677] usb 6-1: USB disconnect, device number 38 [ 1473.996852][T11277] loop3: detected capacity change from 0 to 1024 [ 1474.010528][T11277] EXT4-fs: Ignoring removed bh option [ 1474.027100][T11279] ieee802154 phy0 wpan0: encryption failed: -90 [ 1474.070865][T11277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1474.273724][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1474.301952][T11287] loop7: detected capacity change from 0 to 256 [ 1474.369109][T11287] FAT-fs (loop7): Directory bread(block 64) failed [ 1474.387774][T11287] FAT-fs (loop7): Directory bread(block 65) failed [ 1474.412159][T11287] FAT-fs (loop7): Directory bread(block 66) failed [ 1474.422000][T11287] FAT-fs (loop7): Directory bread(block 67) failed [ 1474.428879][ T43] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1474.449936][T11287] FAT-fs (loop7): Directory bread(block 68) failed [ 1474.470902][T11287] FAT-fs (loop7): Directory bread(block 69) failed [ 1474.477570][T11287] FAT-fs (loop7): Directory bread(block 70) failed [ 1474.532917][T11287] FAT-fs (loop7): Directory bread(block 71) failed [ 1474.553993][T11287] FAT-fs (loop7): Directory bread(block 72) failed [ 1474.589160][T11287] FAT-fs (loop7): Directory bread(block 73) failed [ 1474.632697][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1474.675693][ T43] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1474.686419][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.694547][ T43] usb 2-1: Product: syz [ 1474.709839][ T43] usb 2-1: Manufacturer: syz [ 1474.714494][ T43] usb 2-1: SerialNumber: syz [ 1474.734944][ T43] usb 2-1: config 0 descriptor?? [ 1474.755588][ T43] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1475.004054][ T5541] usb 2-1: USB disconnect, device number 45 [ 1475.068100][T11304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.421298][T11315] loop3: detected capacity change from 0 to 256 [ 1475.490383][T11315] FAT-fs (loop3): Directory bread(block 64) failed [ 1475.501289][T11315] FAT-fs (loop3): Directory bread(block 65) failed [ 1475.510138][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1475.512502][T11315] FAT-fs (loop3): Directory bread(block 66) failed [ 1475.583025][T11315] FAT-fs (loop3): Directory bread(block 67) failed [ 1475.603861][T11315] FAT-fs (loop3): Directory bread(block 68) failed [ 1475.622190][T11315] FAT-fs (loop3): Directory bread(block 69) failed [ 1475.660034][T11315] FAT-fs (loop3): Directory bread(block 70) failed [ 1475.666621][T11315] FAT-fs (loop3): Directory bread(block 71) failed [ 1475.695093][T11315] FAT-fs (loop3): Directory bread(block 72) failed [ 1475.697006][ T43] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1475.710557][T11315] FAT-fs (loop3): Directory bread(block 73) failed [ 1475.742702][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.796859][ T43] usb 8-1: config 0 descriptor?? [ 1476.027591][ T43] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1476.243128][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 1476.337972][ T43] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1476.358633][ T43] [drm] Initialized udl on minor 2 [ 1476.392871][ T43] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1476.423272][ T43] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1476.433879][ T5542] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1476.474668][ T5542] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1476.501839][ T43] usb 8-1: USB disconnect, device number 8 [ 1476.516869][ T5542] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1476.698570][ T30] audit: type=1326 audit(1407.079:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.15859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1638e929 code=0x7ffc0000 [ 1476.762687][ T30] audit: type=1326 audit(1407.108:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.15859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1638e929 code=0x7ffc0000 [ 1476.843841][ T30] audit: type=1326 audit(1407.108:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.15859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3c1638e929 code=0x7ffc0000 [ 1476.950490][ T30] audit: type=1326 audit(1407.108:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.15859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1638e929 code=0x7ffc0000 [ 1476.996850][ T30] audit: type=1326 audit(1407.108:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.15859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1638e929 code=0x7ffc0000 [ 1477.151600][T11371] loop1: detected capacity change from 0 to 256 [ 1477.238302][T11371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1477.535970][T11382] loop7: detected capacity change from 0 to 256 [ 1477.633800][T11386] netlink: 'syz.3.15874': attribute type 1 has an invalid length. [ 1477.659671][T11382] FAT-fs (loop7): Directory bread(block 64) failed [ 1477.671163][T11382] FAT-fs (loop7): Directory bread(block 65) failed [ 1477.679530][T11382] FAT-fs (loop7): Directory bread(block 66) failed [ 1477.686104][T11382] FAT-fs (loop7): Directory bread(block 67) failed [ 1477.741784][T11382] FAT-fs (loop7): Directory bread(block 68) failed [ 1477.764689][T11382] FAT-fs (loop7): Directory bread(block 69) failed [ 1477.799015][T11382] FAT-fs (loop7): Directory bread(block 70) failed [ 1477.836826][T11382] FAT-fs (loop7): Directory bread(block 71) failed [ 1477.859611][T11382] FAT-fs (loop7): Directory bread(block 72) failed [ 1477.872038][T11382] FAT-fs (loop7): Directory bread(block 73) failed [ 1477.944639][ T677] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1478.066334][T11396] netlink: 'syz.3.15879': attribute type 11 has an invalid length. [ 1478.104947][ T677] usb 6-1: Using ep0 maxpacket: 8 [ 1478.124733][ T677] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.170266][ T677] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1478.239000][ T677] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1478.261915][ T677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.280891][ T677] usb 6-1: Product: syz [ 1478.285119][ T677] usb 6-1: Manufacturer: syz [ 1478.304876][ T677] usb 6-1: SerialNumber: syz [ 1478.327537][ T677] usb 6-1: config 0 descriptor?? [ 1478.343767][ T677] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1478.393438][ T677] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1478.400105][ T677] imon:imon_probe: failed to initialize context! [ 1478.428564][ T677] imon 6-1:0.0: unable to register, err -19 [ 1478.479330][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15884'. [ 1478.626506][T11412] loop7: detected capacity change from 0 to 256 [ 1478.631085][ T1217] usb 6-1: USB disconnect, device number 39 [ 1478.788172][T11410] loop1: detected capacity change from 0 to 4096 [ 1478.815474][T11410] ntfs3(loop1): It is recommened to use chkdsk. [ 1478.826959][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 1478.838240][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 1478.850478][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 1478.883013][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 1478.903959][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 1478.931613][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 1479.006347][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 1479.038177][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 1479.066053][T11410] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 1479.404605][T11425] loop3: detected capacity change from 0 to 8192 [ 1479.448198][T11425] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1479.501860][T11431] loop5: detected capacity change from 0 to 2048 [ 1479.601535][T11431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1479.842776][T11440] xt_hashlimit: size too large, truncated to 1048576 [ 1479.903831][T11442] tmpfs: Bad value for 'mpol' [ 1480.172075][T11452] loop1: detected capacity change from 0 to 256 [ 1480.212991][T11445] loop5: detected capacity change from 0 to 4096 [ 1480.251871][T11452] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1481.312055][T11492] netlink: 'syz.0.15925': attribute type 4 has an invalid length. [ 1481.336160][T11492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15925'. [ 1481.364099][T11492] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1481.537304][ T1217] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1481.715349][ T1217] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1481.733940][ T1217] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1481.768340][ T1217] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1481.779894][ T1217] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1481.791613][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1481.845725][ T1217] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1481.896709][ T1217] usb 6-1: string descriptor 0 read error: -22 [ 1481.906866][ T1217] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1481.928738][T11516] netlink: 'syz.0.15937': attribute type 1 has an invalid length. [ 1481.951081][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.962609][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15937'. [ 1481.986868][ T1217] usb 6-1: config 0 descriptor?? [ 1482.000483][T11490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1482.095929][T11520] netlink: 'syz.7.15939': attribute type 10 has an invalid length. [ 1482.106900][ T1217] hub 6-1:0.0: bad descriptor, ignoring hub [ 1482.123604][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15939'. [ 1482.133490][ T1217] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1482.170305][ T1217] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input102 [ 1482.253922][T11520] team0: Port device geneve0 added [ 1482.313811][ T677] usb 6-1: USB disconnect, device number 40 [ 1482.319861][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -19 [ 1482.481938][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15943'. [ 1482.870091][T11548] Cannot find del_set index 286 as target [ 1483.131846][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15957'. [ 1483.768786][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15970'. [ 1485.128803][ T30] audit: type=1326 audit(1414.976:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.5.16001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1485.150750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.236357][ T30] audit: type=1326 audit(1414.976:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.5.16001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1485.252085][T11652] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1485.258296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.331294][ T30] audit: type=1326 audit(1415.013:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.5.16001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1485.430995][ T30] audit: type=1326 audit(1415.013:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.5.16001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1485.452954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.539433][ T30] audit: type=1326 audit(1415.013:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.5.16001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e878e929 code=0x7ffc0000 [ 1485.561369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.728714][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16012'. [ 1485.801631][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16012'. [ 1486.278697][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16025'. [ 1486.289977][T11684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1486.463409][ T5542] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1486.574798][T11705] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1486.636040][ T5542] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1486.657462][ T5542] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1486.680493][ T5542] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1486.704330][ T5542] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1486.737287][ T5542] usb 4-1: Product: syz [ 1486.759088][ T5542] usb 4-1: Manufacturer: syz [ 1486.776629][ T5542] usb 4-1: SerialNumber: syz [ 1486.789522][ T5542] usb 4-1: config 0 descriptor?? [ 1486.824385][ T5542] usb 4-1: selecting invalid altsetting 0 [ 1486.830649][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16034'. [ 1486.871919][T11716] netlink: 'syz.5.16035': attribute type 4 has an invalid length. [ 1486.899877][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16037'. [ 1486.938726][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16037'. [ 1487.127299][ T5542] usb 4-1: USB disconnect, device number 18 [ 1487.377002][T11727] netlink: 'syz.7.16040': attribute type 4 has an invalid length. [ 1487.743814][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16051'. [ 1487.784788][T11751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.210064][ T30] audit: type=1326 audit(1417.848:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.16062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1488.232043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.306088][ T30] audit: type=1326 audit(1417.895:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.16062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1488.408567][ T30] audit: type=1326 audit(1417.895:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.16062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1488.430604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.461356][T11777] loop3: detected capacity change from 0 to 1764 [ 1488.477063][ T30] audit: type=1326 audit(1417.895:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.16062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b68b8e929 code=0x7ffc0000 [ 1488.499017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.518342][T11777] iso9660: Bad value for 'gid' [ 1488.523170][T11777] iso9660: Bad value for 'gid' [ 1488.675713][T11782] netlink: 248 bytes leftover after parsing attributes in process `syz.7.16068'. [ 1488.808732][T11757] loop1: detected capacity change from 0 to 32768 [ 1488.889968][ T677] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1489.082950][ T677] usb 1-1: Using ep0 maxpacket: 32 [ 1489.103112][ T1217] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1489.130882][ T677] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 1489.139879][ T677] usb 1-1: config 0 has no interface number 0 [ 1489.158078][ T677] usb 1-1: config 0 interface 54 has no altsetting 0 [ 1489.179490][ T677] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 1489.220855][ T677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.228912][ T677] usb 1-1: Product: syz [ 1489.269943][ T677] usb 1-1: Manufacturer: syz [ 1489.287377][ T677] usb 1-1: SerialNumber: syz [ 1489.302042][ T1217] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.322192][ T677] usb 1-1: config 0 descriptor?? [ 1489.331965][ T1217] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1489.364703][ T1217] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.392468][T11804] netlink: 'syz.1.16075': attribute type 8 has an invalid length. [ 1489.414227][ T1217] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1489.471269][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.546620][ T1217] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.577000][ T1217] usb 6-1: invalid MIDI out EP 0 [ 1489.595722][ T677] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 1489.709759][ T677] usb 1-1: USB disconnect, device number 43 [ 1489.888515][ T1217] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1489.968549][ T1217] usb 6-1: USB disconnect, device number 41 [ 1490.313283][T11834] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1490.816426][T11854] netlink: 'syz.5.16097': attribute type 21 has an invalid length. [ 1490.858821][T11854] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16097'. [ 1491.418646][T11844] loop7: detected capacity change from 0 to 32768 [ 1492.252013][T11896] loop7: detected capacity change from 0 to 8192 [ 1492.445024][T11908] loop5: detected capacity change from 0 to 16 [ 1492.544758][T11908] erofs (device loop5): mounted with root inode @ nid 36. [ 1492.558232][T11877] loop1: detected capacity change from 0 to 32768 [ 1492.601052][T11908] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1492.637382][T11908] erofs (device loop5): failed to decompress -23 in[64, 4032] out[1851] [ 1492.652861][T11908] erofs (device loop5): read error -117 @ 43 of nid 36 [ 1492.987336][T11877] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 1492.987366][T11877] allowing incompatible features above 0.0: (unknown version) [ 1492.987380][T11877] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1493.163350][T11877] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1493.187275][T11877] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1493.207676][T11877] bcachefs (loop1): Version upgrade required: [ 1493.207676][T11877] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1493.207676][T11877] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1493.207676][T11877] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1493.222394][T11930] kAFS: unable to lookup cell '\/' [ 1493.357320][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1493.362690][T11877] bcachefs (loop1): dropping and reconstructing all alloc info [ 1493.399467][T11877] bcachefs (loop1): accounting_read... done [ 1493.423078][T11877] bcachefs (loop1): alloc_read... done [ 1493.442889][T11877] bcachefs (loop1): snapshots_read... done [ 1493.452154][T11877] bcachefs (loop1): check_allocations... [ 1493.531360][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.538275][T11877] done [ 1493.569168][ T43] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1493.589515][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.603571][T11877] bcachefs (loop1): going read-write [ 1493.622579][ T43] usb 1-1: config 0 descriptor?? [ 1493.645891][T11912] loop3: detected capacity change from 0 to 32768 [ 1493.666600][T11877] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 1493.736979][T11912] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1493.808984][T11877] bcachefs (loop1): inode 4098:4294967295 has wrong backpointer: [ 1493.809030][T11877] got 0:32 [ 1493.809042][T11877] should be 4096:189491840996961599, fixing [ 1493.859789][T11921] loop7: detected capacity change from 0 to 32768 [ 1494.021450][T11912] XFS (loop3): Ending clean mount [ 1494.027853][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.055006][ T5852] bcachefs (loop1): hash table key at wrong offset: should be at 6053843396831044271 [ 1494.055058][ T5852] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: ÿÿÿÿ1 -> 536870912 type reg, fixing [ 1494.084290][ T1217] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1494.120492][T11912] XFS (loop3): Quotacheck needed: Please wait. [ 1494.129812][ T5541] usb 1-1: USB disconnect, device number 44 [ 1494.284118][T11912] XFS (loop3): Quotacheck: Done. [ 1494.296097][ T1217] usb 6-1: too many configurations: 89, using maximum allowed: 8 [ 1494.296925][ T5852] ------------[ cut here ]------------ [ 1494.311060][ T5852] kernel BUG at arch/x86/mm/physaddr.c:23! [ 1494.326876][ T5852] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1494.333190][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1494.334852][T11948] loop7: detected capacity change from 0 to 512 [ 1494.344880][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.344899][ T5852] RIP: 0010:__phys_addr+0x17b/0x180 [ 1494.344929][ T5852] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 1494.344949][ T5852] RSP: 0018:ffffc9000403f068 EFLAGS: 00010293 [ 1494.344970][ T5852] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff888032be8000 [ 1494.400135][ T5852] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 1494.408116][ T5852] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 1494.416106][ T5852] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000403f5f0 [ 1494.424085][ T5852] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 1494.432074][ T5852] FS: 000055557ed46500(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 1494.441110][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1494.447714][ T5852] CR2: 000055559301a808 CR3: 000000003170c000 CR4: 00000000003526f0 [ 1494.455702][ T5852] Call Trace: [ 1494.458993][ T5852] [ 1494.461933][ T5852] ? bch2_printbuf_exit+0x6f/0xb0 [ 1494.466974][ T5852] kfree+0x77/0x440 [ 1494.470800][ T5852] ? bch2_str_hash_repair_key+0x2b57/0x4030 [ 1494.476715][ T5852] bch2_printbuf_exit+0x6f/0xb0 [ 1494.481575][ T5852] bch2_str_hash_repair_key+0xf2b/0x4030 [ 1494.487233][ T5852] ? stack_depot_save_flags+0x429/0x900 [ 1494.492812][ T5852] ? kasan_save_track+0x4f/0x80 [ 1494.497670][ T5852] ? kasan_save_track+0x3e/0x80 [ 1494.502527][ T5852] ? kasan_save_free_info+0x46/0x50 [ 1494.507732][ T5852] ? __kasan_slab_free+0x62/0x70 [ 1494.512678][ T5852] ? kfree+0x18e/0x440 [ 1494.516757][ T5852] ? bch2_printbuf_exit+0x6f/0xb0 [ 1494.521797][ T5852] ? __bch2_fsck_err+0xe25/0x10b0 [ 1494.526838][ T5852] ? __bch2_str_hash_check_key+0x93a/0xd60 [ 1494.532654][ T5852] ? bch2_readdir+0x11cd/0x1700 [ 1494.537515][ T5852] ? bch2_vfs_readdir+0x4d0/0x6c0 [ 1494.542550][ T5852] ? iterate_dir+0x396/0x570 [ 1494.547151][ T5852] ? __se_sys_getdents64+0xe4/0x260 [ 1494.552363][ T5852] ? do_syscall_64+0xfa/0x3b0 [ 1494.557054][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.563131][ T5852] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 1494.569240][ T5852] ? kasan_quarantine_put+0xdd/0x220 [ 1494.574564][ T5852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1494.579786][ T5852] ? bch2_printbuf_exit+0x6f/0xb0 [ 1494.584837][ T5852] ? kfree+0x18e/0x440 [ 1494.589001][ T5852] ? bch2_trans_log_str+0x279/0x3c0 [ 1494.594217][ T5852] ? bch2_printbuf_exit+0x6f/0xb0 [ 1494.599254][ T5852] ? __bch2_fsck_err+0xe25/0x10b0 [ 1494.604292][ T5852] ? __pfx___bch2_fsck_err+0x10/0x10 [ 1494.609579][ T5852] ? bch2_prt_printf+0x5a2/0x740 [ 1494.614542][ T5852] ? bch2_dirent_to_text+0x83a/0xd20 [ 1494.619846][ T5852] __bch2_str_hash_check_key+0xa85/0xd60 [ 1494.625493][ T5852] ? bch2_path_put+0xaa0/0x15d0 [ 1494.630365][ T5852] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 1494.636532][ T5852] ? __asan_memset+0x22/0x50 [ 1494.641128][ T5852] ? SipHash_End+0x47f/0x550 [ 1494.645739][ T5852] ? __pfx___bch2_subvolume_get_snapshot+0x10/0x10 [ 1494.652246][ T5852] ? __bch2_subvolume_get_snapshot+0x15c/0x550 [ 1494.658407][ T5852] ? bch2_readdir+0x651/0x1700 [ 1494.663177][ T5852] bch2_readdir+0x11cd/0x1700 [ 1494.667871][ T5852] ? __pfx_bch2_readdir+0x10/0x10 [ 1494.672910][ T5852] ? bch2_readdir+0x23e/0x1700 [ 1494.677683][ T5852] bch2_vfs_readdir+0x4d0/0x6c0 [ 1494.682544][ T5852] ? __pfx_bch2_vfs_readdir+0x10/0x10 [ 1494.687930][ T5852] ? down_read_killable+0x1d1/0x350 [ 1494.693146][ T5852] iterate_dir+0x396/0x570 [ 1494.697574][ T5852] __se_sys_getdents64+0xe4/0x260 [ 1494.702606][ T5852] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1494.708250][ T5852] ? exc_page_fault+0x76/0xf0 [ 1494.712935][ T5852] ? __pfx_filldir64+0x10/0x10 [ 1494.717706][ T5852] ? do_user_addr_fault+0xc8a/0x1390 [ 1494.723015][ T5852] ? do_syscall_64+0xbe/0x3b0 [ 1494.727709][ T5852] do_syscall_64+0xfa/0x3b0 [ 1494.732235][ T5852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1494.737443][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.743513][ T5852] ? clear_bhb_loop+0x60/0xb0 [ 1494.748197][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.754102][ T5852] RIP: 0033:0x7f3c163c1293 [ 1494.758524][ T5852] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1494.778139][ T5852] RSP: 002b:00007fff60604d78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1494.786564][ T5852] RAX: ffffffffffffffda RBX: 000055557ed61600 RCX: 00007f3c163c1293 [ 1494.794545][ T5852] RDX: 0000000000008000 RSI: 000055557ed61600 RDI: 0000000000000005 [ 1494.802542][ T5852] RBP: 000055557ed615d4 R08: 0000000000000000 R09: 0000000000000000 [ 1494.810535][ T5852] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1494.818523][ T5852] R13: 0000000000000010 R14: 000055557ed615d0 R15: 00007fff60607030 [ 1494.826507][ T5852] [ 1494.829544][ T5852] Modules linked in: [ 1494.834433][ T5852] ---[ end trace 0000000000000000 ]--- [ 1494.841636][ T5852] RIP: 0010:__phys_addr+0x17b/0x180 [ 1494.847614][ T5852] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 1494.868364][ T1217] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1494.879480][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1494.880155][ T5852] RSP: 0018:ffffc9000403f068 EFLAGS: 00010293 [ 1494.895698][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.905731][T11948] EXT4-fs (loop7): filesystem is read-only [ 1494.909372][ T1217] usb 6-1: Product: syz [ 1494.916081][T11948] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1494.916580][ T1217] usb 6-1: Manufacturer: syz [ 1494.930667][ T5852] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff888032be8000 [ 1494.940702][ T5852] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 1494.951653][ T1217] usb 6-1: SerialNumber: syz [ 1494.957194][ T5852] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 1494.968607][ T1217] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1494.970340][T11948] EXT4-fs (loop7): filesystem is read-only [ 1494.994319][T11948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1495.022096][ T5852] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000403f5f0 [ 1495.030411][ T5852] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 1495.038627][ T5852] FS: 000055557ed46500(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 1495.047963][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1495.049919][ T5913] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1495.054668][ T5852] CR2: 0000001b30d0bff8 CR3: 000000003170c000 CR4: 00000000003526f0 [ 1495.072304][ T5852] Kernel panic - not syncing: Fatal exception [ 1495.078735][ T5852] Kernel Offset: disabled [ 1495.083066][ T5852] Rebooting in 86400 seconds..