last executing test programs: 9.065250076s ago: executing program 1 (id=3597): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703433372c696f636861727365743d63703733372c726f6469722c636f6465706167653d313235312c73686f72746e616d653d77696e39352c726f6469722c757466383d312c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c726f6469722c696f636861727365743d63703836332c00de9784e4d49a8900bd2595c7467be73cb2", @ANYBLOB="3c447410f135ee9f8ba815574354d29ac3806f756ccf451754c64fa77420bbca294a8cc39a6a5b7cfcf86636f6a7e11d1676be702b7019430b6fdb9c92715d1393caeaf6b9d713ba8f56ade5aa0f1050a954b7"], 0x1, 0x2f5, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 8.749143831s ago: executing program 1 (id=3607): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, 0x0, 0x0) 8.605866754s ago: executing program 1 (id=3613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000708000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208000840000000013c0000000e0a01020000000000000000010000000900020073797a3200000000100003800c00008008000340000000010900010073797a3000"], 0xc8}}, 0x0) 8.492776566s ago: executing program 1 (id=3615): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,errors=remount-ro,dmask=00000000000000000000014,iocharset=cp869,time_offset=0x0000000000000000,utf8,errors=remount-ro,dmask=00000000000000000006466,allow_utime=00000000000000000001000,fmask=00000000000000000000011,appraise_type=imasig,obj_role=\\,uid>', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0x1532, &(0x7f00000042c0)="$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") mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 8.188863932s ago: executing program 1 (id=3621): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 7.25744046s ago: executing program 1 (id=3632): r0 = syz_open_dev$radio(&(0x7f00000196c0), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x8000, '\x00', @value64=0x9}}) 7.056560364s ago: executing program 32 (id=3632): r0 = syz_open_dev$radio(&(0x7f00000196c0), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x8000, '\x00', @value64=0x9}}) 1.945026342s ago: executing program 3 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000110001002ebf", @ANYRES32=0x0, @ANYBLOB="170dac000103000008002900b272040008000d0086f6ffff08002e00000000000500270003"], 0x8c}}, 0x20000800) 1.811659665s ago: executing program 4 (id=3714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 1.663640408s ago: executing program 4 (id=3717): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000016c0), 0x4) 1.569583179s ago: executing program 0 (id=3718): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 1.53136316s ago: executing program 4 (id=3720): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000180)=""/59, 0x3b) 1.429450742s ago: executing program 0 (id=3721): syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000340)='./file2\x00', 0x2a1cc5f, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="07465098ad8227d1888f396b01ae3e5b07276d425b17bde733e836fdfa0ad8fbafe4fd7a5606710b10285b6f29e3dc045832d25d4255a44555fe668d746d42b02c2fe3019700840d86f7cd87902e3aa9d18c884d061c489b74d0f4c7c33a77be9f18fcd223e185e29cc99f1b09003568c7be09a00614953a79c3e85abd028bf7f12c634b30bd94d542ca6cb11a5bd8629b02fcf392", @ANYRES8], 0x2, 0x231, &(0x7f00000000c0)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 1.429329972s ago: executing program 2 (id=3722): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x890c, 0x0) 1.381038213s ago: executing program 4 (id=3723): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) 1.317956524s ago: executing program 2 (id=3724): unshare(0x2040400) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.257813596s ago: executing program 2 (id=3725): r0 = socket(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x200, 0x20a, 0x278, 0x200, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'ipvlan0\x00', 'nicvf0\x00', {0xff}, {}, 0xff, 0x5, 0x1, 0x76}, 0x0, 0x110, 0x238, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'sit0\x00', 'batadv_slave_1\x00', 0xc, 0x3, 0x2, 0xe, 0x3e, 0xe8e3, {0x800}, {0x8001}}}]}, @common=@unspec=@NFQUEUE0={0x0, 'NFQUEUE\x00', 0x0, {0x101}}}, {{@uncond, 0x0, 0x118, 0x138}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x7b, 0xd0}, {0x28}}}}, 0x4b1) 1.244827996s ago: executing program 4 (id=3726): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz6B/TAlRsnTkSykUA9MWi8zxPPbna7No531p7PR3JmfvPMeJ/xd2dfsjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD9ZaEXHj52nBSsRnohPRjlgq69WIWFpdyet3I+K52GuOZyOitxBRbr/3z9MRr0bEx2cjdnY318vFlw/Yj+/+8W+/++GZt/76h97F//zpXue1Sevdv/+rf//5wdH2GQAAAJqmKIqild7mn0vv79t1dwoAmIn8/F8kefmpr3/9j7f+Mk/9UavVarV6BnVVMd6DahERW9VtytcMPo4HgBNmKz6puwvUSP6N1o2IM3V3Aphrrbo7wLHY2d1cb6V8W9Xng9VBez4XZCj/rdaj6zsmTacZPcdkVvev7ejEMxP6szSjPsyTnH97NP8bg/Z+Wu+485+VSfn3B5c+NU7OvzOa/4jTk397bP5NlfPvHir/jvwBAAAAAGCO5f//X6n589+Fo+/KgXza57+rM+oDAAAAAAAAADxpRx3/7xHj/wEAAMDcKt+rl35zdn/ZpO9iK5dfb0U8NbI+0DAfDSbLdfcDAAAAAAAAAAAAAJqkOziH93orohcRTy0vF0VR/lSN1od11O1PuqbvPzRZ3Q/yAAAw8PHZkWv5WxGLEXE92nvf9ddbXl4uisWl5WK5WFrIr2f7C4vFUuV9bZ6Wyxb6B3hB3O0X5S9brGxXNe398rT20d9X3la/6BygY09IL/01JzTXFDYAJINnox3PSKdMUTw96cUHDHH8n0IrsVL3/Yr5V/fdFAAAADh+RVEUrTTM37k0vl+77k4BADORn/9HPxc4UB0xvr19yPXVarVarVbPpK4qxntQLSJiq7pN+ZrBcPwAcMJsxSd1d4Eayb/RuhHxXN2dAOZaq+4OcCx2djfXWynfVvX5YHXQns8FGcp/q7W3Xd5+3HSa0XNMZnX/2o5OPDOhP8/OqA/zJOffHs3/xqC9n9Y77vxnZVL+/b1L5pon598ZzX/E6cm/PTb/psr5dw+Vf0f+AAAAAAAwx/L//6/4/DfvMgAAAAAAAACcODu7m+v5utf8+f/nxqzn+s/TKeffOmz+S2le/idazr89kv+XR9brVOYfvrl//P9rd3P99/f++dk8PWj+C3mmle5ZrXSPaKVbanXT9Ch797jtXqdf3lKv1e500zk/Re+duBW3YyMuDa3bTn+P/fa1ofayp72h9stD7d3H2q8MtffS9w4US7n9QqzHT+J2vL3XXrYtTNn/xSntxZT2nH/H438j5fy7lZ8y/+XU3hqZlh5+2H7suK9Ox93OG7c+/8tLx787U21H59G+VZX7d76G/uz9Tc7042d3N+5cuH/z3r07a5EmQ0svR5o8YTn/3t7Pwv7j/wuD9vy4Xz1eH37YP3T+82I7uhPzf6EyX+7vSzPuWx1y/v30k/N/O7WPP/5Pcv6Tj/+Xa+gPAAAAAAAAAAAAAAAAfJqiKPYuEX0jIq6m63/qujYTAJit/PxfJHm5Wq1Wq9Xq01dXFeO9Xi0i4qPqNuVrhl+M+2UAwDz7b0T8ve5OUBv5N1j+vr9y+mLdnQFm6u77H/zo5u3bG3fu1t0TAAAAAAAAAOD/lcf/XK2M//xiRKyMrDc0/uubsXrU8T+7eebRAKNPeKDvCbbb/U67Mtz487E3PveFSeN/n4/Hx//OY+J2qvsxQW9Ke39K+8KU9sWxS/fTGnuhR0XO//nKeOdl/udGhl9vwvivo2PeN0HO/3zl/lzm/6WR9ar5F7+du/y3DrridrSH8r94772fXrz7/gev3Hrv5rsb7278+Mra2qUrV69eu3bt4ju3bm9cGvx7PL2eAzn/PPa180CbJeefM5d/s+T8v5Bq+TdLzv+LqZZ/s+T88+s9+TdLzj+/95F/s+T8X0q1/Jsl5/+VVMu/WXZ2NxfK/F9OtfybJR//X021/Jsl5/9KquXfLDn/C6mWf7Pk/C+m+gD5+3r4UyTnnz/hcvw3S85/LdXyb5ac/+VUy79Zcv5XUi3/Zsn5v5pq+TdLzv9rqZZ/s+T8r6Za/s2S8/96quXfLDn/a6mWf7Pk/L+Ravk3S87/m6mWf7Pk/F9LtfybJef/rVTLv1ly/t9OtfybJef/nVTLv1ly/q+nWv7Nsv/9/2bMmDGTZ+p+ZAIAAAAAAAAAAAAARs3idOK69xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdXYxcZ30G8DPrXXvtEGIgBCc1sElMCMmSXduJP2hTTCBAA5QCCYV+4LjetVnwF167BIpk00CJhFFRRdX0oi2gqI1UVUQVF7SiNBdVP65Ke0FvKqpKSI0qgwIqUlvRbDVz3vf1zOzszNg7Xp897+8n2f/dmTNzzpw5M7vP2s8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDdrW+e/1yjKIrmn9ZfW4viRc2PN09tbV32hmu9hQAAAMBq/V/r7+dvSBccGOJGbcv83av+8etLS0tLxQc2/O7El5aW0hVTRTGxqSha10XP/PsHG+3LBI8Xk42xts/HBqx+w4DrxwdcPzHg+o0Drt804PrJAdcv2wHLbC5/HtO6sx2tD7eWu7S4sZhoXbejx60eb2waG4s/y2lptG6zNHGkWCiOFfPFbMfy5bKN1vLfvLW5rrcXcV1jbeva3jxCfvipw3EbGmEf7+hY16X7jL7/pmLqRz/81OE/PnPx5l5z4G7ouL9yO++8rbmdnwmXlNvaKDalfRK3c6xtO7f3eE42dGxno3W75sfd2/n8kNu54dJmrqnu53yyGGt9/O3Wfhpv/7Fe2k/bw2X/fXtRFOcvbXb3MsvWVYwVWzouGbv0/EyWR2TzPpqH0kuL8cs6Tm8d4jhtzrkdncdp92siPv+3htuNr7AN7U/T9z+9cdnzfrnHadR81Cu9VrqPwVG/VqpyDMbj4tutB/1Ez2NwR3j8n7pj5WOw57HT4xhMj7vtGLxt0DE4tnFDa5vTk9Bo3ebSMbizY/kNrTU1WvO5O/ofgzNnjp+aWfzEJ1+/cPzQ0fmj8yd279w5u3vPnn379s0cWTg2P1v+fYV7u/q2FGPpNXBb2HfxNfDarmXbD9Wlr4zudTjZ53W4tWvZUb8Ox7sfXGNtXpDLj+nytfFwc6dPXhgrVniNtZ6fu1b/OkyPu+11ON72Ouz5NaXH63B8iNdhc5lTdw33Pct4259e23C1vhZsbTsGu78f6T4GR/39SFWOwclwXPzrXSt/LdgetveJ6cv9fmTDsmMwPdzw3tO8JH2/P7mvNXodl7c0r7huY3F2cf70PY8dOnPm9M4ijDXxsrZjpft43dL2mIplx+vYZR+vBxZe9cQtPS7fGvbV5Oubf02u+Fw1l7n3nv7PVeurW+/92XHpriKMEVvr/dnrq3lzf6Ys2Wd/Npf5zMzqvxdPubTt/XdihfffmPtfKNeX7urxDRPj5et3Q9o7Ex3vx51P1XjrvavRWvfzM8O9H0+EP2v9fnxjn/fjbV3Ljvr9eKL7wcX348agn3asTvfzORmOk2Oz/d+Pm8ts23W5x+R43/fj28NshP3/upAUUi5qO3ZWOm7TusbHJ8LjGo9r6DxOd3csPxGyWXNdT++6suP0ztvL+9qQHt0la3WcTnUtO+rjNL1frXScNgb99O3KdD+fk+G4uHF3/+O0ucyz967+vXNz/LDtvXPjoGNwYsPG5jZPpIOwfL9f2hyPwXuKw8XJ4lgx17p2Y+t4arTWNX3fcMfgxvBnrd8rt/U5Bu/sWnbUx2D6OrbSsdcYX/7gR6D7+ZwMx8WT9/U/BpvLvGXvaL93vTNckpZp+961++drK/3M65au3XQ1f+bV3M6/2dv/Z7PNZY7tu9yc2X8/3R0uua7Hfup+/a70mpor1mY/bQvbeXHfyvupuT3NZb60f8jj6UBRFOc+9kDr573h31f+/Ox3vt7x7y69/k3n3Mce+MH1R/72crYfgPXvhXJsKb/Wtf3L1DD//g8AAACsCzH3j4WZyP8AAABQGzH3x/8Vnsj/AAAAUBsx94+HmWSS/7e95eLCC+eK1MxfCuL1aTc8VC4XO66z4fOppUualz/w1PyP//LccOseK4riJw/9Rs/ltz0Ut6s0FbbzmQc7L19+w3NDrf/RRy4t195f/3K4//h4hj0MelVwZ4ui+OYNX2itZ+qDF1rz2Ycebc33nn/i8eYyz+8vP4+3f+5l5fJ/EMq/B44c6rj9c2E/fC/M2Xf03h/xdl+78Lrte99/aX3xdo3bXtx62E9+qLzf+Htyvvh4uXzczytt/199/umvNZd/7DW9t//cWO/tfzrc71MPXlxoHnH/88py+fbnoPl5vN1nw/bH9T0Vbn/PV7/Vc/uf+Vy5/Km3lss9GmZc/53h8x1vvbjQvr8eaxzqeFzF28rl4vpnv/Pbrevj/cX7797+yYMXOvZH9/Hx7D+X9zPTtXy8PK4n+ouu9Tfvp/34jOt/+rce7djPg9b/zHufe2XzfrvXf3fXchu6bt/9G5v+8LNf6Lm+uD0H/uxUx+M58J7wOg7rf/JD4XgM1//vM1/oWG/06Hs633/i8l/eeq7j8URv/1G5/mfeeLQ1/2Pqx79/3Yuuf/H5Vzf3XVF8+33l/Q1a/9E/Otmx/V+56a7W8xGvjx397vWvJK7/9MenT5xcPLsw17ZXW787553l9mya3Lylub03hPfW7s8Pnjzz4fnTU7NTs0UxVd9foXfFvhrmD8px/nJvf9cj4fm85fe+ueWOf/p8vPxfHi4vv/CO8uvWa8NyXwyXby2fv6XGKtf/5K03tV7fjWfLzzt67COwfcd/7htqwfD4u78viMf7qZd/uLUfmte1vm7E1/Uqt/+7c+X9fCPs16Xwm5lvu+nS+tqXj78b4cL7ytf7qvdfeJuLz+ufhOf7Xd8r7z9uV3y83w3fx3xrW+f7XTw+vnFurPv+W7/F43x4PynOl9fHpeL+vvD8TT03L/4ekuL8za3Pfyfdz82X9TBXsviJxZljCyfOPjZzZn7xzMziJz558PjJsyfOHGz9Ls+DHxl0+0vvT1ta709z83vuLWY3F0Vxsphdgzesq7P9zY+G2/5Tjxye2zt7x9z8kUNnj5x55NT86aOHFxcPz88t3nHoyJH5jw+6/cLc/Tt37d+9d9f00YW5+/ft3797//TCiZPNzSg3aoA9sx+dPnH6YOsmi/ffu3/nfffdOzt9/OTc/P17Z2enzw66fetr03Tz1r8+fXr+2KEzC8fnpxcXPjl//879e/bsGvjbAI+fOrI4NXP67ImZs4vzp2fKxzJ1pnVx82vfoNtTT4v/Vn4/261R/iK+4t1370m/n7XpqU+veFflIl2/QPRi+F00//CSU/uG+Tzm/okwk0zyPwAAAOQg5v6NYSbyPwAAANRGzP2bwkzkfwAAAKiNmPsnw0wyyf/6//r/w/X/y+tH2f/v1Z8v9P8r1f8/9bGyV7re+/+xP6//n4dr3P9f9fr1//X/69f/H74/v963X/9f/5/lqtb/j7l/c1Fkmf8BAAAgBzH3bwkzkf8BAACgNmLuvy7MRP4HAACA2oi5/0VhJpnkf/3/ofr/uwYVrurf/x/9+f/1//X/16T/H58c/f9sXHb//v0Pd3yq/x/o/+v/6//r/+v/s2oTK15zrfr/MfdfH2aSSf4HAACAHMTc/+IwE/kfAAAAaiPm/hvCTOR/AAAAqI2Y+7eGmWSS//X/nf9f/1//v9b9/9We/79tY/T/1wfn/+9P/3+AK+7/T+r/r8f+/8Rot7/a/f+Bm6//z1VRtfP/x9z/kjCTTPI/AAAA5CDm/peGmcj/AAAAUBsx978szET+BwAAgNqIuf/GMJNM8v9q+v+xc63/r/+v/1/S/y/Vqv/f9/z/5Uf6/9Wi/9+f/v8Azv+fV/9/xNtf7f7/qM//P/Fg9+31/+mlav3/mPtfHmaSSf4HAACAHMTcf1OYifwPAAAAtRFz/yvCTOR/AAAAqI2Y+7eFmWSS/53/X/9f/1//X/+/9/oH9/9L+v/Vov/fn/7/APr/+v/6/8P1/3t886v/Ty9V6//H3H9zmEkm+R8AAAByEHP/LWEm8j8AAADURsz9PxVmIv8DAABAbcTcvz3MJJP8r/+v/6//n1f//+6N+v/6//Wm/9+f/v8A+v/6//r/Q57/f7nL6f9vGnRn1EbV+v8x978yzCST/A8AAAA5iLn/VWEm8j8AAADURsz9rw4zkf8BAACgNmLunwozyST/6//Xq///p3/95KsL/X/9/wHrr2n/Px4G+v+Z0//vT/9/AP1//X/9/zXp/5OPqvX/Y+6/Ncwkk/wPAAAAOYi5/7YwE/kfAAAAaiPm/tvDTOR/AAAAqI2Y+3eEmWSS//X/69X/j/T/9f/7rb+m/f9E/z9v+v89tL1I9f8H0P/X/8++/x+/+9X/ZzSq1v+Puf81YSaZ5H8AAADIQcz9d4SZyP8AAABQGzH3vzbMRP4HAACA2oi5/84wk0zyv/6//r/+v/6//n/v9ev/r0/rq/+/adklVTv//0b9f/1//f/M+v/O/89oVa3/H3P/68JMMsn/AAAAkIOY++8KM5H/AQAAoDbi/7wr/9+r/A8AAAB1FHP/dJhJJvlf/1//P6f+f0P/X/9f/7/21lf/f7mq9f+d/1//X/9f/1//n9WoWv8/5v7Xh5lkkv8BAAAgBzH33xNmIv8DAABAbcTcPxNmIv8DAABAbcTcPxtmkkn+1//X/8+p/+/8//r/+v/1p//fn/7/APr/+v916/8Xhf4/11TV+v8x9+8MM8kk/wMAAEAOYu7fFWYi/wMAAEBtxNy/O8xE/gcAAIDaiLn/3jCTTPK//r/+v/5/Jfr/8S70//X/9f9XSf+/P/3/AfT/16Y/3+sbp/W0/SuoZP/f+f+5xqrW/4+5/74wk0zyPwAAAOQg5v49YSbyPwAAANRGzP17w0xC/r9K/z0JAAAAWEMx9+8LM8nk3//1/2vS///Nv+9Yt/7/uuv/r8Pz/2/W/w9T/79aatr/735ZXDH9/wH0/69af74YG8kmXrPt1//X/+fKVK3/H3P//jCTTPI/AAAA5CDm/jeEmcj/AAAAUBsx9/90mIn8DwAAALURc//PhJlkkv/1/2vS/++i/6//32/9zv+v/19nNe3/j0yt+v9j+v/rqf8/TH9+vW+//r/+P8td/f5//Gi4/n/M/feHmWSS/wEAACAHMff/bJiJ/A8AAAC1EXP/G8NM5H8AAACojZj7D4SZZJL/9f/1//X/9f+vTv//jUW3Kvb/mweP/n+9VLj/PzHM+vX/nf9f/39Ntr/7S81Itl//X/+f5ap2/v+Y+98UZpJJ/gcAAIAcxNz/QJiJ/A8AAAC1EXP/m8NM5H8AAACojZj73xJmkkn+1//X/9f/1/93/v/e69f/X58q3P8fiv6//r/+//rdfv1//X+Wq1r/P+b+B8NMMsn/AAAAkIOY+98aZiL/AwAAQG3E3P+2MBP5HwAAAGoj5v63h5lkkv/1//X/9f/1//X/e69f/3990v/vT/9/AP1//X/9f/1/Rqpq/f+Y+38uzCST/A8AAAA5iLn/oTAT+R8AAABqI+b+d4SZyP8AAABQGzH3vzPMJJP8r/+v/6//r/+v/997/fr/65P+f3/6/wPo/+v/6//r/zNSVev/x9z/rjCTTPI/AAAA5CDm/p8PM5H/AQAAoDZi7n93mIn8DwAAALURc/8vhJlkkv/1//X/q9X/XzrXfjv9f/3/YlT9/+aN9P+zoP/fn/7/AD36/5v0//X/9f/1/7liVev/x9z/njCTTPI/AAAA5CDm/veGmcj/AAAAUBsx978vzET+BwAAgNqIuf/hMJNM8r/+f5b9//SQq9f/d/5//X/n/9f/Xx39//70/wdw/n/9f/1//X9Gqmr9/5j7HwkzyST/AwAAQA5i7n9/mIn8DwAAALURc/8vhpnI/wAAAFAbMfd/IMwkk/yv/59l/7/C5/+vW/9/vOP4yKn/P9n2fKbjUv9f/38N6P/3p/8/gP6//n+V+//haN68wu31/6miqvX/Y+7/YJhJJvkfAAAAchBz/y+Fmcj/AAAAUBsx9/9ymIn8DwAAALURc/+vhJlkkv9r2P8/X+j/6/9Xpv/feXzk1P93/v/l9P/Xhv5/f/r/A+j/6/9Xuf8/gP4/VVS1/n/M/b8aZrJi8PvBfw3xMAEAAIAKibn/Q2Emmfz7PwAAAOQg5v6DYSbyPwAAANRGzP2Phplkkv9r2P9f5fn/4xlV9f/1/0fd/x/T/9f/1/9fA6Pr/7/i+qLQ/9f/1//X/9f/1/9nNarW/4+5/1CYSSb5HwAAAHIQc/+vhZnI/wAAAFAbMfcfDjOR/wEAAKDyxlMjuL+Y++fCTDLJ/9ew/z9Rzf5/3c7/3wj3ffX7/z/R/3f+/0D/vzf9/7Xh/P/96f8PoP+v/6//r//PSFWt/x9z/3yYSSb5HwAAAGos/Tg45v4jYSbyPwAAANRGzP1Hw0zkfwAAAKiNmPs/HGaSSf53/v+69/+d/7+a/f/xjuX1/0v6//r/o6D/35/+/wD6//r/+v/6/4xU1fr/MfcvhJlkkv8BAAAgBzH3fyTMRP4HAACA2oi5/6NhJvI/AAAA1EbM/cfCTDLJ//r/+v+59/8bRXHe+f/1/3utX/9/fdL/70//fwD9f/1//X/9f0aqav3/mPuPh5lkkv8BAPh/9u6jSa6ziuPwtVFcwUdgzYolrMxHYMuOKtZkk4MscgaTczAZkzMm2OScczY5R2OCoUqUpXOONNOtezWanul73/d5NsdSedQ91kjUn6lfXQB6kLv/fnGL/Q8AAADNyN1//7jF/gcAAIBm5O5/QNzSyf7X/+v/e+//h608/3/nv6//P0f/r//fhJX+/sj6f+9iUfhF+/+73u3qe+v/9f/6/1H6f/2//p/d5tb/5+5/YNzSyf4HAACAHuTuf1DcYv8DAABAM3L3Pzhusf8BAACgGbn7r45bOtn/+n/9v/5/Ef3/FflrHHj/f5P+X/+/bJ7/P07/P0H/r//X/+v/2ai59f+5+x8St3Sy/wEAAKAHufsfGrfY/wAAANCM3P0Pi1vsfwAAAGhG7v6Hxy2d7H/9v/5f/7+I/v/WG04d8/z/XZ+P/l//v47+f5z+f4L+X/+v/9f/s1Fz6/9z9z8ibulk/wMAAEAPcvc/Mm6x/wEAAKAZufsfFbfY/wAAANCM3P2Pjls62f/6f/2//n+D/f/pYRgOrP8f9P+7Ph/9v/5/neuG838n6P9X6f8nTPT/w6D/H3PJ/fz6T2857/8i9P/6f1bNrf/P3f+YuOUew3Dscj9JAAAAYFZy9z82bunk+/8AAADQg9z9p+IW+x8AAACakbv/mrilk/2v/9f/6/+X8vx//b/+X/9/KTz/f9z++/+73Om+9+m3//f8/3Ge/7/p/v/2rwz9P8s2t/4/d//puKWT/Q8AAAA9yN3/uLjF/gcAAIBm5O5/fNxi/wMAAEAzcvc/IW7pZP/r/1vr/++w4+Mu6P/P1i76f/3/5fT/R+tX0v/Pr/8/Mv3CndH/j/P8/wln/5o7WT/U/+v/Pf9f/8/+zK3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAABAM3L3PyVu6WT/6/9b6/93fpzn/+v/172+5/+31P9Pv25v9P/j9P8TWnn+/2V+1Wy7n9+vbb9//b/+n1Vz6/9z9z81bulk/wMAAEAPcvc/LW6x/wEAAKAZufufHrfY/wAAANCM3P3PiFs62f/6f/3/Mvr/fAX9v/7/4Pv/pP9fJv3/OP3/hFb6/8u07X5+6e9f/6//Z9Xc+v/c/c+MWzrZ/wAAANCD3P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9r/+X/+/jP7f8//1/57/r/+/NPr/cfr/Cfp//b/+X//PRs2t/8/df23c0sn+BwAAgB7k7n9u3GL/AwAAQDNy9z8vbtnL/j+66XcFAAAAbFLu/ufHLZ18/1//r//X/+v/9f/rX1//v0z6/3H6/wmd9//DNfp//b/+n82aUf9/wUedGF4Qt3Sy/wEAAKAHuftfGLfY/wAAANCM3P0vilvsfwAAAGhG7v4Xxy2d7P/2+v/jS+3/z+Z8bfX/J4dh6Lv/P7rr66On/v/kBb+f9XWp/9f/HwL9/zj9/4TO+/9t9/NLf//6f/0/q2bU/5/9ce7+l8Qtnex/AAAA6EHu/pfGLfY/AAAANCN3/8viFvsfAAAAmpG7/+VxSyf7v73+3/P/h9n0/57/v/vro6f+3/P/V+n/D4f+f5z+f4L+X/+v/9f/s1Fz6/9z978ibjp29LI/RQAAAGBmcve/Mm7p5Pv/AAAA0IPc/a+KW+x/AAAAWKhrV34md/+r45ZO9r/+f7P9/7ELfk7/r//f/fWh/9f/6/8Pnv5/nP5/gv5f/6//1/+zUXPr/3P3vyZu6WT/AwAAQA9y918Xt9j/AAAA0Izc/a+NW+x/AAAAaEbu/tfFLZ3sf/2/5//r//X/U/3/+ceh6v/1//On/x+n/5+g/9f/b7f/P37+H/X/tGEP/f+ZM2dOHXj/n7v/9XFLJ/sfAAAAepC7/w1xi/0PAAAAzcjd/8a4xf4HAACAZuTuf1Pc0sn+1/932v/nl/qy+v9rhkH/7/n/+n/9/zj9/zj9/wT9v/7f8//1/2zU3J7/n7v/zXFLJ/sfAAAAepC7/y1xi/0PAAAAzcjdf33cYv8DAABAM3L3vzVu6WT/6/877f89/1//r/8/7P7/tkH/fygW0f+fvPjrz73/P63/1/+P6K7/v+fdd/xQ/6//Z9Xc+v/c/W+LWzrZ/wAAANCD3P1vj1vsfwAAAGhG7v53xC32PwAAADQjd/8746Yjnex//b/+X/+v/9f/r3/9Q37+/7FhGPT/G7CI/n/E3Pv/zTz/f/ef8vP0//r/Jb9//b/+n1Vz6/9z978rbulk/wMAAEAPcve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/6f/2//l//33z/f3oR/b/n/2+I/n/cPPr/i2uj/z8yDPp//b/+X//PqG31/7n73xe3dLL/AQAAoAe5+98ft9j/AAAA0Izc/R+IW+x/AAAAaEbu/g/GLZ3sf/2//n8v/X++T/1/W/3/8dn1/yd2/HqdPP9f/78h+v9x+v8Jnv+v/9f/X6v/Z5Pm9vz/3P0fils62f8AAADQg9z9N8St/+vW/gcAAIBm5O7/cNxi/wMAAEAzcvd/JG7pZP/r//X/nv+v/2/++f/6/67o/8fp/yfo//X/+n/P/2ej5tb/5+7/aNzSyf4HAACAHuTu/1jcYv8DAABAM3L33xi32P8AAADQjNz9N8Utnex//b/+X/+v/9f/n/s91P+3Qf8/7nD6/5P6f/1/9fNXxJ8C/b/+f+rjadPc+v/c/R+PWzrZ/wAAANCD3P2fiFvsfwAAAGhG7v5Pxi32PwAAACzSkTU/l7v/U3FLJ/tf/6//1//r//X/619f/79MW+n/84tiVv3/uv9l8vz/Sfr/Pfbzd97xo6U9/3/3nxL9v/6fzZtb/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6//1//p//f/619f/L5Pn/4/T/0/Q/2/1+flLf//6f/0/q+bW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBlnd3/GZR3uf/2//l//r//X/69/ff3/Mun/x+n/J+j/9f/6f/0/GzW3/v9LZz/qxPDluKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP/r//X/y+j/z5w5c0r/r//f+fmc7/9v1v9T9P/j9P8T9P/6f/2//p+Nmlv/n7v/63FLJ/sfAAAAepC7/xtxi/0PAAAAzcjd/824xf4HAACAZuTu/1bc0sn+1//PoP8/of/3/H/9/+D5/6v9/5Xn/lLW/++N/n+c/n9Ci/3/iUv/9Lfdz+/Xtt+//l//z6q59f+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/+H1/7f/t+vl+f8nh/XvX/+v/9f/e/7/QdP/j9P/T2ix/9+DbffzS3//+n/9P6vm1v/n7v9+3LJz+B3d22cJAAAAzEnu/h/ELZ18/x8AAAB6kLv/h3GL/Q8AAADNyN3/o7ilk/2v/5/B8/8b7P89/3/914f+f9b9/5X6/zbo/8fp/yfo//X/+v8N9f/51az/793c+v/c/T+OWzrZ/wAAANCD3P0/iVvsfwAAAGhG7v6fxi32PwAAADQjd//NccsF+39d290K/b/+X/+v/9f/r399/f8y6f/HXWr/f3zYX/+f9P/6f/1/r/2/5/9zztz6/9z9P4tbfP8fAAAAFufoRX4+d//P4xb7HwAAAJqRu/8XcYv9DwAAAM3I3f/LuOWWK7f1lg6V/l//r//X/+v/17++/n+Z9P/jZvn8/+tvrH/U/zfR/1+l/2+j/x8G/T/7N7f+P3f/r+IW3/8HAACAZuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/9f/6/332/2fTTP3/Ofr/c/T/6+n/D4f+f9ws+/8L6P+b6P89/7+R/t/z/9mEufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8Z9a/7/4/t/z//X/+n/9/6zo/8fp/yfo//X/+n/9Pxs1t/4/d/+f4pZO9j8AAAD0IHf/n+MW+x8AAACakbv/L3GL/Q8AAADNyN3/17ilk/3v+f/6f/2//l//v/719f/LpP8fp/9fr36j9P/6f/2//p+Nmlv/n7v/b3FLJ/sfAAAAepC7/+9xi/0PAAAAzcjdf0vcYv8DAABAM3L3/yNu6WT/6//1//p//b/+f/3r6/+XSf8/bpv9/73uOP2ynv+/9f4/34L+X/+v/2cj5tb/5+6/NW7pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/8foX9f+j9P8737/+f/3Xh/5f/6//P3j6/3HLef5/fLz+fwfP/5/3+9f/6/9ZNbf+P3f/f+KWTvY/AAAA9CB3/21xi/0PAAAAzcjd/9+4xf4HAACAZuTu/1/c0sn+9/z/JfX/V+n/9f/6f/2//n+C/n/ccvp/z/9fR/8/7/ev/9f/s2pu/X/u/v8HAAD//8r1Pfg=") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) 1.189618247s ago: executing program 0 (id=3727): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d, 0x8}) 1.189169677s ago: executing program 2 (id=3728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000028020000090a010400000000000000000700000908000a40000000000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d6574610000000014000280080001400000000d080002400000001c0800044000000002080005400000001e08000f40100000010c00104000000000"], 0x270}, 0x1, 0x0, 0x0, 0x5}, 0xc0) 1.05562651s ago: executing program 0 (id=3729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in6=@local, @in=@multicast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}]}]}, 0xec}}, 0x0) 981.310091ms ago: executing program 2 (id=3730): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201088a, &(0x7f0000000840)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="0087997eddfe262c258cc464583d629220511a3d1bc3d46d648abc90f6538788ab3497e3d01477fd8c4381b6ff4efe7bc916b9e232fd94a49a240af6c7f54c252f278f84e6b52a000a9f1acd00422a562996f100c25190549b261c197b5606bd50f05e38f22cb30aae0622bf93cbaa876455c9ba217409a9b21b7dac85bdfffc4e6bc72559fc9441c8b97483caf57066464dfc8d302d74a627a84ed3726fafd68f71d70baa59c7a4c50ee33db58e8785d4da74f21bfe423b996d78a3adf872da8b387d926f6d53195e1260c34cca00"/219, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x7, 0x6161, &(0x7f0000000a80)="$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") setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) 913.672892ms ago: executing program 0 (id=3731): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f00000005c0)) 801.953764ms ago: executing program 0 (id=3732): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a0905825f2f"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0}, 0x0) 659.286417ms ago: executing program 3 (id=3733): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x300, 0x8}}) 483.763301ms ago: executing program 3 (id=3734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@allocspi={0x11c, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2}, 0x0, 0x5}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) 399.475262ms ago: executing program 3 (id=3735): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f89000000200000495101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) 246.715285ms ago: executing program 3 (id=3736): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) 88.405408ms ago: executing program 4 (id=3737): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7071, 0x0, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}}}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="0000fffffffffffffffffffffffd2e"], 0x48) 713.75µs ago: executing program 3 (id=3738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x2, 0x2) 0s ago: executing program 2 (id=3739): r0 = socket(0x2a, 0x2, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x10, 0x0, 0x27, 0xfffffffd}}) kernel console output (not intermixed with test programs): 5212][ T1110] r8152-cfgselector 1-1: bad CDC descriptors [ 153.351806][ T4194] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 153.365890][ T1110] r8152-cfgselector 1-1: Unknown version 0x0000 [ 153.375499][ T1110] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 153.400541][ T4194] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 153.453402][ T8454] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 153.456237][ T4194] visor 5-1:1.0: device disconnected [ 153.513953][ T8458] loop1: detected capacity change from 0 to 128 [ 153.582614][ T8458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.603115][ T8458] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.860110][ T8482] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 154.009812][ T8495] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1957'. [ 154.234327][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 154.255857][ T4194] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.273779][ T8507] loop4: detected capacity change from 0 to 4096 [ 154.320015][ T8520] 9pnet: Insufficient options for proto=fd [ 154.384332][ T8507] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 154.455399][ T8507] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 154.462629][ T1110] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.496000][ T4194] usb 2-1: Using ep0 maxpacket: 8 [ 154.601376][ T9] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 154.615944][ T4194] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 154.625384][ T4186] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 154.755826][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 154.785791][ T4194] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 154.811155][ T4291] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.816512][ T4194] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 154.830112][ T4194] usb 2-1: Product: syz [ 154.834304][ T4194] usb 2-1: Manufacturer: syz [ 154.845240][ T4194] usb 2-1: SerialNumber: syz [ 154.895839][ T1110] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 154.904291][ T1110] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 154.913278][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 154.922487][ T1110] usb 3-1: config 1 has no interface number 0 [ 154.928842][ T1110] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.940340][ T1110] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.950372][ T1110] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 154.964260][ T1110] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 154.973578][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.988703][ T8536] loop0: detected capacity change from 0 to 32768 [ 155.018164][ T1110] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 155.049730][ T8536] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 155.069734][ T8536] (syz.0.1970,8536,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 155.087720][ T4291] usb 4-1: Using ep0 maxpacket: 8 [ 155.093545][ T8536] (syz.0.1970,8536,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 155.104548][ T8536] (syz.0.1970,8536,1):ocfs2_mknod:298 ERROR: status = -2 [ 155.112115][ T8536] (syz.0.1970,8536,1):ocfs2_mknod:502 ERROR: status = -2 [ 155.119591][ T8536] (syz.0.1970,8536,1):ocfs2_mkdir:659 ERROR: status = -2 [ 155.136952][ T4194] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 155.145838][ T6722] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 155.155513][ T4194] usb 2-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 155.175017][ T4194] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 155.185582][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 155.200209][ T4194] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 155.226505][ T1110] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 155.233149][ T4291] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 155.243284][ T1110] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 155.251735][ T4291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.273181][ T1110] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 155.282753][ T4291] usb 4-1: config 0 has no interface number 0 [ 155.307888][ T4291] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 155.335831][ T4291] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.347946][ T4194] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 155.355747][ T4291] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.364905][ T4194] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 155.390007][ T4291] usb 4-1: config 0 interface 52 has no altsetting 0 [ 155.411600][ T4194] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 155.432091][ T8552] loop0: detected capacity change from 0 to 128 [ 155.441501][ T4194] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 155.502602][ T4194] usb 2-1: USB disconnect, device number 13 [ 155.533640][ T7] usb 3-1: USB disconnect, device number 14 [ 155.545895][ T6722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.567010][ T6722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.568560][ T4194] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 155.595901][ T4291] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 155.614030][ T6722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.624094][ T4291] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 155.629462][ T4194] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 155.637528][ T6722] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.651264][ T4194] visor 2-1:1.0: device disconnected [ 155.660816][ T4291] usb 4-1: Product: syz [ 155.682510][ T4291] usb 4-1: Manufacturer: syz [ 155.688219][ T4291] usb 4-1: SerialNumber: syz [ 155.699535][ T4291] usb 4-1: config 0 descriptor?? [ 155.707903][ T6722] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 155.725529][ T6722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.750082][ T6722] usb 5-1: config 0 descriptor?? [ 155.797984][ T6722] gspca_main: spca561-2.14.0 probing abcd:cdee [ 156.009867][ T8576] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1987'. [ 156.086062][ T6722] spca561: probe of 5-1:0.0 failed with error -22 [ 156.098953][ T6722] usb 5-1: MIDIStreaming interface descriptor not found [ 156.122939][ T8582] loop1: detected capacity change from 0 to 512 [ 156.159818][ T6722] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 156.189824][ T8582] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.203359][ T6722] usb 5-1: USB disconnect, device number 13 [ 156.215018][ T8582] EXT4-fs error (device loop1): ext4_quota_enable:6413: comm syz.1.1991: Bad quota inum: 11, type: 1 [ 156.224133][ T5029] udevd[5029]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.246788][ T4291] usb 4-1: USB disconnect, device number 11 [ 156.256317][ T8582] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 156.273021][ T8582] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 156.280117][ T8582] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.445078][ T8595] loop1: detected capacity change from 0 to 1024 [ 156.487565][ T26] audit: type=1800 audit(1756953814.100:11): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1997" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 156.512827][ T4876] hfsplus: b-tree write err: -5, ino 4 [ 156.635821][ T1110] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.713335][ T8599] loop1: detected capacity change from 0 to 256 [ 156.819729][ T8599] FAT-fs (loop1): Directory bread(block 64) failed [ 156.832135][ T8599] FAT-fs (loop1): Directory bread(block 65) failed [ 156.840343][ T8599] FAT-fs (loop1): Directory bread(block 66) failed [ 156.870833][ T8599] FAT-fs (loop1): Directory bread(block 67) failed [ 156.875699][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 156.880742][ T8599] FAT-fs (loop1): Directory bread(block 68) failed [ 156.894892][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 156.905753][ T8599] FAT-fs (loop1): Directory bread(block 69) failed [ 156.912401][ T8599] FAT-fs (loop1): Directory bread(block 70) failed [ 156.920278][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 156.930756][ T8599] FAT-fs (loop1): Directory bread(block 71) failed [ 156.945808][ T8599] FAT-fs (loop1): Directory bread(block 72) failed [ 156.961677][ T8599] FAT-fs (loop1): Directory bread(block 73) failed [ 156.995835][ T1110] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 157.004535][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.019198][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.059970][ T1110] usb 3-1: config 0 has no interface number 0 [ 157.191045][ T8613] overlayfs: missing 'lowerdir' [ 157.255891][ T1110] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 157.282347][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.285747][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 157.291851][ T1110] usb 3-1: Product: syz [ 157.299753][ T1110] usb 3-1: Manufacturer: syz [ 157.304467][ T1110] usb 3-1: SerialNumber: syz [ 157.327110][ T1110] usb 3-1: config 0 descriptor?? [ 157.342269][ T8603] loop4: detected capacity change from 0 to 32768 [ 157.371095][ T8618] xt_CT: No such helper "syz0" [ 157.378025][ T1110] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 157.384703][ T1110] usb 3-1: No valid video chain found. [ 157.408558][ T8603] [ 157.408558][ T8603] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.408558][ T8603] [ 157.444307][ T8624] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2011'. [ 157.454314][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 157.464045][ T8603] ERROR: (device loop4): ea_get: invalid ea.flag [ 157.464045][ T8603] [ 157.515093][ T8603] ERROR: (device loop4): remounting filesystem as read-only [ 157.527582][ T8624] team0: Port device bond0 removed [ 157.553723][ T8624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.581406][ T1110] usb 3-1: USB disconnect, device number 15 [ 157.615955][ T8624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.650904][ T8624] bond0 (unregistering): Released all slaves [ 157.678668][ T7] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 157.699547][ T7] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 157.720529][ T7] usb 4-1: Product: syz [ 157.724891][ T7] usb 4-1: Manufacturer: syz [ 157.735755][ T7] usb 4-1: SerialNumber: syz [ 157.776373][ T8631] loop4: detected capacity change from 0 to 1024 [ 157.974107][ T8641] loop1: detected capacity change from 0 to 4096 [ 158.025797][ T7] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 158.037673][ T7] usb 4-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 158.047629][ T7] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 158.070950][ T7] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 158.085282][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 158.121298][ T8641] ntfs: volume version 3.1. [ 158.160627][ T8641] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 158.191030][ T8641] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 158.212258][ T8641] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 158.225846][ T8641] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 158.239844][ T8641] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 158.250726][ T8641] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 158.275686][ T7] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 158.283978][ T7] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 158.325891][ T7] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 158.348777][ T7] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 158.385848][ T7] usb 4-1: USB disconnect, device number 12 [ 158.428310][ T7] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 158.475745][ T4194] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 158.494692][ T7] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 158.512936][ T7] visor 4-1:1.0: device disconnected [ 158.710690][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 158.753921][ T8678] loop2: detected capacity change from 0 to 1024 [ 158.852638][ T26] audit: type=1800 audit(1756953816.470:12): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2035" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 158.881852][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 158.895761][ T4194] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.900037][ T897] hfsplus: b-tree write err: -5, ino 4 [ 158.935942][ T4194] usb 5-1: not running at top speed; connect to a high speed hub [ 159.054845][ T8687] loop0: detected capacity change from 0 to 4096 [ 159.090817][ T4194] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 159.105892][ T4194] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 159.127811][ T4194] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 159.138335][ T8699] loop2: detected capacity change from 0 to 8 [ 159.169393][ T8701] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.180733][ T4194] usb 5-1: config 128 has no interface number 0 [ 159.188953][ T4194] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 159.201158][ T4194] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.201640][ T8687] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 159.213422][ T4194] usb 5-1: config 128 interface 127 has no altsetting 0 [ 159.233482][ T8699] SQUASHFS error: Failed to read block 0x1ec: -5 [ 159.245779][ T8699] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 159.254061][ T8687] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 159.283292][ T8687] Remounting filesystem read-only [ 159.295159][ T8687] NILFS (loop0): error -5 truncating bmap (ino=12) [ 159.400762][ T8708] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.414809][ T4183] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 159.435983][ T4194] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 159.455746][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.484430][ T4194] usb 5-1: Product: syz [ 159.488820][ T4194] usb 5-1: Manufacturer: syz [ 159.508187][ T4194] usb 5-1: SerialNumber: syz [ 159.557485][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 159.567447][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 159.631088][ T8718] ip6t_srh: unknown srh invflags 92A7 [ 159.764308][ T8725] loop2: detected capacity change from 0 to 1024 [ 159.912387][ T8734] device erspan1 entered promiscuous mode [ 159.958594][ T4194] usb 5-1: USB disconnect, device number 14 [ 160.170785][ T8742] XFS (nullb0): Invalid superblock magic number [ 160.220772][ T8758] netlink: 'syz.2.2072': attribute type 13 has an invalid length. [ 160.238896][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.329763][ T8764] netlink: 494 bytes leftover after parsing attributes in process `syz.3.2075'. [ 160.561008][ T8769] loop4: detected capacity change from 0 to 4096 [ 160.631960][ T8769] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 160.677249][ T8769] ntfs3: loop4: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 160.877985][ T8785] loop2: detected capacity change from 0 to 4096 [ 161.039729][ T8799] loop0: detected capacity change from 0 to 1024 [ 161.050971][ T8785] ntfs: volume version 3.1. [ 161.078065][ T8785] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 161.111373][ T8785] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 161.148726][ T8785] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 161.410563][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 161.552497][ T8811] xt_CT: No such helper "syz0" [ 161.684237][ T8822] ip6t_srh: unknown srh invflags 92A7 [ 161.775526][ T8821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.812081][ T8791] loop3: detected capacity change from 0 to 32768 [ 161.847002][ T8821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.899873][ T8828] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 161.907838][ T8821] bond0 (unregistering): Released all slaves [ 161.913383][ T8788] loop1: detected capacity change from 0 to 40427 [ 162.006052][ T8788] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 162.043437][ T8788] F2FS-fs (loop1): invalid crc value [ 162.084820][ T8788] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.225737][ T4291] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.236668][ T8788] F2FS-fs (loop1): recover fsync data on readonly fs [ 162.290305][ T8788] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 162.321568][ T8788] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 162.377439][ T8788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.502759][ T8788] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 162.525797][ T8788] F2FS-fs (loop1): Unrecognized mount option "_unit=block" or missing value [ 162.605855][ T4291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.618221][ T8857] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 162.635754][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.660858][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.685679][ T4291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.716182][ T4291] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 162.732254][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.773941][ T4291] usb 3-1: config 0 descriptor?? [ 162.833286][ T4291] gspca_main: spca561-2.14.0 probing abcd:cdee [ 163.004277][ T8845] loop0: detected capacity change from 0 to 32768 [ 163.031267][ T8865] __nla_validate_parse: 1 callbacks suppressed [ 163.031285][ T8865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2124'. [ 163.043044][ T8855] loop3: detected capacity change from 0 to 32768 [ 163.110140][ T8855] [ 163.110140][ T8855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.110140][ T8855] [ 163.121091][ T4291] spca561: probe of 3-1:0.0 failed with error -22 [ 163.123311][ T8845] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 163.127722][ T6722] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.147409][ T4291] usb 3-1: MIDIStreaming interface descriptor not found [ 163.148541][ T8865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.178868][ T4291] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 163.179631][ T8855] ERROR: (device loop3): ea_get: invalid ea.flag [ 163.179631][ T8855] [ 163.195007][ T4291] usb 3-1: USB disconnect, device number 16 [ 163.215184][ T8865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.240252][ T8865] bond0 (unregistering): Released all slaves [ 163.248692][ T8855] ERROR: (device loop3): remounting filesystem as read-only [ 163.359895][ T4183] XFS (loop0): Unmounting Filesystem [ 163.363165][ T8875] netlink: 'syz.3.2125': attribute type 13 has an invalid length. [ 163.400510][ T5485] udevd[5485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.520721][ T6722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.547885][ T6722] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.585784][ T6722] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 163.637424][ T6722] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.755886][ T6722] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.765580][ T6722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.825247][ T6722] usb 5-1: SerialNumber: syz [ 164.122898][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 164.159295][ T6722] usb 5-1: 0:2 : does not exist [ 164.167762][ T8919] netlink: 'syz.3.2147': attribute type 6 has an invalid length. [ 164.174434][ T6722] usb 5-1: unit 5 not found! [ 164.176138][ T8919] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2147'. [ 164.211372][ T1110] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.228515][ T6722] usb 5-1: USB disconnect, device number 15 [ 164.243504][ T8921] loop3: detected capacity change from 0 to 1764 [ 164.405985][ T4291] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.440813][ T4194] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.452753][ T8927] loop3: detected capacity change from 0 to 256 [ 164.461312][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.475794][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 164.593777][ T8927] FAT-fs (loop3): Directory bread(block 64) failed [ 164.596894][ T1110] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 164.614150][ T8927] FAT-fs (loop3): Directory bread(block 65) failed [ 164.616858][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.626510][ T8927] FAT-fs (loop3): Directory bread(block 66) failed [ 164.635549][ T8927] FAT-fs (loop3): Directory bread(block 67) failed [ 164.653611][ T8927] FAT-fs (loop3): Directory bread(block 68) failed [ 164.661530][ T8927] FAT-fs (loop3): Directory bread(block 69) failed [ 164.670971][ T1110] usb 3-1: config 0 descriptor?? [ 164.680925][ T8927] FAT-fs (loop3): Directory bread(block 70) failed [ 164.691190][ T8927] FAT-fs (loop3): Directory bread(block 71) failed [ 164.701375][ T8927] FAT-fs (loop3): Directory bread(block 72) failed [ 164.710935][ T8927] FAT-fs (loop3): Directory bread(block 73) failed [ 164.718041][ T1110] gspca_main: sq930x-2.14.0 probing 041e:403c [ 164.721063][ T4194] usb 1-1: Using ep0 maxpacket: 32 [ 164.786249][ T4291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.800823][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.812072][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 164.822061][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.841609][ T4291] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 164.845526][ T8933] loop4: detected capacity change from 0 to 4096 [ 164.851195][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.866347][ T4291] usb 2-1: config 0 descriptor?? [ 164.885974][ T4194] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 164.894825][ T4194] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 164.904043][ T4194] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 164.913355][ T4194] usb 1-1: config 1 has no interface number 0 [ 164.913758][ T4291] gspca_main: spca561-2.14.0 probing abcd:cdee [ 164.919763][ T4194] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.919790][ T4194] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.947416][ T4194] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 164.964048][ T4194] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 164.974411][ T4194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.039765][ T8933] ntfs: volume version 3.1. [ 165.048554][ T4194] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 165.085948][ T8933] __ntfs_error: 3 callbacks suppressed [ 165.085964][ T8933] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 165.119172][ T8933] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 165.139285][ T8933] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 165.171599][ T8933] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 165.190230][ T1110] gspca_sq930x: ucbus_write failed -71 [ 165.197109][ T4291] spca561: probe of 2-1:0.0 failed with error -22 [ 165.204707][ T4291] usb 2-1: MIDIStreaming interface descriptor not found [ 165.231681][ T1110] sq930x: probe of 3-1:0.0 failed with error -71 [ 165.256394][ T1110] usb 3-1: USB disconnect, device number 17 [ 165.273353][ T8933] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 165.281690][ T4194] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 165.304043][ T4194] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 165.317493][ T4291] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 165.325127][ T8933] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 165.332816][ T4194] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 165.352030][ T8945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.372510][ T4291] usb 2-1: USB disconnect, device number 14 [ 165.466697][ T8947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2161'. [ 165.530332][ T1110] usb 1-1: USB disconnect, device number 14 [ 165.598333][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 165.756833][ T8960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2176'. [ 165.874990][ T8971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2172'. [ 166.109233][ T8987] loop3: detected capacity change from 0 to 64 [ 166.129514][ T8985] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2181'. [ 166.245073][ T8985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.258767][ T8996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.294110][ T8985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.325151][ T8985] bond0 (unregistering): Released all slaves [ 166.498122][ T9009] loop3: detected capacity change from 0 to 128 [ 166.533752][ T9011] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2192'. [ 166.829507][ T9030] loop3: detected capacity change from 0 to 512 [ 166.859651][ T6626] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.891772][ T9038] openvswitch: netlink: Message has 4 unknown bytes. [ 166.926388][ T9041] sctp: [Deprecated]: syz.1.2206 (pid 9041) Use of int in maxseg socket option. [ 166.926388][ T9041] Use struct sctp_assoc_value instead [ 166.991615][ T9030] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,noinit_itable,,errors=continue. Quota mode: writeback. [ 167.046781][ T9030] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.176016][ T6626] usb 5-1: Using ep0 maxpacket: 32 [ 167.305915][ T6626] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 167.324361][ T6626] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.353553][ T6626] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.384038][ T9069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2220'. [ 167.393937][ T6626] usb 5-1: config 1 has no interface number 0 [ 167.412439][ T6626] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.450829][ T6626] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.494792][ T6626] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.548133][ T6626] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.586449][ T6626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.662740][ T6626] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 167.723764][ T9087] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2229'. [ 167.758260][ T9087] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 167.876661][ T6626] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 167.883401][ T6626] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 167.911362][ T6626] snd_usb_pod: probe of 5-1:1.1 failed with error -90 [ 168.112163][ T6626] usb 5-1: USB disconnect, device number 16 [ 168.173551][ T9110] loop1: detected capacity change from 0 to 64 [ 168.203968][ T9111] loop3: detected capacity change from 0 to 1024 [ 168.233306][ T9062] loop2: detected capacity change from 0 to 32768 [ 168.252111][ T9115] netlink: 'syz.0.2243': attribute type 11 has an invalid length. [ 168.397219][ T9123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2244'. [ 168.407779][ T9062] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 168.428035][ T4286] hfsplus: b-tree write err: -5, ino 4 [ 168.597522][ T4184] XFS (loop2): Unmounting Filesystem [ 168.913225][ T9151] loop3: detected capacity change from 0 to 256 [ 168.966852][ T4232] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 168.989121][ T9151] exfat: Deprecated parameter 'utf8' [ 168.994570][ T9151] exfat: Deprecated parameter 'utf8' [ 169.014330][ T9151] exfat: Deprecated parameter 'namecase' [ 169.043156][ T9151] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 169.169255][ T9162] netlink: 'syz.2.2261': attribute type 2 has an invalid length. [ 169.195724][ T9162] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 169.215294][ T9162] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2261'. [ 169.235679][ T9165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2258'. [ 169.381497][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.424397][ T9177] loop2: detected capacity change from 0 to 512 [ 169.425083][ T9165] team0: Port device bond0 removed [ 169.436032][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 169.463872][ T9165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.491858][ T9177] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 169.511127][ T9177] EXT4-fs (loop2): Ignoring removed bh option [ 169.517728][ T4232] usb 5-1: config 7 has an invalid interface number: 12 but max is 0 [ 169.528327][ T4232] usb 5-1: config 7 has no interface number 0 [ 169.534940][ T9165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.553584][ T9177] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.561650][ T4232] usb 5-1: config 7 interface 12 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 169.588928][ T9177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.605212][ T4232] usb 5-1: config 7 interface 12 has no altsetting 0 [ 169.651002][ T9165] bond0 (unregistering): Released all slaves [ 169.668707][ T9177] EXT4-fs (loop2): 1 truncate cleaned up [ 169.674385][ T9177] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 169.785998][ T4232] usb 5-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=7f.99 [ 169.795089][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.814111][ T4232] usb 5-1: Product: syz [ 169.818829][ T4232] usb 5-1: Manufacturer: syz [ 169.842932][ T4232] usb 5-1: SerialNumber: syz [ 170.049210][ T9198] loop0: detected capacity change from 0 to 1024 [ 170.097898][ T9208] loop3: detected capacity change from 0 to 256 [ 170.137996][ T4232] hdpvr 5-1:7.12: Could not find bulk-in endpoint [ 170.144495][ T4232] hdpvr: probe of 5-1:7.12 failed with error -12 [ 170.191143][ T4232] usb 5-1: USB disconnect, device number 17 [ 170.231177][ T9] hfsplus: b-tree write err: -5, ino 4 [ 170.361459][ T9218] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2287'. [ 170.646303][ T9240] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2297'. [ 170.680998][ T9240] netlink: 'syz.3.2297': attribute type 3 has an invalid length. [ 170.817260][ T9255] Unsupported ieee802154 address type: 0 [ 171.055767][ T4232] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.305889][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 171.409513][ T9300] loop2: detected capacity change from 0 to 128 [ 171.430683][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 171.459784][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.461363][ T4232] usb 2-1: config 0 descriptor?? [ 171.500548][ T4232] gspca_main: sq930x-2.14.0 probing 041e:403c [ 171.519919][ T9300] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.528944][ T9300] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.722958][ T9314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2333'. [ 171.758028][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 171.768885][ T9314] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2333'. [ 171.816611][ T9314] netlink: 'syz.0.2333': attribute type 3 has an invalid length. [ 171.863935][ T9314] netlink: 'syz.0.2333': attribute type 2 has an invalid length. [ 171.935764][ T4232] gspca_sq930x: ucbus_write failed -71 [ 171.943899][ T4232] sq930x: probe of 2-1:0.0 failed with error -71 [ 171.981970][ T4232] usb 2-1: USB disconnect, device number 15 [ 172.059793][ T9328] loop3: detected capacity change from 0 to 2048 [ 172.073202][ T9334] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 172.089409][ T9334] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 172.178876][ T9342] loop0: detected capacity change from 0 to 512 [ 172.201613][ T9328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.215289][ T9342] EXT4-fs (loop0): Ignoring removed nobh option [ 172.227938][ T9345] loop2: detected capacity change from 0 to 256 [ 172.234642][ T9342] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 172.250541][ T9342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 172.260044][ T9342] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.283925][ T9342] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2346: attempt to clear invalid blocks 1024 len 1 [ 172.324701][ T9342] EXT4-fs (loop0): Remounting filesystem read-only [ 172.337327][ T9345] FAT-fs (loop2): Directory bread(block 64) failed [ 172.345414][ T9345] FAT-fs (loop2): Directory bread(block 65) failed [ 172.361755][ T9342] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2346: bg 0: block 361: padding at end of block bitmap is not set [ 172.364984][ T9345] FAT-fs (loop2): Directory bread(block 66) failed [ 172.383225][ T9345] FAT-fs (loop2): Directory bread(block 67) failed [ 172.390631][ T9345] FAT-fs (loop2): Directory bread(block 68) failed [ 172.418002][ T9345] FAT-fs (loop2): Directory bread(block 69) failed [ 172.424886][ T9342] EXT4-fs (loop0): Remounting filesystem read-only [ 172.435708][ T9342] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 172.446489][ T9345] FAT-fs (loop2): Directory bread(block 70) failed [ 172.453134][ T9345] FAT-fs (loop2): Directory bread(block 71) failed [ 172.460813][ T9345] FAT-fs (loop2): Directory bread(block 72) failed [ 172.467869][ T9342] EXT4-fs (loop0): Remounting filesystem read-only [ 172.475892][ T9342] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2346: invalid indirect mapped block 1811939328 (level 0) [ 172.502110][ T9345] FAT-fs (loop2): Directory bread(block 73) failed [ 172.530892][ T9356] loop1: detected capacity change from 0 to 512 [ 172.546998][ T9357] loop4: detected capacity change from 0 to 8 [ 172.553551][ T9342] EXT4-fs (loop0): Remounting filesystem read-only [ 172.573795][ T9342] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2346: invalid indirect mapped block 2185560079 (level 1) [ 172.589064][ T9342] EXT4-fs (loop0): Remounting filesystem read-only [ 172.597585][ T9342] EXT4-fs (loop0): 1 truncate cleaned up [ 172.603457][ T9342] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 172.675270][ T9356] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.702202][ T9356] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.736673][ T9357] SQUASHFS error: Failed to read block 0x63a: -5 [ 172.743548][ T9357] SQUASHFS error: Unable to read metadata cache entry [638] [ 172.751316][ T9357] SQUASHFS error: Unable to read directory block [26067d:0] [ 172.998758][ T9383] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2365'. [ 173.030836][ T9383] openvswitch: netlink: ct_state flags 00030000 unsupported [ 173.040671][ T9388] loop3: detected capacity change from 0 to 128 [ 173.074603][ T9390] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 173.096422][ T9390] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2368'. [ 173.151486][ T9395] loop2: detected capacity change from 0 to 512 [ 173.166875][ T9388] Process accounting resumed [ 173.172646][ T9388] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 173.173663][ T9396] netlink: 'syz.4.2370': attribute type 3 has an invalid length. [ 173.198863][ T9395] EXT4-fs (loop2): Ignoring removed nobh option [ 173.215753][ T9388] FAT-fs (loop3): Filesystem has been set read-only [ 173.230338][ T9395] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 173.242333][ T6622] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 173.258409][ T9395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 173.262333][ T9396] netlink: 'syz.4.2370': attribute type 2 has an invalid length. [ 173.271035][ T9395] EXT4-fs (loop2): orphan cleanup on readonly fs [ 173.281545][ T9395] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2369: attempt to clear invalid blocks 1024 len 1 [ 173.298251][ T9395] EXT4-fs (loop2): Remounting filesystem read-only [ 173.300484][ T6626] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 173.392023][ T9395] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2369: bg 0: block 361: padding at end of block bitmap is not set [ 173.393094][ T9405] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 173.393116][ T9405] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 173.399029][ T9395] EXT4-fs (loop2): Remounting filesystem read-only [ 173.399054][ T9395] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 173.399400][ T9395] EXT4-fs (loop2): Remounting filesystem read-only [ 173.399702][ T9395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2369: invalid indirect mapped block 1811939328 (level 0) [ 173.400012][ T9395] EXT4-fs (loop2): Remounting filesystem read-only [ 173.400055][ T9395] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2369: invalid indirect mapped block 2185560079 (level 1) [ 173.400365][ T9395] EXT4-fs (loop2): Remounting filesystem read-only [ 173.400576][ T9395] EXT4-fs (loop2): 1 truncate cleaned up [ 173.400596][ T9395] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 173.710035][ T6622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.760885][ T6622] usb 2-1: not running at top speed; connect to a high speed hub [ 173.848073][ T9422] loop0: detected capacity change from 0 to 64 [ 173.876095][ T6622] usb 2-1: config 4 has an invalid interface number: 32 but max is 0 [ 173.876123][ T6622] usb 2-1: config 4 has no interface number 0 [ 173.986408][ T9427] loop4: detected capacity change from 0 to 128 [ 174.000628][ T9431] loop2: detected capacity change from 0 to 8 [ 174.031983][ T9427] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.041336][ T9427] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.059067][ T9431] SQUASHFS error: Failed to read block 0x63a: -5 [ 174.059113][ T9431] SQUASHFS error: Unable to read metadata cache entry [638] [ 174.059126][ T9431] SQUASHFS error: Unable to read directory block [26067d:0] [ 174.068138][ T6622] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 174.068206][ T6622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.068229][ T6622] usb 2-1: Product: syz [ 174.068245][ T6622] usb 2-1: Manufacturer: syz [ 174.068274][ T6622] usb 2-1: SerialNumber: syz [ 174.491046][ T6622] usb 2-1: Found UVC 0.02 device syz (17dc:0202) [ 174.491077][ T6622] usb 2-1: No valid video chain found. [ 174.501348][ T6622] usb 2-1: USB disconnect, device number 16 [ 174.745923][ T9465] __nla_validate_parse: 5 callbacks suppressed [ 174.745940][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 174.815825][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 174.832027][ T9471] loop4: detected capacity change from 0 to 256 [ 174.843249][ T9463] loop0: detected capacity change from 0 to 4096 [ 174.874192][ T9473] tmpfs: Bad value for 'mpol' [ 174.945911][ T9471] FAT-fs (loop4): Directory bread(block 64) failed [ 174.945951][ T9471] FAT-fs (loop4): Directory bread(block 65) failed [ 174.946065][ T9471] FAT-fs (loop4): Directory bread(block 66) failed [ 174.946134][ T9471] FAT-fs (loop4): Directory bread(block 67) failed [ 174.946204][ T9471] FAT-fs (loop4): Directory bread(block 68) failed [ 174.946236][ T9471] FAT-fs (loop4): Directory bread(block 69) failed [ 174.946305][ T9471] FAT-fs (loop4): Directory bread(block 70) failed [ 174.946337][ T9471] FAT-fs (loop4): Directory bread(block 71) failed [ 174.946435][ T9471] FAT-fs (loop4): Directory bread(block 72) failed [ 174.946501][ T9471] FAT-fs (loop4): Directory bread(block 73) failed [ 175.012094][ T9463] ntfs3: loop0: ino=5, "/" directory corrupted [ 175.144846][ T9485] loop1: detected capacity change from 0 to 256 [ 175.536233][ T9507] tmpfs: Bad value for 'mpol' [ 175.811906][ T9526] loop4: detected capacity change from 0 to 164 [ 176.404959][ T9576] loop4: detected capacity change from 0 to 256 [ 176.462258][ T9578] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 176.580021][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 176.730804][ T9594] loop3: detected capacity change from 0 to 256 [ 176.858484][ T9594] FAT-fs (loop3): Directory bread(block 64) failed [ 176.865127][ T9594] FAT-fs (loop3): Directory bread(block 65) failed [ 176.894365][ T9616] loop2: detected capacity change from 0 to 256 [ 176.910303][ T9610] loop1: detected capacity change from 0 to 4096 [ 176.921068][ T9594] FAT-fs (loop3): Directory bread(block 66) failed [ 176.938669][ T9594] FAT-fs (loop3): Directory bread(block 67) failed [ 176.945487][ T9594] FAT-fs (loop3): Directory bread(block 68) failed [ 176.956110][ T9616] exfat: Deprecated parameter 'utf8' [ 176.961450][ T9616] exfat: Deprecated parameter 'namecase' [ 176.967781][ T9594] FAT-fs (loop3): Directory bread(block 69) failed [ 176.970186][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 176.981519][ T9610] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 176.995280][ T9616] exfat: Deprecated parameter 'utf8' [ 177.001550][ T9594] FAT-fs (loop3): Directory bread(block 70) failed [ 177.030062][ T9616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 177.061031][ T9594] FAT-fs (loop3): Directory bread(block 71) failed [ 177.061303][ T9610] ntfs3: loop1: failed to convert "c46c" to koi8-ru [ 177.067824][ T9594] FAT-fs (loop3): Directory bread(block 72) failed [ 177.111242][ T9594] FAT-fs (loop3): Directory bread(block 73) failed [ 177.227107][ T26] audit: type=1800 audit(1756953834.850:13): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2470" name="file7" dev="loop3" ino=1048615 res=0 errno=0 [ 177.487506][ T9648] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 177.511606][ T9650] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 177.524073][ T9648] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2494'. [ 177.749071][ T9659] loop3: detected capacity change from 0 to 1024 [ 177.760865][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 177.780292][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 177.903822][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 177.947384][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 178.035803][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 178.393567][ T9700] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 178.393957][ T9690] loop3: detected capacity change from 0 to 4096 [ 178.425095][ T9702] raw_sendmsg: syz.1.2523 forgot to set AF_INET. Fix it! [ 178.601247][ T9690] ntfs3: loop3: ino=5, "/" directory corrupted [ 178.645690][ T4232] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 178.865930][ T6626] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 178.925771][ T6622] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.016121][ T4232] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 179.030143][ T9736] loop3: detected capacity change from 0 to 256 [ 179.036143][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.044102][ T9736] exfat: Deprecated parameter 'utf8' [ 179.051008][ T9736] exfat: Deprecated parameter 'namecase' [ 179.058661][ T9736] exfat: Deprecated parameter 'utf8' [ 179.061126][ T4232] usb 1-1: config 0 descriptor?? [ 179.094832][ T9736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 179.145858][ T6626] usb 5-1: Using ep0 maxpacket: 16 [ 179.230681][ T9744] loop3: detected capacity change from 0 to 1024 [ 179.276042][ T6626] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 179.290731][ T6626] usb 5-1: config 254 has no interface number 0 [ 179.329745][ T26] audit: type=1800 audit(1756953836.940:14): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2542" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 179.350583][ T6622] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.351078][ T897] hfsplus: b-tree write err: -5, ino 4 [ 179.360134][ T6626] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 179.375787][ T6622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.397566][ T6622] usb 2-1: config 0 descriptor?? [ 179.411304][ T6626] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.436842][ T6622] cp210x 2-1:0.0: cp210x converter detected [ 179.443007][ T6626] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.458194][ T6626] usb 5-1: config 254 interface 235 has no altsetting 0 [ 179.545966][ T4232] usb 1-1: Cannot set MAC address [ 179.551135][ T4232] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 179.566758][ T4232] usb 1-1: USB disconnect, device number 15 [ 179.646082][ T6626] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 179.655185][ T6626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.663526][ T6626] usb 5-1: Product: syz [ 179.667845][ T6626] usb 5-1: Manufacturer: syz [ 179.672448][ T6626] usb 5-1: SerialNumber: syz [ 179.695968][ T9707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.845835][ T6722] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 179.867555][ T6622] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.883051][ T6622] usb 2-1: USB disconnect, device number 17 [ 179.894347][ T6622] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.902676][ T6622] cp210x 2-1:0.0: device disconnected [ 179.918427][ T9707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.927048][ T6626] usbtest 5-1:254.235: Linux gadget zero [ 179.932711][ T6626] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 180.068642][ T9763] loop0: detected capacity change from 0 to 256 [ 180.099071][ T9763] FAT-fs (loop0): Directory bread(block 64) failed [ 180.106256][ T9763] FAT-fs (loop0): Directory bread(block 65) failed [ 180.113935][ T9763] FAT-fs (loop0): Directory bread(block 66) failed [ 180.120606][ T9763] FAT-fs (loop0): Directory bread(block 67) failed [ 180.131931][ T1110] usb 5-1: USB disconnect, device number 18 [ 180.149564][ T9763] FAT-fs (loop0): Directory bread(block 68) failed [ 180.163005][ T9763] FAT-fs (loop0): Directory bread(block 69) failed [ 180.170098][ T9763] FAT-fs (loop0): Directory bread(block 70) failed [ 180.184936][ T9763] FAT-fs (loop0): Directory bread(block 71) failed [ 180.205204][ T9763] FAT-fs (loop0): Directory bread(block 72) failed [ 180.212083][ T6722] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 180.225345][ T9763] FAT-fs (loop0): Directory bread(block 73) failed [ 180.232576][ T6722] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 180.260160][ T6722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 180.286846][ T6722] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 180.312850][ T6722] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 180.332719][ T26] audit: type=1800 audit(1756953837.950:15): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2551" name="file7" dev="loop0" ino=1048617 res=0 errno=0 [ 180.354618][ T6722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 180.413715][ T9769] xt_NFQUEUE: number of total queues is 0 [ 180.549021][ T6722] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 180.563865][ T6722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.578726][ T6722] usb 3-1: Product: syz [ 180.578746][ T6722] usb 3-1: Manufacturer: syz [ 180.578760][ T6722] usb 3-1: SerialNumber: syz [ 180.589954][ T6722] usb 3-1: config 0 descriptor?? [ 180.629612][ T6722] hub 3-1:0.0: bad descriptor, ignoring hub [ 180.658433][ T6722] hub: probe of 3-1:0.0 failed with error -5 [ 180.745927][ T6722] Bluetooth: hci1: command 0x0406 tx timeout [ 180.756073][ T6622] Bluetooth: hci0: command 0x0406 tx timeout [ 180.757096][ T6722] Bluetooth: hci3: command 0x0406 tx timeout [ 180.763155][ T6622] Bluetooth: hci4: command 0x0406 tx timeout [ 180.785771][ T6722] Bluetooth: hci2: command 0x0406 tx timeout [ 180.944392][ T9796] loop0: detected capacity change from 0 to 1024 [ 181.003410][ T9801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.013795][ T9777] loop3: detected capacity change from 0 to 32768 [ 181.015570][ T9801] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.033320][ T9799] loop4: detected capacity change from 0 to 1764 [ 181.078112][ T9796] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 181.084922][ T9806] loop1: detected capacity change from 0 to 1024 [ 181.119653][ T9796] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz.0.2570: directory missing '.' [ 181.193291][ T26] audit: type=1800 audit(1756953838.810:16): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2573" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 181.251001][ T4876] hfsplus: b-tree write err: -5, ino 4 [ 182.012744][ T9853] __nla_validate_parse: 45 callbacks suppressed [ 182.012759][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2596'. [ 182.036761][ T9855] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 182.044647][ T9855] netlink: 'syz.1.2597': attribute type 2 has an invalid length. [ 182.080331][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 182.127149][ T9862] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 182.142126][ T9863] device wireguard0 entered promiscuous mode [ 182.261264][ T9871] SET target dimension over the limit! [ 182.432182][ T9879] genirq: Flags mismatch irq 5. 00000000 (pcl812) vs. 00000000 (pcl812) [ 182.473501][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.504597][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.554691][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.569662][ T9888] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.596627][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.632639][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.683422][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.695909][ T6621] usb 3-1: USB disconnect, device number 18 [ 182.715170][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.728975][ T9897] SET target dimension over the limit! [ 182.752525][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 182.914306][ T9908] loop0: detected capacity change from 0 to 256 [ 183.022650][ T9917] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 183.030724][ T9908] FAT-fs (loop0): Directory bread(block 64) failed [ 183.043757][ T9908] FAT-fs (loop0): Directory bread(block 65) failed [ 183.061913][ T9908] FAT-fs (loop0): Directory bread(block 66) failed [ 183.084734][ T9908] FAT-fs (loop0): Directory bread(block 67) failed [ 183.101953][ T9908] FAT-fs (loop0): Directory bread(block 68) failed [ 183.157210][ T9908] FAT-fs (loop0): Directory bread(block 69) failed [ 183.163862][ T9908] FAT-fs (loop0): Directory bread(block 70) failed [ 183.196149][ T9908] FAT-fs (loop0): Directory bread(block 71) failed [ 183.202795][ T9908] FAT-fs (loop0): Directory bread(block 72) failed [ 183.236106][ T6621] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.243880][ T9908] FAT-fs (loop0): Directory bread(block 73) failed [ 183.311272][ T9935] loop4: detected capacity change from 0 to 512 [ 183.400274][ T9935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 183.474332][ T9935] System zones: 1-12 [ 183.480130][ T9935] EXT4-fs (loop4): orphan cleanup on readonly fs [ 183.487512][ T9935] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2636: invalid indirect mapped block 8 (level 2) [ 183.532329][ T9935] EXT4-fs (loop4): 1 truncate cleaned up [ 183.547822][ T9935] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.646998][ T6621] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.671159][ T6621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.716610][ T6621] usb 4-1: config 0 descriptor?? [ 183.718841][ T9952] xt_l2tp: v2 doesn't support IP mode [ 183.777496][ T6621] cp210x 4-1:0.0: cp210x converter detected [ 183.822267][ T9958] netlink: 'syz.4.2643': attribute type 10 has an invalid length. [ 183.864714][ T9958] device syz_tun entered promiscuous mode [ 184.044783][ T9970] loop1: detected capacity change from 0 to 256 [ 184.062077][ T9969] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.068723][ T9972] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 184.227326][ T6621] usb 4-1: cp210x converter now attached to ttyUSB0 [ 184.282724][ T6621] usb 4-1: USB disconnect, device number 13 [ 184.315216][ T6621] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.348593][ T6621] cp210x 4-1:0.0: device disconnected [ 184.366226][ T9988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.423959][ T9991] loop2: detected capacity change from 0 to 256 [ 184.517136][ T9991] FAT-fs (loop2): Directory bread(block 64) failed [ 184.534136][ T9991] FAT-fs (loop2): Directory bread(block 65) failed [ 184.570616][ T9991] FAT-fs (loop2): Directory bread(block 66) failed [ 184.602603][ T9991] FAT-fs (loop2): Directory bread(block 67) failed [ 184.637955][ T9991] FAT-fs (loop2): Directory bread(block 68) failed [ 184.644523][ T9991] FAT-fs (loop2): Directory bread(block 69) failed [ 184.681897][ T9991] FAT-fs (loop2): Directory bread(block 70) failed [ 184.692660][ T9991] FAT-fs (loop2): Directory bread(block 71) failed [ 184.700450][ T9991] FAT-fs (loop2): Directory bread(block 72) failed [ 184.713591][ T9991] FAT-fs (loop2): Directory bread(block 73) failed [ 184.779767][T10004] loop0: detected capacity change from 0 to 256 [ 184.876760][ T9991] attempt to access beyond end of device [ 184.876760][ T9991] loop2: rw=524288, want=1164, limit=256 [ 184.949700][ T9991] attempt to access beyond end of device [ 184.949700][ T9991] loop2: rw=0, want=1164, limit=256 [ 185.009896][T10014] loop4: detected capacity change from 0 to 64 [ 185.039333][ T26] audit: type=1800 audit(1756953842.660:17): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2663" name="file0" dev="loop2" ino=1048620 res=0 errno=0 [ 185.083751][T10017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.110335][T10014] attempt to access beyond end of device [ 185.110335][T10014] loop4: rw=0, want=3074, limit=64 [ 185.264392][T10024] loop3: detected capacity change from 0 to 512 [ 185.275954][T10023] netlink: 'syz.2.2677': attribute type 8 has an invalid length. [ 185.319713][ T9992] loop1: detected capacity change from 0 to 32768 [ 185.333337][T10026] loop0: detected capacity change from 0 to 64 [ 185.383735][T10024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 185.392664][T10024] System zones: 1-12 [ 185.401869][T10024] EXT4-fs (loop3): orphan cleanup on readonly fs [ 185.408972][T10024] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2679: invalid indirect mapped block 8 (level 2) [ 185.436404][T10024] EXT4-fs (loop3): 1 truncate cleaned up [ 185.442071][T10024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.480527][ T9992] (syz.1.2664,9992,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=10, slot=0 [ 185.559279][ T9992] (syz.1.2664,9992,1):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 185.592204][ T9992] (syz.1.2664,9992,0):ocfs2_mount_volume:1818 ERROR: status = -22 [ 185.615833][ T4291] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 185.625210][ T9992] (syz.1.2664,9992,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 185.814220][T10047] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 185.854285][T10051] loop4: detected capacity change from 0 to 64 [ 185.861073][T10047] device syz_tun entered promiscuous mode [ 185.980903][ T4291] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.001912][T10055] netlink: 'syz.3.2693': attribute type 2 has an invalid length. [ 186.015751][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.016329][T10055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.043896][ T4291] usb 3-1: config 0 descriptor?? [ 186.110488][ T4291] cp210x 3-1:0.0: cp210x converter detected [ 186.205263][T10066] loop1: detected capacity change from 0 to 2048 [ 186.340697][T10066] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,bsddf,. Quota mode: none. [ 186.446977][T10066] afs: Unexpected value for 'dyn' [ 186.543008][ T4291] usb 3-1: cp210x converter now attached to ttyUSB0 [ 186.562926][ T4291] usb 3-1: USB disconnect, device number 19 [ 186.594846][T10087] netlink: 'syz.4.2709': attribute type 2 has an invalid length. [ 186.632958][ T4291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.667087][ T4291] cp210x 3-1:0.0: device disconnected [ 186.813883][T10099] comedi comedi0: Minor 47 could not be opened [ 186.925848][ T6621] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 187.124763][T10117] loop1: detected capacity change from 0 to 1024 [ 187.215970][ T6621] usb 1-1: Using ep0 maxpacket: 16 [ 187.262327][ T1445] hfsplus: b-tree write err: -5, ino 4 [ 187.355906][ T6621] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 187.377860][ T6621] usb 1-1: config 254 has no interface number 0 [ 187.403515][ T6621] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 187.439765][ T6621] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.491378][ T6621] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.518481][ T6621] usb 1-1: config 254 interface 235 has no altsetting 0 [ 187.632673][T10147] netlink: 'syz.2.2738': attribute type 2 has an invalid length. [ 187.646360][T10147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.681060][T10119] loop4: detected capacity change from 0 to 32768 [ 187.693290][T10149] __nla_validate_parse: 19 callbacks suppressed [ 187.693306][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'. [ 187.709598][ T6621] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 187.720232][ T6621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.729231][ T6621] usb 1-1: Product: syz [ 187.743615][ T6621] usb 1-1: Manufacturer: syz [ 187.748764][ T6621] usb 1-1: SerialNumber: syz [ 187.786009][T10089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.800820][T10119] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 187.828969][ T6622] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 187.845710][T10119] BTRFS info (device loop4): using free space tree [ 187.852266][T10119] BTRFS info (device loop4): has skinny extents [ 188.043212][T10089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.064996][T10173] loop3: detected capacity change from 0 to 2048 [ 188.082531][T10182] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 188.087016][ T6621] usbtest 1-1:254.235: Linux gadget zero [ 188.106265][ T6621] usbtest 1-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 188.116335][ T6622] usb 2-1: Using ep0 maxpacket: 8 [ 188.181714][T10119] BTRFS info (device loop4): enabling ssd optimizations [ 188.203563][T10173] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,bsddf,. Quota mode: none. [ 188.323219][ T4291] usb 1-1: USB disconnect, device number 16 [ 188.378207][T10173] afs: Unexpected value for 'dyn' [ 188.433229][ T6622] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 188.452585][ T6622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.461231][ T6622] usb 2-1: Product: syz [ 188.465418][ T6622] usb 2-1: Manufacturer: syz [ 188.485333][ T6622] usb 2-1: SerialNumber: syz [ 188.520062][ T6622] usb 2-1: config 0 descriptor?? [ 188.558626][T10185] loop2: detected capacity change from 0 to 32768 [ 188.820302][ T6622] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 188.842274][ T6622] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 188.868863][ T6622] usb 2-1: USB disconnect, device number 18 [ 189.290743][T10229] netlink: 'syz.4.2767': attribute type 3 has an invalid length. [ 189.305534][T10231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2768'. [ 189.403278][T10238] loop4: detected capacity change from 0 to 736 [ 189.443323][T10241] netlink: 'syz.2.2774': attribute type 5 has an invalid length. [ 189.759280][T10268] loop4: detected capacity change from 0 to 16 [ 189.848777][T10273] netlink: 'syz.1.2787': attribute type 5 has an invalid length. [ 189.872715][T10268] cramfs: Error -3 while decompressing! [ 189.916845][T10268] cramfs: ffffffff961ea068(27)->ffff888070f81000(4096) [ 189.941562][T10268] cramfs: Error -3 while decompressing! [ 189.972039][T10268] cramfs: ffffffff961ea083(16)->ffff888057d30000(4096) [ 189.987469][T10268] cramfs: Error -3 while decompressing! [ 190.010760][T10268] cramfs: ffffffff961ea068(27)->ffff888070f81000(4096) [ 190.040287][ T26] audit: type=1800 audit(1756953847.660:18): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2783" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 190.189049][T10293] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2798'. [ 190.191592][T10297] netlink: 'syz.4.2797': attribute type 49 has an invalid length. [ 190.233131][T10293] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 190.272834][T10303] loop0: detected capacity change from 0 to 16 [ 190.274928][T10300] loop1: detected capacity change from 0 to 512 [ 190.370733][T10303] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.371084][T10300] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.437449][T10300] EXT4-fs (loop1): 1 truncate cleaned up [ 190.454005][T10300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.510358][T10314] netlink: 'syz.3.2807': attribute type 10 has an invalid length. [ 190.518950][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2807'. [ 190.528394][T10314] device team0 entered promiscuous mode [ 190.534154][T10314] device team_slave_0 entered promiscuous mode [ 190.549676][T10314] device team_slave_1 entered promiscuous mode [ 190.556640][T10314] bridge0: port 3(team0) entered blocking state [ 190.563152][T10314] bridge0: port 3(team0) entered disabled state [ 190.580617][T10314] bridge0: port 3(team0) entered blocking state [ 190.586969][T10314] bridge0: port 3(team0) entered forwarding state [ 190.601547][T10316] loop0: detected capacity change from 0 to 64 [ 190.632368][T10302] loop2: detected capacity change from 0 to 32768 [ 190.681689][T10302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2802 (10302) [ 190.685663][ T6622] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 190.733497][T10316] hfs: request for non-existent node 16777216 in B*Tree [ 190.750708][T10316] hfs: request for non-existent node 16777216 in B*Tree [ 190.784989][T10302] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 190.804163][T10302] BTRFS info (device loop2): using free space tree [ 190.824911][T10302] BTRFS info (device loop2): has skinny extents [ 190.929539][T10333] netlink: 'syz.1.2816': attribute type 21 has an invalid length. [ 190.966031][T10333] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2816'. [ 191.135778][ T6622] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 191.157808][ T6622] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 191.166094][ T6622] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 191.170622][T10352] loop3: detected capacity change from 0 to 64 [ 191.174984][ T6622] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 191.192824][ T6622] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 191.203699][ T6622] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 191.252753][T10302] BTRFS info (device loop2): enabling ssd optimizations [ 191.309696][T10352] Trying to free block not in datazone [ 191.352557][T10352] Trying to free block not in datazone [ 191.405772][T10352] Trying to free block not in datazone [ 191.414813][T10352] Trying to free block not in datazone [ 191.435036][T10352] minix_free_block (loop3:6): bit already cleared [ 191.442536][T10352] Trying to free block not in datazone [ 191.456058][ T6622] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 191.467706][ T6622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.482032][T10352] Trying to free block not in datazone [ 191.532096][ T6622] usb 5-1: Product: syz [ 191.557302][ T6622] usb 5-1: Manufacturer: syz [ 191.561934][ T6622] usb 5-1: SerialNumber: syz [ 191.616517][ T6622] usb 5-1: config 0 descriptor?? [ 191.671410][ T6622] hub 5-1:0.0: bad descriptor, ignoring hub [ 191.678965][ T6622] hub: probe of 5-1:0.0 failed with error -5 [ 191.957248][T10369] loop3: detected capacity change from 0 to 64 [ 192.184815][T10383] loop2: detected capacity change from 0 to 64 [ 192.236241][T10383] Trying to free block not in datazone [ 192.245082][T10388] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2833'. [ 192.259264][T10388] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 192.261753][T10383] Trying to free block not in datazone [ 192.290834][T10383] Trying to free block not in datazone [ 192.297893][T10383] Trying to free block not in datazone [ 192.335691][T10383] minix_free_block (loop2:6): bit already cleared [ 192.363073][T10383] Trying to free block not in datazone [ 192.396607][T10383] Trying to free block not in datazone [ 192.406117][T10392] netlink: 'syz.0.2836': attribute type 21 has an invalid length. [ 192.457558][T10392] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2836'. [ 192.768587][T10384] loop3: detected capacity change from 0 to 32768 [ 192.805124][T10384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2831 (10384) [ 192.869032][T10384] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.901832][T10384] BTRFS info (device loop3): using free space tree [ 192.918054][T10384] BTRFS info (device loop3): has skinny extents [ 192.945685][ T6722] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 193.101474][T10432] loop2: detected capacity change from 0 to 512 [ 193.120760][T10384] BTRFS info (device loop3): enabling ssd optimizations [ 193.168847][T10432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.185693][ T6722] usb 1-1: Using ep0 maxpacket: 8 [ 193.208260][T10432] EXT4-fs (loop2): 1 truncate cleaned up [ 193.214070][T10432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.482014][ T6722] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 193.498116][ T6622] usb 5-1: USB disconnect, device number 19 [ 193.503597][ T6722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.535919][ T6722] usb 1-1: Product: syz [ 193.540116][ T6722] usb 1-1: Manufacturer: syz [ 193.590470][ T6722] usb 1-1: SerialNumber: syz [ 193.618998][ T6722] usb 1-1: config 0 descriptor?? [ 193.900190][ T6722] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 193.912176][ T6722] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 193.940516][ T6722] usb 1-1: USB disconnect, device number 17 [ 193.948929][T10472] loop1: detected capacity change from 0 to 164 [ 193.967004][T10476] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 193.981581][T10476] netlink: 'syz.3.2851': attribute type 9 has an invalid length. [ 194.020288][T10472] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 194.044566][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.044640][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.215540][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'. [ 194.260121][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 194.627933][T10520] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2890'. [ 194.849215][T10536] loop0: detected capacity change from 0 to 764 [ 194.884428][T10536] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 195.236247][T10564] device gtp0 entered promiscuous mode [ 195.306562][T10572] loop0: detected capacity change from 0 to 164 [ 195.385655][T10572] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.523160][T10583] comedi comedi0: das16m1: I/O port conflict (0x3,16) [ 195.650303][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 195.687157][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 195.813055][T10602] loop0: detected capacity change from 0 to 2048 [ 195.906241][T10602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.925802][T10191] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 196.346548][T10191] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 196.371253][T10638] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 196.381193][T10191] usb 2-1: config 0 has no interface number 0 [ 196.424320][T10191] usb 2-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 196.439527][T10641] loop4: detected capacity change from 0 to 256 [ 196.471013][T10191] usb 2-1: config 0 interface 176 has no altsetting 0 [ 196.695913][T10191] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 196.724820][T10191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.751459][T10191] usb 2-1: Product: syz [ 196.776225][T10191] usb 2-1: Manufacturer: syz [ 196.786309][T10191] usb 2-1: SerialNumber: syz [ 196.812142][T10191] usb 2-1: config 0 descriptor?? [ 196.846062][T10593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.980785][T10674] loop0: detected capacity change from 0 to 8 [ 197.012813][T10674] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 197.193684][T10685] loop3: detected capacity change from 0 to 256 [ 197.249119][T10688] loop0: detected capacity change from 0 to 2048 [ 197.272828][T10685] FAT-fs (loop3): Directory bread(block 64) failed [ 197.281255][T10685] FAT-fs (loop3): Directory bread(block 65) failed [ 197.313673][T10685] FAT-fs (loop3): Directory bread(block 66) failed [ 197.335796][ T1110] usb 2-1: USB disconnect, device number 19 [ 197.342886][T10685] FAT-fs (loop3): Directory bread(block 67) failed [ 197.347665][T10694] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.369986][T10685] FAT-fs (loop3): Directory bread(block 68) failed [ 197.389243][T10685] FAT-fs (loop3): Directory bread(block 69) failed [ 197.389880][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.409090][T10685] FAT-fs (loop3): Directory bread(block 70) failed [ 197.423403][T10685] FAT-fs (loop3): Directory bread(block 71) failed [ 197.444371][T10688] Remounting filesystem read-only [ 197.461961][T10685] FAT-fs (loop3): Directory bread(block 72) failed [ 197.467697][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.488402][T10685] FAT-fs (loop3): Directory bread(block 73) failed [ 197.508152][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.540453][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.573586][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.617745][T10688] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 197.656893][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.675872][ T26] audit: type=1800 audit(1756953855.300:19): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2973" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 197.707521][T10688] syz.0.2973 (10688) used greatest stack depth: 19328 bytes left [ 197.983327][T10716] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 198.294107][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 198.320080][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 198.518462][T10745] loop1: detected capacity change from 0 to 4096 [ 198.530924][T10750] device bond0 entered promiscuous mode [ 198.553987][T10750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.581795][T10745] ntfs3: loop1: ino=3, Correct links count -> 2. [ 198.640613][T10757] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 198.656012][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 198.752536][T10765] loop2: detected capacity change from 0 to 1024 [ 198.817159][T10770] usb usb1: usbfs: process 10770 (syz.4.3012) did not claim interface 0 before use [ 198.900772][T10765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.182238][T10786] [U] T+ [ 199.185860][T10786] [U] f']S!|rwc!?q&)_+xHdgDFs](RO)?, [ 199.228375][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 199.285731][T10786] [U] q$ 4kt [ 199.410006][T10795] loop1: detected capacity change from 0 to 16 [ 199.474914][T10795] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.584305][T10804] loop2: detected capacity change from 0 to 256 [ 199.680596][T10804] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 199.735777][T10811] netlink: 'syz.1.3029': attribute type 6 has an invalid length. [ 200.095362][T10782] loop3: detected capacity change from 0 to 32768 [ 200.152075][T10829] loop4: detected capacity change from 0 to 512 [ 200.244698][T10782] XFS (loop3): Mounting V5 Filesystem [ 200.283772][T10829] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 200.296866][T10829] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 200.343367][T10829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 200.389126][T10829] System zones: 1-12 [ 200.395711][T10829] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.3039: corrupted in-inode xattr [ 200.436235][T10829] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3039: couldn't read orphan inode 15 (err -117) [ 200.448861][T10829] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 200.484804][T10782] XFS (loop3): Ending clean mount [ 200.529813][T10782] XFS (loop3): Quotacheck needed: Please wait. [ 200.679719][T10782] XFS (loop3): Quotacheck: Done. [ 200.696370][T10782] XFS (loop3): Unmounting Filesystem [ 201.400500][T10890]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 201.769730][T10904] SET target dimension over the limit! [ 202.118450][T10922] binder: 10921:10922 ioctl c018620c 0 returned -14 [ 202.162213][T10882] loop2: detected capacity change from 0 to 32768 [ 202.241300][T10882] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3061 (10882) [ 202.355802][T10882] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 202.378705][T10940] netlink: 'syz.1.3089': attribute type 4 has an invalid length. [ 202.386495][T10882] BTRFS info (device loop2): force zlib compression, level 3 [ 202.417251][T10882] BTRFS info (device loop2): force clearing of disk cache [ 202.443388][T10882] BTRFS info (device loop2): turning off barriers [ 202.464091][T10882] BTRFS info (device loop2): doing ref verification [ 202.525554][T10945] loop0: detected capacity change from 0 to 2048 [ 202.532090][T10882] BTRFS info (device loop2): enabling disk space caching [ 202.558400][T10882] BTRFS info (device loop2): disk space caching is enabled [ 202.572626][T10882] BTRFS info (device loop2): has skinny extents [ 202.653933][T10945] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 202.697754][T10945] attempt to access beyond end of device [ 202.697754][T10945] loop0: rw=524288, want=33554432, limit=2048 [ 202.698416][T10959] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.729649][T10945] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 202.756187][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 202.774059][T10945] Remounting filesystem read-only [ 202.774074][T10945] NILFS (loop0): error -5 truncating bmap (ino=16) [ 202.831356][ T4183] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 202.998159][T10882] BTRFS info (device loop2): enabling ssd optimizations [ 203.010755][T10882] BTRFS info (device loop2): clearing free space tree [ 203.011652][T10882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.011779][T10882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.263337][T10882] BTRFS info (device loop2): balance: start -f -d -m [ 203.342875][T10882] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 203.646677][T10882] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 203.764779][T10882] BTRFS info (device loop2): balance: canceled [ 203.780442][T11021] loop4: detected capacity change from 0 to 764 [ 203.806365][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 203.828193][ T26] audit: type=1326 audit(1756953861.450:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc054fbe9 code=0x7ffc0000 [ 203.882805][ T26] audit: type=1326 audit(1756953861.450:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dc054fbe9 code=0x7ffc0000 [ 203.905036][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.977164][T11021] Symlink component flag not implemented [ 203.983244][T11021] Symlink component flag not implemented (116) [ 204.000450][ T26] audit: type=1326 audit(1756953861.450:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc054fbe9 code=0x7ffc0000 [ 204.032350][ T26] audit: type=1326 audit(1756953861.450:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.3.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc054fbe9 code=0x7ffc0000 [ 204.116496][T11032] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 204.241825][ T1202] block nbd3: Attempted send on invalid socket [ 204.255860][ T1202] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.796071][T11076] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3142'. [ 204.874242][T11082] loop2: detected capacity change from 0 to 256 [ 204.979577][T11089] IPv6: NLM_F_REPLACE set, but no existing node found! [ 204.986490][T11082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 204.993652][T11091] SET target dimension over the limit! [ 205.099782][T11096] delete_channel: no stack [ 205.231351][T11104] loop0: detected capacity change from 0 to 64 [ 205.379285][T11121] loop3: detected capacity change from 0 to 24 [ 205.440188][T11121] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 205.485962][T11121] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 205.551628][T11121] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 205.613367][T11135] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3173'. [ 205.665692][T11135] netlink: 'syz.4.3173': attribute type 3 has an invalid length. [ 205.673464][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3173'. [ 205.813244][T11138] loop1: detected capacity change from 0 to 4096 [ 205.915736][T11138] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 205.994514][T11148] loop0: detected capacity change from 0 to 256 [ 206.087602][T11138] ntfs3: loop1: failed to convert "c46c" to cp861 [ 206.317994][T11162] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 206.612228][T11182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.627105][T11182] IPv6: NLM_F_CREATE should be set when creating new route [ 206.634334][T11182] IPv6: NLM_F_CREATE should be set when creating new route [ 206.635335][T11179] loop3: detected capacity change from 0 to 1024 [ 206.672947][T11185] SET target dimension over the limit! [ 206.735836][ T4384] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 206.749126][T11189] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 206.809143][T11193] loop4: detected capacity change from 0 to 1024 [ 206.963733][T11193] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 206.982445][ T26] audit: type=1400 audit(1756953864.600:24): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11206 comm="syz.1.3208" [ 206.985909][ T4384] usb 3-1: Using ep0 maxpacket: 16 [ 207.001624][T11193] hfsplus: xattr searching failed [ 207.055119][T11210] loop0: detected capacity change from 0 to 16 [ 207.064990][T11209] delete_channel: no stack [ 207.141782][T11210] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.182450][T11210] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 207.254018][T11215] loop3: detected capacity change from 0 to 4096 [ 207.326817][ T4384] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=a8.f7 [ 207.346445][T11215] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 207.350847][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.405724][ T4384] usb 3-1: Product: syz [ 207.423284][T11230] comedi comedi0: pcmmio: I/O port conflict (0xee,32) [ 207.426032][ T4384] usb 3-1: Manufacturer: syz [ 207.448979][ T4384] usb 3-1: SerialNumber: syz [ 207.463919][ T4384] usb 3-1: config 0 descriptor?? [ 207.517121][ T4384] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 207.668592][T11237] device vlan0 entered promiscuous mode [ 207.735835][ T4384] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 207.744737][ T4384] quatech2: probe of 3-1:0.0 failed with error -8 [ 207.934650][T11243] loop0: detected capacity change from 0 to 2048 [ 207.942391][ T4384] usb 3-1: USB disconnect, device number 20 [ 208.008315][T11243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.056611][T11243] Invalid option length (0) for dns_resolver key [ 208.717810][T11293] loop0: detected capacity change from 0 to 256 [ 208.768220][T11295] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.894396][T11305] fuse: Invalid rootmode [ 208.978412][T11311] comedi comedi0: das16m1: I/O port conflict (0x3,16) [ 209.147355][T11319] loop4: detected capacity change from 0 to 2048 [ 209.155689][ T1110] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.304035][T11332] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.322484][T11319] attempt to access beyond end of device [ 209.322484][T11319] loop4: rw=0, want=19791209300036, limit=2048 [ 209.357055][T11319] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 209.382743][T11319] NILFS (loop4): error -5 truncating bmap (ino=16) [ 209.395778][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 209.402029][T11336] loop2: detected capacity change from 0 to 4096 [ 209.507881][T11336] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 209.595873][ T1110] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.640425][ T1110] usb 4-1: config 1 interface 0 has no altsetting 0 [ 209.674594][T11346] loop4: detected capacity change from 0 to 2048 [ 209.795217][T11346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.905845][ T1110] usb 4-1: string descriptor 0 read error: -22 [ 209.912239][ T1110] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 209.983579][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.074881][T11367] x_tables: unsorted entry at hook 3 [ 210.355815][ T1110] usbhid 4-1:1.0: can't add hid device: -71 [ 210.377637][ T1110] usbhid: probe of 4-1:1.0 failed with error -71 [ 210.420802][ T1110] usb 4-1: USB disconnect, device number 14 [ 210.579832][T11390] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3299'. [ 210.634702][T11397] loop2: detected capacity change from 0 to 8 [ 210.686284][T11397] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 210.887798][T11375] loop1: detected capacity change from 0 to 32768 [ 210.893408][T11406] loop2: detected capacity change from 0 to 1024 [ 210.930095][T11375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3289 (11375) [ 210.977689][ T6629] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 210.996578][T11406] EXT4-fs (loop2): Test dummy encryption mode enabled [ 211.005330][T11375] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 211.031663][T11375] BTRFS info (device loop1): using free space tree [ 211.043294][T11375] BTRFS info (device loop1): has skinny extents [ 211.121820][T11406] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,barrier=0x00000000000083fc,noblock_validity,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 211.152322][T11416] loop0: detected capacity change from 0 to 8192 [ 211.376312][ T6629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 211.394762][T11375] BTRFS info (device loop1): enabling ssd optimizations [ 211.426073][ T6629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 211.605071][ T4173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4173) [ 211.647838][ T6629] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 211.658707][ T6629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.673623][ T6629] usb 5-1: Product: syz [ 211.681410][ T6629] usb 5-1: Manufacturer: syz [ 211.695702][ T6629] usb 5-1: SerialNumber: syz [ 211.727571][ T6629] usb 5-1: config 0 descriptor?? [ 211.785508][ T6629] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 211.958896][T11450] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 212.011471][T11455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.018771][T11455] IPv6: NLM_F_CREATE should be set when creating new route [ 212.026106][T11455] IPv6: NLM_F_CREATE should be set when creating new route [ 212.128030][T10190] usb 5-1: USB disconnect, device number 20 [ 212.530777][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3333'. [ 212.539958][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 212.641721][T11490] loop0: detected capacity change from 0 to 64 [ 212.765688][ T4384] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.110628][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 213.135909][ T4384] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 213.137332][T11522] loop3: detected capacity change from 0 to 16 [ 213.151265][T11524] loop0: detected capacity change from 0 to 512 [ 213.160037][ T4384] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 213.169488][ T4384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.197956][T11524] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 213.216448][T11522] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.218057][ T4384] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 213.296724][T11524] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 213.311399][T11522] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 213.370216][T11522] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 213.386027][T11524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 213.394070][T11524] System zones: 1-12 [ 213.459574][T11524] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.3353: corrupted in-inode xattr [ 213.487256][T11524] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.3353: couldn't read orphan inode 15 (err -117) [ 213.502199][T11524] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 213.552842][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 213.599831][T11544] loop4: detected capacity change from 0 to 512 [ 213.650772][T11542] loop3: detected capacity change from 0 to 2048 [ 213.675370][T11546]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.754810][T11542] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.881391][T11557] loop4: detected capacity change from 0 to 16 [ 213.912446][T11557] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.211893][T11570] netlink: 'syz.4.3373': attribute type 4 has an invalid length. [ 214.305773][ T4384] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 214.520160][ T4384] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 214.541970][ T4384] stv0680 3-1:4.0: last error: 22, command = 0x78 [ 214.559402][ T4384] usb 3-1: USB disconnect, device number 21 [ 214.584104][T11589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.044768][T11618] loop3: detected capacity change from 0 to 164 [ 215.154791][T11618] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.175688][ T1110] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 215.201316][T11618] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.222442][T11634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3405'. [ 215.239089][T11618] Symlink component flag not implemented [ 215.244740][T11618] Symlink component flag not implemented [ 215.253658][T11634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3405'. [ 215.269358][T11618] Symlink component flag not implemented (7) [ 215.279878][T11618] Symlink component flag not implemented (116) [ 215.382172][T11640] loop4: detected capacity change from 0 to 256 [ 215.397789][T11642] loop2: detected capacity change from 0 to 256 [ 215.485244][T11642] FAT-fs (loop2): Directory bread(block 64) failed [ 215.497791][T11640] FAT-fs (loop4): Directory bread(block 64) failed [ 215.504360][T11640] FAT-fs (loop4): Directory bread(block 65) failed [ 215.511375][T11642] FAT-fs (loop2): Directory bread(block 65) failed [ 215.534848][T11642] FAT-fs (loop2): Directory bread(block 66) failed [ 215.536991][T11640] FAT-fs (loop4): Directory bread(block 66) failed [ 215.565933][ T1110] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 215.574752][T11640] FAT-fs (loop4): Directory bread(block 67) failed [ 215.584554][T11642] FAT-fs (loop2): Directory bread(block 67) failed [ 215.585288][T11640] FAT-fs (loop4): Directory bread(block 68) failed [ 215.601542][ T1110] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 215.615866][T11642] FAT-fs (loop2): Directory bread(block 68) failed [ 215.655911][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.665911][T11642] FAT-fs (loop2): Directory bread(block 69) failed [ 215.674039][T11640] FAT-fs (loop4): Directory bread(block 69) failed [ 215.693230][T11642] FAT-fs (loop2): Directory bread(block 70) failed [ 215.719089][T11642] FAT-fs (loop2): Directory bread(block 71) failed [ 215.727062][T11640] FAT-fs (loop4): Directory bread(block 70) failed [ 215.733664][T11640] FAT-fs (loop4): Directory bread(block 71) failed [ 215.773473][T11642] FAT-fs (loop2): Directory bread(block 72) failed [ 215.791010][T11640] FAT-fs (loop4): Directory bread(block 72) failed [ 215.798199][T11640] FAT-fs (loop4): Directory bread(block 73) failed [ 215.814168][T11642] FAT-fs (loop2): Directory bread(block 73) failed [ 215.965870][ T1110] usb 1-1: string descriptor 0 read error: -71 [ 215.976164][ T1110] hub 1-1:32.0: USB hub found [ 216.055940][ T1110] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 216.158888][ T1110] usb 1-1: USB disconnect, device number 18 [ 216.397077][T11677] loop4: detected capacity change from 0 to 4096 [ 216.416634][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.435043][T11688] loop3: detected capacity change from 0 to 24 [ 216.468045][T11688] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 216.480284][T11677] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 216.519691][T11692] loop0: detected capacity change from 0 to 512 [ 216.527922][T11688] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 216.535668][T11677] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 216.581371][T11677] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 216.633357][T11692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 216.633743][T11677] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 216.655209][T11692] System zones: 1-12 [ 216.659619][T11677] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 216.698817][T11692] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3433: invalid indirect mapped block 8 (level 2) [ 216.761620][T11677] ntfs: volume version 3.1. [ 216.799299][T11677] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 216.824799][T11677] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 216.839951][T11692] EXT4-fs (loop0): Remounting filesystem read-only [ 216.852819][T11692] EXT4-fs (loop0): 1 truncate cleaned up [ 216.898501][T11692] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 216.934188][T11677] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 216.996934][T11677] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 217.044244][T11710] loop2: detected capacity change from 0 to 1764 [ 217.050884][T11677] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 217.130984][T11713] loop1: detected capacity change from 0 to 8 [ 217.161517][T11710] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 217.205538][T11710] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.709340][T11746] loop4: detected capacity change from 0 to 512 [ 217.769148][T11753] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 217.814097][T11746] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 217.831116][T11746] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 217.847164][T11746] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.3458: bad orphan inode 13 [ 217.887525][T11746] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 218.254455][T11778] loop2: detected capacity change from 0 to 512 [ 218.273937][T11776] loop0: detected capacity change from 0 to 1024 [ 218.396130][T11778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.433653][T11778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 218.479645][T11778] System zones: 0-1, 15-15, 18-18, 34-34 [ 218.516746][T11778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.538088][T11778] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.553875][T11778] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 218.576307][T11778] EXT4-fs (loop2): 1 truncate cleaned up [ 218.585979][T11778] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 218.658974][T11778] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 218.991612][T11836] loop3: detected capacity change from 0 to 256 [ 219.163611][T11847] loop2: detected capacity change from 0 to 512 [ 219.220555][T11840] loop0: detected capacity change from 0 to 4096 [ 219.244378][T11847] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.253782][T11847] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.3502: casefold flag without casefold feature [ 219.269365][T11847] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3502: couldn't read orphan inode 15 (err -117) [ 219.285309][T11847] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,delalloc,,errors=continue. Quota mode: none. [ 219.376468][T11857] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.432655][T11840] attempt to access beyond end of device [ 219.432655][T11840] loop0: rw=524288, want=2097328, limit=4096 [ 219.463545][T11863] device syz_tun entered promiscuous mode [ 219.505061][T11840] attempt to access beyond end of device [ 219.505061][T11840] loop0: rw=0, want=2097328, limit=4096 [ 219.619141][T11869] loop3: detected capacity change from 0 to 2048 [ 219.767066][T11881] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.789927][T11869] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 219.894761][T11869] Remounting filesystem read-only [ 220.152348][T11901] loop2: detected capacity change from 0 to 4096 [ 220.211210][T11913] loop4: detected capacity change from 0 to 8 [ 220.222613][T11901] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 220.326462][T11913] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 220.366733][T11913] cramfs: bad data blocksize 4294950552 [ 220.372932][T11913] cramfs: bad data blocksize 4294950552 [ 220.619676][T11928] loop3: detected capacity change from 0 to 4096 [ 220.678519][T11928] ntfs: volume version 3.1. [ 220.761527][T11943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3548'. [ 221.094980][T11960] loop2: detected capacity change from 0 to 2048 [ 221.148457][T11966] netlink: 'syz.0.3559': attribute type 8 has an invalid length. [ 221.158640][T11966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.185781][ T4232] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.190851][T11969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.263634][T11973] autofs4:pid:11973:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 221.292423][ T4384] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 221.344615][T11971] loop0: detected capacity change from 0 to 4096 [ 221.439288][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 221.451220][T11971] ntfs: volume version 3.1. [ 221.508506][T11971] __ntfs_error: 29 callbacks suppressed [ 221.508523][T11971] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 221.555767][ T4384] usb 5-1: Using ep0 maxpacket: 32 [ 221.570151][ T4232] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 221.573115][T11971] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 221.596961][ T4232] usb 4-1: config 0 has no interface number 0 [ 221.615087][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3565'. [ 221.681562][ T4384] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.705130][ T4384] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.719102][T11971] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 221.795945][ T4232] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 221.825419][T11971] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 221.846100][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.854137][ T4232] usb 4-1: Product: syz [ 221.875771][ T4232] usb 4-1: Manufacturer: syz [ 221.884002][ T4232] usb 4-1: SerialNumber: syz [ 221.909839][T11971] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 221.925863][ T4384] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 221.945190][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.959412][ T4232] usb 4-1: config 0 descriptor?? [ 221.995314][ T4384] usb 5-1: Product: syz [ 222.023864][T11971] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 222.037987][ T4384] usb 5-1: Manufacturer: syz [ 222.042643][ T4384] usb 5-1: SerialNumber: syz [ 222.081162][T11971] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 222.106950][ T4384] usb 5-1: config 0 descriptor?? [ 222.156964][ T4384] qmi_wwan 5-1:0.0: bogus CDC Union: master=101, slave=0 [ 222.174363][ T4384] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 222.368762][T11989] loop0: detected capacity change from 0 to 2364 [ 222.380682][ T4384] usb 5-1: USB disconnect, device number 21 [ 222.475858][ T4232] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 222.496300][ T4232] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 222.543910][T11995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3572'. [ 222.555940][ T4232] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 222.617923][ T4232] usb 4-1: USB disconnect, device number 15 [ 222.644590][T11977] loop2: detected capacity change from 0 to 32768 [ 222.742546][T11977] add_index: next_index = 0. Resetting! [ 222.752445][T12001] loop1: detected capacity change from 0 to 4096 [ 222.759363][T11977] find_entry called with index >= next_index [ 222.765413][T11977] find_entry called with index >= next_index [ 222.814044][T12003] sctp: [Deprecated]: syz.0.3586 (pid 12003) Use of int in max_burst socket option. [ 222.814044][T12003] Use struct sctp_assoc_value instead [ 223.086806][ T1202] block nbd1: Attempted send on invalid socket [ 223.093042][ T1202] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.109388][T12006] hpfs: hpfs_map_sector(): read error [ 223.351475][T12030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.386160][T12030] device batadv_slave_0 entered promiscuous mode [ 223.433359][T12030] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 223.517920][T12033] device erspan1 entered promiscuous mode [ 223.620715][T12041] loop2: detected capacity change from 0 to 1024 [ 223.751847][T12050] loop1: detected capacity change from 0 to 256 [ 224.280980][T12085] netlink: 'syz.4.3614': attribute type 9 has an invalid length. [ 224.293871][T12087] loop1: detected capacity change from 0 to 256 [ 224.355954][ T6617] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 224.376677][T12087] exfat: Deprecated parameter 'utf8' [ 224.433411][T12087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc51571d, utbl_chksum : 0xe619d30d) [ 224.475134][T12093] netlink: 'syz.3.3619': attribute type 8 has an invalid length. [ 224.495704][T12093] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3619'. [ 224.777248][ T6617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 224.817375][T12069] loop0: detected capacity change from 0 to 32768 [ 224.825857][ T6617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 224.915267][T12069] diRead: diIAGRead returned -5 [ 224.937946][T12069] jfs_lookup: iget failed on inum 196612 [ 225.028828][ T6617] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 225.046536][ T6617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.072723][ T6617] usb 3-1: Product: syz [ 225.079185][T12103] loop4: detected capacity change from 0 to 4096 [ 225.095878][ T6617] usb 3-1: Manufacturer: syz [ 225.100984][ T6617] usb 3-1: SerialNumber: syz [ 225.122222][ T6617] usb 3-1: config 0 descriptor?? [ 225.169335][ T6617] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 225.247220][T12103] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 225.285746][T12103] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 225.365662][T12103] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 225.448861][T12103] ntfs: volume version 3.1. [ 225.491094][ T6617] usb 3-1: USB disconnect, device number 22 [ 225.591087][ T897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.719584][T12121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.740700][ T897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.918991][ T897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.042962][ T897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.155834][ T1110] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 226.296693][T12142] loop3: detected capacity change from 0 to 512 [ 226.381709][T12142] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 226.455797][T12142] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.517449][ T1110] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 226.545737][ T1110] usb 1-1: config 0 has no interface number 0 [ 226.572250][ T1110] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 226.635101][ T4876] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 226.751408][T12126] loop4: detected capacity change from 0 to 32768 [ 226.786043][ T1110] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 226.820668][T12138] loop2: detected capacity change from 0 to 32768 [ 226.827731][T12126] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3638 (12126) [ 226.852084][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.884432][ T1110] usb 1-1: Product: syz [ 226.901963][ T1110] usb 1-1: Manufacturer: syz [ 226.918978][T12137] chnl_net:caif_netlink_parms(): no params data found [ 226.936577][T12138] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 226.936577][T12138] [ 226.937981][ T1110] usb 1-1: SerialNumber: syz [ 227.028994][T12126] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.041764][ T1110] usb 1-1: config 0 descriptor?? [ 227.065783][T12126] BTRFS info (device loop4): force zlib compression, level 3 [ 227.075949][T12130] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.089571][T12126] BTRFS info (device loop4): force clearing of disk cache [ 227.154775][T12126] BTRFS info (device loop4): setting nodatasum [ 227.204643][T12126] BTRFS info (device loop4): allowing degraded mounts [ 227.217672][T12126] BTRFS info (device loop4): enabling disk space caching [ 227.224805][T12126] BTRFS info (device loop4): disk space caching is enabled [ 227.232971][T12126] BTRFS info (device loop4): has skinny extents [ 227.336178][ T1110] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 227.346396][T12175] loop3: detected capacity change from 0 to 256 [ 227.366974][ T1110] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.90/input/input16 [ 227.529101][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.545656][ C1] powermate: config urb returned -71 [ 227.565643][ C1] powermate: config urb returned -71 [ 227.587505][ C1] powermate: config urb returned -71 [ 227.593243][ T4232] usb 1-1: USB disconnect, device number 19 [ 227.600664][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.607812][ C1] powermate: config urb returned -71 [ 227.627451][T12137] device bridge_slave_0 entered promiscuous mode [ 227.683027][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.710551][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.763232][T12207] binder: 12204:12207 ioctl c00c620f 0 returned -14 [ 227.770199][T12137] device bridge_slave_1 entered promiscuous mode [ 227.787542][T12126] BTRFS info (device loop4): clearing free space tree [ 227.795417][T12126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 227.806297][T12126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 227.891349][T12126] BTRFS info (device loop4): balance: start [ 227.914199][T12126] BTRFS info (device loop4): balance: ended with status: 0 [ 228.004040][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.005946][T12215] xt_l2tp: invalid flags combination: c [ 228.041496][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.188519][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 228.243611][ T6825] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop4 scanned by udevd (6825) [ 228.582383][T12137] team0: Port device team_slave_0 added [ 228.639060][T12137] team0: Port device team_slave_1 added [ 228.674836][T12247] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3674'. [ 228.795701][ T1110] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 228.827558][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.834544][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.012517][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.035750][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 229.148699][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.156341][ T1110] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 229.165424][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.185883][T12271] loop4: detected capacity change from 0 to 256 [ 229.192637][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.251091][ T1110] usb 3-1: config 0 descriptor?? [ 229.262690][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.282532][T12271] exFAT-fs (loop4): bogus data start sector [ 229.299399][ T1110] rndis_host: probe of 3-1:0.0 failed with error -22 [ 229.308943][T12271] exFAT-fs (loop4): failed to read boot sector [ 229.315125][T12271] exFAT-fs (loop4): failed to recognize exfat type [ 229.374724][T12275] loop0: detected capacity change from 0 to 1024 [ 229.414510][T12275] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 229.426123][T12275] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 229.434221][T12275] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.459599][T12275] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,journal_ioprio=0x0000000000000004,noauto_da_alloc,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 229.519809][ T6615] usb 3-1: USB disconnect, device number 23 [ 229.623394][T12281] loop4: detected capacity change from 0 to 256 [ 229.633502][T12137] device hsr_slave_0 entered promiscuous mode [ 229.682370][T12137] device hsr_slave_1 entered promiscuous mode [ 229.696610][T12137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.717729][T12285] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.3688'. [ 229.735678][T12137] Cannot create hsr debugfs directory [ 230.157549][ T897] device hsr_slave_0 left promiscuous mode [ 230.204383][ T897] device hsr_slave_1 left promiscuous mode [ 230.224979][ T897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.255955][ T897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.263443][ T897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.273201][ T4384] Bluetooth: hci4: command 0x041b tx timeout [ 230.318613][ T897] device bridge_slave_1 left promiscuous mode [ 230.393410][ T897] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.456883][ T897] device bridge_slave_0 left promiscuous mode [ 230.475137][ T897] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.597154][ T897] device veth1_macvtap left promiscuous mode [ 230.607328][ T897] device veth0_macvtap left promiscuous mode [ 230.613424][ T897] device veth1_vlan left promiscuous mode [ 230.812062][T12291] loop0: detected capacity change from 0 to 32768 [ 230.931287][T12291] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 230.931287][T12291] [ 231.319733][T12364] loop0: detected capacity change from 0 to 64 [ 231.569818][ T897] team0 (unregistering): Port device team_slave_1 removed [ 231.620314][T12376] netlink: 420 bytes leftover after parsing attributes in process `syz.2.3728'. [ 231.659151][ T897] team0 (unregistering): Port device team_slave_0 removed [ 232.243269][T12137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.265859][ T4384] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 232.308216][T12137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.325374][T12137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.345687][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 232.365216][T12137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.389600][T12374] loop4: detected capacity change from 0 to 32768 [ 232.515741][ T4384] usb 1-1: Using ep0 maxpacket: 32 [ 232.521771][T12374] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 232.521771][T12374] [ 232.537536][T12382] loop2: detected capacity change from 0 to 32768 [ 232.611196][T12404] dlm: non-version read from control device 36 [ 232.635916][ T4384] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 232.652281][ T4384] usb 1-1: config 0 has no interface number 0 [ 232.678399][ T4384] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.726353][ T4384] usb 1-1: config 0 interface 2 has no altsetting 0 [ 232.741374][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.760932][ T4286] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 232.772707][ T4286] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 232.781133][ T4286] CPU: 0 PID: 4286 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 232.784131][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.788687][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.788705][ T4286] Workqueue: writeback wb_workfn (flush-7:2) [ 232.788750][ T4286] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 232.817963][ T4286] Code: df 41 80 3c 04 00 74 08 48 89 df e8 b2 fb f2 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 8a fb f2 fd 41 bf 90 00 00 00 4d 03 [ 232.821001][T12137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.837671][ T4286] RSP: 0018:ffffc900034af260 EFLAGS: 00010202 [ 232.837694][ T4286] RAX: 00000000000000ba RBX: ffff88801dcdba08 RCX: dffffc0000000000 [ 232.837709][ T4286] RDX: 0000000000000000 RSI: ffffffff96269dc0 RDI: ffff88801dcdba00 [ 232.837724][ T4286] RBP: 1ffff11003b9b749 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 232.837739][ T4286] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 1ffff11003b9b741 [ 232.837755][ T4286] R13: ffff88801dcdba48 R14: 00000000000005d0 R15: ffff88802985d96c [ 232.837769][ T4286] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 232.837787][ T4286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.837801][ T4286] CR2: 0000200000000100 CR3: 00000000677fa000 CR4: 00000000003506f0 [ 232.837819][ T4286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.837832][ T4286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.837845][ T4286] Call Trace: [ 232.837851][ T4286] [ 232.837865][ T4286] bio_associate_blkg+0x23a/0x340 [ 232.876196][T12137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.878132][ T4286] lbmStartIO+0x204/0x4c0 [ 232.895827][ T4384] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 232.903079][ T4286] lbmWrite+0x361/0x480 [ 232.925903][ T4384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.933563][ T4286] jfs_flush_journal+0x535/0xeb0 [ 232.985574][ T4286] ? lmLogShutdown+0x820/0x820 [ 232.990356][ T4286] ? __lock_acquire+0x7c60/0x7c60 [ 232.995382][ T4286] ? do_raw_spin_lock+0x11d/0x280 [ 233.000406][ T4286] ? __rwlock_init+0x140/0x140 [ 233.005168][ T4286] jfs_write_inode+0x12b/0x220 [ 233.009933][ T4286] __writeback_single_inode+0x6c3/0xda0 [ 233.015487][ T4286] writeback_sb_inodes+0x9fe/0x1610 [ 233.020701][ T4286] ? queue_io+0x550/0x550 [ 233.025035][ T4286] ? rcu_is_watching+0x11/0xa0 [ 233.029801][ T4286] wb_writeback+0x443/0xb90 [ 233.034306][ T4286] ? rcu_lock_release+0x20/0x20 [ 233.039154][ T4286] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.045140][ T4286] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.050353][ T4286] wb_workfn+0x423/0xe60 [ 233.054608][ T4286] ? inode_wait_for_writeback+0x200/0x200 [ 233.060333][ T4286] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.066322][ T4286] ? read_lock_is_recursive+0x10/0x10 [ 233.071697][ T4286] ? try_to_wake_up+0x6cf/0x1050 [ 233.076636][ T4286] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.081842][ T4286] process_one_work+0x863/0x1000 [ 233.086791][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 233.092426][ T4286] ? lockdep_hardirqs_off+0x70/0x100 [ 233.097709][ T4286] ? _raw_spin_lock_irq+0xab/0xe0 [ 233.102737][ T4286] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 233.108118][ T4286] ? wq_worker_running+0x97/0x170 [ 233.113141][ T4286] worker_thread+0xaa8/0x12a0 [ 233.117833][ T4286] kthread+0x436/0x520 [ 233.121899][ T4286] ? rcu_lock_release+0x20/0x20 [ 233.126753][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 233.131344][ T4286] ret_from_fork+0x1f/0x30 [ 233.135764][ T4286] [ 233.138901][ T4286] Modules linked in: [ 233.145534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.164019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.171974][ T4384] usb 1-1: Product: syz [ 233.182506][ T4384] usb 1-1: Manufacturer: syz [ 233.193250][ T4384] usb 1-1: SerialNumber: syz [ 233.196396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.207164][ T4384] usb 1-1: config 0 descriptor?? [ 233.223861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.246293][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.253408][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.277686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.300224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.319621][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.326719][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.358762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.378276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.408602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.417423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.430399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.439100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.450001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.458610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.470014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.478557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.491048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.499765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.510031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.519521][ T4286] ---[ end trace c2b9a2978ab3a12b ]--- [ 233.525152][ T4286] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 233.536852][ T4286] Code: df 41 80 3c 04 00 74 08 48 89 df e8 b2 fb f2 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 8a fb f2 fd 41 bf 90 00 00 00 4d 03 [ 233.562527][ T4384] usb 1-1: USB disconnect, device number 20 [ 233.569263][ T4286] RSP: 0018:ffffc900034af260 EFLAGS: 00010202 [ 233.575362][ T4286] RAX: 00000000000000ba RBX: ffff88801dcdba08 RCX: dffffc0000000000 [ 233.606406][ T4286] RDX: 0000000000000000 RSI: ffffffff96269dc0 RDI: ffff88801dcdba00 [ 233.624643][ T4286] RBP: 1ffff11003b9b749 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 233.645939][ T4286] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 1ffff11003b9b741 [ 233.674407][ T4286] R13: ffff88801dcdba48 R14: 00000000000005d0 R15: ffff88802985d96c [ 233.694090][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.705635][ T4286] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 233.715907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.723362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.743238][ T4286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.756770][ T4286] CR2: 0000001b32215ff8 CR3: 000000006324b000 CR4: 00000000003506f0 [ 233.764981][ T4286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.775786][ T4286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.783804][ T4286] Kernel panic - not syncing: Fatal exception [ 233.790174][ T4286] Kernel Offset: disabled [ 233.794507][ T4286] Rebooting in 86400 seconds..