last executing test programs: 4m46.500140825s ago: executing program 2 (id=330): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 4m45.652339573s ago: executing program 2 (id=334): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 4m43.512172904s ago: executing program 2 (id=345): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x4ae}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@sys_tz}, {@errors_remount}, {}, {}, {@gid}, {@utf8}, {@sys_tz}, {@sys_tz}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 4m41.862814927s ago: executing program 2 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m40.967266696s ago: executing program 2 (id=360): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 4m35.016269544s ago: executing program 2 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4m32.928323824s ago: executing program 32 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9.617629696s ago: executing program 4 (id=1709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff2db6, 0x33}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0xc000) 8.261661227s ago: executing program 4 (id=1716): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x4, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6}, 0x10) 7.05822199s ago: executing program 4 (id=1721): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x31a, 0x0, 0x0, [{0x0, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472"}, {0x18, 0x0, '\x00\x00\x00'}]}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.173117744s ago: executing program 0 (id=1725): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/1, 0xb}], 0x1}, 0x11001}, {{0x0, 0x0, 0x0}}], 0x56, 0x0, 0x0) 5.287115231s ago: executing program 1 (id=1728): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x27c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x240, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_gact={0x124, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0xdd, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c995030329bc7513206fbbbaff80269acd40d48bee53c5d29ae26ac4f4be644348ff30d97b9cb02360266994fa3a862b1418bc3eaede1bb9463c1926a947cf619ae9e30d95e4fafecf091aba5ad491096d09ff089a4344e72ae7c5fcb84862d7cba26dd8f3a4c326a5596ea8ea92c0ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0xfc, 0x1, [@m_tunnel_key={0x98, 0x5, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x11, 0x6, "67a638128ad3f52f2e793588c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x60, 0xc05, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x18000, 0x2, 0xffffffffffffffff, 0x200, 0x9}, 0x2}}]}, {0x11, 0x6, "0ef6a460a5bbda16e826eafe04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.225210337s ago: executing program 5 (id=1729): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x3, r4}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 4.929188981s ago: executing program 0 (id=1730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.447136102s ago: executing program 1 (id=1731): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.291320497s ago: executing program 3 (id=1732): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03"], 0xbe, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x4800) 4.217072221s ago: executing program 0 (id=1733): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff8, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9a0}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0x49, 0xffff, 0x2}, {0x2, 0x2, 0x4, 0x2, 0x7}, 0x1000, 0x0, 0x21d8}}]}}]}, 0x60}}, 0x440c4) 3.805350801s ago: executing program 1 (id=1734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000580)=0x63, 0x2) 3.800434752s ago: executing program 3 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x58884400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.708752968s ago: executing program 5 (id=1736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0xc9}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.624773625s ago: executing program 4 (id=1737): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 3.508822122s ago: executing program 0 (id=1738): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000500)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 3.228175862s ago: executing program 1 (id=1739): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000000)="d76c40f73019c6ea1631569f5f", 0xd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, 0x0) 3.134393298s ago: executing program 5 (id=1740): socket$kcm(0x21, 0x2, 0x2) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.125714068s ago: executing program 3 (id=1741): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x4000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001040)) 2.755608978s ago: executing program 1 (id=1742): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0x4) 2.683566911s ago: executing program 4 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$eJzs3U+PG2cdB/Df+N/+CU2jHqoSIbRtA7SU5m8JgQJtD3DohQPKFSXabquIFFASUFpFZKtcOPAiQEgcAXHkxAvogSs3XgCREiSgpw6a9fNsxsaOdze1x7vz+UjOzM/PzPqZfD1re2fGTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8fb3f3iuiIgrv0h3nIj4XHQjOhFrVb0REWsbJ/LyvYh4Lnaa49mI6K9EFLnx6YjXIuLj4xEPHt7ZrO46v8d+fO9Pf//dj4794G9/6J/5z59vdV+fttzt27/+91/uHnx7AQAAoI3KsiyL9DH/ZPp832m6UwDAQuTX/zLJ96uXrt5esv6o1Wq1+hDWdeVkd+tFRGzX16neMzgcDwCHzHZ80nQXaJD8W60XEcea7gSw1IqmO8BcPHh4Z7NI+Rb114ONYXs+F2Qk/+1i9/qOadNZxs8xWdTz615045kp/VlbUB+WSc6/M57/lWH7IC037/wXZVr+g+GlT62T8++O5z/m6OTfmZh/W+X8e/vKvyt/AAAAAABYYvnv/ycaPv678uSbsiePO/67saA+AAAAAAAAAMBn7UnH/9tVGP8PAAAAllX1Wb3ym+OP7pv2XWzV/ZeLiKfGlgdaZiMiViPWm+4HAAAAAAAAAAAAALRJb3gO7+Uioh8RT62vl2VZ3erG6/160vUPu7ZvP7RZ07/kAQBg6OPjY9fyFzuX9cbl9F1//fX19bJcXVsv18u1lfx+drCyWq7VPtfmaXXfymAPb4h7g7L6Yau19epmfV6e1T7+86rHGpTdPXRsMRoMHAAiYvhq9MAr0hFTlk9H0+9yOBzs/0eP/Z+9aPp5CgAAAMxfWZZlkb7O+2Q65t9pulMAwELk1//x4wILq/sLfjy1Wq1Wq1tc15WT3a0XEbFdX6d6z2A4fgA4ZLbjk6a7QIPk32q9iHiu6U4AS61ougPMxYOHdzaLlG9Rfz3YGLbnc0FG8t8udtbL60+azjJ+jsminl/3ohvPTOnPswvqwzLJ+XfG878ybB+k5ead/6JMy7/azhMN9KdpOf/ueP5jjk7+nYn5t1XOv7ev/LvyBwAAAACAJZb//n9iqY7/Dg66OTM97vjvxtweFQAAAAAAAADm68HDO5v5utd8/P8LE5Zz/efRlPMv5N9KOf90/f/uiTcvjS3Xrc3ff+tR/v96eGfz97f++fk83Wv+K3mmSM+sIj0jivRIRS9ND7hhU9zrdwfVI/WLTreXzvkp++/GtbgeW3F2ZNlO2h8etZ8baa962t9pL7vD9vMj7b3d9rz+hZH2fjrTqVzL7adjM34a1+OdnfaqbWXG9q/OaC9ntOf8u/b/Vsr592q3Kv/11F6MTSv3P+r8335fn056nDevffFXZ+e/OTPdi+7uttVV2/dCA/3Z+T85Noif39y6cfr21Vu3bpyLNBm593ykyWcs599Pt5z/Sy8O2/Pv/fr+ev+jwb7zXxb3ojc1/xdr89X2vrzgvjUh5z9It5z/O6n90f5/bHedw53/9P3/lQb6AwAAAAAAAAAAAAAAAI9TluXOJaJvRsTFdP1PU9dmAgCLlV//yyTfv6i6e9D1/zi6HU31X61ecF3U6mIJ+rPQ+tNy3o/39lJtr/pA9X+XrD9LV9eVk71RLyLir/V1qvcMv5z0wwCAZfZpRPyj6U7QGPm3WP6+v2p6qunOAAt184MPf3z1+vWtGzeb7gkAAAAAAAAAcFB5/M+N2vjPp8qyvDu23Mj4r2/FxpOO/9nLM7sDjE4ZqLq7/216nE5Et1Mbbvz5mDb+d3937nHjf/dmPF5/RvtgRvvKjPbVGe0TL/Soyfk/Xxvv/FREnBwbfn10/OejOf7r+Jj3bZDzf6H2fK7y/8rYcvX8y98e5vw7I/mfufX+z87c/ODDV6+9f/W9rfe2fnLh3LmzFy5evHTp0pl3r13fOjv8t8Eez1fOP4997TzQdsn558zl3y45/y+lWv7tkvP/cqrl3y45//x+T/7tkvPPn33k3y45/5dTLf92yfl/NdUj+c/64xKHXs7/lVTb/9sl5/+1VMu/XXL+r6Za/u2S8z+davm3S87/TKr3mP/avPvFYuT88xEu+3+75PzzmQ3yb5ec//lUy79dcv4XUi3/dsn5v5Zq+bdLzv/rqZZ/u+T8L6Za/u2S8/9GquXfLjn/S6mWf7vk/L+Zavm3S87/W6mWf7vk/F9PtfzbJef/7VTLv11y/t9JtfzbJef/3VTLv11y/m+kWv7t8uj7/82YMWMmzzT9mwkAAAAAAAAAAAAAGLeI04mb3kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp79xYj113fAfzM3rxxIDEQUic1YeMYY5xNdn2JL7QuJlwbbiUhFHrBdr1rs+AbXrsEGtWOAiUSRkUVbcNDW0CozUuFVfFAK0B5QK0qVYL2gb4gKlQeoiqggFSVVpCt5pz//78zs7Mzu97xZuacz0dKftmZM3POnPnP7H7tfHcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHTnG2Y/VcuyrFarFRdsyrIX1ecNE5vyS177wh4fAAAAsHa/yP/93M3pgsMruFHDNv90x7e/urCwsJC9b/hPRz+3sJCumMiy0Q1Zll8XXf3B+2uN2wSPZ+O1oYavh7rsfrjL9SNdrh/tcv1Yl+s3dLl+vMv1S07AEjdktXRn2/L/3FSc0uyWbDS/blubWz1e2zBUP3fptlktv83C6IlsLjuVzWbTTdsX29by7b9+Z31fb83ivoYa9rWlvkJ+8ujxeAy1cI63Ne1r8T6jH70+m/jpTx49/tcXnr2t3ex6GprurzjOHVvrx/mJcElxrLVsQzon8TiHGo5zS5vnZLjpOGv57er/3Xqcz63wOIcXD3NdtT7n49lQ/t/fyc/TSC1rc562hMt+dleWZZcXD7t1myX7yoayjU2XDC0+P+PFiqzfR30pvTQbWdU6vXMF67Q+Z7Y1r9PW10R8/u8MtxtZ5hgan6YfPTbW8Lz/fOFa1mlUf9TLvVZa12CvXyv9sgbjuvhO/qCfaLsGt4XH/+j25ddg27XTZg2mx92wBrd2W4NDY8P5MacnoZbfZnEN7mrafjjfUy2fz2zvvAanLpw+NzX/sY/fM3f62MnZk7Nn9uzaNb1n374DBw5MnZg7NTtd/Psaz3b/25gNpdfA1nDu4mvg1S3bNi7VhS+OLXn/vdbX4XiH1+Gmlm17/TocaX1wtfV5QS5d08Vr4z31kz5+ZShb5jWWPz871/46TI+74XU40vA6bPs9pc3rcGQFr8P6Nud2ruxnlpGGf9odw/LfC9a2Bjc1rMHWn0da12Cvfx7plzU4HtbF93Yu/71gSzjeJyZX+/PI8JI1mB5ueO+pX5J+3h8/kI926/L2+hU3jmUX52fP3/vIsQsXzu/KwlgXL2tYK63rdWPDY8qWrNehVa/Xw3N3PHF7m8s3hXM1fk/9X+PLPlf1bfbe2/m5yr+7tT+fTZfuzsLosfU+n+2+m9fP51iWff5bjz34jUc//4Zlz2c9b35iau0/i6dc2vD+O7rM+2/M/c8X+0t39fjw6Ejx+h1OZ2e06f24+akayd+7avm+n5ta2fvxaPhnvd+Pb+nwfry5Zdtevx+Ptj64+H5c6/anHWvT+nyOh3Vyarrz+3F9m827V7smRzq+H98VZi2c/9eEpJByUcPaWW7dpn2NjIyGxzUS99C8Tvc0bT8asll9X0/tvrZ1uuOu4r6G06NbtF7rdKJl216v0/RnX8ut01q3P327Nq3P53hYF7fs6bxO69s8vXft7503xP9seO8c67YGR4fH6sc8mhZh/n6fLdwQ1+C92fHsbHYqm8mvHcvXUy3f1+R9K1uDY+Gf9X6v3NxhDe5o2bbXazB9H1tu7dVGlj74Hmh9PsfDunjyvs5rsL7NG/f39mfXHeGStE3Dz66tf7623J953d5ymq7XWhkJx/mt/Z3/bLa+zakDq82Znc/T3eGSG9ucp9bX73KvqZlsfc7T5nCczx5Y/jzVj6e+zecOrnA9Hc6y7NJH7s//vDf8/crfXfzuV5v+3qXd3+lc+sj9P37xiX9czfEDMPieL8bG4ntdw99MreTv/wEAAICBEHP/UJiJ/A8AAAClEXN//L/CE/kfAAAASiPm/pEwk4rk/81vfHbu+UtZauYvBPH6dBoeKLaLHdfp8PXEwqL65fd/efa//+HSyvY9lGXZzx/4g7bbb34gHldhIhzn1Tc1X77EV+9Z0b6PPnwp7bexv/6FcP/x8ax0GbSr4E5nWfb1mz+T72fi/Vfy+fQDR/P54OUnHq9v89zB4ut4+2deVmz/F6H8e/jEsabbPxPOww/DnH5b+/MRb/eVK6/Zsv+9i/uLt6ttvSl/2E9+oLjf+HtyPvt4sX08z8sd/zc+/dRX6ts/8qr2x39pqP3xPxXu98th/u8riu0bn4P61/F2nwzHH/cXb3fvl77Z9vivfqrY/tybi+2Ohhn3vyN8ve3Nz841nq9HaseaHlf2lmK7uP/p7/5xfn28v3j/rcc/fuRK0/loXR9P/1txP1Mt28fL436iv2/Zf/1+Gtdn3P9Tf3S06Tx32//VB595Rf1+W/d/d8t25z6yM9//4v01/8amv/zkZ9ruLx7P4b891/R4Dr87vI7D/p/8QFiP4fr/u1rcX+tvVzj67ub3n7j9FzZdano80Vt/Wuz/6utO5nPD+A0bb3zRi2+6/Mr6ucuy72wo7q/b/k/+1dmm4//ircX5iNfHjn7r/pcT93/+o5Nnzs5fnJtJZ/XRm/PfnfP24nji8d4c3ltbvz5y9sIHZ89PTE9MZ9lEeX+F3jX7Upg/LsblzlsvLHkH3flweD5v//Ovb9z+r5+Ol//7e4rLr7yt+L716rDdZ8Plm8Lzt7r9L/Xknbfmr+/a0+EIF5b+vuC12LLtvw6saMPw+Ft/Lojr/dzLP5ifh/p1+feN+Lpe4/F/f6a4n6+F87oQfjPz1lsX99e4ffzdCFceKl7vaz5/4W0uPq9/E57vd/ywuP94XPHxfj/8HPPNzc3vd3F9fO3SUOv957/F43J4P8kuF9fHreL5vvLcrW0PL/4ekuzybfnXf5Lu57ZVPczlzH9sfurU3JmLj0xdmJ2/MDX/sY8fOX324pkLR/Lf5XnkQ91uv/j+tDF/f5qZ3bc3y9+tzhbjOnuhj//cw8dn9k9vn5k9ceziiQsPn5s9f/L4/Pzx2Zn57cdOnJj9aLfbz80c2rX74J79uydPzs0cOnDw4J6Dk3NnztYPozioLvZNf3jyzPkj+U3mD+09uOu++/ZOT54+OzN7aP/09OTFbrfPvzdN1m/9+5PnZ08duzB3enZyfu7js4d2Hdy3b3fX3wZ4+tyJ+Ymp8xfPTF2cnz0/VTyWiQv5xfXvfd1uTznN/0fx82yrWvGL+LJ33b0v/X7Wui8/tuxdFZu0/ALRZ8Pvovnnl5w7sJKvY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f0OYifwPAAAApRFz/3iYSUXyf+n6/5svrWj/+v/6/43nS/+/Yv3/h/qt/1+8X+j/98Za+/f6/4H+v/6//r/+v/4/PdBv/f+Y+2/IskrmfwAAAKiCmPs3hpnI/wAAAFAaMfffGGYi/wMAAEBpxNz/ojCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/P5VVq/9/uZfHr/+v/89S/db/j7n/xWEmFcn/AAAAUAUx998UZiL/AwAAQGnE3H9zmIn8DwAAAKURc/+mMJOK5H/9f/1//X/9f/3/9vvX/x9M+v+d6f93of/v8//1//X/6al+6//H3P+SMJOK5H8AAACogpj7XxpmIv8DAABA/xm5tpvF3P+yMJMl+f8adwAAAAC84GLuvyVrKYJX5O//9f/1//u//78hXaf/r/+f9WX/fzjT/+8f+v+d6f93of+v/6//r/9PT/Vb/z/P/dl49vIwk4rkfwAAAKiCmPtvDTOR/wEAAKA0Yu7/pTAT+R8AAABKI+b+zWEmFcn/+v/6//3f//f5//r//d7/9/n//UT/vzP9/y70//X/9f/1/+mpfuv/x9x/W5hJRfI/AAAAVEHM/beHmcj/AAAAUBox9/9ymIn8DwAAAKURc/+WMJOK5H/9/7X1/2Pv/Lr1/2NzVP9f/1//X/9f/39F9P870//vQv9f/1//X/+fnuq3/n/M/a8IM6lI/gcAAIAqiLn/jjAT+R8AAABKI+b+V4aZyP8AAABQGjH3T4SZVCT/6/8PxOf/j/n8f/1//X/9f/3/ldH/70z/vwv9f/3/nvT/Fy7p/+v/U+i3/n/M/XeGmVQk/wMAAEAVxNy/NcxE/gcAAIDSiLn/rjAT+R8AAABKI+b+bWEmFcn/+v8D0f/P9P/1//X/9f/1/1dG/78z/f8u9P/1/33+v/4/PdVv/f+Y+18VZlKR/A8AAABVEHP/9jAT+R8AAABKI+b+V4eZyP8AAABQGjH37wgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6//r/Pev/L+j/6//Th/3/mPtfE2ZSkfwPAAAAVRBz/84wE/kfAAAASiPm/rvDTOR/AAAAKI2Y+yfDTCqS//X/9f/1//X/9f/b71//fzDp/3em/9+F/r/+v8//1/+np/qt/x9z/z1hJhXJ/wAAAFAFMfffG2Yi/wMAAEBpxNw/FWYi/wMAAEBpxNw/HWZSkfyv/6//r/+v/7+q/v8rF+9X/7+g/99f9P870//vQv9f//8F7/+P6v9TKv3W/4+5f1eYSUXyPwAAAFRBzP27w0zkfwAAACiNmPv3hJnI/wAAAFAaMffvDTOpSP7X/9f/1//X//f5/+33r/8/mPT/O+t9/z8+RP1//X/9f5//r//PUv3W/4+5/74wk4rkfwAAAKiCmPv3hZnI/wAAAFAaMffvDzOR/wEAAKA0Yu4/EGZSkfxf1f5/rdZ8HJH+v/5/foH+v/6//v/A0v/vzOf/d6H/r/+v/6//zxo99IeNX/Vb/z/m/oNhJhXJ/wAAAFAFMfe/NsxE/gcAAIDSiLn/V8JM5H8AAAAojZj7fzXMpCL5v6r9/2U+/7/+cPX/9f/1//X/c/r/g0n/vzP9/y70//X/9f/1/+mpZfv/IXqvd/8/5v5DYSYVyf8AAABQBTH3/1qYifwPAAAApRFz/+vCTOR/AAAAKI2Y+w+HmVQk/+v/+/x//X/9f/3/9vtf7/7/WLxf/f810f/vbH36/7X4tqz/r/+v/6//r/9fcf32+f8x978+zKQi+R8AAACqIOb++8NM5H8AAAAojZj73xBmIv8DAABAacTc/8Ywk4rkf/1//f9B6f/fqP+v/9/yeMrW//f5/72h/9+Zz//vQv9f/1//X/+fnuq3/n/M/W8KM6lI/gcAAIAqiLn/zWEm8j8AAACURsz9bwkzkf8BAACgNGLuf2uYSUXyv/6//v+g9P8z/X/9/5bHo/+v/9+O/n9n+v9d6P/r/+v/6//TU/3W/4+5/9fDTCqS/wEAAKAKYu5/IMxE/gcAAIDSiLn/bWEm8j8AAACURsz9bw8zqUj+1//X/9f/1//X/2+/f/3/waT/39mA9f9/cVO4XP+/oP/f38e/2v7/SMvX16X//4Pl+v8LG1pvr//P9dBv/f+Y+98RZlKR/A8AAABVEHP/O8NM5H8AAAAojZj73xVmIv8DAABAacTc/xthJhXJ//r/9eNYbC/r/5e1/z+k/6//r/9fEfr/nQ1Y/9/n/7fQ/+/v4/f5//r/LNVv/f+Y+98dZlKR/A8AAABVEHP/g2Em8j8AAACURsz9D4WZyP8AAABQGjH3vyfMpCL5X//f5/9Xo//v8/8z/X/9/4rQ/+9M/78L/X/9/37r//+n/j+Drd/6/zH3PxxmUpH8DwAAAFUQc/97w0zkfwAAACiNmPt/M8xE/gcAAIDSiLn/fWEmFcn/+v8r7v9PdLq/69//nxjQ/v9j+v/Xsf9/x03Fdvr/+v8s0v/vTP+/C/1//f9+6//7/H8GXL/1/2Puf3+Yycrz//iKtwQAAABeEDH3/1aYSUX+/h8AAACqIOb+3w4zaZv/u/5vNwAAAEAfirn/d8JMKvL3//r/Pv/f5/8Pbv/f5//r/+v/L7V+/f/4zqP/r/+v/x/p/+v/6//Tqt/6/zH3/26YSUXyPwAAAFRBzP0fCDOR/wEAAGAgtPt/slvF3H8kzET+BwAAgNKIuf9omElF8r/+v/6//n+f9v//bOu/fO/b7zy6S/9f/1//f1XW9fP/6y9+n/+v/6//n+j/6//r/9Oq3/r/MfcfCzOpSP4HAACAKoi5//fCTOR/AAAAKI2Y+4+Hmcj/AAAAUBox98+EmVQk/+v/6//r//dp/3+AP/8/ng/9/2Y96//HN139/7aK/n1aRde3///exZ64/v9q+/9jbS/V/9f/H+Tj1//X/2epfuv/x9w/G2ZSkfwPAAAAVRBy/9CJYi5eIf8DAABAacTcfzLMRP4HAACA0oi5/4NhJhXJ//r/+v/6//r/Pv+//f479f9rIz7/v1+l/v3P8heK/n+L/un/t6f/r/8/yMev/6//z1L91v+PuX8uzKQi+R8AAACqIOb+D4WZyP8AAABQGjH3fzjMRP4HAACA0oi5/1SYSUXyv/6//r/+v/6//n/7/af+f/jW0Def/6//39Fa+/f6/4H+f7X7//+j/6//r/9Pb/Rb/z/m/tNh/j97d/JkWZnWcfwkFlRWYBjuXLgxwqV/Agtda7h24caNEYYLHFBxpnAeUVCcFcF5ABUEERWcB1ARxakbupue54GeaLqJ6iDzeZ6qzDx5bmblvXnPed/PZ8HTZFdybxMVWfzI+vYpnex/AAAA6EHu/lvjFvsfAAAAmpG7/xviFvsfAAAAmpG7/xvjlk72v/7/LP3/1UpZ/3/w/a/u//MVN9j/f6n+/7jX1/+f/fn/g/5/tvT/0/T/K4z3/zcNw9BX/+/5//p//T9rMrf+P3f/N8Utnex/AAAA6EHu/m+OW+x/AAAAaEbu/tviFvsfAAAAmpG7/1vilk72/6H+f2fos//PjNfz/z3/X/+v/9f/L9z59v93vv6VT/9/4v7/oXtWvexM+/8Wn/9/09gHt93Pn9W23/8J+/+Lx32+/p8Wza3/z93/rXFLJ/sfAAAAepC7/9viFvsfAAAAmpG7//a4xf4HAACAZuTu//a4pZP9v77n/1/a+/hC+/+i/9f/731A/6//1/8vluf/T+vp+f+3PX/zrS8/9oWPn+b1O+r/R227n1/6+/f8f/0/R82t/8/d/x1xSyf7HwAAAHqQu/874xb7HwAAAJqRu/+74hb7HwAAAJqRu/+745ZO9v/6+v9FP/+/6P/1/3sf0P/r//X/i6X/n9ZT/389r6//1//r//X/rNfc+v/c/d8Tt3Sy/wEAAKAHufu/N26x/wEAAKAZufvviFvsfwAAAGhG7v7LcUsn+1//v/n+/zX9v/4/rv5f/6//3zz9/zT9/wr6f/2//l//z1rNrf/P3X9n3NLJ/gcAAIAe5O7/vrjF/gcAAIBm5O7//rjF/gcAAIBm5O7/gbilk/2v//f8f/2//l//P/76+v9l0v9P0/+voP8/az9/o/5f/6//51qn7P9fnfiyvZb+P3f/D8Ytnex/AAAA6EHu/h+KW+x/AAAAaEbu/h+OW+x/AAAAaEbu/h+JWzrZ//p//b/+X/9/3f3/0Z96e/T/4/T/50P/P202/f/OhdEP6/8X3/97/r/+X//PAXN7/n/u/h+NWzrZ/wAAANCD3P0/FrdM7P9T/8t8AAAAYKty9/943OL7/wAAALB4WZ3l7v+JuKWT/a//1//r//X/nv8//vpT/f/j17w//f+86P+nzab/P4b+X/+/5Pev/9f/c9Tc+v/c/T8Zt3Sy/wEAAKAHufvvilvsfwAAAGhG7v6filvsfwAAAGhG7v6fjls62f/j/f/V/17/fzL6/4PvX/8//vNjXf1//hX1/5P9/5d5/n+f9P/Tzr//v6j/P/jX1/9v0Lbff+P9/6VVn6//Z8zc+v/c/XfHLZ3sfwAAAOhB7v574hb7HwAAAJqRu/9n4hb7HwAAAJqRu/9n45ZO9r/n/+v/9f/L6/89/3/fNp//P5x7/39B/39C+v9pnv+/gv5f/6//9/x/1mpu/X/u/nvjlk72PwAAAPTg3leGvd3/c8Ng/wMAAMASXft7Bw7/htKQu//n4xb7HwAAAJqRu/8X4pZO9r/+X/+v/9f/6//HX/+0/f+qByN7/v/50P9P0/+voP/fRD9/obH+/77jPn8O/f8d+n9m5kD//+TVj2+r/8/d/4txSyf7HwAAAHqQu/+X4hb7HwAAAJqRu/+X4xb7HwAAAJqRu/9X4pZO9v/G+/+JIFb/r//X/+v/W+r/V9H/nw/9/zT9/wr6f8//9/x//T9rdbX/P/j1cFv9f+7+X41bOtn/AAAA0IPc/b8Wt9j/AAAA0Izc/ffFLfY/AAAANCN3/6/HLZ3sf8//1//r//X/+v/x19f/L5P+f5r+f4X4R0H9v/5f/6//Zz0OPP//Gtvq/3P33x+3dLL/AQAAoAe5+x+IW+x/AAAAaEbu/t+IW+x/AAAAaEbu/t+MWzrZ//r/zfb/+XH9v/5/0P/r//X/56Lb/n9n7Feio47p/5/5ustfcfAjvfb/nv+v/9f/6/9Zq1n0/1eu/tNl7v7fils62f8AAADQg9z9vx232P8AAADQjNz9vxO32P8AAADQjNz9vxu3nHL/f/5a39X50f97/r/+X/+v/x9/ff3/MnXb/5+Q5/+voP/X/+v/9f+s1Sz6/2v+PHf/78Utvv8PAAAAzcjd//txi/0PAAAAzcjd/wdxi/0PAAAAzcjd/4dxSyf7X/+v/9f/6//1/+Ovf739/+4wTv9/PvT/0/T/K+j/m+r/v3IYBv2//p/tmlv/n7v/wbilk/0PAAAAPcjd/1DcYv8DAABAM3L3/1HcYv8DAABAM3L3/3Hc0sn+1//r//X/+n/9//jre/7/Mun/p+n/h2F4eOINjPX/Vy7q/xfa/3v+v/6f7Ztb/5+7/0/ilk72PwAAAPQgd//DcYv9DwAAAM3I3f9I3GL/AwAAQDNy9/9p3NLJ/tf/6//1/1vu/2/Q/+v/9f/rpP+fpv9fwfP/9f/6f/0/azW3/j93/6NxSyf7HwAAAHqQu/+xuMX+BwAAgGbk7v+zuMX+BwAAgGbk7n88bulk/+v/9f/6f8//30j/f1n/f5j+/3xsrv8f9P8b7f9f+7xB/6//X/j71//r/znqvPr/V+Pr/ar+P3f/n8ctnex/AAAA6EHu/ifiFvsfAAAAmpG7/y/iFvsfAAAAmpG7/y/jlk72v/5f/6//1/97/v/46+v/l8nz/6fNt//fp//X/y/5/ev/9f8cdV79/3G9/+E/z93/V3FLJ/sfAAAAepC7/8m4xf4HAACAZuTufypusf8BAACgGbn7/zpu6WT/6//1/wf7/2HQ/+v/9f/7zqH/3x30/2un/5+m/19B/99m/3/D0FD/f+nYz9f/M0dz6/9z9/9N3NLJ/gcAAIAe5O7/27jF/gcAAIBm5O7/u7jF/gcAAIBm5O7/+7ilpf3/2vHp2/L7/4uHPlH/PwzDC7d7/r/+f+L19f+z6f/r76r+f330/9P0/yvo/9vs/z3/X//P1syt/8/d/w9xS0v7HwAAADqXu/8f4xb7HwAAAJqRu/+f4hb7HwAAAJqRu/+f45ZO9v/y+//Dn6j/H870/H/9/94H9P/6f/3/Yp21v79/N35N0//r//X/o/38zjH/3DPo//X/+n9GzK3/z93/L3FLJ/sfAAAAepC7/+m4xf4HAACAZuTufyZusf8BAACgGbn7/zVu6WT/6//1//r/Zfb/u/p//b/+f9Rcnv9/yy1f/pz+X//fYv8/Rf+v/9f/c9jc+v/c/f8Wt3Sy/wEAAKAHufv/PW6x/wEAAKAZufufjVvsfwAAAGjGs3sh5+7wH8PQ5f4/2v/fOOwXqvvG+v9o1PT/19D/H3z/+v/xnx+e/6//1/9v3lz6f8//v773r//X/y/5/Z+q//+io5+v/6dFc+v/c/c/F7d0sv8BAACgB7n7/zNusf8BAACgGbn7/ytusf8BAACgGbn7n49bOtn/nv+v/9f/6//1/+Ovr/9fJv3/NP3/Cvr/s/fz+VVV/7/c5/9/jv6f9Zlb/5+7/7/jlr3h98Wfe53/MwEAAIAZyd3/P3FLJ9//BwAAgB7k7v/fuMX+BwAAgGbk7v+/uKWT/a//1//r//X/+v/x19f/L5P+f5r+f4V++v/dsQ9uu58/q22//2b6f8//Z43m1v/n7v//uKWT/Q8AAABte2Xvj7n73xC32P8AAADQjNz9b4xb7H8AAABoRu7+F+KWTva//l//337//zX6/0Ovr//X/7dM/5+/oo/T/6/QT/8/atv9/NLfv/5f/89Rc+v/c/e/GLd0sv8BAACgB7n73xS32P8AAADQjNz9b45b7H8AAABoRu7+t8QtTez/Cyt/hP6/r/5/Z+ix//f8f/2//r8Dlbwvp/9/YPQXac//1//r/5f7/vX/+n+Omlv/n7v/pZ0LDe5/AAAAaNdXfcnXv3jSH/vS3h93h7fGLfY/AAAANCN3/9viFvsfAAAAmpG7/+1xSyf7X//fV//f5/P/9f/6f/1/T5bT/4/T/+v/9f/Lff/6f/0/R82t/8/d/4645Zrht/r/RQ8AAAA4Vzed7ofn7n9n3NLJ9/8BAACgB7n73xW3HNn/V074u9oBAACAucnd/+64pZPv/+v/Z97/Dxvq/+PH6f/36f/1/2Ovr/9fJv3/tDP2/1d29P/6/wkL6P93N/n+9f/6f46aW/+fu/+JR4cu9z8AAAA06sC/UXjP3h93h/fGLfY/AAAANCN3//viFvsfAAAAmpG7//1xSyf7X/8/8/7/up7/f6n+k+f/d97/37U7+vr6/yb6/52xrzvo/1fx/P8V9P+t9/8bff/6f/0/R52i/98bpJvu/3P3fyBu6WT/AwAAQA9y938wbrH/AQAAoBm5+z8Ut9j/AAAA0Izc/R+OWzrZ//r/LfT/d18cho32/yd4/r/+v4/+/5jXb6f//4KbLz/91V/7yINd9v+e/3+M8+z/8+eC/l//r//fp//X/+v/OWxuz//P3f+RuKWT/Q8AAAA9yN3/ctxi/wMAAEAzcvd/NG55ff8/ta13BQAAAKxT7v6PxS2dfP9f/9/i8/+X2f/n3+st9P+Xl9f/Z1Pce//f9fP/9f/H8Pz/afr/FfT/+n/9v/6ftZpb/5+7/+NxSyf7HwAAAHqQu/8TcUvu/51T/6t7AAAAYGZy938ybvH9fwAAAGhG7v5X4pZO9r/+X/+/gf7/kuf/j//88Px//b/+f/P0/9P0/yvo//X/+n/9P2s1t/4/d/+n4pZO9j8AAAD0IHf/q3GL/Q8AAADNyN3/6bjF/gcAAIBm5O7/TNzSyf7X/+v/5/L8/6T/v/p5+v99+n/9/2no/6fp/1fQ/+v/9f/6f9Zqbv1/7v7PBgAA//+PXGeS") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.571087754s ago: executing program 3 (id=1744): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.43709049s ago: executing program 5 (id=1745): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x15, &(0x7f0000006c00)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f61636c2c616c6c6f635f6d6f64653d64656661756c742c64697361626c655f726f6c6c5f666f72776172642c646973636172645f756e69743d626c6f636b2c636865636b706f696e743d6d657267652c6d6f64653d61646170746976652c6d6f6470c4653d6c66732c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63288fe375b1b2616368652c6167655f657874656e745f63616368652c6661756c745f747970653d30303030303030303030303031363737373233332c00"], 0x1, 0x5505, &(0x7f0000000340)="$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") 2.396118343s ago: executing program 0 (id=1746): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 642.552352ms ago: executing program 3 (id=1747): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 513.525759ms ago: executing program 5 (id=1748): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x800}, 0x8) 480.768604ms ago: executing program 1 (id=1749): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 246.181777ms ago: executing program 0 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 195.236934ms ago: executing program 4 (id=1751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000080) 59.50736ms ago: executing program 5 (id=1752): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 0s ago: executing program 3 (id=1753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) kernel console output (not intermixed with test programs): supported [ 300.585174][ T7556] binder: 7554:7556 ioctl c0306201 2000000001c0 returned -22 [ 300.628796][ T7548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 300.771674][ T5825] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 300.847491][ T5825] usb 4-1: USB disconnect, device number 4 [ 301.913862][ T7580] loop0: detected capacity change from 0 to 256 [ 302.130247][ T7580] FAT-fs (loop0): Directory bread(block 64) failed [ 302.167409][ T7580] FAT-fs (loop0): Directory bread(block 65) failed [ 302.205592][ T7580] FAT-fs (loop0): Directory bread(block 66) failed [ 302.243912][ T7580] FAT-fs (loop0): Directory bread(block 67) failed [ 302.280395][ T7580] FAT-fs (loop0): Directory bread(block 68) failed [ 302.299801][ T7580] FAT-fs (loop0): Directory bread(block 69) failed [ 302.340018][ T7580] FAT-fs (loop0): Directory bread(block 70) failed [ 302.346751][ T7580] FAT-fs (loop0): Directory bread(block 71) failed [ 302.397665][ T7580] FAT-fs (loop0): Directory bread(block 72) failed [ 302.469870][ T7580] FAT-fs (loop0): Directory bread(block 73) failed [ 302.610323][ T5825] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 302.630041][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.829926][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 302.835407][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 302.895290][ T5825] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 302.912331][ T7592] loop5: detected capacity change from 0 to 1024 [ 302.915824][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.962264][ T7592] ext4: Bad value for 'max_batch_time' [ 302.963498][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.990127][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.020885][ T5825] usb 4-1: config 0 descriptor?? [ 303.038496][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 303.130539][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 303.176697][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 303.228458][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.288635][ T5825] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 303.309138][ T9] usb 2-1: config 0 descriptor?? [ 303.343349][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.428332][ T5825] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 303.498943][ T5825] usb 4-1: media controller created [ 303.645208][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.691264][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.798202][ T7598] loop0: detected capacity change from 0 to 2048 [ 303.816154][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.966589][ T7598] loop0: p2 < > p4 [ 304.078745][ T7598] loop0: p4 size 262144 extends beyond EOD, truncated [ 304.100256][ T5825] az6027: usb out operation failed. (-71) [ 304.113065][ T5825] az6027: usb out operation failed. (-71) [ 304.150165][ T5825] stb0899_attach: Driver disabled by Kconfig [ 304.156328][ T5825] az6027: no front-end attached [ 304.156328][ T5825] [ 304.214081][ T5825] az6027: usb out operation failed. (-71) [ 304.219758][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 304.229528][ T5825] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 304.237644][ T5133] loop0: p2 < > p4 [ 304.281128][ T5825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 304.287516][ T5133] loop0: p4 size 262144 extends beyond EOD, truncated [ 304.341595][ T5825] dvb-usb: schedule remote query interval to 400 msecs. [ 304.354878][ T9] usb 2-1: USB disconnect, device number 6 [ 304.366219][ T5825] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 304.408927][ T5825] usb 4-1: USB disconnect, device number 5 [ 304.450595][ T5836] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 304.499617][ T5836] usb 1-1: config 9 has no interface number 0 [ 304.524662][ T5836] usb 1-1: config 9 interface 48 has no altsetting 0 [ 304.578323][ T5836] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 304.619569][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.671548][ T5836] usb 1-1: Product: syz [ 304.696647][ T5836] usb 1-1: Manufacturer: syz [ 304.725434][ T5836] usb 1-1: SerialNumber: syz [ 304.783715][ T5825] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.031984][ T7611] ptrace attach of "./syz-executor exec"[5792] was attempted by ""[7611] [ 305.060676][ T5836] usb 1-1: USB disconnect, device number 8 [ 306.145406][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 306.419653][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 306.495518][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 306.670878][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 306.699213][ T5836] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 306.769741][ T5836] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.821428][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.828302][ T5836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 306.900766][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.944425][ T5836] usb 5-1: config 0 descriptor?? [ 306.993006][ T7640] loop5: detected capacity change from 0 to 256 [ 307.546550][ T5836] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 307.705512][ T5836] corsair-psu 0003:1B1C:1C09.0007: unable to initialize device (-90) [ 307.801784][ T5836] corsair-psu 0003:1B1C:1C09.0007: probe with driver corsair-psu failed with error -90 [ 307.910878][ T5836] usb 5-1: USB disconnect, device number 5 [ 308.331590][ T7651] fido_id[7651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 309.300778][ T29] audit: type=1326 audit(2000000080.064:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.355926][ T7672] loop0: detected capacity change from 0 to 512 [ 309.410310][ T29] audit: type=1326 audit(2000000080.074:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.418331][ T7674] loop5: detected capacity change from 0 to 256 [ 309.494308][ T7672] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.526000][ T29] audit: type=1326 audit(2000000080.094:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.660835][ T29] audit: type=1326 audit(2000000080.094:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.716017][ T29] audit: type=1326 audit(2000000080.094:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.742663][ T7677] loop4: detected capacity change from 0 to 1024 [ 309.808213][ T7677] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 309.844858][ T29] audit: type=1326 audit(2000000080.094:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 309.885801][ T7677] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 309.958483][ T7677] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.612: inode #1: comm syz.4.612: iget: illegal inode # [ 309.973644][ T29] audit: type=1326 audit(2000000080.094:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 310.016945][ T7677] loop4: lost filesystem error report for type 5 error -117 [ 310.017590][ T7677] EXT4-fs (loop4): Remounting filesystem read-only [ 310.025246][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 310.025338][ C0] EXT4-fs (loop4): initial error at time 2000000080: ext4_get_journal_inode:5888 [ 310.025451][ C0] EXT4-fs (loop4): last error at time 2000000080: ext4_get_journal_inode:5888 [ 310.079836][ T29] audit: type=1326 audit(2000000080.094:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 310.137489][ T7677] EXT4-fs (loop4): no journal found [ 310.150457][ T7677] EXT4-fs (loop4): can't get journal size [ 310.175364][ T29] audit: type=1800 audit(2000000080.384:21): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=1048635 res=0 errno=0 [ 310.220210][ T7677] EXT4-fs (loop4): failed to initialize system zone (-22) [ 310.257822][ T7677] EXT4-fs (loop4): mount failed [ 311.457728][ T7699] netlink: 116 bytes leftover after parsing attributes in process `syz.5.620'. [ 311.938007][ T7696] loop0: detected capacity change from 0 to 4096 [ 311.988650][ T7696] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 312.459097][ T7713] loop3: detected capacity change from 0 to 512 [ 312.461279][ T7696] ntfs3(loop0): ino=19, mi_enum_attr [ 312.535282][ T7696] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 312.612307][ T7696] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 312.645409][ T7713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.669340][ T29] audit: type=1800 audit(2000000083.434:22): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.621" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 312.722880][ T7713] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.956994][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'. [ 313.073561][ T7720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.081187][ T7720] IPv6: NLM_F_CREATE should be set when creating new route [ 313.088624][ T7720] IPv6: NLM_F_CREATE should be set when creating new route [ 313.155743][ T7724] loop5: detected capacity change from 0 to 512 [ 313.164846][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.194819][ T7724] EXT4-fs: Ignoring removed oldalloc option [ 313.344097][ T7724] EXT4-fs (loop5): 1 truncate cleaned up [ 313.424130][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.851631][ T7735] loop4: detected capacity change from 0 to 512 [ 313.919799][ T7735] FAT-fs (loop4): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1) [ 313.970184][ T7735] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.011408][ T7737] program syz.0.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.022966][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.885519][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 315.913622][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 315.938829][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 316.550063][ T7778] loop4: detected capacity change from 0 to 128 [ 316.596098][ T7778] EXT4-fs: Ignoring removed nobh option [ 316.764885][ T7778] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.833281][ T29] audit: type=1326 audit(2000000087.574:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 316.928657][ T7778] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.022714][ T29] audit: type=1326 audit(2000000087.684:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.295429][ T29] audit: type=1326 audit(2000000087.684:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.324543][ T7777] loop0: detected capacity change from 0 to 40427 [ 317.398893][ T7777] F2FS-fs (loop0): build fault injection rate: 771 [ 317.429674][ T29] audit: type=1326 audit(2000000087.684:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.456516][ T7777] F2FS-fs (loop0): invalid crc value [ 317.463276][ T29] audit: type=1326 audit(2000000087.684:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.490482][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 317.502353][ T29] audit: type=1326 audit(2000000087.684:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.802621][ T7777] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 317.814402][ T29] audit: type=1326 audit(2000000087.684:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.838875][ T29] audit: type=1326 audit(2000000087.714:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.876729][ T29] audit: type=1326 audit(2000000087.714:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f599c819 code=0x7ffc0000 [ 317.903083][ T7777] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 317.924637][ T5836] usb 6-1: Using ep0 maxpacket: 16 [ 317.935595][ T5792] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.973658][ T5836] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 318.282604][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.291345][ T5836] usb 6-1: Product: syz [ 318.295697][ T5836] usb 6-1: Manufacturer: syz [ 318.352957][ T5836] usb 6-1: SerialNumber: syz [ 318.646962][ T5836] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 318.666971][ T7796] loop0: detected capacity change from 0 to 16 [ 318.729023][ T5836] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.790049][ T5836] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 318.801253][ T7796] erofs (device loop0): mounted with root inode @ nid 36. [ 318.811960][ T7799] pim6reg: entered allmulticast mode [ 318.837334][ T5836] usb 6-1: media controller created [ 318.878522][ T7799] team0: entered allmulticast mode [ 318.918103][ T7799] team_slave_0: entered allmulticast mode [ 318.932856][ T7799] team_slave_1: entered allmulticast mode [ 319.073519][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.355433][ T5836] zl10353_read_register: readreg error (reg=127, ret==-71) [ 319.909281][ T7813] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 319.927668][ T5836] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 319.993284][ T5836] usb 6-1: USB disconnect, device number 2 [ 321.365289][ T7834] loop3: detected capacity change from 0 to 512 [ 321.383123][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 321.463068][ T7834] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 321.630315][ T7834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 321.640102][ T7834] EXT4-fs (loop3): orphan cleanup on readonly fs [ 321.647646][ T7834] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.680: bad orphan inode 267 [ 321.749721][ T7834] loop3: lost filesystem error report for type 5 error -117 [ 321.759624][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 321.773774][ C0] EXT4-fs (loop3): initial error at time 2000000092: ext4_orphan_get:1423 [ 321.782558][ C0] EXT4-fs (loop3): last error at time 2000000092: ext4_orphan_get:1423 [ 321.795815][ T7834] EXT4-fs (loop3): Remounting filesystem read-only [ 321.840237][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 321.962874][ T7834] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.680: dx entry: limit 0 != root limit 125 [ 321.990383][ T7843] loop0: detected capacity change from 0 to 256 [ 322.029852][ T7834] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.680: Corrupt directory, running e2fsck is recommended [ 322.221693][ T7843] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 322.392209][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 324.033925][ T7876] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 324.117367][ T7876] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 324.475680][ T7881] loop5: detected capacity change from 0 to 64 [ 324.684278][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 325.713105][ T7887] loop1: detected capacity change from 0 to 40427 [ 325.722085][ T7887] F2FS-fs: heap/no_heap options were deprecated [ 325.730038][ T7894] loop3: detected capacity change from 0 to 128 [ 325.738894][ T7887] F2FS-fs (loop1): build fault injection rate: 19 [ 325.748140][ T7887] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 325.797658][ T7894] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.820224][ T7887] F2FS-fs (loop1): invalid crc value [ 325.853657][ T7887] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 325.919921][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 326.129813][ T7887] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 326.139616][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 326.155876][ T7887] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 326.170364][ T7887] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 326.274795][ T5836] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 326.354875][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.472510][ T5836] usb 1-1: Product: syz [ 326.476863][ T5836] usb 1-1: Manufacturer: syz [ 326.587878][ T5836] usb 1-1: SerialNumber: syz [ 326.698039][ T5836] usb 1-1: config 0 descriptor?? [ 326.901028][ T5836] gspca_main: se401-2.14.0 probing 047d:5003 [ 327.072232][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.078817][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.492740][ T5836] gspca_se401: read req failed req 0x06 error -19 [ 327.518412][ T5836] usb 1-1: USB disconnect, device number 9 [ 327.753129][ T5836] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 328.010733][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 328.017570][ T5836] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 328.089735][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.184674][ T5836] usb 1-1: config 0 descriptor?? [ 328.196770][ T7915] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 328.255492][ T5836] gspca_main: se401-2.14.0 probing 047d:5003 [ 329.281367][ T5836] gspca_se401: read req failed req 0x06 error -19 [ 329.326500][ T5836] usb 1-1: USB disconnect, device number 10 [ 329.406120][ T7935] loop3: detected capacity change from 0 to 64 [ 329.522405][ T7936] sctp: [Deprecated]: syz.4.730 (pid 7936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.522405][ T7936] Use struct sctp_sack_info instead [ 329.662589][ T7935] overlayfs: upper fs needs to support d_type. [ 329.698312][ T7935] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.733109][ T7935] overlayfs: failed to set xattr on upper [ 329.759802][ T7935] overlayfs: ...falling back to redirect_dir=nofollow. [ 329.786180][ T7935] overlayfs: ...falling back to index=off. [ 329.813357][ T7940] loop5: detected capacity change from 0 to 512 [ 329.823831][ T7935] overlayfs: ...falling back to uuid=null. [ 329.939209][ T7940] EXT4-fs (loop5): 1 truncate cleaned up [ 329.953184][ T7940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.086810][ T29] audit: type=1800 audit(2000000001.210:32): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.732" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 330.205622][ T7949] loop0: detected capacity change from 0 to 2048 [ 330.262436][ T5825] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 330.277267][ T7949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.362135][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.443612][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 330.468836][ T5825] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.546175][ T5825] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 330.588808][ T5825] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 330.669966][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 330.681765][ T5825] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 330.713423][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 330.738013][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.768530][ T9] usb 5-1: config 0 has no interface number 0 [ 330.840935][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 330.891943][ T7947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.920728][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.009812][ T9] usb 5-1: Product: syz [ 331.015219][ T9] usb 5-1: Manufacturer: syz [ 331.056542][ T9] usb 5-1: SerialNumber: syz [ 331.139178][ T9] usb 5-1: config 0 descriptor?? [ 331.253222][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 331.505628][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 331.540973][ T7957] loop0: detected capacity change from 0 to 2048 [ 331.572870][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 331.588854][ T7957] NILFS (loop0): invalid segment: Magic number mismatch [ 331.609162][ T7957] NILFS (loop0): trying rollback from an earlier position [ 331.668242][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 331.773983][ T7957] NILFS (loop0): recovery complete [ 331.829668][ T7962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.869030][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 331.876956][ T5836] usb 5-1: USB disconnect, device number 6 [ 331.972202][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 332.038554][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 332.075765][ T5836] quatech2 5-1:0.51: device disconnected [ 332.103351][ T5825] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 332.187583][ T5825] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 332.478064][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 332.490063][ T5825] usb 2-1: USB disconnect, device number 7 [ 333.178124][ T34] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.199029][ T7978] loop1: detected capacity change from 0 to 256 [ 333.246308][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.317952][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.348862][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.614952][ T7980] loop5: detected capacity change from 0 to 1024 [ 333.821049][ T7980] hfsplus: b-tree write err: -5, ino 2 [ 334.084220][ T7987] loop1: detected capacity change from 0 to 128 [ 334.124428][ T7987] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 334.134068][ T7987] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.231770][ T268] hfsplus: b-tree write err: -5, ino 25 [ 334.232075][ T268] hfsplus: b-tree write err: -5, ino 4 [ 334.232328][ T268] hfsplus: b-tree write err: -5, ino 2 [ 334.232622][ T268] hfsplus: b-tree write err: -5, ino 26 [ 335.276149][ T5825] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 335.501065][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.623248][ T5825] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.693197][ T8011] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.737696][ T5825] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 335.765842][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.789862][ T5825] usb 5-1: Product: syz [ 335.794218][ T5825] usb 5-1: Manufacturer: syz [ 335.869984][ T5825] usb 5-1: SerialNumber: syz [ 335.903674][ T5825] usb 5-1: config 0 descriptor?? [ 336.174119][ T5825] usb 5-1: USB disconnect, device number 7 [ 336.350711][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 336.377077][ T8022] loop5: detected capacity change from 0 to 512 [ 336.406675][ T8022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.767: bg 0: block 5: invalid block bitmap [ 336.457741][ T8022] loop5: lost filesystem error report for type 5 error -117 [ 336.459485][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 336.473687][ C0] EXT4-fs (loop5): initial error at time 2000000007: ext4_validate_block_bitmap:432 [ 336.483315][ C0] EXT4-fs (loop5): last error at time 2000000007: ext4_validate_block_bitmap:432 [ 336.495398][ T8022] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 336.509530][ T8022] loop5: lost filesystem error report for type 5 error -117 [ 336.510817][ T8022] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.767: invalid indirect mapped block 3 (level 2) [ 336.682908][ T8022] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 336.689818][ T8022] EXT4-fs (loop5): 1 orphan inode deleted [ 336.755513][ T8022] EXT4-fs (loop5): 1 truncate cleaned up [ 336.815262][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.851026][ T8027] loop1: detected capacity change from 0 to 256 [ 337.037288][ T8031] loop3: detected capacity change from 0 to 256 [ 337.259044][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.899757][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 338.080099][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 338.126147][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.164829][ T5836] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.254691][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 338.318156][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 338.362615][ T8044] loop0: detected capacity change from 0 to 2048 [ 338.368002][ T5836] usb 2-1: Product: syz [ 338.385157][ T5836] usb 2-1: Manufacturer: syz [ 338.407780][ T5836] usb 2-1: SerialNumber: syz [ 338.461213][ T8044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.552711][ T8044] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.261945][ T8050] loop4: detected capacity change from 0 to 32768 [ 339.277234][ T5836] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 339.292063][ T8050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.780 (8050) [ 339.294665][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.331266][ T8050] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.342268][ T8050] BTRFS info (device loop4): using sha256 checksum algorithm [ 339.441500][ T5836] usb 2-1: USB disconnect, device number 8 [ 339.441713][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 339.641196][ T8050] BTRFS info (device loop4): enabling ssd optimizations [ 339.648358][ T8050] BTRFS info (device loop4): turning on async discard [ 339.655656][ T8050] BTRFS info (device loop4): enabling free space tree [ 339.842946][ T5836] appletouch 2-1:1.0: input: appletouch disconnected [ 339.880386][ T5792] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.458271][ T29] audit: type=1800 audit(2000000011.580:33): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.787" name="file1" dev="tmpfs" ino=322 res=0 errno=0 [ 341.062777][ T8093] loop1: detected capacity change from 0 to 512 [ 341.183539][ T8093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.196835][ T8093] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.256427][ T8093] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 341.271951][ T8093] Quota error (device loop1): write_blk: dquota write failed [ 341.279922][ T8093] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 341.290139][ T8093] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.792: Failed to acquire dquot type 1 [ 341.494390][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.645125][ T8101] program syz.4.796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.632977][ T29] audit: type=1107 audit(2000000013.720:34): pid=8110 uid=0 auid=0 ses=2 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 342.910255][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 345.366027][ T8146] loop0: detected capacity change from 0 to 64 [ 345.435824][ T8149] loop1: detected capacity change from 0 to 128 [ 345.603688][ T8149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.636148][ T8149] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.679780][ T29] audit: type=1800 audit(2000000016.780:35): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.817" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 345.743303][ T8150] loop3: detected capacity change from 0 to 2048 [ 345.895377][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.944091][ T8150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.983501][ T8154] loop5: detected capacity change from 0 to 1024 [ 346.272208][ T8158] hfsplus: catalog searching failed [ 348.074207][ T8176] loop4: detected capacity change from 0 to 128 [ 348.153035][ T8176] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 348.640038][ T149] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 348.716328][ T5792] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 349.718046][ T8194] netlink: 92 bytes leftover after parsing attributes in process `syz.5.838'. [ 350.180248][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 350.232509][ T8204] loop5: detected capacity change from 0 to 256 [ 350.318017][ T8204] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.350232][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 350.417322][ T8204] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.433330][ T5836] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 350.472590][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.499666][ T5836] usb 2-1: Product: syz [ 350.523652][ T5836] usb 2-1: Manufacturer: syz [ 350.549294][ T5836] usb 2-1: SerialNumber: syz [ 350.591805][ T5836] usb 2-1: config 0 descriptor?? [ 350.646931][ T5836] gspca_main: se401-2.14.0 probing 047d:5003 [ 350.647819][ T8206] loop3: detected capacity change from 0 to 256 [ 350.762240][ T8208] evm: overlay not supported [ 350.844291][ T8206] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d) [ 351.011737][ T8206] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 351.062113][ T5836] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 351.092225][ T29] audit: type=1800 audit(2000000022.200:36): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.843" name="file1" dev="loop3" ino=1048645 res=0 errno=0 [ 351.141602][ T5836] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 351.182261][ T5836] usb 2-1: USB disconnect, device number 9 [ 352.050490][ T8219] loop1: detected capacity change from 0 to 16 [ 352.141858][ T8219] erofs (device loop1): mounted with root inode @ nid 36. [ 352.242497][ T8219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 353.551280][ T8236] IPv6: NLM_F_REPLACE set, but no existing node found! [ 354.250492][ T8243] loop4: detected capacity change from 0 to 1764 [ 354.294932][ T8249] loop3: detected capacity change from 0 to 256 [ 354.443156][ T8249] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.613755][ T8265] loop0: detected capacity change from 0 to 1024 [ 356.143177][ T1079] hfsplus: b-tree write err: -5, ino 25 [ 356.178335][ T1079] hfsplus: b-tree write err: -5, ino 4 [ 356.205494][ T1079] hfsplus: b-tree write err: -5, ino 2 [ 356.290680][ T8276] nbd0: detected capacity change from 0 to 422212465065984 [ 356.314292][ T5780] block nbd0: Receive control failed (result -32) [ 356.383097][ T5963] block nbd0: Dead connection, failed to find a fallback [ 356.409695][ T5963] block nbd0: shutting down sockets [ 356.415193][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.515212][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.555705][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.652461][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.679723][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.734531][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.753478][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.832496][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.874685][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.924844][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.983398][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.039629][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 357.066311][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.109516][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 357.145029][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.159899][ T5825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.198506][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 357.236139][ T5963] ldm_validate_partition_table(): Disk read failed. [ 357.287780][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.329006][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 357.359837][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 357.387144][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 357.399159][ T5825] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 357.448060][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 357.457000][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.530367][ T5963] Dev nbd0: unable to read RDB block 0 [ 357.547539][ T5825] usb 6-1: Product: syz [ 357.570758][ T5963] nbd0: unable to read partition table [ 357.590149][ T5825] usb 6-1: Manufacturer: syz [ 357.605588][ T5825] usb 6-1: SerialNumber: syz [ 357.690569][ T5963] ldm_validate_partition_table(): Disk read failed. [ 357.727856][ T5825] usb 6-1: config 0 descriptor?? [ 357.750691][ T5963] Dev nbd0: unable to read RDB block 0 [ 357.780441][ T5963] nbd0: unable to read partition table [ 357.836486][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 358.196143][ T5825] gspca_se401: ExtraFeatures: 100 [ 358.218887][ T5825] gspca_se401: Too many frame sizes [ 358.364929][ T8300] netlink: 'syz.4.889': attribute type 2 has an invalid length. [ 358.417246][ T5825] usb 6-1: USB disconnect, device number 3 [ 359.149044][ T8314] loop4: detected capacity change from 0 to 512 [ 360.501039][ T8330] loop4: detected capacity change from 0 to 256 [ 360.720421][ T8332] loop0: detected capacity change from 0 to 512 [ 360.932128][ T8330] FAT-fs (loop4): Directory bread(block 64) failed [ 360.938866][ T8330] FAT-fs (loop4): Directory bread(block 65) failed [ 361.048725][ T8332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.083298][ T8330] FAT-fs (loop4): Directory bread(block 66) failed [ 361.150986][ T8330] FAT-fs (loop4): Directory bread(block 67) failed [ 361.187438][ T8330] FAT-fs (loop4): Directory bread(block 68) failed [ 361.261052][ T8330] FAT-fs (loop4): Directory bread(block 69) failed [ 361.346331][ T8330] FAT-fs (loop4): Directory bread(block 70) failed [ 361.435768][ T8330] FAT-fs (loop4): Directory bread(block 71) failed [ 361.525060][ T8330] FAT-fs (loop4): Directory bread(block 72) failed [ 361.616783][ T8330] FAT-fs (loop4): Directory bread(block 73) failed [ 361.645814][ T8334] loop3: detected capacity change from 0 to 40427 [ 361.654821][ T8334] F2FS-fs: heap/no_heap options were deprecated [ 361.683560][ T8334] F2FS-fs (loop3): build fault injection rate: 16 [ 361.690396][ T8334] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 361.717465][ T8334] F2FS-fs (loop3): invalid crc value [ 361.752374][ T8334] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x216/0x3020 [ 361.776437][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x1006/0x1160 [ 362.067189][ T8334] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 362.090201][ T8334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 362.115430][ T8334] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0xde/0x6c0 [ 362.696522][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.270179][ T8361] netlink: 149 bytes leftover after parsing attributes in process `syz.4.911'. [ 363.512670][ T8362] loop5: detected capacity change from 0 to 2048 [ 363.685176][ T8362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.816458][ T8366] loop9: detected capacity change from 0 to 524287936 [ 364.849699][ T5836] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 365.068750][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 365.114512][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 365.185282][ T5836] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 365.208722][ T8389] loop0: detected capacity change from 0 to 512 [ 365.259848][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.294376][ T8389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.334242][ T5836] usb 5-1: config 0 descriptor?? [ 365.402441][ T8379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.435532][ T8389] EXT4-fs (loop0): 1 truncate cleaned up [ 365.610413][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.165634][ T5836] kye 0003:0458:500F.0008: control desc unexpectedly large [ 366.267512][ T5836] input: HID 0458:500f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:500F.0008/input/input9 [ 366.491610][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.521494][ T5836] kye 0003:0458:500F.0008: input,hiddev0,hidraw0: USB HID v0.06 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 366.708880][ T5836] usb 5-1: USB disconnect, device number 8 [ 367.521495][ T8399] fido_id[8399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 369.115543][ T8423] loop0: detected capacity change from 0 to 64 [ 370.095112][ T5071] Bluetooth: hci4: command 0x0406 tx timeout [ 371.776602][ T8456] loop5: detected capacity change from 0 to 512 [ 371.988600][ T8456] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 372.051397][ T8453] loop1: detected capacity change from 0 to 32768 [ 372.113441][ T8453] [ 372.113441][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.113441][ T8453] [ 372.150252][ T8453] [ 372.150252][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.150252][ T8453] [ 372.161297][ T8453] [ 372.161297][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.161297][ T8453] [ 372.177135][ T8453] [ 372.177135][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.177135][ T8453] [ 372.188020][ T8453] [ 372.188020][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.188020][ T8453] [ 372.198830][ T8453] [ 372.198830][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.198830][ T8453] [ 372.209891][ T8453] [ 372.209891][ T8453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.209891][ T8453] [ 372.257282][ T111] [ 372.257282][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.257282][ T111] [ 372.355857][ T5777] [ 372.355857][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.355857][ T5777] [ 372.417439][ T5777] [ 372.417439][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.417439][ T5777] [ 372.891351][ T8467] loop3: detected capacity change from 0 to 256 [ 373.120002][ T5836] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 373.217508][ T8467] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 373.359742][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 373.405754][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.459558][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.501670][ T5836] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 373.569564][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.612422][ T5836] usb 1-1: config 0 descriptor?? [ 374.191414][ T5836] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 374.519998][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 374.590869][ T5836] usb 1-1: USB disconnect, device number 11 [ 374.778347][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.927882][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.111880][ T8490] loop5: detected capacity change from 0 to 32768 [ 375.119797][ T24] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 375.180244][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.219932][ T8490] JBD2: Ignoring recovery information on journal [ 375.254720][ T24] usb 2-1: config 0 descriptor?? [ 375.355775][ T8490] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 375.478676][ T8492] fido_id[8492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 375.764210][ T6978] ocfs2: Unmounting device (7,5) on (node local) [ 376.565631][ T8496] loop3: detected capacity change from 0 to 32768 [ 376.590834][ T24] thrustmaster 0003:044F:B654.000A: item fetching failed at offset 5/7 [ 376.665520][ T24] thrustmaster 0003:044F:B654.000A: parse failed [ 376.713887][ T24] thrustmaster 0003:044F:B654.000A: probe with driver thrustmaster failed with error -22 [ 376.837608][ T24] usb 2-1: USB disconnect, device number 10 [ 380.439869][ T8558] loop0: detected capacity change from 0 to 256 [ 381.604982][ T24] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 381.772893][ T8580] bpf: Bad value for 'uid' [ 381.831129][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.860059][ T24] usb 2-1: config 0 has no interface number 0 [ 381.866485][ T24] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.915323][ T24] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.959619][ T24] usb 2-1: config 0 interface 1 has no altsetting 0 [ 381.966488][ T24] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 382.022006][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.044682][ T24] usb 2-1: config 0 descriptor?? [ 382.297043][ T8587] loop5: detected capacity change from 0 to 256 [ 382.348231][ T8587] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.437519][ T29] audit: type=1800 audit(2000000053.550:37): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1005" name="bus" dev="loop5" ino=1048674 res=0 errno=0 [ 382.475335][ T8587] Invalid ELF header magic: != ELF [ 382.793319][ T24] input: HID 2179:0053 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:2179:0053.000B/input/input10 [ 382.957304][ T24] uclogic 0003:2179:0053.000B: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.1-1/input1 [ 383.096363][ T24] usb 2-1: USB disconnect, device number 11 [ 383.404775][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 383.622357][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 383.647094][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.679850][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.715763][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.759813][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.794495][ T9] usb 6-1: Product: syz [ 383.799036][ T9] usb 6-1: Manufacturer: syz [ 383.827299][ T9] usb 6-1: SerialNumber: syz [ 383.881844][ T9] usb 6-1: config 0 descriptor?? [ 383.966191][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 384.009666][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 384.044344][ T8599] fido_id[8599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 384.575889][ T9] em28xx 6-1:0.0: chip ID is em2874 [ 384.655945][ T8613] loop3: detected capacity change from 0 to 128 [ 384.751891][ T8613] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 384.778739][ T8616] loop1: detected capacity change from 0 to 512 [ 384.817773][ T9] usb 6-1: USB disconnect, device number 4 [ 384.851630][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 384.908599][ T9] em28xx 6-1:0.0: Freeing device [ 384.932217][ T8616] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1020: inode has both inline data and extents flags [ 384.946609][ T8616] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.947428][ T8616] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1020: couldn't read orphan inode 15 (err -117) [ 384.957061][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 384.957151][ C0] EXT4-fs (loop1): initial error at time 2000000056: ext4_orphan_get:1397: inode 15 [ 384.957295][ C0] EXT4-fs (loop1): last error at time 2000000056: ext4_orphan_get:1397: inode 15 [ 385.008263][ T8616] loop1: lost filesystem error report for type 5 error -117 [ 385.012903][ T8616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.326647][ T8621] loop0: detected capacity change from 0 to 2048 [ 385.505507][ T8621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.512271][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.866008][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.958315][ T8631] loop4: detected capacity change from 0 to 1024 [ 386.007710][ T8625] nbd1: detected capacity change from 0 to 63 [ 386.055074][ T5071] block nbd1: Receive control failed (result -32) [ 386.060033][ T5780] block nbd1: Receive control failed (result -32) [ 386.589846][ T5966] block nbd1: Dead connection, failed to find a fallback [ 386.669511][ T5966] block nbd1: shutting down sockets [ 386.711983][ T5966] blk_print_req_error: 24 callbacks suppressed [ 386.712059][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 386.863013][ T5966] buffer_io_error: 23 callbacks suppressed [ 386.863081][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 386.920420][ T56] hfsplus: b-tree write err: -5, ino 25 [ 386.944084][ T56] hfsplus: b-tree write err: -5, ino 4 [ 386.961836][ T5966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 386.988803][ T56] hfsplus: b-tree write err: -5, ino 2 [ 387.054075][ T5966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 387.072433][ T56] hfsplus: b-tree write err: -5, ino 17 [ 387.092584][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 387.132132][ T5966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.185736][ T5966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 387.216722][ T5966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.293718][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 387.300280][ T5966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 387.308810][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.357402][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 387.389610][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.397722][ T5966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.423593][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.489789][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.494534][ T5966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 387.537320][ T5966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.592048][ T5966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 387.624124][ T5966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.692247][ T5966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 387.751114][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.810558][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.880250][ T5966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.939916][ T5966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 387.988385][ T8648] loop5: detected capacity change from 0 to 4096 [ 388.000912][ T5966] ldm_validate_partition_table(): Disk read failed. [ 388.015172][ T5966] Dev nbd1: unable to read RDB block 0 [ 388.056539][ T8648] ntfs3(loop5): ino=3, Correct links count -> 2. [ 388.084084][ T5966] nbd1: unable to read partition table [ 388.168616][ T5966] ldm_validate_partition_table(): Disk read failed. [ 388.206511][ T5966] Dev nbd1: unable to read RDB block 0 [ 388.264777][ T5966] nbd1: unable to read partition table [ 388.525602][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.543489][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.674185][ T8648] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 390.033963][ T9] usb 4-1: USB disconnect, device number 6 [ 390.361435][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 391.118323][ T8689] loop0: detected capacity change from 0 to 4096 [ 391.308832][ T8687] loop5: detected capacity change from 0 to 4096 [ 391.344924][ T8696] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.486030][ T8689] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 391.552536][ T8689] Remounting filesystem read-only [ 391.796291][ T8701] loop4: detected capacity change from 0 to 736 [ 391.887654][ T5781] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 392.530673][ T8704] loop3: detected capacity change from 0 to 2048 [ 392.579044][ T8707] xt_hashlimit: size too large, truncated to 1048576 [ 392.774772][ T8704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.001276][ T29] audit: type=1800 audit(2000000064.130:38): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1061" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 393.552849][ T8715] tap0: tun_chr_ioctl cmd 1074025677 [ 393.558716][ T8715] tap0: linktype set to 805 [ 394.435252][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 394.492985][ T8727] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1071'. [ 395.195423][ T8739] loop4: detected capacity change from 0 to 128 [ 395.242637][ T8739] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 395.347140][ T8739] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.620020][ T8744] CUSE: unknown device info "/dev/cuse" [ 395.649903][ T8744] CUSE: unknown device info "" [ 395.654925][ T8744] CUSE: unknown device info "E" [ 395.676899][ T8744] CUSE: DEVNAME unspecified [ 396.228828][ T8752] can0: slcan on ttyS3. [ 396.414166][ T8755] can0 (unregistered): slcan off ttyS3. [ 396.431957][ T8755] can0: slcan on ttyS3. [ 396.587584][ T8759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 396.620385][ T8751] can0 (unregistered): slcan off ttyS3. [ 398.103983][ T8773] loop5: detected capacity change from 0 to 4096 [ 398.330461][ T8773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.505648][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 398.699843][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 398.725587][ T24] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 398.781816][ T24] usb 5-1: config 0 has no interface number 0 [ 398.788138][ T24] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 398.868027][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.910294][ T24] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.963931][ T24] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 399.049687][ T24] usb 5-1: config 0 interface 196 has no altsetting 0 [ 399.134457][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 399.158422][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.219563][ T24] usb 5-1: Product: syz [ 399.223928][ T24] usb 5-1: Manufacturer: syz [ 399.228738][ T24] usb 5-1: SerialNumber: syz [ 399.310741][ T24] usb 5-1: config 0 descriptor?? [ 399.325458][ T8780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.351125][ T8793] netlink: 'syz.5.1101': attribute type 14 has an invalid length. [ 400.049861][ T24] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 400.127798][ T24] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 400.293038][ T9] usb 5-1: USB disconnect, device number 9 [ 400.451622][ T9] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 400.811139][ T5071] Bluetooth: hci2: command 0x0406 tx timeout [ 401.317852][ T8822] loop3: detected capacity change from 0 to 164 [ 401.783797][ T8832] input: syz0 as /devices/virtual/input/input11 [ 401.844165][ T8830] block nbd2: shutting down sockets [ 401.950080][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 402.025279][ T8835] netlink: 'syz.3.1120': attribute type 3 has an invalid length. [ 402.060041][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 402.129575][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 402.160996][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 402.219071][ T24] usb 1-1: config 0 has no interface number 0 [ 402.251333][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 402.278990][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 402.324563][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.360543][ T24] usb 1-1: Product: syz [ 402.364991][ T24] usb 1-1: Manufacturer: syz [ 402.415618][ T24] usb 1-1: SerialNumber: syz [ 402.501677][ T24] usb 1-1: config 0 descriptor?? [ 403.141876][ T8846] loop4: detected capacity change from 0 to 1024 [ 403.192166][ T8846] EXT4-fs: inline encryption not supported [ 403.248101][ T8846] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.454698][ T8846] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.1125: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.493733][ T24] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 403.515111][ T8846] loop4: lost filesystem error report for type 5 error -117 [ 403.516547][ T8846] EXT4-fs (loop4): Remounting filesystem read-only [ 403.524118][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 403.524205][ C0] EXT4-fs (loop4): initial error at time 2000000074: ext4_free_blocks:6724 [ 403.524320][ C0] EXT4-fs (loop4): last error at time 2000000074: ext4_free_blocks:6724 [ 403.559631][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 403.567121][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 403.596636][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 403.641965][ T8846] EXT4-fs (loop4): 1 orphan inode deleted [ 403.683033][ T13] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 403.701223][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.711212][ T24] usb 1-1: USB disconnect, device number 12 [ 403.753749][ T13] Quota error (device loop4): write_blk: dquota write failed [ 403.793849][ T13] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries [ 403.834051][ T13] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 403.905130][ T13] Quota error (device loop4): write_blk: dquota write failed [ 403.960529][ T13] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 403.990189][ T13] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 404.073582][ T13] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 404.341443][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.465437][ T8860] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 404.513144][ T8863] program syz.5.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.671174][ T8864] loop0: detected capacity change from 0 to 512 [ 405.824872][ T8883] cifs: Bad value for 'source' [ 406.181578][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1143'. [ 406.922161][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 407.132249][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 407.151268][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 407.168560][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.248513][ T9] usb 4-1: config 0 descriptor?? [ 407.473972][ T5825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 407.531253][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 407.568036][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.656621][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 407.731384][ T8898] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 407.739532][ T9] usb 4-1: media controller created [ 407.758539][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 407.853310][ T5825] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 407.910092][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.932254][ T5825] usb 1-1: Product: syz [ 407.936619][ T5825] usb 1-1: Manufacturer: syz [ 407.969958][ T5825] usb 1-1: SerialNumber: syz [ 408.004628][ T5825] usb 1-1: config 0 descriptor?? [ 408.027729][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.065635][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 408.185252][ T8920] loop4: detected capacity change from 0 to 512 [ 408.275146][ T8923] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1159'. [ 408.303517][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.356833][ T9] az6027: usb out operation failed. (-71) [ 408.383165][ T9] az6027: usb out operation failed. (-71) [ 408.388914][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.389839][ T9] stb0899_attach: Driver disabled by Kconfig [ 408.468750][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.521983][ T9] az6027: no front-end attached [ 408.521983][ T9] [ 408.570457][ T8920] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.598877][ T9] az6027: usb out operation failed. (-71) [ 408.650743][ T5825] gspca_se401: ExtraFeatures: 3 [ 408.655770][ T5825] gspca_se401: Frame size: 192x0 bayer [ 408.670821][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 408.692320][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 408.739802][ T5825] gspca_se401: Frame size: 0x0 1/16th janggu [ 408.790116][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 408.797356][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 408.868508][ T5825] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 408.911428][ T9] usb 4-1: USB disconnect, device number 7 [ 409.045457][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.088131][ T8934] loop3: detected capacity change from 0 to 64 [ 409.139968][ T5836] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 409.140591][ T5825] usb 1-1: USB disconnect, device number 13 [ 409.194791][ T8934] hfs: unable to locate alternate MDB [ 409.292731][ T8934] hfs: continuing without an alternate MDB [ 409.349545][ T5836] usb 6-1: Using ep0 maxpacket: 16 [ 409.493699][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 409.625598][ T5836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.706978][ T5836] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 409.775174][ T5836] usb 6-1: can't read configurations, error -71 [ 409.833071][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 411.249286][ T8954] loop4: detected capacity change from 0 to 256 [ 411.378858][ T8954] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 412.545154][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 412.636242][ T8978] loop5: detected capacity change from 0 to 256 [ 412.680762][ T5836] kernel read not supported for file /dsp1 (pid: 5836 comm: kworker/1:4) [ 412.702226][ T8978] exfat: Deprecated parameter 'utf8' [ 412.935679][ T8978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 413.065085][ T8984] vivid-003: ================= START STATUS ================= [ 413.096999][ T8978] gfs2: path_lookup on c::: returned error -2 [ 413.119900][ T8984] vivid-003: Radio HW Seek Mode: Bounded [ 413.157456][ T8984] vivid-003: Radio Programmable HW Seek: false [ 413.184693][ T8984] vivid-003: RDS Rx I/O Mode: Block I/O [ 413.250432][ T8984] vivid-003: Generate RBDS Instead of RDS: false [ 413.294215][ T8984] vivid-003: RDS Reception: true [ 413.302439][ T8984] vivid-003: RDS Program Type: 0 inactive [ 413.328774][ T8984] vivid-003: RDS PS Name: inactive [ 413.390031][ T8984] vivid-003: RDS Radio Text: inactive [ 413.395825][ T8984] vivid-003: RDS Traffic Announcement: false inactive [ 413.455492][ T8984] vivid-003: RDS Traffic Program: false inactive [ 413.529970][ T8984] vivid-003: RDS Music: false inactive [ 413.560076][ T8984] vivid-003: ================== END STATUS ================== [ 414.029736][ T8993] macvlan0: entered promiscuous mode [ 414.125556][ T8993] dummy0: entered promiscuous mode [ 414.203914][ T8993] hsr1: entered promiscuous mode [ 414.230573][ T8993] hsr1: entered allmulticast mode [ 414.261657][ T8993] macvlan0: entered allmulticast mode [ 414.294812][ T8993] veth1_vlan: entered allmulticast mode [ 414.324711][ T8993] dummy0: entered allmulticast mode [ 414.780396][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1191'. [ 416.217676][ T9014] loop3: detected capacity change from 0 to 2048 [ 416.329785][ T9014] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 416.382364][ T9014] NILFS (loop3): mounting unchecked fs [ 416.496719][ T9014] NILFS (loop3): recovery complete [ 416.530591][ T9023] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.542313][ T5836] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 416.739758][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 416.767707][ T5836] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 416.810050][ T5836] usb 2-1: config 0 has no interface number 0 [ 416.900259][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 416.949935][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.985299][ T5836] usb 2-1: Product: syz [ 417.007731][ T5836] usb 2-1: Manufacturer: syz [ 417.022154][ T5836] usb 2-1: SerialNumber: syz [ 417.113270][ T5836] usb 2-1: config 0 descriptor?? [ 417.114869][ T9025] loop3: detected capacity change from 2048 to 2047 [ 417.254747][ T5836] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 417.407879][ T5836] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 417.493837][ T5836] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 417.598097][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 417.805153][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 417.806735][ T9] usb 2-1: USB disconnect, device number 12 [ 417.919899][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 418.087901][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 418.124598][ T5836] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 418.159167][ T9] quatech2 2-1:0.51: device disconnected [ 418.334680][ T5836] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 418.385589][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.449809][ T5836] usb 1-1: config 0 descriptor?? [ 418.532705][ T5836] cp210x 1-1:0.0: cp210x converter detected [ 418.646176][ T9038] loop5: detected capacity change from 0 to 2048 [ 418.693558][ T9038] EXT4-fs: Ignoring removed i_version option [ 418.837960][ T9038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.927854][ T9038] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.182050][ T5836] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 419.218168][ T5836] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 419.248714][ T5836] usb 1-1: cp210x converter now attached to ttyUSB0 [ 419.354709][ T5836] usb 1-1: USB disconnect, device number 14 [ 419.412620][ T6000] udevd[6000]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 419.420804][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 419.458527][ T6000] udevd[6000]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 419.488793][ T5836] cp210x 1-1:0.0: device disconnected [ 419.489000][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.864125][ T9064] loop4: detected capacity change from 0 to 256 [ 420.902986][ T9064] exfat: Deprecated parameter 'utf8' [ 420.932014][ T9064] exfat: Deprecated parameter 'utf8' [ 420.937697][ T9064] exfat: Deprecated parameter 'utf8' [ 421.170543][ T9064] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 421.608555][ T9069] loop1: detected capacity change from 0 to 2048 [ 421.826036][ T9069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.289821][ T9078] tap0: tun_chr_ioctl cmd 2147767521 [ 422.716510][ T9084] loop3: detected capacity change from 0 to 512 [ 422.914172][ T9084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.063872][ T9084] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.216494][ T29] audit: type=1800 audit(2000000094.340:39): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1227" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 423.466301][ T9087] loop0: detected capacity change from 0 to 4096 [ 423.628863][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.695844][ T9096] loop5: detected capacity change from 0 to 1024 [ 423.805718][ T5836] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 424.049547][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 424.094234][ T5836] usb 2-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 424.154554][ T5836] usb 2-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 424.244479][ T5836] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 424.285958][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.327532][ T5836] usb 2-1: Product: syz [ 424.396057][ T5836] usb 2-1: Manufacturer: syz [ 424.421900][ T5836] usb 2-1: SerialNumber: syz [ 424.607045][ T149] hfsplus: request for non-existent node 33554434 in B*Tree [ 424.652499][ T149] hfsplus: request for non-existent node 33554434 in B*Tree [ 424.861484][ T5836] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 425.371283][ T5836] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 425.680695][ T9114] vivid-000: disconnect [ 425.700659][ T9113] vivid-000: reconnect [ 425.835956][ T9116] loop0: detected capacity change from 0 to 128 [ 425.854914][ T5836] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 425.871950][ T5836] ueagle-atm 2-1:157.0: usbatm_usb_probe: bind failed: -19! [ 425.963415][ T9116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.066765][ T5836] usb 2-1: USB disconnect, device number 13 [ 426.115231][ T9116] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.452998][ T9125] random: crng reseeded on system resumption [ 426.565832][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.399528][ T9126] syz.4.1244 (9126) used greatest stack depth: 2392 bytes left [ 427.800262][ T9140] loop4: detected capacity change from 0 to 1024 [ 428.309887][ T9144] loop3: detected capacity change from 0 to 256 [ 428.383653][ T9144] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 431.660248][ T5780] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 432.794174][ T9194] loop5: detected capacity change from 0 to 1024 [ 432.807542][ T29] audit: type=1326 audit(2000000103.930:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.0.1273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f867559c819 code=0x0 [ 432.854342][ T9194] EXT4-fs: Ignoring removed bh option [ 432.935607][ T9194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.946929][ T9199] binder: 9198:9199 ioctl 4018620d 0 returned -22 [ 432.987320][ T9194] EXT4-fs (loop5): Test dummy encryption mode enabled [ 433.003332][ T9202] input: syz1 as /devices/virtual/input/input14 [ 433.127915][ T9194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.735880][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.542577][ T9223] nbd2: detected capacity change from 0 to 127 [ 434.597231][ T5780] block nbd2: Receive control failed (result -32) [ 434.658587][ T7637] block nbd2: Dead connection, failed to find a fallback [ 434.674056][ T7637] block nbd2: shutting down sockets [ 434.679631][ T7637] blk_print_req_error: 138 callbacks suppressed [ 434.679703][ T7637] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 434.702103][ T7637] buffer_io_error: 138 callbacks suppressed [ 434.702175][ T7637] Buffer I/O error on dev nbd2, logical block 0, async page read [ 434.779898][ T7637] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 434.813335][ T7637] Buffer I/O error on dev nbd2, logical block 1, async page read [ 434.883906][ T7637] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 434.943354][ T7637] Buffer I/O error on dev nbd2, logical block 2, async page read [ 434.972206][ T7637] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.025745][ T7637] Buffer I/O error on dev nbd2, logical block 3, async page read [ 435.060923][ T9228] loop5: detected capacity change from 0 to 256 [ 435.080070][ T7637] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.131800][ T7637] Buffer I/O error on dev nbd2, logical block 0, async page read [ 435.182820][ T7637] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.229781][ T7637] Buffer I/O error on dev nbd2, logical block 1, async page read [ 435.237851][ T7637] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.337338][ T7637] Buffer I/O error on dev nbd2, logical block 2, async page read [ 435.385908][ T7637] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.459525][ T7637] Buffer I/O error on dev nbd2, logical block 3, async page read [ 435.519900][ T7637] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.641685][ T7637] Buffer I/O error on dev nbd2, logical block 0, async page read [ 435.713759][ T7637] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.746910][ T7637] Buffer I/O error on dev nbd2, logical block 1, async page read [ 435.792353][ T7637] ldm_validate_partition_table(): Disk read failed. [ 435.828097][ T9] IPVS: starting estimator thread 0... [ 435.851053][ T7637] Dev nbd2: unable to read RDB block 0 [ 435.858801][ T7637] nbd2: unable to read partition table [ 435.973814][ T7637] ldm_validate_partition_table(): Disk read failed. [ 435.985101][ T9238] IPVS: using max 240 ests per chain, 12000 per kthread [ 436.053814][ T7637] Dev nbd2: unable to read RDB block 0 [ 436.125876][ T7637] nbd2: unable to read partition table [ 436.357666][ T7637] ldm_validate_partition_table(): Disk read failed. [ 436.457882][ T7637] Dev nbd2: unable to read RDB block 0 [ 436.511778][ T7637] nbd2: unable to read partition table [ 436.573709][ T7637] ldm_validate_partition_table(): Disk read failed. [ 436.605925][ T7637] Dev nbd2: unable to read RDB block 0 [ 436.629279][ T9249] loop5: detected capacity change from 0 to 256 [ 436.651582][ T7637] nbd2: unable to read partition table [ 437.724444][ T9262] sctp: [Deprecated]: syz.1.1300 (pid 9262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.724444][ T9262] Use struct sctp_sack_info instead [ 437.965123][ T9266] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1302'. [ 438.475499][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 438.982103][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1307'. [ 439.003290][ T9282] netlink: 'syz.3.1309': attribute type 3 has an invalid length. [ 439.031259][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 440.857423][ T9305] loop5: detected capacity change from 0 to 1024 [ 441.223545][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 441.278106][ T1079] hfsplus: b-tree write err: -5, ino 25 [ 441.330659][ T1079] hfsplus: b-tree write err: -5, ino 4 [ 441.360054][ T1079] hfsplus: b-tree write err: -5, ino 2 [ 441.365889][ T1079] hfsplus: b-tree write err: -5, ino 20 [ 441.428519][ T5949] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 441.478868][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.518911][ T5949] usb 5-1: config 0 descriptor?? [ 441.562806][ T9316] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 441.582243][ T5949] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 441.622519][ T9316] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1324'. [ 442.018871][ T5949] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 442.228730][ T5949] gspca_cpia1: usb_control_msg 01, error -32 [ 442.240718][ T5949] gspca_cpia1: usb_control_msg 01, error -71 [ 442.246862][ T5949] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 442.360532][ T5949] usb 5-1: USB disconnect, device number 10 [ 444.202600][ T9340] loop0: detected capacity change from 0 to 256 [ 446.016945][ T9351] loop1: detected capacity change from 0 to 4096 [ 446.198610][ T9351] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 446.754221][ T9351] ntfs3(loop1): ino=19, mi_enum_attr [ 446.789536][ T9351] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 446.982888][ T5949] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 447.169555][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 447.192489][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.217915][ T9] kernel write not supported for file /616/coredump_filter (pid: 9 comm: kworker/0:0) [ 447.269780][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.293237][ T9351] ntfs3(loop1): ino=21, "file1" failed to extend initialized size to 8000c61. [ 447.307551][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.340900][ T9378] loop0: detected capacity change from 0 to 128 [ 447.359021][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.391730][ T5949] usb 4-1: config 0 descriptor?? [ 447.453734][ T5949] hub 4-1:0.0: USB hub found [ 447.633227][ T5949] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 447.813644][ T9380] loop5: detected capacity change from 0 to 128 [ 447.854097][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 447.883685][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 447.911250][ T9380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 447.962594][ T9380] hpfs: filesystem error: improperly stopped [ 447.995677][ T5949] usb 4-1: USB disconnect, device number 8 [ 448.007363][ T9380] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 448.075099][ T9380] hpfs: You really don't want any checks? You are crazy... [ 448.125097][ T9380] hpfs: hpfs_map_sector(): read error [ 448.178781][ T9380] hpfs: code page support is disabled [ 448.196313][ T9380] hpfs: hpfs_map_4sectors(): unaligned read [ 448.237994][ T9380] hpfs: hpfs_map_4sectors(): unaligned read [ 448.278471][ T9380] hpfs: filesystem error: unable to find root dir [ 449.158487][ T9391] loop5: detected capacity change from 0 to 512 [ 449.334826][ T9391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 449.411860][ T9396] loop4: detected capacity change from 0 to 512 [ 449.438470][ T9391] EXT4-fs (loop5): 1 truncate cleaned up [ 449.530139][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.620463][ T9396] EXT4-fs (loop4): 1 truncate cleaned up [ 449.668171][ T9396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.952573][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.959268][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.182282][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.361289][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.947328][ T9407] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 450.952809][ T9415] Zero length message leads to an empty skb [ 451.034521][ T9407] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 452.467016][ T9425] loop4: detected capacity change from 0 to 32768 [ 452.528056][ T9425] JBD2: Ignoring recovery information on journal [ 452.714670][ T9425] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 452.929169][ T5792] ocfs2: Unmounting device (7,4) on (node local) [ 453.563803][ T9446] loop3: detected capacity change from 0 to 256 [ 453.823986][ T9446] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 453.952655][ T9451] loop4: detected capacity change from 0 to 512 [ 454.037095][ T9451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 454.182216][ T9451] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1383: bad orphan inode 131083 [ 454.267222][ T9451] loop4: lost filesystem error report for type 5 error -117 [ 454.269436][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 454.283745][ C0] EXT4-fs (loop4): initial error at time 2000000125: ext4_orphan_get:1423 [ 454.292524][ C0] EXT4-fs (loop4): last error at time 2000000125: ext4_orphan_get:1423 [ 454.355100][ T9451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.818977][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.602982][ T9477] loop3: detected capacity change from 0 to 32768 [ 456.732479][ T9477] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 456.915428][ T9493] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1397'. [ 457.025903][ T9477] XFS (loop3): Ending clean mount [ 457.039551][ T9477] XFS (loop3): Quotacheck needed: Please wait. [ 457.156032][ T9477] XFS (loop3): Quotacheck: Done. [ 457.324446][ T9498] loop5: detected capacity change from 0 to 256 [ 457.333966][ T5949] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 457.431886][ T9498] exfat: Deprecated parameter 'utf8' [ 457.534369][ T9498] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 457.581711][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 457.660413][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 457.722425][ T5949] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.759093][ T5949] usb 2-1: config 0 has no interface number 0 [ 457.819059][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.842287][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.872310][ T5949] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.932235][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.052382][ T5949] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 458.121656][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.181533][ T5949] usb 2-1: config 0 descriptor?? [ 458.372359][ T5949] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 458.527417][ T5949] usb 2-1: USB disconnect, device number 14 [ 458.588076][ T5949] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 459.558188][ T9516] netlink: 'syz.5.1408': attribute type 5 has an invalid length. [ 459.573343][ T9518] loop0: detected capacity change from 0 to 128 [ 459.656782][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1408'. [ 459.974375][ T9522] loop3: detected capacity change from 0 to 512 [ 460.055268][ T9522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.112292][ T9522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.252111][ T9522] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1411: bad orphan inode 131083 [ 460.272996][ T9522] loop3: lost filesystem error report for type 5 error -117 [ 460.289092][ T9522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.428987][ T29] audit: type=1800 audit(2000000131.550:41): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1411" name="file0" dev="loop3" ino=18 res=0 errno=0 [ 460.697067][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 460.820795][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.038873][ T9549] fuse: Unknown parameter 'racerPid: 0 [ 462.038873][ T9549] Uid: 0 0 0 0 [ 462.038873][ T9549] Gid: 0 0 0 0 [ 462.038873][ T9549] FDSize: 256 [ 462.038873][ T9549] Groups: 0 10 [ 462.038873][ T9549] NStgid: 637 [ 462.038873][ T9549] NSpid: 638 [ 462.038873][ T9549] NSpgid: 637 [ 462.038873][ T9549] NSsid: 0 [ 462.038873][ T9549] Kthread: 0 [ 462.038873][ T9549] VmPeak: 104276 kB [ 462.038873][ T9549] VmSize: 104276 kB [ 462.038873][ T9549] VmLck: 0 kB [ 462.038873][ T9549] VmPin: 0 kB [ 462.038873][ T9549] VmHWM: 24288 kB [ 462.038873][ T9549] VmRSS: 24288 kB [ 462.038873][ T9549] RssAnon: 1420 kB [ 462.038873][ T9549] RssFile: 22868 kB [ 462.038873][ T9549] RssShmem: 0 kB [ 462.038873][ T9549] VmData: 36584 kB [ 462.038873][ T9549] VmStk: 132 kB [ 462.038873][ T9549] VmExe: 1772 kB [ 462.038873][ T9549] VmLib: 8 kB [ 462.038873][ T9549] VmPTE: 136 kB [ 462.038873][ T9549] VmSwap: 0 kB [ 462.038873][ T9549] HugetlbPages: 0 kB [ 462.038873][ T9549] CoreDumping: 0 [ 462.038873][ T9549] THP_enabled: 1 [ 462.038873][ T9549] untag_mask: 0xffffffffffffffff [ 462.038873][ T9549] Threads: 2 [ 462.038873][ T9549] SigQ: 0/25973 [ 462.038873][ T9549] SigPnd: 0000000000000000 [ 462.038873][ T9549] ShdPnd: 0000000000000000 [ 462.038873][ T9549] SigBlk: 0000000000000000 [ 462.038873][ T9549] SigIgn: fffffffefffaba35 [ 462.038873][ T9549] SigCgt: 0000000100010440 [ 462.038873][ T9549] CapInh: 0000000000000000 [ 462.038873][ T9549] CapPrm: 000001ffff77ffff [ 462.038873][ T9549] CapEff: 000001ffff77ffff [ 462.038873][ T9549] CapBnd: 000001ffffffffff [ 462.038873][ T9549] CapAmb: 0000000000000000 [ 462.038873][ T9549] NoNewPrivs: 0 [ 462.038873][ T9549] Seccomp: 0 [ 462.038873][ T9549] Seccomp_filters: 0 [ 462.038873][ T9549] Speculation_Store_Bypass: thread vulnerable [ 462.038873][ T9549] SpeculationIndirectBranch: conditional enabled [ 462.038873][ T9549] Cpus_allowed: 3 [ 462.488093][ T9545] loop3: detected capacity change from 0 to 4096 [ 462.532644][ T9545] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 462.601463][ T9545] ntfs3(loop3): ino=3, mi_enum_attr [ 462.979494][ T9545] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 462.986888][ T9545] ntfs3(loop3): ino=1a, mi_enum_attr [ 463.052600][ T9545] ntfs3(loop3): ino=1a, mi_enum_attr [ 463.058109][ T9545] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 463.392455][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1427'. [ 464.106384][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1431'. [ 464.159778][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1431'. [ 465.371977][ T9591] program syz.5.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.023529][ T9600] netlink: 'syz.4.1443': attribute type 16 has an invalid length. [ 467.059427][ T9607] loop4: detected capacity change from 0 to 4096 [ 467.230785][ T9613] loop0: detected capacity change from 0 to 2048 [ 467.243287][ T9607] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 467.269212][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 467.361660][ T9613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.437347][ T9607] ntfs3(loop4): Failed to load $Extend (-22). [ 467.487183][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 467.524091][ T9607] ntfs3(loop4): Failed to initialize $Extend. [ 467.536739][ T9] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 467.594582][ T9] usb 2-1: config 139 has no interface number 0 [ 467.656521][ T9] usb 2-1: config 139 interface 49 has no altsetting 0 [ 467.774674][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 467.832870][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.874492][ T9] usb 2-1: Product: syz [ 467.888150][ T9] usb 2-1: Manufacturer: syz [ 467.902795][ T9] usb 2-1: SerialNumber: syz [ 468.603142][ T9] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 468.820116][ T9] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 468.879691][ T9628] loop3: detected capacity change from 0 to 64 [ 468.886782][ T9] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 468.963862][ T9] usb 2-1: USB disconnect, device number 15 [ 470.117801][ T9642] loop0: detected capacity change from 0 to 256 [ 470.345127][ T9642] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 471.216969][ T9655] loop4: detected capacity change from 0 to 128 [ 472.062143][ T9664] team_slave_0: entered promiscuous mode [ 473.803998][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 475.092674][ T9701] loop3: detected capacity change from 0 to 128 [ 475.179878][ T9701] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 475.400053][ T9701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.508445][ T9716] loop0: detected capacity change from 0 to 256 [ 477.020298][ T9724] loop5: detected capacity change from 0 to 8 [ 477.094602][ T9724] squashfs image failed sanity check [ 477.276885][ T9724] loop5: detected capacity change from 0 to 1024 [ 477.326131][ T9724] EXT4-fs: Ignoring removed bh option [ 477.442102][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 477.544316][ T9724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.993370][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.298565][ T9735] loop0: detected capacity change from 0 to 1024 [ 478.482620][ T9735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 478.620436][ T9735] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.105956][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 479.133512][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 479.349623][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 479.423297][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 479.476721][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.557843][ T9] usb 2-1: config 0 descriptor?? [ 479.685628][ T9752] netlink: 'syz.0.1511': attribute type 4 has an invalid length. [ 479.846479][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 479.876255][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 480.023451][ T9755] loop5: detected capacity change from 0 to 1024 [ 480.030243][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 480.030361][ T9] usb 2-1: media controller created [ 480.133429][ T9755] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 480.355784][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.604880][ T9] az6027: usb out operation failed. (-71) [ 480.696483][ T9] az6027: usb out operation failed. (-71) [ 480.764621][ T9] stb0899_attach: Driver disabled by Kconfig [ 480.799710][ T9] az6027: no front-end attached [ 480.799710][ T9] [ 480.808322][ T9] az6027: usb out operation failed. (-71) [ 480.868421][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 480.892551][ T9759] loop0: detected capacity change from 0 to 2048 [ 480.933741][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 481.035937][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 481.044110][ T9759] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 481.076466][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 481.156830][ T9759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.168235][ T9] usb 2-1: USB disconnect, device number 16 [ 481.795544][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 482.376595][ T9772] loop1: detected capacity change from 0 to 1024 [ 482.543908][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 482.631741][ T9772] hfsplus: b-tree write err: -5, ino 2 [ 482.798192][ T9780] loop5: detected capacity change from 0 to 512 [ 482.880875][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 482.913122][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.949598][ T9] usb 1-1: Product: syz [ 482.974038][ T9] usb 1-1: Manufacturer: syz [ 482.984350][ T9] usb 1-1: SerialNumber: syz [ 483.088407][ T9780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.160315][ T9] usb 1-1: config 0 descriptor?? [ 483.214981][ T9780] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.289232][ T72] hfsplus: b-tree write err: -5, ino 25 [ 483.306874][ T72] hfsplus: b-tree write err: -5, ino 4 [ 483.332693][ T72] hfsplus: b-tree write err: -5, ino 2 [ 483.353069][ T72] hfsplus: b-tree write err: -5, ino 26 [ 483.871151][ T9] usb 1-1: USB disconnect, device number 15 [ 483.892329][ T6978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.158069][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.518112][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 484.563729][ T9797] netlink: 'syz.1.1530': attribute type 30 has an invalid length. [ 484.599591][ T9797] netlink: 'syz.1.1530': attribute type 29 has an invalid length. [ 484.634018][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 485.811843][ T9817] loop0: detected capacity change from 0 to 1024 [ 485.873035][ T9817] EXT4-fs: Ignoring removed nobh option [ 486.008723][ T9817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003] [ 486.062486][ T9817] System zones: 0-1, 3-8 [ 486.078693][ T9817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 486.159169][ T9817] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.295360][ T9817] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 3: comm syz.0.1540: lblock 3 mapped to illegal pblock 3 (length 3) [ 486.397854][ T29] audit: type=1804 audit(2000000157.520:42): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1540" name="/newroot/310/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 486.399149][ T9817] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 486.574159][ T9817] EXT4-fs (loop0): This should not happen!! Data will be lost [ 486.574159][ T9817] [ 486.603095][ T29] audit: type=1800 audit(2000000157.680:43): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1540" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 486.972292][ T1079] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 487.042617][ T9835] loop1: detected capacity change from 0 to 256 [ 487.049182][ T1079] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28 [ 487.152749][ T1079] EXT4-fs (loop0): This should not happen!! Data will be lost [ 487.152749][ T1079] [ 487.218232][ T1079] EXT4-fs (loop0): Total free blocks count 0 [ 487.227100][ T1079] EXT4-fs (loop0): Free/Dirty block details [ 487.237281][ T1079] EXT4-fs (loop0): free_blocks=0 [ 487.246849][ T1079] EXT4-fs (loop0): dirty_blocks=48 [ 487.287020][ T1079] EXT4-fs (loop0): Block reservation details [ 487.334338][ T5781] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 488.187691][ T5949] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 488.401963][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 488.430215][ T5949] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.495848][ T5949] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.565278][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 488.584546][ T5949] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 488.639930][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.696350][ T5949] usb 2-1: config 0 descriptor?? [ 488.813472][ T9854] tap0: tun_chr_ioctl cmd 2147767507 [ 488.906335][ T9858] loop4: detected capacity change from 0 to 512 [ 488.993667][ T9858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.168009][ T9858] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 489.205024][ T9858] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 489.247642][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 489.357225][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 489.367347][ T9858] EXT4-fs (loop4): orphan cleanup on readonly fs [ 489.413400][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 489.428877][ T9858] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 489.448449][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 489.483306][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 489.566746][ T9858] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 489.588406][ T5949] hid-corsair-void 0003:1B1C:1B25.000C: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 489.672759][ T9858] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 489.791027][ T24] hid-corsair-void 0003:1B1C:1B25.000C: failed to request firmware (reason: -71) [ 489.802015][ T5836] hid-corsair-void 0003:1B1C:1B25.000C: failed to request battery (reason: -71) [ 489.816682][ T5949] usb 2-1: USB disconnect, device number 17 [ 489.852260][ T9858] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1556: bg 0: block 40: padding at end of block bitmap is not set [ 489.955099][ T9858] loop4: lost filesystem error report for type 5 error -117 [ 489.959136][ T9858] EXT4-fs (loop4): Remounting filesystem read-only [ 489.959422][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 489.959507][ C0] EXT4-fs (loop4): initial error at time 2000000161: ext4_validate_block_bitmap:441 [ 489.959622][ C0] EXT4-fs (loop4): last error at time 2000000161: ext4_validate_block_bitmap:441 [ 490.048466][ T9865] loop3: detected capacity change from 0 to 64 [ 490.097769][ T9862] fido_id[9862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 490.222518][ T9858] EXT4-fs (loop4): 1 truncate cleaned up [ 490.405125][ T9858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.590710][ T9858] EXT4-fs (loop4): shut down requested (2) [ 491.097272][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.059154][ T9887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.587562][ T9896] syz.1.1574 uses obsolete (PF_INET,SOCK_PACKET) [ 492.769659][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 492.982305][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 493.025474][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 493.093075][ T9] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 493.136444][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.168332][ T9] usb 6-1: Product: syz [ 493.191231][ T9] usb 6-1: Manufacturer: syz [ 493.223913][ T9] usb 6-1: SerialNumber: syz [ 493.293259][ T9] usb 6-1: config 0 descriptor?? [ 493.319199][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 493.346339][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 493.666502][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 493.702322][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 494.176532][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 494.303920][ T9919] loop0: detected capacity change from 0 to 128 [ 494.388730][ T9] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 494.448623][ T9919] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.542320][ T9] usb 6-1: USB disconnect, device number 7 [ 494.581823][ T9919] ext4 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 495.172520][ T9929] loop3: detected capacity change from 0 to 256 [ 495.185065][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 495.534752][ T9929] FAT-fs (loop3): Directory bread(block 64) failed [ 495.544991][ T9929] FAT-fs (loop3): Directory bread(block 65) failed [ 495.553796][ T9929] FAT-fs (loop3): Directory bread(block 66) failed [ 495.586396][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 495.632279][ T9929] FAT-fs (loop3): Directory bread(block 67) failed [ 495.633285][ T9936] netlink: 'syz.4.1587': attribute type 15 has an invalid length. [ 495.639253][ T9929] FAT-fs (loop3): Directory bread(block 68) failed [ 495.722360][ T9929] FAT-fs (loop3): Directory bread(block 69) failed [ 495.729261][ T9929] FAT-fs (loop3): Directory bread(block 70) failed [ 495.748721][ T9936] netlink: 'syz.4.1587': attribute type 25 has an invalid length. [ 495.789861][ T9929] FAT-fs (loop3): Directory bread(block 71) failed [ 495.796722][ T9929] FAT-fs (loop3): Directory bread(block 72) failed [ 495.890156][ T9929] FAT-fs (loop3): Directory bread(block 73) failed [ 495.941199][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 496.145232][ T9941] loop1: detected capacity change from 0 to 8 [ 496.206367][ T9941] squashfs image failed sanity check [ 496.517386][ T9937] loop0: detected capacity change from 0 to 2048 [ 496.574074][ T9937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.308967][ T9947] loop5: detected capacity change from 0 to 16 [ 497.505986][ T9947] erofs (device loop5): mounted with root inode @ nid 36. [ 497.912804][ T9954] loop0: detected capacity change from 0 to 64 [ 497.932796][ T9952] sctp: [Deprecated]: syz.1.1597 (pid 9952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.932796][ T9952] Use struct sctp_sack_info instead [ 498.156365][ T6978] syz-executor: attempt to access beyond end of device [ 498.156365][ T6978] loop5: rw=524288, sector=44083543801856, nr_sectors = 64 limit=16 [ 498.225655][ T6978] syz-executor: attempt to access beyond end of device [ 498.225655][ T6978] loop5: rw=8388608, sector=44083543801856, nr_sectors = 8 limit=16 [ 498.326530][ T6978] erofs (device loop5): failed to readdir of logical block 0 of nid 46 [ 498.412605][ T6978] syz-executor: attempt to access beyond end of device [ 498.412605][ T6978] loop5: rw=8912896, sector=8, nr_sectors = 24 limit=16 [ 498.493159][ T6978] erofs (device loop5): invalid de[0].nameoff 0 @ nid 89 [ 498.527145][ T6978] erofs (device loop5): invalid de[0].nameoff 0 @ nid 89 [ 498.678888][ T9962] loop3: detected capacity change from 0 to 64 [ 498.782684][ T9965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 498.789417][ T9965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.797117][ T9967] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 498.803854][ T9967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 498.897620][ T9974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 498.944663][ T9965] vhci_hcd vhci_hcd.0: Device attached [ 499.058206][ T9967] vhci_hcd vhci_hcd.0: Device attached [ 499.120885][ T9976] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 499.127618][ T9976] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 499.209828][ T5838] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 499.282860][ T9976] vhci_hcd vhci_hcd.0: Device attached [ 499.301998][ T9977] vhci_hcd: connection closed [ 499.319707][ T34] vhci_hcd vhci_hcd.0: stop threads [ 499.342534][ T9968] vhci_hcd: connection closed [ 499.351277][ T9966] vhci_hcd: connection reset by peer [ 499.392254][ T34] vhci_hcd vhci_hcd.0: release socket [ 499.412131][ T34] vhci_hcd vhci_hcd.0: disconnect device [ 499.456237][ T34] vhci_hcd vhci_hcd.0: stop threads [ 499.514845][ T34] vhci_hcd vhci_hcd.0: release socket [ 499.549702][ T34] vhci_hcd vhci_hcd.0: disconnect device [ 499.599958][ T34] vhci_hcd vhci_hcd.0: stop threads [ 499.628633][ T34] vhci_hcd vhci_hcd.0: release socket [ 499.645242][ T34] vhci_hcd vhci_hcd.0: disconnect device [ 500.073758][ T9987] netlink: 'syz.3.1606': attribute type 4 has an invalid length. [ 500.162099][ T9987] netlink: 'syz.3.1606': attribute type 8 has an invalid length. [ 500.213416][ T9987] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1606'. [ 500.358278][ T9989] loop4: detected capacity change from 0 to 64 [ 500.543197][ T9989] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 500.872083][ T9997] Attempt to restore checkpoint with obsolete wellknown handles [ 502.247924][T10014] loop0: detected capacity change from 0 to 4096 [ 502.505301][T10022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.477293][T10033] trusted_key: encrypted_key: keyword 'epdate' not recognized [ 504.074900][T10039] loop5: detected capacity change from 0 to 128 [ 504.331154][ T5838] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 504.904778][T10050] loop3: detected capacity change from 0 to 512 [ 505.087795][T10050] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1634: missing EA_INODE flag [ 505.155297][T10050] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 505.163797][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 505.179760][ C0] EXT4-fs (loop3): initial error at time 2000000944: ext4_xattr_inode_iget:441: inode 12 [ 505.190020][ C0] EXT4-fs (loop3): last error at time 2000000944: ext4_xattr_inode_iget:441: inode 12 [ 505.285161][T10050] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1634: error while reading EA inode 12 err=-117 [ 505.327416][T10050] loop3: lost filesystem error report for type 5 error -117 [ 505.335641][T10050] EXT4-fs (loop3): 1 orphan inode deleted [ 505.353802][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1635'. [ 505.432829][T10050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.216894][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.791781][T10077] tipc: Started in network mode [ 506.796941][T10077] tipc: Node identity ac14140f, cluster identity 4711 [ 506.863319][T10077] tipc: New replicast peer: 255.255.255.255 [ 506.895873][T10077] tipc: Enabled bearer , priority 10 [ 507.351579][T10086] loop3: detected capacity change from 0 to 512 [ 507.535803][T10086] EXT4-fs error (device loop3): __ext4_iget:5393: inode #11: block 1: comm syz.3.1648: invalid block [ 507.605004][T10086] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 507.614311][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 507.630336][ C1] EXT4-fs (loop3): initial error at time 2000000946: __ext4_iget:5393: inode 11: block 1 [ 507.640730][ C1] EXT4-fs (loop3): last error at time 2000000946: __ext4_iget:5393: inode 11: block 1 [ 507.654069][T10086] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1648: couldn't read orphan inode 11 (err -117) [ 507.683675][T10086] loop3: lost filesystem error report for type 5 error -117 [ 507.708278][T10086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.907137][T10086] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.1648: Directory hole found for htree leaf block 0 [ 508.026150][ T5949] tipc: Node number set to 2886997007 [ 508.396952][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.432055][T10102] loop4: detected capacity change from 0 to 128 [ 508.529861][T10102] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 508.669254][T10102] hpfs: filesystem error: improperly stopped [ 508.675499][T10102] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 508.789434][T10102] hpfs: You really don't want any checks? You are crazy... [ 508.849227][T10102] hpfs: hpfs_map_sector(): read error [ 508.878220][T10102] hpfs: code page support is disabled [ 508.906258][T10105] loop3: detected capacity change from 0 to 512 [ 508.933056][T10102] hpfs: hpfs_map_4sectors(): unaligned read [ 508.939315][T10102] hpfs: hpfs_map_4sectors(): unaligned read [ 508.979193][T10109] netlink: 'syz.5.1657': attribute type 9 has an invalid length. [ 509.018486][T10102] hpfs: filesystem error: unable to find root dir [ 509.037322][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.136505][T10109] bond_slave_0: entered promiscuous mode [ 509.142659][T10109] bond_slave_1: entered promiscuous mode [ 509.244397][T10109] macvlan2: entered promiscuous mode [ 509.254698][T10109] bond0: entered promiscuous mode [ 509.360602][T10109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.380526][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.881530][T10121] sg_read: process 794 (syz.3.1661) changed security contexts after opening file descriptor, this is not allowed. [ 510.719355][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 510.984972][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 511.035584][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.077269][ T9] usb 1-1: config 0 descriptor?? [ 511.429091][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.438921][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.003169][ T9] usb 1-1: Cannot set autoneg [ 512.011897][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 512.095473][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 512.126369][ T9] usb 1-1: USB disconnect, device number 16 [ 512.242033][T10149] loop1: detected capacity change from 0 to 1024 [ 512.289517][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 512.290605][T10149] EXT4-fs: Ignoring removed orlov option [ 512.353363][ T5838] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.373368][ T5838] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.391576][T10149] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 512.410864][ T5838] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 512.422462][ T5838] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 512.442416][ T5838] usb 6-1: Product: syz [ 512.450967][ T5838] usb 6-1: Manufacturer: syz [ 512.532767][T10149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.553419][ T5838] hub 6-1:4.0: USB hub found [ 512.726992][ T5838] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 513.033952][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.073871][ T5949] usb 6-1: USB disconnect, device number 8 [ 514.781558][T10181] loop3: detected capacity change from 0 to 8 [ 516.349706][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1693'. [ 517.882479][T10219] loop3: detected capacity change from 0 to 128 [ 517.963452][T10219] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 518.044898][T10219] hpfs: filesystem error: improperly stopped [ 518.058958][T10219] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 518.136392][T10219] hpfs: You really don't want any checks? You are crazy... [ 518.187932][T10219] hpfs: hpfs_map_sector(): read error [ 518.195174][T10219] hpfs: code page support is disabled [ 518.204515][T10219] hpfs: hpfs_map_4sectors(): unaligned read [ 518.215814][T10219] hpfs: hpfs_map_4sectors(): unaligned read [ 518.264476][T10219] hpfs: filesystem error: unable to find root dir [ 520.266153][ T5949] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 520.275886][ T5838] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 520.483880][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 520.521172][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 520.539766][ T5838] usb 6-1: config 1 has an invalid interface number: 48 but max is 1 [ 520.545647][ T5949] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 520.579333][ T5838] usb 6-1: config 1 has no interface number 1 [ 520.591694][ T5949] usb 1-1: config 179 has no interface number 0 [ 520.609627][ T5838] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.614709][ T5949] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 520.692035][ T5838] usb 6-1: config 1 interface 0 has no altsetting 0 [ 520.704492][ T5949] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 520.735203][ T5949] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.738812][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 520.767246][T10260] batadv_slave_0: entered promiscuous mode [ 520.778141][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.783328][ T5949] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 520.790001][T10259] batadv_slave_0: left promiscuous mode [ 520.819173][ T5838] usb 6-1: Product: syz [ 520.827092][ T5838] usb 6-1: Manufacturer: syz [ 520.846283][ T5838] usb 6-1: SerialNumber: syz [ 520.878354][ T5949] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 520.938550][ T5949] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 520.980986][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.019757][T10254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 521.217837][ T5838] smsusb:smsusb_probe: board id=8, interface number 0 [ 521.368653][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 521.406602][ T5838] smsusb:smsusb_probe: board id=8, interface number 48 [ 521.494459][ T5838] usb 6-1: USB disconnect, device number 9 [ 521.568426][ T5836] usb 1-1: USB disconnect, device number 17 [ 521.574732][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 521.574926][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.223948][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 522.337890][T10272] loop3: detected capacity change from 0 to 256 [ 522.431144][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 522.583524][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.631370][ T24] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 522.685076][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.749791][ T24] usb 5-1: config 0 descriptor?? [ 523.473530][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.550656][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.570986][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.624176][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.700748][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.741135][ T24] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 523.763670][ T24] zeroplus 0003:0C12:0030.000D: bogus close delimiter [ 523.801383][ T24] zeroplus 0003:0C12:0030.000D: item 0 0 2 10 parsing failed [ 523.878476][ T24] zeroplus 0003:0C12:0030.000D: parse failed [ 523.939332][ T24] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 524.007631][ T24] usb 5-1: USB disconnect, device number 11 [ 524.548982][T10295] sch_tbf: burst 2464 is lower than device lo mtu (65550) ! [ 525.273646][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 527.181361][T10319] loop5: detected capacity change from 0 to 40427 [ 527.448594][T10325] loop4: detected capacity change from 0 to 32768 [ 527.494887][T10325] [ 527.494887][T10325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 527.494887][T10325] [ 527.529262][T10325] [ 527.529262][T10325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 527.529262][T10325] [ 527.542426][T10325] [ 527.542426][T10325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 527.542426][T10325] [ 527.553185][T10325] [ 527.553185][T10325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 527.553185][T10325] [ 527.665223][ T110] [ 527.665223][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 527.665223][ T110] [ 527.698330][T10324] loop0: detected capacity change from 0 to 1024 [ 528.109828][T10327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 528.292085][ T5792] [ 528.292085][ T5792] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 528.292085][ T5792] [ 528.477251][ T34] ===================================================== [ 528.484900][ T34] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x77e/0xf00 [ 528.493959][ T34] n_tty_receive_buf_closing+0x77e/0xf00 [ 528.504128][ T34] n_tty_receive_buf_common+0x19c6/0x2610 [ 528.510695][ T34] n_tty_receive_buf2+0x4c/0x60 [ 528.516183][ T34] tty_ldisc_receive_buf+0xc6/0x2c0 [ 528.522227][ T34] tty_port_default_receive_buf+0xd7/0x1a0 [ 528.523067][ T5792] [ 528.523067][ T5792] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 528.523067][ T5792] [ 528.532668][ T34] flush_to_ldisc+0x43e/0xe40 [ 528.551514][ T34] process_scheduled_works+0xb82/0x1e80 [ 528.562437][ T34] worker_thread+0xee4/0x1590 [ 528.568171][ T34] kthread+0x53f/0x600 [ 528.573101][ T34] ret_from_fork+0x20f/0x910 [ 528.578657][ T34] ret_from_fork_asm+0x1a/0x30 [ 528.584387][ T34] [ 528.591796][ T34] Uninit was created at: [ 528.596682][ T34] __kmalloc_noprof+0x486/0x1680 [ 528.602719][ T34] __tty_buffer_request_room+0x3d4/0x7a0 [ 528.608949][ T34] __tty_insert_flip_string_flags+0x157/0x6e0 [ 528.615180][ T34] uart_insert_char+0x368/0x930 [ 528.623028][ T34] serial8250_read_char+0x1ba/0x670 [ 528.628535][ T34] serial8250_handle_irq_locked+0x6d4/0xa40 [ 528.634640][ T34] serial8250_handle_irq+0x187/0x730 [ 528.643472][ T34] serial8250_default_handle_irq+0x116/0x370 [ 528.654015][ T34] serial8250_interrupt+0xcb/0x420 [ 528.659738][ T34] __handle_irq_event_percpu+0x13c/0xf90 [ 528.665553][ T34] handle_irq_event+0xe0/0x2a0 [ 528.670594][ T34] handle_edge_irq+0x2a9/0xb30 [ 528.675542][ T34] __common_interrupt+0x9d/0x180 [ 528.683231][ T34] common_interrupt+0x94/0xb0 [ 528.688223][ T34] asm_common_interrupt+0x2b/0x40 [ 528.693394][ T34] [ 528.695844][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.707283][ T34] Tainted: [L]=SOFTLOCKUP [ 528.714332][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.724608][ T34] Workqueue: events_unbound flush_to_ldisc [ 528.730702][ T34] ===================================================== [ 528.740460][ T34] Disabling lock debugging due to kernel taint [ 529.009146][ T34] Kernel panic - not syncing: kmsan.panic set ... [ 529.015730][ T34] CPU: 1 UID: 0 PID: 34 Comm: kworker/u8:2 Tainted: G B L syzkaller #0 PREEMPT(full) [ 529.026861][ T34] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 529.032495][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.042739][ T34] Workqueue: events_unbound flush_to_ldisc [ 529.048724][ T34] Call Trace: [ 529.052092][ T34] [ 529.055113][ T34] __dump_stack+0x26/0x30 [ 529.059604][ T34] dump_stack_lvl+0x50/0x1c0 [ 529.064372][ T34] ? dump_stack+0x12/0x25 [ 529.068870][ T34] dump_stack+0x1e/0x25 [ 529.073194][ T34] vpanic+0x7b4/0x1430 [ 529.077459][ T34] panic+0x15d/0x160 [ 529.081578][ T34] kmsan_report+0x31a/0x320 [ 529.086387][ T34] ? __msan_warning+0x1b/0x30 [ 529.091251][ T34] ? n_tty_receive_buf_closing+0x77e/0xf00 [ 529.097245][ T34] ? n_tty_receive_buf_common+0x19c6/0x2610 [ 529.103335][ T34] ? n_tty_receive_buf2+0x4c/0x60 [ 529.108553][ T34] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 529.114217][ T34] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 529.120454][ T34] ? flush_to_ldisc+0x43e/0xe40 [ 529.125455][ T34] ? process_scheduled_works+0xb82/0x1e80 [ 529.131334][ T34] ? worker_thread+0xee4/0x1590 [ 529.136515][ T34] ? kthread+0x53f/0x600 [ 529.140957][ T34] ? ret_from_fork+0x20f/0x910 [ 529.145896][ T34] ? ret_from_fork_asm+0x1a/0x30 [ 529.151030][ T34] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 529.156935][ T34] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 529.162856][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 529.168127][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 529.173388][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 529.179375][ T34] ? min_vruntime_cb_propagate+0x88f/0xb90 [ 529.185380][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 529.190648][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 529.196628][ T34] ? __rb_insert_augmented+0xad0/0x11b0 [ 529.202355][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 529.207668][ T34] __msan_warning+0x1b/0x30 [ 529.212359][ T34] n_tty_receive_buf_closing+0x77e/0xf00 [ 529.218241][ T34] n_tty_receive_buf_common+0x19c6/0x2610 [ 529.224486][ T34] n_tty_receive_buf2+0x4c/0x60 [ 529.229496][ T34] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 529.235190][ T34] tty_ldisc_receive_buf+0xc6/0x2c0 [ 529.240527][ T34] tty_port_default_receive_buf+0xd7/0x1a0 [ 529.246475][ T34] flush_to_ldisc+0x43e/0xe40 [ 529.251286][ T34] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 529.257844][ T34] ? __pfx_flush_to_ldisc+0x10/0x10 [ 529.263363][ T34] process_scheduled_works+0xb82/0x1e80 [ 529.269113][ T34] worker_thread+0xee4/0x1590 [ 529.273959][ T34] kthread+0x53f/0x600 [ 529.278184][ T34] ? __pfx_worker_thread+0x10/0x10 [ 529.283532][ T34] ? __pfx_kthread+0x10/0x10 [ 529.288280][ T34] ret_from_fork+0x20f/0x910 [ 529.293010][ T34] ? __switch_to+0x51c/0x750 [ 529.297766][ T34] ? __pfx_kthread+0x10/0x10 [ 529.302595][ T34] ret_from_fork_asm+0x1a/0x30 [ 529.307548][ T34] [ 529.310999][ T34] Kernel Offset: disabled [ 529.315363][ T34] Rebooting in 86400 seconds..