last executing test programs: 3.656737129s ago: executing program 2 (id=10731): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902604003010900080904000000010100000a240106000a000201020904010000", @ANYRES8, @ANYRES32=r0, @ANYRESHEX=r0], 0x0) 1.654954439s ago: executing program 3 (id=10762): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x800000, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x41, 0x4fffff1) 1.502093053s ago: executing program 3 (id=10768): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x9, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x80, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) 1.420114925s ago: executing program 2 (id=10770): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@upd={0xe0, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {{'drbg_pr_sha256\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000022) 1.288226248s ago: executing program 3 (id=10773): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7ffffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) 1.22670754s ago: executing program 2 (id=10775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) 1.157048881s ago: executing program 3 (id=10779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000001e0001002dbd700000dcdf250a000000", @ANYRES32=0x0, @ANYBLOB="000000001400060000000400000000000000000000000000080009"], 0x38}}, 0x20000000) 1.071686353s ago: executing program 2 (id=10780): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0) 974.150516ms ago: executing program 4 (id=10783): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 973.670236ms ago: executing program 3 (id=10784): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x64f, "de0616b887ccf283c5e794c6611ad67167d68a56798d144dd4ae778e2c17bfcd", 0x3, 0x1}) 927.241337ms ago: executing program 2 (id=10785): r0 = syz_open_dev$video4linux(&(0x7f0000000640), 0x3, 0x1) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000006c0)={0x0, 0x2, 0x6, '\x00', &(0x7f0000000680)=0x92}) 860.045389ms ago: executing program 1 (id=10787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 835.20671ms ago: executing program 4 (id=10788): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x100008) 826.614459ms ago: executing program 3 (id=10789): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000002bc0)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid}) 774.251781ms ago: executing program 2 (id=10790): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xa1000c, &(0x7f0000000140)={[{@grpquota}, {@nointegrity}, {@nodiscard}, {@nointegrity}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@quota}, {@quota}, {@errors_remount}]}, 0x1, 0x6303, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000100)) 734.043812ms ago: executing program 1 (id=10791): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) 733.386002ms ago: executing program 0 (id=10801): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x38, 0x0, 0x0) 584.833606ms ago: executing program 1 (id=10792): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$rds(0x15, 0x5, 0x0) 584.745866ms ago: executing program 4 (id=10793): r0 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x40000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0xa, 0x80, "5f5a5111fbd4711bede27208ad108088e8d9dd2eb201444a0364b2df1add5355", 0x38303553}) 576.670906ms ago: executing program 0 (id=10803): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"}) 481.157258ms ago: executing program 0 (id=10794): r0 = socket$pppl2tp(0x18, 0x1, 0x1) read(r0, &(0x7f0000001800)=""/219, 0xdb) 462.536579ms ago: executing program 4 (id=10795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0xd79911c3b70c7bee, 0x0, 0x4e22}, 0x6e) 436.059109ms ago: executing program 1 (id=10796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x90000000}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) 332.227642ms ago: executing program 0 (id=10797): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') copy_file_range(r0, &(0x7f0000000240)=0xffffffffffffffff, r0, 0x0, 0x80000001, 0x0) 277.300143ms ago: executing program 4 (id=10798): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b80), 0x101000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) 263.252273ms ago: executing program 1 (id=10799): r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x8200}], 0x1, &(0x7f0000000340), 0x0, 0x0) 249.665224ms ago: executing program 0 (id=10800): r0 = socket(0x25, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x12040, 0x0, 0x0) 44.748909ms ago: executing program 1 (id=10802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 123.07µs ago: executing program 0 (id=10804): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ffffffc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xb, 0x2, 0x1, "4bc46729173b668be6a25f3e4f018b1166ae91f347f81b13d300000000000002", 0x30383653}) 0s ago: executing program 4 (id=10805): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x60802, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) kernel console output (not intermixed with test programs): ][ T5583] usb 4-1: config 0 descriptor?? [ 507.432604][ T5583] gspca_main: kinect-2.14.0 probing 045e:02bf [ 507.627518][ T5583] usb 4-1: USB disconnect, device number 37 [ 507.811331][T25371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8457'. [ 507.843244][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8457'. [ 507.901251][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8457'. [ 507.998228][T25381] x_tables: duplicate underflow at hook 2 [ 508.383223][T25393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8467'. [ 508.694502][T25415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.859780][T25427] netlink: 'syz.4.8478': attribute type 15 has an invalid length. [ 508.907136][T25427] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8478'. [ 509.117562][T25444] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 509.468713][T25470] raw_sendmsg: syz.0.8494 forgot to set AF_INET. Fix it! [ 509.539996][T25478] sctp: [Deprecated]: syz.4.8497 (pid 25478) Use of int in max_burst socket option. [ 509.539996][T25478] Use struct sctp_assoc_value instead [ 509.610469][T25475] device bond4 entered promiscuous mode [ 509.616326][T25475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.627166][ T6176] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 510.680008][T25585] Cannot find add_set index 2 as target [ 510.800828][T25591] __nla_validate_parse: 1 callbacks suppressed [ 510.800878][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 510.817064][T24495] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 510.825014][T25590] netlink: 'syz.2.8528': attribute type 2 has an invalid length. [ 510.855221][T25590] netlink: 119 bytes leftover after parsing attributes in process `syz.2.8528'. [ 510.887015][ T6176] usb 5-1: Using ep0 maxpacket: 16 [ 511.033397][T25562] loop3: detected capacity change from 0 to 32768 [ 511.047391][ T6176] usb 5-1: unable to get BOS descriptor or descriptor too short [ 511.197403][T24495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.228222][T24495] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.328261][T25610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8536'. [ 511.346958][T25610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8536'. [ 511.360634][T24495] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.395450][T24495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 511.433215][T24495] usb 2-1: SerialNumber: syz [ 511.544738][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8540'. [ 511.729977][T24495] usb 2-1: cannot find UAC_HEADER [ 511.785413][ T6176] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=62.7c [ 511.813261][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=27 [ 511.840603][T24495] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 511.851528][ T6176] usb 5-1: Product: syz [ 511.855798][ T6176] usb 5-1: Manufacturer: syz [ 511.881816][T24495] usb 2-1: USB disconnect, device number 36 [ 511.917081][ T6176] usb 5-1: SerialNumber: syz [ 511.954337][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.229517][ T6176] gspca_main: 102c:6251 too many config [ 512.266181][ T6176] usb 5-1: USB disconnect, device number 41 [ 512.550422][T25695] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8561'. [ 512.667202][T25702] xt_hashlimit: max too large, truncated to 1048576 [ 512.845488][T25712] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.896819][T25715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8569'. [ 513.129400][T25729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 513.305092][T25741] device veth1_virt_wifi entered promiscuous mode [ 513.573219][T25764] x_tables: unsorted entry at hook 3 [ 513.609304][T25766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8589'. [ 514.098949][T25799] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8603'. [ 514.180190][T25807] loop4: detected capacity change from 0 to 64 [ 514.287714][T25807] Bad inode number on dev loop4: 6 is out of range [ 514.446981][T25822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8611'. [ 514.463605][T25825] loop3: detected capacity change from 0 to 512 [ 514.686241][T25825] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,nolazytime,noquota,nodiscard,resgid=0x0000000000000000,nobarrier,max_batch_time=0x000000000000007f,noinit_itable,,errors=continue. Quota mode: none. [ 514.744919][T25851] netlink: 'syz.2.8622': attribute type 1 has an invalid length. [ 514.753036][T25851] netlink: 'syz.2.8622': attribute type 1 has an invalid length. [ 514.801190][T25825] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 514.923405][ T5585] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 515.608056][ T5585] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.636911][ T5585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.644984][ T5585] usb 5-1: Product: syz [ 515.692640][T25916] loop1: detected capacity change from 0 to 16 [ 515.698855][ T5585] usb 5-1: Manufacturer: syz [ 515.698889][ T5585] usb 5-1: SerialNumber: syz [ 515.794131][ T5585] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.835761][T25916] erofs: (device loop1): mounted with root inode @ nid 36. [ 515.885860][T25916] attempt to access beyond end of device [ 515.885860][T25916] loop1: rw=524288, want=24, limit=16 [ 515.982488][T25916] attempt to access beyond end of device [ 515.982488][T25916] loop1: rw=524288, want=34359738368, limit=16 [ 516.014664][T25937] overlayfs: workdir and upperdir must reside under the same mount [ 516.086347][T25916] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 516.141001][T25916] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 516.191890][T25916] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 516.217199][T25916] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 516.247374][T25916] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 516.268038][T25916] attempt to access beyond end of device [ 516.268038][T25916] loop1: rw=524288, want=56, limit=16 [ 516.317685][T25916] attempt to access beyond end of device [ 516.317685][T25916] loop1: rw=0, want=24, limit=16 [ 516.396352][ T26] audit: type=1800 audit(524801.895:35): pid=25916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8645" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 516.532693][ T5583] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.622272][T25967] __nla_validate_parse: 1 callbacks suppressed [ 516.622291][T25967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8661'. [ 516.647779][T25968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8662'. [ 516.656804][T25968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8662'. [ 516.657710][ T6171] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 516.844337][T25976] tmpfs: Bad value for 'mpol' [ 516.927016][ T6171] usb 4-1: Using ep0 maxpacket: 8 [ 516.988189][T24495] usb 5-1: USB disconnect, device number 42 [ 517.047332][ T6171] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 517.238475][ T6171] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 517.267563][ T6171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.293559][ T6171] usb 4-1: Product: syz [ 517.317803][ T6171] usb 4-1: Manufacturer: syz [ 517.329197][ T6171] usb 4-1: SerialNumber: syz [ 517.377345][T25953] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 517.420410][T26012] ipt_ECN: cannot use operation on non-tcp rule [ 517.717257][ T6171] usb 4-1: MIDIStreaming interface descriptor not found [ 517.743485][T26033] netlink: set zone limit has 8 unknown bytes [ 517.777324][ T6171] usb 4-1: USB disconnect, device number 38 [ 517.882892][ T5583] usb 5-1: Service connection timeout for: 256 [ 517.896967][ T5583] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 517.905846][ T5583] ath9k_htc: Failed to initialize the device [ 517.967700][T24495] usb 5-1: ath9k_htc: USB layer deinitialized [ 518.127839][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.458120][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.496996][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.536368][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.565522][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.612033][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.650845][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.687743][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'. [ 518.722938][T26114] netlink: 'syz.3.8703': attribute type 21 has an invalid length. [ 518.867020][T26128] netlink: 'syz.4.8708': attribute type 21 has an invalid length. [ 518.888665][T26132] netlink: 'syz.3.8709': attribute type 3 has an invalid length. [ 518.909291][T26135] comedi: No check for data length of config insn id 30 is implemented [ 518.947185][T26135] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 518.987345][T26135] comedi: Assuming n=15 is correct [ 519.132660][T26149] netlink: 'syz.1.8716': attribute type 1 has an invalid length. [ 519.323921][T26163] netlink: 'syz.1.8722': attribute type 13 has an invalid length. [ 519.535688][T26177] xt_bpf: check failed: parse error [ 519.890914][T26208] loop3: detected capacity change from 0 to 256 [ 520.038552][T26208] exfat: Deprecated parameter 'utf8' [ 520.044178][T26208] exfat: Deprecated parameter 'namecase' [ 520.190067][T26208] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 520.281949][T26226] nvme_fabrics: missing parameter 'traddr=%s' [ 521.138905][T26293] xt_connbytes: Forcing CT accounting to be enabled [ 521.186322][T26293] xt_bpf: check failed: parse error [ 521.347137][T26304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 521.389463][T26304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.479296][T26311] netlink: 'syz.4.8775': attribute type 1 has an invalid length. [ 521.573143][T26314] netlink: 'syz.0.8776': attribute type 21 has an invalid length. [ 521.601686][T26314] netlink: 'syz.0.8776': attribute type 5 has an invalid length. [ 521.666122][T26314] netlink: 'syz.0.8776': attribute type 6 has an invalid length. [ 521.683186][T26248] loop3: detected capacity change from 0 to 32768 [ 521.697052][T26314] __nla_validate_parse: 50 callbacks suppressed [ 521.697072][T26314] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8776'. [ 521.787212][T26320] block device autoloading is deprecated and will be removed. [ 521.819167][T26320] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 522.305753][T26355] tmpfs: Bad value for 'mpol' [ 522.386947][T24495] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 522.627132][T24495] usb 5-1: Using ep0 maxpacket: 8 [ 522.728975][T26378] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.747287][T24495] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.777441][T24495] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.977035][T24495] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 523.004523][T24495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.041571][T24495] usb 5-1: Product: syz [ 523.058654][T26399] netlink: 'syz.2.8802': attribute type 21 has an invalid length. [ 523.076813][T24495] usb 5-1: Manufacturer: syz [ 523.083630][T24495] usb 5-1: SerialNumber: syz [ 523.088728][T26399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8802'. [ 523.456984][T26430] x_tables: unsorted underflow at hook 4 [ 523.661366][T24495] usb 5-1: USB disconnect, device number 43 [ 523.947994][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.998330][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8825'. [ 524.610371][T26516] loop3: detected capacity change from 0 to 256 [ 524.681545][T26516] exfat: Deprecated parameter 'namecase' [ 524.730904][T26516] exfat: Deprecated parameter 'namecase' [ 524.821920][T26516] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 525.156734][T26487] loop0: detected capacity change from 0 to 32768 [ 525.389701][T26487] ERROR: (device loop0): diNewExt: no free extents [ 525.389701][T26487] [ 525.513156][T26487] ialloc: diAlloc returned -5! [ 525.829830][T26577] 9pnet: p9_fd_create_tcp (26577): problem binding to privport [ 526.804910][T26640] loop1: detected capacity change from 0 to 64 [ 527.124028][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8881'. [ 527.312631][T26661] loop1: detected capacity change from 0 to 4096 [ 527.439792][T26661] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 527.457799][T26679] kAFS: unable to lookup cell ' [ 527.457799][T26679] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 527.457799][T26679] ' [ 527.588237][T26683] xt_CT: No such helper "pptp" [ 527.771040][T26704] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8892'. [ 527.807272][T26704] bridge_slave_1: default FDB implementation only supports local addresses [ 527.818296][T26707] loop1: detected capacity change from 0 to 256 [ 527.825736][T26707] exfat: Deprecated parameter 'namecase' [ 527.907580][T26707] exfat: Deprecated parameter 'namecase' [ 527.981305][T26707] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 528.127958][T26726] loop4: detected capacity change from 0 to 64 [ 528.138022][ T5583] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 528.457092][ T5583] usb 1-1: Using ep0 maxpacket: 8 [ 528.607256][ T5583] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 528.636013][ T5583] usb 1-1: config 179 has no interface number 0 [ 528.662690][ T5583] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 528.736889][ T5583] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 528.789229][ T5583] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.857485][ T5583] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 528.916880][ T5583] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 528.970928][ T5583] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 529.013768][ T5583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.083340][T26708] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 529.112817][T26796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8922'. [ 529.595712][ T5583] usb 1-1: USB disconnect, device number 44 [ 529.612009][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 529.836680][T26852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8939'. [ 530.014747][T26863] device bond5 entered promiscuous mode [ 530.037327][T26863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.346500][T26914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8948'. [ 530.439553][T26846] loop1: detected capacity change from 0 to 32768 [ 530.514527][T26846] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.8937 (26846) [ 530.596482][T26846] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 530.639916][T26846] BTRFS info (device loop1): using free space tree [ 530.692010][T26846] BTRFS info (device loop1): has skinny extents [ 530.770459][T26951] loop0: detected capacity change from 0 to 8 [ 531.027682][T26846] BTRFS info (device loop1): enabling ssd optimizations [ 531.101048][T26984] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present [ 531.300038][T27001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8972'. [ 532.850670][T27013] loop3: detected capacity change from 0 to 32768 [ 532.983171][T27013] XFS (loop3): Mounting V5 Filesystem [ 533.174065][T27134] device bridge6 entered promiscuous mode [ 533.222019][T27013] XFS (loop3): Ending clean mount [ 533.337515][ T4191] XFS (loop3): Unmounting Filesystem [ 533.507098][ T26] audit: type=1400 audit(524819.010:36): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=27156 comm="syz.1.9019" [ 533.596967][T27162] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.960814][T27192] openvswitch: netlink: Actions may not be safe on all matching packets [ 534.169526][T27210] netlink: 'syz.3.9037': attribute type 79 has an invalid length. [ 534.297059][T27220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9041'. [ 534.306166][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9041'. [ 534.862516][T27271] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9058'. [ 535.236439][T27301] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 35163 - 0 [ 535.316561][T27301] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 35163 - 0 [ 535.351151][T27301] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 35163 - 0 [ 535.396317][T27301] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 35163 - 0 [ 535.451381][T27301] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 59126 - 0 [ 535.487088][T27301] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 59126 - 0 [ 535.524673][ T5583] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 535.546283][T27301] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 59126 - 0 [ 535.596068][T27301] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 59126 - 0 [ 535.656535][T27301] device geneve3 entered promiscuous mode [ 535.954425][T27341] loop4: detected capacity change from 0 to 256 [ 536.023155][T27347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 536.040874][ T5583] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 536.058489][ T5583] usb 2-1: config 2 has no interface number 0 [ 536.074841][ T5583] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 536.135197][ T5583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.218465][ T5583] ums-realtek 2-1:2.3: USB Mass Storage device detected [ 536.430961][ T5583] usb 2-1: USB disconnect, device number 37 [ 536.541282][T27378] nvme_fabrics: missing parameter 'host_traddr=%s' [ 536.826624][T27409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9102'. [ 537.057715][T27422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9106'. [ 537.203112][T27428] loop1: detected capacity change from 0 to 1024 [ 537.387292][T27428] hfsplus: keylen 65060 too large [ 537.404848][T27428] hfsplus: xattr searching failed [ 537.500118][T27450] loop3: detected capacity change from 0 to 1024 [ 537.800371][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 537.821259][ T2425] pvrusb2: Failure uploading firmware1 [ 537.857266][T27471] xt_CONNSECMARK: invalid mode: 66 [ 537.874604][ T2425] pvrusb2: Device initialization was not successful. [ 537.900791][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 537.947138][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 537.997464][T10701] pvrusb2: Device being rendered inoperable [ 538.416973][T10701] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 538.787060][T10701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.817159][T10701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 538.817193][T27056] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 538.851572][T10701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.915682][T10701] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 538.968339][T10701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.000787][T10701] usb 3-1: config 0 descriptor?? [ 539.001737][T27499] loop0: detected capacity change from 0 to 32768 [ 539.138580][T27499] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.9127 (27499) [ 539.216771][T27499] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 539.247164][T10701] ath6kl: Failed to submit usb control message: -71 [ 539.253906][T10701] ath6kl: unable to send the bmi data to the device: -71 [ 539.280003][T10701] ath6kl: Unable to send get target info: -71 [ 539.291149][T10701] ath6kl: Failed to init ath6kl core: -71 [ 539.306996][T27499] BTRFS info (device loop0): using free space tree [ 539.314213][T27499] BTRFS info (device loop0): has skinny extents [ 539.336014][T27562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9146'. [ 539.349722][T10701] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 539.357252][T27056] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.373655][T10701] usb 3-1: USB disconnect, device number 39 [ 539.568600][T27056] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 539.578432][T27056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.586477][T27056] usb 5-1: Product: syz [ 539.610977][T27056] usb 5-1: Manufacturer: syz [ 539.621033][T27056] usb 5-1: SerialNumber: syz [ 539.647038][T27499] BTRFS info (device loop0): enabling ssd optimizations [ 539.700661][T27599] lo speed is unknown, defaulting to 1000 [ 539.838378][T27599] lo speed is unknown, defaulting to 1000 [ 539.885322][T27056] usb 5-1: Invalid number of CPorts: 0 [ 539.891016][T27056] es2_ap_driver: probe of 5-1:1.0 failed with error -22 [ 539.911460][T27599] lo speed is unknown, defaulting to 1000 [ 540.103079][T10701] usb 5-1: USB disconnect, device number 44 [ 540.519485][T27630] CIFS mount error: No usable UNC path provided in device string! [ 540.519485][T27630] [ 540.577032][T27630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 540.979053][T27652] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.9165' sets config #-1 [ 541.217104][T27667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9170'. [ 541.226228][T27667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9170'. [ 541.280972][T27599] infiniband syz1: set active [ 541.300635][ T6171] lo speed is unknown, defaulting to 1000 [ 541.354744][T27599] infiniband syz1: added lo [ 541.360176][T27674] netlink: 'syz.4.9172': attribute type 1 has an invalid length. [ 541.377048][T27674] netlink: 'syz.4.9172': attribute type 2 has an invalid length. [ 541.412619][T27674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9172'. [ 541.598333][T27599] RDS/IB: syz1: added [ 541.646091][T27599] smc: adding ib device syz1 with port count 1 [ 541.696984][T27599] smc: ib device syz1 port 1 has pnetid [ 541.749575][ T6171] lo speed is unknown, defaulting to 1000 [ 541.772203][T27599] lo speed is unknown, defaulting to 1000 [ 542.718331][T27599] lo speed is unknown, defaulting to 1000 [ 543.937723][T27599] lo speed is unknown, defaulting to 1000 [ 544.342336][ T5574] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 544.648857][ T5574] usb 3-1: Using ep0 maxpacket: 32 [ 544.727895][T27599] lo speed is unknown, defaulting to 1000 [ 544.803133][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.832979][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.867121][ T5574] usb 3-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 544.926935][ T5574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.973547][ T5574] usb 3-1: config 0 descriptor?? [ 545.050981][ T5574] hub 3-1:0.0: USB hub found [ 545.269168][ T5574] hub 3-1:0.0: 1 port detected [ 545.477564][ T5574] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 545.484102][ T5574] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 545.561634][T27599] lo speed is unknown, defaulting to 1000 [ 545.596442][T27905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 545.599313][ T5574] usb 3-1: USB disconnect, device number 40 [ 545.677201][T27905] device syz_tun left promiscuous mode [ 545.706306][T27905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.787167][T27905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.847259][T27905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.005813][T27905] device bond1 left promiscuous mode [ 546.024850][T27905] device gtp0 left promiscuous mode [ 546.041356][T27905] device vti0 left promiscuous mode [ 546.479387][T27944] device geneve4 entered promiscuous mode [ 546.660127][T27961] netlink: 'syz.0.9264': attribute type 2 has an invalid length. [ 546.828964][T27970] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.9268'. [ 546.875810][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9269'. [ 547.027464][T27984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9273'. [ 547.064004][T27991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9275'. [ 547.447149][T10701] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 547.710279][T28039] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 547.747479][T28039] openvswitch: netlink: Actions may not be safe on all matching packets [ 547.767063][T10701] usb 3-1: not running at top speed; connect to a high speed hub [ 547.779534][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9293'. [ 547.839856][T28044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.857239][T10701] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 547.876582][T10701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.938255][T10701] hub 3-1:1.0: USB hub found [ 547.967018][ T6176] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 548.044071][T28062] netlink: 'syz.3.9298': attribute type 21 has an invalid length. [ 548.082408][T28062] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9298'. [ 548.197261][T10701] hub 3-1:1.0: config failed, can't read hub descriptor (err -22) [ 548.217420][ T6176] usb 5-1: Using ep0 maxpacket: 16 [ 548.254386][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9302'. [ 548.297856][T10701] usb 3-1: USB disconnect, device number 41 [ 548.317456][T28075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9302'. [ 548.337009][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9302'. [ 548.346450][T28075] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9302'. [ 548.356088][ T6176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.377220][ T6176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 548.387706][ T6176] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 202 [ 548.467197][T28086] netlink: 'syz.3.9303': attribute type 1 has an invalid length. [ 548.597403][ T6176] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 548.602605][ T5583] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 548.618408][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.652575][ T6176] usb 5-1: Product: syz [ 548.670676][ T6176] usb 5-1: Manufacturer: syz [ 548.675350][ T6176] usb 5-1: SerialNumber: syz [ 548.707454][T28037] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 548.969608][ T5583] usb 1-1: Using ep0 maxpacket: 8 [ 549.107216][ T5583] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 549.136449][ T5583] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 549.175072][ T5583] usb 1-1: config 0 has no interface number 1 [ 549.184579][ T6176] snd-usb-audio: probe of 5-1:1.0 failed with error -12 [ 549.205321][ T5583] usb 1-1: config 0 has no interface number 2 [ 549.242836][ T5583] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 549.254444][ T6176] usb 5-1: USB disconnect, device number 45 [ 549.294589][ T5583] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 549.363353][ T5583] usb 1-1: config 0 interface 0 has no altsetting 0 [ 549.390471][ T5583] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 549.420124][ T5583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.435642][T28072] loop1: detected capacity change from 0 to 32768 [ 549.457707][ T5583] usb 1-1: config 0 descriptor?? [ 549.518439][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.525018][T28072] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.9299 (28072) [ 549.647376][T28072] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 549.700545][T28158] loop4: detected capacity change from 0 to 2048 [ 549.707769][T28072] BTRFS info (device loop1): enabling ssd optimizations [ 549.714769][T28072] BTRFS info (device loop1): not using ssd optimizations [ 549.738175][T28164] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.757281][ T5583] usb 1-1: Could not set interface, error -71 [ 549.780863][ T5583] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 549.793515][ T5581] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 549.801283][T28072] BTRFS info (device loop1): turning off barriers [ 549.802618][T28158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.816911][T28072] BTRFS info (device loop1): use no compression [ 549.847485][T28072] BTRFS info (device loop1): using free space tree [ 549.877990][ T5583] usb 1-1: USB disconnect, device number 45 [ 549.907548][T28072] BTRFS info (device loop1): has skinny extents [ 550.183594][ T5581] usb 4-1: Using ep0 maxpacket: 8 [ 550.409647][ T5581] usb 4-1: unable to get BOS descriptor or descriptor too short [ 550.537261][ T5581] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 550.550875][ T5581] usb 4-1: config 1 has no interface number 0 [ 550.572279][ T5581] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 550.608880][ T5581] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 550.817202][ T5581] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 550.837317][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.897184][ T5581] usb 4-1: Product: syz [ 550.901425][ T5581] usb 4-1: Manufacturer: syz [ 550.906054][ T5581] usb 4-1: SerialNumber: syz [ 551.027662][T28142] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 551.108193][T28240] netlink: 'syz.0.9331': attribute type 6 has an invalid length. [ 551.140823][T28240] netlink: 'syz.0.9331': attribute type 7 has an invalid length. [ 551.189924][T28240] netlink: 'syz.0.9331': attribute type 8 has an invalid length. [ 551.515370][ T5581] usb 4-1: USB disconnect, device number 39 [ 551.889943][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.979290][T28322] loop1: detected capacity change from 0 to 16 [ 552.057883][T28322] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 552.071700][T28327] netlink: 'syz.0.9351': attribute type 10 has an invalid length. [ 552.153932][T28327] device netdevsim0 entered promiscuous mode [ 552.201871][T28327] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 552.770576][T28348] loop0: detected capacity change from 0 to 4096 [ 552.910098][T28348] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 553.062686][T28348] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 553.096429][T28348] ntfs3: loop0: mft corrupted [ 553.120588][T28348] ntfs3: loop0: Failed to load $Extend. [ 554.364611][T28472] netlink: 'syz.3.9397': attribute type 1 has an invalid length. [ 554.371650][T28471] MTD: Couldn't look up './bus': -15 [ 554.396770][T28472] __nla_validate_parse: 6 callbacks suppressed [ 554.396790][T28472] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9397'. [ 554.427699][T28475] rdma_rxe: ignoring netdev event = 23 for lo [ 554.488699][T28475] rdma_rxe: lo changed mtu to 67 [ 554.494191][T28475] infiniband syz1: set active [ 554.507174][T24495] lo speed is unknown, defaulting to 1000 [ 554.697956][T28492] No such timeout policy "syz1" [ 555.183682][T28530] loop1: detected capacity change from 0 to 1024 [ 555.348494][ T155] hfsplus: b-tree write err: -5, ino 25 [ 555.354394][ T155] hfsplus: b-tree write err: -5, ino 4 [ 555.397213][ T155] hfsplus: b-tree write err: -5, ino 2 [ 555.522058][T28556] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 555.861870][T28575] SET target dimension over the limit! [ 556.623890][T28607] netlink: 'syz.2.9443': attribute type 32 has an invalid length. [ 556.642804][T28608] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9444'. [ 556.740298][T28614] loop3: detected capacity change from 0 to 256 [ 556.863046][T28619] loop0: detected capacity change from 0 to 1024 [ 557.010100][T28619] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 557.119085][T28630] netlink: 'syz.1.9450': attribute type 1 has an invalid length. [ 557.358189][T28650] netlink: 'syz.1.9455': attribute type 26 has an invalid length. [ 557.437047][ T6177] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 557.545925][T28663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9460'. [ 557.807240][ T6177] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 557.833797][ T6177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.870999][ T6177] usb 4-1: config 0 descriptor?? [ 557.949551][ T6177] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 557.974955][ T150] block nbd0: Attempted send on invalid socket [ 557.981948][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.035882][ T150] block nbd0: Attempted send on invalid socket [ 558.042309][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.053805][ T150] block nbd0: Attempted send on invalid socket [ 558.060085][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.072329][ T150] block nbd0: Attempted send on invalid socket [ 558.078608][ T150] blk_update_request: I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.090204][ T150] block nbd0: Attempted send on invalid socket [ 558.098961][ T150] blk_update_request: I/O error, dev nbd0, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.099662][ T150] block nbd0: Attempted send on invalid socket [ 558.117352][ T150] blk_update_request: I/O error, dev nbd0, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 558.128855][T28685] VFS: unable to find oldfs superblock on device nbd0 [ 558.350283][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9469'. [ 558.387036][ T6177] gspca_cpia1: usb_control_msg 03, error -71 [ 558.406993][ T6177] gspca_cpia1: usb_control_msg 01, error -71 [ 558.413075][ T6177] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 558.491954][ T6177] usb 4-1: USB disconnect, device number 40 [ 558.630123][T28715] openvswitch: netlink: Actions may not be safe on all matching packets [ 558.741926][T28660] loop4: detected capacity change from 0 to 32768 [ 558.864548][T28660] [ 558.864548][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 558.864548][T28660] [ 559.078629][T28660] [ 559.078629][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.078629][T28660] [ 559.147135][T28660] [ 559.147135][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.147135][T28660] [ 559.207003][T28660] [ 559.207003][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.207003][T28660] [ 559.268358][T28660] [ 559.268358][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.268358][T28660] [ 559.298555][T28660] [ 559.298555][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.298555][T28660] [ 559.325135][T28660] [ 559.325135][T28660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.325135][T28660] [ 559.351616][ T276] [ 559.351616][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.351616][ T276] [ 559.390633][T28741] device bond1 entered promiscuous mode [ 559.431975][T28741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.438860][ T4196] [ 559.438860][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.438860][ T4196] [ 559.472696][ T4196] [ 559.472696][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.472696][ T4196] [ 559.917055][ T6177] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 560.168320][ T6177] usb 3-1: Using ep0 maxpacket: 8 [ 560.293479][ T6177] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 560.306974][ T6177] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 560.325562][ T6177] usb 3-1: config 0 has no interface number 1 [ 560.356020][ T6177] usb 3-1: config 0 has no interface number 2 [ 560.376315][ T6177] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 560.393291][T28833] loop0: detected capacity change from 0 to 256 [ 560.423107][ T6177] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 560.491343][ T6177] usb 3-1: config 0 interface 0 has no altsetting 0 [ 560.507039][ T6177] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 560.536379][ T6177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.576770][ T6177] usb 3-1: config 0 descriptor?? [ 560.648282][T28833] exfat: Deprecated parameter 'utf8' [ 560.653679][T28833] exfat: Deprecated parameter 'utf8' [ 560.667816][T28833] exfat: Deprecated parameter 'utf8' [ 560.681185][T28833] exfat: Deprecated parameter 'codepage' [ 560.695465][T28833] exfat: Bad value for 'codepage' [ 560.863293][ T6177] usb 3-1: Could not set interface, error -71 [ 560.893926][ T6177] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 560.931901][ T6177] usb 3-1: USB disconnect, device number 42 [ 561.369517][T28875] loop0: detected capacity change from 0 to 4096 [ 561.437120][T28885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9513'. [ 561.637041][T28894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9516'. [ 561.905527][T28908] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 561.958577][T28911] netlink: 'syz.2.9522': attribute type 2 has an invalid length. [ 561.977111][T28911] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9522'. [ 562.696820][T28889] loop1: detected capacity change from 0 to 32768 [ 562.827363][T28889] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 562.856423][ T5581] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 562.910116][T28889] JBD2: Ignoring recovery information on journal [ 563.120905][T28889] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 563.323427][ T5581] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 563.334624][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 563.346894][ T5581] usb 1-1: config 0 has no interface number 0 [ 563.371823][ T5581] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 563.453378][ T5581] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 563.469649][T28999] netlink: zone id is out of range [ 563.517059][ T5581] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 563.566897][ T5581] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 563.810925][ T5581] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 563.831060][ T5581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.878206][ T5581] usb 1-1: Product: syz [ 563.901785][ T5581] usb 1-1: Manufacturer: syz [ 563.924201][ T5581] usb 1-1: SerialNumber: syz [ 563.948574][ T5581] usb 1-1: config 0 descriptor?? [ 563.970524][T29026] loop1: detected capacity change from 0 to 1024 [ 564.045598][ T5581] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 564.053437][ T5581] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input38 [ 564.516041][T29047] loop1: detected capacity change from 0 to 4096 [ 564.548045][ T5574] usb 1-1: USB disconnect, device number 46 [ 564.566622][ T5574] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 564.630601][T29047] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 567.003198][T29241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9622'. [ 567.285884][T29184] loop1: detected capacity change from 0 to 32768 [ 567.320815][T29257] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9628'. [ 567.347374][T29257] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 567.483270][T29267] loop4: detected capacity change from 0 to 164 [ 567.620371][T29267] rock: directory entry would overflow storage [ 567.673515][T29267] rock: sig=0x4543, size=28, remaining=18 [ 567.967771][T29294] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 568.178534][T29312] netlink: 'syz.1.9644': attribute type 21 has an invalid length. [ 568.226637][T29312] netlink: 'syz.1.9644': attribute type 1 has an invalid length. [ 568.300643][T29312] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9644'. [ 568.350506][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9645'. [ 568.367378][T29315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9645'. [ 568.484778][T29326] xt_connbytes: Forcing CT accounting to be enabled [ 568.789088][T29345] tipc: Trying to set illegal importance in message [ 568.817058][T29335] loop0: detected capacity change from 0 to 4096 [ 568.894781][T29351] xt_l2tp: v2 doesn't support IP mode [ 568.957036][T24495] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 568.967037][T29335] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 569.166980][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9661'. [ 569.176174][T29366] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9661'. [ 569.327336][T24495] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 569.336482][T24495] usb 2-1: config 0 has no interface number 0 [ 569.375815][T24495] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 569.455121][T24495] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.506998][T24495] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 569.567573][T24495] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 569.757875][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9676'. [ 569.777378][T24495] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 569.826894][T24495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.855337][T24495] usb 2-1: Product: syz [ 569.865465][T24495] usb 2-1: Manufacturer: syz [ 569.880755][T24495] usb 2-1: SerialNumber: syz [ 569.882718][T29412] dlm: no local IP address has been set [ 569.938356][T29412] dlm: cannot start dlm midcomms -107 [ 569.955317][T24495] usb 2-1: config 0 descriptor?? [ 570.010049][T24495] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 570.062524][T24495] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input39 [ 570.265137][T29449] JFS: discard option not supported on device [ 570.324111][T29453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9688'. [ 570.333645][T29449] Mount JFS Failure: -22 [ 570.343811][T29449] jfs_mount failed w/return code = -22 [ 570.397197][T29453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9688'. [ 570.418861][T10701] usb 2-1: USB disconnect, device number 38 [ 570.429199][T10701] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 570.940362][T29516] openvswitch: netlink: Missing valid actions attribute. [ 570.986927][T29516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.147315][T10701] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 571.318774][T29550] Cannot find del_set index 4 as target [ 571.334380][T27056] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 571.397027][T10701] usb 5-1: Using ep0 maxpacket: 16 [ 571.517816][T10701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.547176][T24495] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 571.559974][T10701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.631401][ T5574] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 571.747232][T10701] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.766794][T10701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.787309][T27056] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.805934][T10701] usb 5-1: Product: syz [ 571.825183][T10701] usb 5-1: Manufacturer: syz [ 571.847231][T10701] usb 5-1: SerialNumber: syz [ 571.887223][T24495] usb 2-1: not running at top speed; connect to a high speed hub [ 571.925462][T27056] usb 1-1: config 6 has an invalid interface number: 252 but max is 0 [ 571.943947][T27056] usb 1-1: config 6 has no interface number 0 [ 571.962887][T27056] usb 1-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 572.004473][T27056] usb 1-1: config 6 interface 252 has no altsetting 0 [ 572.045129][ T5574] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 572.057710][ T5574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.098222][ T5574] usb 4-1: config 0 has no interface number 0 [ 572.104516][ T5574] usb 4-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.147431][T24495] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 572.177095][T24495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.185213][T24495] usb 2-1: Product: syz [ 572.190284][T10701] usb 5-1: 0:2 : does not exist [ 572.208640][T27056] usb 1-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 572.231192][T27056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.239326][T10701] usb 5-1: USB disconnect, device number 46 [ 572.248976][T24495] usb 2-1: Manufacturer: syz [ 572.265571][T27056] usb 1-1: Product: syz [ 572.283287][T27056] usb 1-1: Manufacturer: syz [ 572.287566][T24495] usb 2-1: SerialNumber: syz [ 572.303351][T27056] usb 1-1: SerialNumber: syz [ 572.308843][ T5574] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 572.331990][ T5574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.359100][T24495] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 572.367282][ T5574] usb 4-1: Product: syz [ 572.377169][ T5574] usb 4-1: Manufacturer: syz [ 572.387118][ T5574] usb 4-1: SerialNumber: syz [ 572.413720][T24495] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 572.414274][ T5574] usb 4-1: config 0 descriptor?? [ 572.453221][T24495] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 572.477791][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.497659][T24495] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 572.498221][ T5574] asix: probe of 4-1:0.251 failed with error -22 [ 572.537032][T24495] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 572.668385][T27056] sierra 1-1:6.252: Sierra USB modem converter detected [ 572.718047][T27056] usb 1-1: Sierra USB modem converter now attached to ttyUSB4 [ 572.730916][T27056] usb 1-1: Sierra USB modem converter now attached to ttyUSB5 [ 572.771419][T24495] usb 2-1: USB disconnect, device number 39 [ 572.797920][ T6177] usb 4-1: USB disconnect, device number 41 [ 572.803929][T27056] usb 1-1: USB disconnect, device number 47 [ 572.826664][T24495] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 572.880465][T24495] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 572.903138][T27056] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 572.945403][T24495] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 572.948153][T27056] sierra ttyUSB5: Sierra USB modem converter now disconnected from ttyUSB5 [ 572.996492][T24495] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 573.024539][T24495] keyspan 2-1:1.0: device disconnected [ 573.025824][T27056] sierra 1-1:6.252: device disconnected [ 574.544320][T29745] netlink: 'syz.0.9752': attribute type 2 has an invalid length. [ 574.582541][T29745] __nla_validate_parse: 1 callbacks suppressed [ 574.582560][T29745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9752'. [ 574.782220][ T5574] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 575.201217][T29786] Cannot find add_set index 3 as target [ 575.326263][ T5574] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.417243][T29803] netlink: 'syz.1.9771': attribute type 1 has an invalid length. [ 575.435825][ T5574] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 575.450342][ T5574] usb 5-1: config 0 has no interface number 0 [ 575.457346][T29803] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9771'. [ 575.466597][T29803] nbd: couldn't find a device at index 1024 [ 575.479221][ T5574] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 575.523783][ T5574] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 575.574146][ T5574] usb 5-1: config 0 interface 86 has no altsetting 0 [ 575.858296][ T5574] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 575.886074][ T5574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.934770][ T5574] usb 5-1: Product: syz [ 575.939165][T24495] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 575.950738][ T5574] usb 5-1: Manufacturer: syz [ 575.970162][ T5574] usb 5-1: SerialNumber: syz [ 576.012282][ T5574] usb 5-1: config 0 descriptor?? [ 576.088170][T29738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 576.099735][T29839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9783'. [ 576.108982][T29738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 576.197675][T24495] usb 2-1: Using ep0 maxpacket: 16 [ 576.317188][T24495] usb 2-1: config 0 has no interfaces? [ 576.411224][T29860] overlayfs: missing 'workdir' [ 576.424449][ T5574] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 576.448820][ T5574] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 576.487661][T24495] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 576.488283][ T5574] usb 5-1: USB disconnect, device number 47 [ 576.523874][T24495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.562946][T24495] usb 2-1: Product: syz [ 576.578358][ T5574] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 576.591557][T24495] usb 2-1: Manufacturer: syz [ 576.596276][T24495] usb 2-1: SerialNumber: syz [ 576.617362][ T5574] omninet 5-1:0.86: device disconnected [ 576.624018][T24495] r8152-cfgselector 2-1: config 0 descriptor?? [ 576.897521][T24495] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 577.115012][T24495] usb 2-1: USB disconnect, device number 40 [ 577.302977][T29919] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 578.480523][ T5574] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 578.957710][ T5574] usb 1-1: unable to get BOS descriptor or descriptor too short [ 579.103128][ T5574] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.122477][ T5574] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 579.185447][ T5574] usb 1-1: config 1 interface 0 has no altsetting 1 [ 579.219330][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9844'. [ 579.306925][T10701] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 579.384179][ T5574] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 579.413718][ T5574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.422221][T24495] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 579.444147][ T5574] usb 1-1: Product: syz [ 579.458678][ T5574] usb 1-1: Manufacturer: syz [ 579.477250][ T5574] usb 1-1: SerialNumber: syz [ 579.529224][ T5574] smsusb:smsusb_probe: board id=8, interface number 0 [ 579.677031][T24495] usb 5-1: Using ep0 maxpacket: 32 [ 579.691677][T10701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.727095][T10701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.757357][ T5574] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 579.764424][ T5574] smsusb: probe of 1-1:1.0 failed with error -71 [ 579.817035][ T5574] usb 1-1: USB disconnect, device number 48 [ 579.847203][T10701] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 579.863067][T10701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.904961][T10701] usb 4-1: SerialNumber: syz [ 579.957855][T24495] usb 5-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 579.970435][T10701] usb 4-1: 0:2 : does not exist [ 579.998816][T24495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.033640][T24495] usb 5-1: Product: syz [ 580.044877][T24495] usb 5-1: Manufacturer: syz [ 580.057191][T24495] usb 5-1: SerialNumber: syz [ 580.194872][ T6177] usb 4-1: USB disconnect, device number 42 [ 580.427474][T24495] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 580.457506][T24495] usb 5-1: 2:1 : unknown format tag 0x804 is detected. processed as MPEG. [ 580.485490][T24495] usb 5-1: found format II with max.bitrate = 32769, frame size=255 [ 580.527056][T24495] usb 5-1: 2:1: All rates were zero [ 580.556638][T30107] xt_hashlimit: size too large, truncated to 1048576 [ 580.601353][T24495] usb 5-1: USB disconnect, device number 48 [ 580.610565][T30111] netlink: 'syz.0.9857': attribute type 21 has an invalid length. [ 580.636690][T30111] netlink: 'syz.0.9857': attribute type 4 has an invalid length. [ 580.687084][T30111] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9857'. [ 581.110644][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9869'. [ 581.129246][T30161] netlink: 'syz.0.9868': attribute type 3 has an invalid length. [ 581.511934][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'. [ 581.849536][T30222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9888'. [ 582.216689][T30247] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9897'. [ 582.265614][T30247] openvswitch: netlink: Flow key attribute not present in set flow. [ 582.698713][ T5574] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 582.700175][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9907'. [ 583.067040][T30314] netlink: 'syz.3.9916': attribute type 3 has an invalid length. [ 583.095711][T30320] xt_hashlimit: size too large, truncated to 1048576 [ 583.236888][ T5574] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.327215][ T5574] usb 3-1: config 6 has an invalid interface number: 252 but max is 0 [ 583.344876][ T5574] usb 3-1: config 6 has no interface number 0 [ 583.376875][ T5574] usb 3-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 583.426858][ T5574] usb 3-1: config 6 interface 252 has no altsetting 0 [ 583.624237][T30349] IPv6: NLM_F_REPLACE set, but no existing node found! [ 583.683230][ T5574] usb 3-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 583.692655][T30351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9925'. [ 583.716875][ T5574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.747778][ T5574] usb 3-1: Product: syz [ 583.766886][ T5574] usb 3-1: Manufacturer: syz [ 583.771602][ T5574] usb 3-1: SerialNumber: syz [ 583.816557][T30358] loop0: detected capacity change from 0 to 8 [ 584.158250][ T5574] sierra 3-1:6.252: Sierra USB modem converter detected [ 584.197232][ T5574] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 584.244006][ T5574] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 584.306880][ T5574] usb 3-1: USB disconnect, device number 43 [ 584.354877][ T5574] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 584.409396][T30400] xt_hashlimit: size too large, truncated to 1048576 [ 584.424537][T30342] loop3: detected capacity change from 0 to 32768 [ 584.428214][ T5574] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 584.451136][ T5574] sierra 3-1:6.252: device disconnected [ 584.758673][T30430] IPv6: Can't replace route, no match found [ 585.389150][T27047] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 585.426984][T24495] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 585.712270][T27047] usb 5-1: Using ep0 maxpacket: 32 [ 585.827247][T24495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 585.847329][T27047] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 585.876051][T27047] usb 5-1: config 0 has no interface number 0 [ 585.897206][T27047] usb 5-1: config 0 interface 153 has no altsetting 0 [ 585.929545][T24495] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 585.948035][T24495] usb 4-1: config 0 has no interface number 0 [ 585.954305][T24495] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 586.017276][T24495] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 586.047574][T24495] usb 4-1: config 0 interface 86 has no altsetting 0 [ 586.140360][T27047] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 586.159842][T27047] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 586.196884][T27047] usb 5-1: Product: syz [ 586.205007][T27047] usb 5-1: Manufacturer: syz [ 586.208544][T24495] usb 4-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 586.222376][T24495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.247466][T27047] usb 5-1: SerialNumber: syz [ 586.251353][T24495] usb 4-1: Product: syz [ 586.256329][T24495] usb 4-1: Manufacturer: syz [ 586.267945][T27047] usb 5-1: config 0 descriptor?? [ 586.296884][T24495] usb 4-1: SerialNumber: syz [ 586.333501][T24495] usb 4-1: config 0 descriptor?? [ 586.393748][T30457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 586.403651][T30457] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 586.598172][T27047] hub 5-1:0.153: bad descriptor, ignoring hub [ 586.604367][T27047] hub: probe of 5-1:0.153 failed with error -5 [ 586.642360][T27047] sierra 5-1:0.153: Sierra USB modem converter detected [ 586.733754][T24495] omninet 4-1:0.86: ZyXEL - omni.net usb converter detected [ 586.754959][T24495] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 586.759408][T27047] usb 5-1: USB disconnect, device number 49 [ 586.807404][T27047] sierra 5-1:0.153: device disconnected [ 586.827806][T24495] usb 4-1: USB disconnect, device number 43 [ 586.876240][T24495] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 586.935879][T24495] omninet 4-1:0.86: device disconnected [ 587.130726][ T5574] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 587.283063][T30575] IPv6: NLM_F_REPLACE set, but no existing node found! [ 587.426869][ T5574] usb 1-1: Using ep0 maxpacket: 8 [ 587.570741][ T5574] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.591262][ T5574] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 587.600983][T27047] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 587.620946][ T5574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.642107][ T5574] usb 1-1: config 0 descriptor?? [ 587.703046][ T6177] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 587.720578][ T5574] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 587.857031][ T5583] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 587.974200][ T6177] usb 3-1: Using ep0 maxpacket: 32 [ 588.007262][T27047] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.026888][T27047] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.137191][T27047] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 588.142523][ T6177] usb 3-1: unable to get BOS descriptor or descriptor too short [ 588.149017][ T5583] usb 5-1: Using ep0 maxpacket: 16 [ 588.160711][ T5574] gspca_vc032x: reg_w err -71 [ 588.165487][ T5574] vc032x: probe of 1-1:0.0 failed with error -71 [ 588.177546][T27047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.197680][ T5574] usb 1-1: USB disconnect, device number 49 [ 588.207068][T27047] usb 2-1: SerialNumber: syz [ 588.257399][ T6177] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 588.273813][ T6177] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 588.290240][T27047] usb 2-1: 0:2 : does not exist [ 588.303042][ T6177] usb 3-1: config 12 has no interface number 0 [ 588.312212][ T6177] usb 3-1: config 12 has no interface number 1 [ 588.348497][ T6177] usb 3-1: config 12 interface 183 has no altsetting 0 [ 588.417195][ T5583] usb 5-1: unable to get BOS descriptor or descriptor too short [ 588.507219][ T6177] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 588.530088][ T6177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.546779][ T6177] usb 3-1: Product: syz [ 588.548198][ T5583] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.552968][ T6177] usb 3-1: Manufacturer: syz [ 588.574838][ T6177] usb 3-1: SerialNumber: syz [ 588.580262][ T5583] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.604414][T24495] usb 2-1: USB disconnect, device number 41 [ 588.610861][ T5583] usb 5-1: config 1 interface 1 has no altsetting 0 [ 588.908525][ T5583] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 588.916095][T30644] syz.3.9995: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 588.948607][ T5583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.962417][ T6177] usb 3-1: USB disconnect, device number 44 [ 588.967042][T30644] CPU: 0 PID: 30644 Comm: syz.3.9995 Not tainted syzkaller #0 [ 588.975854][T30644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.985982][T30644] Call Trace: [ 588.989396][T30644] [ 588.992414][T30644] dump_stack_lvl+0x188/0x250 [ 588.997262][T30644] ? rcu_lock_release+0x5/0x20 [ 589.002146][T30644] ? show_regs_print_info+0x20/0x20 [ 589.007405][T30644] ? load_image+0x410/0x410 [ 589.012028][T30644] warn_alloc+0x245/0x320 [ 589.016479][T30644] ? zone_watermark_ok_safe+0x250/0x250 [ 589.022070][T30644] ? __mutex_lock_common+0x435/0x2400 [ 589.027607][T30644] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 589.033420][T30644] __vmalloc_node_range+0x2b1/0x8b0 [ 589.038675][T30644] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 589.043828][T30644] vmalloc+0x75/0x80 [ 589.047768][T30644] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 589.052835][T30644] dvb_dvr_do_ioctl+0x12a/0x220 [ 589.057736][T30644] dvb_usercopy+0x191/0x2b0 [ 589.062339][T30644] ? dvb_dvr_release+0x3d0/0x3d0 [ 589.067325][T30644] ? dvb_generic_ioctl+0xb0/0xb0 [ 589.072329][T30644] ? dvb_dvr_poll+0x230/0x230 [ 589.077053][T30644] dvb_dvr_ioctl+0x25/0x30 [ 589.081514][T30644] __se_sys_ioctl+0xfa/0x170 [ 589.086194][T30644] do_syscall_64+0x4c/0xa0 [ 589.090673][T30644] ? clear_bhb_loop+0x30/0x80 [ 589.095384][T30644] ? clear_bhb_loop+0x30/0x80 [ 589.100107][T30644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.106064][T30644] RIP: 0033:0x7f0acfb5f0d9 [ 589.110573][T30644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.130627][T30644] RSP: 002b:00007f0acddb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.139191][T30644] RAX: ffffffffffffffda RBX: 00007f0acfde6fa0 RCX: 00007f0acfb5f0d9 [ 589.147316][T30644] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003 [ 589.155346][T30644] RBP: 00007f0acfbf6024 R08: 0000000000000000 R09: 0000000000000000 [ 589.163405][T30644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.171532][T30644] R13: 00007f0acfde7038 R14: 00007f0acfde6fa0 R15: 00007ffd61b15e58 [ 589.179586][T30644] [ 589.203177][ T5583] usb 5-1: Product: syz [ 589.223402][ T5583] usb 5-1: Manufacturer: syz [ 589.233579][ T5583] usb 5-1: SerialNumber: syz [ 589.354038][T30660] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 589.517162][T30644] Mem-Info: [ 589.520573][T30644] active_anon:387 inactive_anon:7095 isolated_anon:0 [ 589.520573][T30644] active_file:17189 inactive_file:38512 isolated_file:0 [ 589.520573][T30644] unevictable:768 dirty:290 writeback:0 [ 589.520573][T30644] slab_reclaimable:18261 slab_unreclaimable:101732 [ 589.520573][T30644] mapped:30478 shmem:2119 pagetables:718 bounce:0 [ 589.520573][T30644] kernel_misc_reclaimable:0 [ 589.520573][T30644] free:1359364 free_pcp:11114 free_cma:0 [ 589.580025][ T5583] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 589.627140][ T5583] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 589.828753][ T5583] usb 5-1: USB disconnect, device number 50 [ 589.853322][T30700] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 590.156971][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.273239][T30734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10018'. [ 590.306905][T30734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10018'. [ 590.331868][ T1093] block nbd2: Attempted send on invalid socket [ 590.338685][ T1093] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.361538][T30735] VFS: unable to read V7 FS superblock on device nbd2. [ 590.376948][T30644] Node 0 active_anon:1520kB inactive_anon:28208kB active_file:68512kB inactive_file:154048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121828kB dirty:1176kB writeback:0kB shmem:6412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2928kB all_unreclaimable? no [ 590.409387][T30735] VFS: could not find a valid V7 on nbd2. [ 590.421776][T30644] Node 1 active_anon:32kB inactive_anon:512kB active_file:248kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 590.460173][T30644] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.506374][T30644] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 590.539170][T30644] Node 0 DMA32 free:1504144kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1520kB inactive_anon:28008kB active_file:68512kB inactive_file:154048kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:34376kB local_pcp:12824kB free_cma:0kB [ 590.697832][T30644] lowmem_reserve[]: 0 0 0 0 0 [ 590.703241][T30644] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 590.847920][T30644] lowmem_reserve[]: 0 0 0 0 0 [ 590.852738][T30644] Node 1 Normal free:3918792kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:248kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9668kB local_pcp:6144kB free_cma:0kB [ 590.905439][T30644] lowmem_reserve[]: 0 0 0 0 0 [ 590.930855][T30644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 590.969524][T30644] Node 0 DMA32: 229*4kB (UME) 275*8kB (UME) 443*16kB (UME) 382*32kB (UME) 153*64kB (UME) 76*128kB (ME) 42*256kB (UME) 33*512kB (UME) 15*1024kB (UM) 9*2048kB (UM) 342*4096kB (UM) = 1504220kB [ 591.036872][T30768] xt_l2tp: v2 doesn't support IP mode [ 591.072677][T30644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.155018][T30644] Node 1 Normal: 160*4kB (UE) 47*8kB (UE) 39*16kB (UE) 151*32kB (UME) 72*64kB (UME) 25*128kB (UME) 12*256kB (U) 6*512kB (UE) 1*1024kB (U) 3*2048kB (M) 950*4096kB (M) = 3918792kB [ 591.285804][T30644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.356205][T30644] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 591.406869][T30644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.451305][T30644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 591.497082][T30644] 57776 total pagecache pages [ 591.526862][T30644] 0 pages in swap cache [ 591.531097][T30644] Swap cache stats: add 295, delete 295, find 75/106 [ 591.586870][T30644] Free swap = 124216kB [ 591.591129][T30644] Total swap = 124996kB [ 591.595328][T30644] 2097051 pages RAM [ 591.646870][T30644] 0 pages HighMem/MovableOnly [ 591.671910][T30644] 411499 pages reserved [ 591.676133][T30644] 0 pages cma reserved [ 592.095993][T30830] loop3: detected capacity change from 0 to 512 [ 592.192458][T30830] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 592.254454][T30830] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 592.268191][T30830] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,abort,noblock_validity,. Quota mode: none. [ 592.397571][T30830] EXT4-fs error (device loop3): ext4_xattr_set_entry:1615: inode #2: comm syz.3.10050: corrupted xattr entries [ 592.475067][T30830] EXT4-fs (loop3): Remounting filesystem read-only [ 592.594951][T30794] loop0: detected capacity change from 0 to 32768 [ 593.067281][T10701] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 593.096213][T30898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10070'. [ 593.307132][T10701] usb 4-1: Using ep0 maxpacket: 32 [ 593.426950][ T5583] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 593.427548][T10701] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 593.469722][T10701] usb 4-1: config 0 has no interface number 0 [ 593.475972][T10701] usb 4-1: config 0 interface 153 has no altsetting 0 [ 593.527447][T30914] dlm: no local IP address has been set [ 593.555031][T30914] dlm: cannot start dlm midcomms -107 [ 593.647430][T10701] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 593.656555][T10701] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 593.716115][T10701] usb 4-1: Product: syz [ 593.735091][T10701] usb 4-1: Manufacturer: syz [ 593.764117][T10701] usb 4-1: SerialNumber: syz [ 593.819096][T10701] usb 4-1: config 0 descriptor?? [ 593.877945][ T5583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 593.916857][ T5583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 593.946854][ T5583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 593.967191][ T5583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 594.017176][T30945] openvswitch: netlink: Missing valid actions attribute. [ 594.025604][T30945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.097777][T10701] hub 4-1:0.153: bad descriptor, ignoring hub [ 594.103941][T10701] hub: probe of 4-1:0.153 failed with error -5 [ 594.157915][T10701] sierra 4-1:0.153: Sierra USB modem converter detected [ 594.212580][ T5583] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 594.231570][ T5583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.239217][T10701] usb 4-1: USB disconnect, device number 44 [ 594.245958][T10701] sierra 4-1:0.153: device disconnected [ 594.260462][ T5583] usb 1-1: Product: syz [ 594.275025][ T5583] usb 1-1: Manufacturer: syz [ 594.292168][ T5583] usb 1-1: SerialNumber: syz [ 594.327368][ T5583] usb 1-1: config 0 descriptor?? [ 594.398507][ T5583] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 594.617017][T27047] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 594.629136][ T5583] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 594.802940][T30985] fuse: Invalid rootmode [ 594.828988][ T5574] usb 1-1: USB disconnect, device number 50 [ 595.057879][T27047] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 595.081990][T27047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.116012][T27047] usb 2-1: config 0 has no interface number 0 [ 595.153287][T27047] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.430858][T27047] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 595.453646][T27047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.482467][T27047] usb 2-1: Product: syz [ 595.486735][T27047] usb 2-1: Manufacturer: syz [ 595.520230][T27047] usb 2-1: SerialNumber: syz [ 595.525252][ T5583] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 595.550997][T27047] usb 2-1: config 0 descriptor?? [ 595.618290][T27047] asix: probe of 2-1:0.251 failed with error -22 [ 595.718857][T31020] loop3: detected capacity change from 0 to 4096 [ 595.853698][ T5583] usb 5-1: Using ep0 maxpacket: 8 [ 595.871633][T31020] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 595.879262][T27047] usb 2-1: USB disconnect, device number 42 [ 595.948592][T31042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10108'. [ 596.028372][ T5583] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 596.243565][ T5583] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 596.270522][ T5583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.329567][ T5583] usb 5-1: Product: syz [ 596.333817][ T5583] usb 5-1: Manufacturer: syz [ 596.360438][T31066] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10115'. [ 596.386864][ T5583] usb 5-1: SerialNumber: syz [ 596.402998][ T5583] usb 5-1: config 0 descriptor?? [ 596.465589][ T5583] gspca_main: sq930x-2.14.0 probing 2770:930c [ 596.496623][T31073] netlink: 'syz.3.10120': attribute type 1 has an invalid length. [ 596.533736][T31073] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10120'. [ 596.566959][T31073] nbd: couldn't find a device at index 1024 [ 596.746737][T31090] Cannot find add_set index 3 as target [ 596.764848][T31093] fuse: Invalid rootmode [ 596.917176][ T5583] gspca_sq930x: ucbus_write failed -71 [ 596.969438][T31104] netlink: 'syz.3.10129': attribute type 2 has an invalid length. [ 597.007092][T31104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10129'. [ 597.037019][T27047] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 597.062398][T31107] loop0: detected capacity change from 0 to 2048 [ 597.167206][ T5583] gspca_sq930x: Sensor ov9630 not yet treated [ 597.173429][ T5583] sq930x: probe of 5-1:0.0 failed with error -22 [ 597.201347][T31112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.243011][ T5583] usb 5-1: USB disconnect, device number 51 [ 597.250206][T31107] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 597.311131][T27047] usb 3-1: Using ep0 maxpacket: 16 [ 597.357063][T31107] Remounting filesystem read-only [ 597.467419][T27047] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.498020][T27047] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.737142][T27047] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.756555][T27047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.806055][T27047] usb 3-1: Product: syz [ 597.824631][T27047] usb 3-1: Manufacturer: syz [ 597.839723][T27047] usb 3-1: SerialNumber: syz [ 597.887041][T31156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10142'. [ 598.234820][T27047] usb 3-1: 0:2 : does not exist [ 598.301040][T27047] usb 3-1: USB disconnect, device number 45 [ 598.527242][T31208] netlink: 11 bytes leftover after parsing attributes in process `syz.4.10155'. [ 598.625730][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.680460][T31216] i2c i2c-0: Invalid block write size 253 [ 598.891346][T31140] loop3: detected capacity change from 0 to 32768 [ 599.038400][T31140] JBD2: Ignoring recovery information on journal [ 599.046440][T31140] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 599.137029][ T5574] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 599.147930][T31140] JBD2: bad block at offset 32 [ 599.276631][T31140] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 599.350431][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10172'. [ 599.387739][T31140] ocfs2: Unmounting device (7,3) on (node local) [ 599.456553][ T5574] usb 1-1: Using ep0 maxpacket: 16 [ 599.615907][T31274] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 599.685070][ T5574] usb 1-1: unable to get BOS descriptor or descriptor too short [ 599.797646][ T5574] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.847563][ T5574] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.909182][ T5574] usb 1-1: config 1 interface 1 has no altsetting 0 [ 600.094345][T31288] loop4: detected capacity change from 0 to 4096 [ 600.127400][ T5574] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 600.146789][ T5574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.155292][ T5574] usb 1-1: Product: syz [ 600.201980][ T5574] usb 1-1: Manufacturer: syz [ 600.206672][ T5574] usb 1-1: SerialNumber: syz [ 600.263374][T31288] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 600.509960][ T5574] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 600.540669][ T5574] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 600.784804][ T5574] usb 1-1: USB disconnect, device number 51 [ 600.816114][T31279] loop1: detected capacity change from 0 to 40427 [ 600.953166][T31279] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 600.957479][T31356] i2c i2c-0: Invalid block write size 253 [ 600.971382][T31279] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 600.995466][T31279] F2FS-fs (loop1): invalid crc value [ 601.045655][T31279] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 601.078135][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.178672][T24495] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 601.271459][T31377] syz.2.10200: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 601.286063][T31279] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 601.324208][T31279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 601.392110][T31377] CPU: 0 PID: 31377 Comm: syz.2.10200 Not tainted syzkaller #0 [ 601.399734][T31377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.409829][T31377] Call Trace: [ 601.413170][T31377] [ 601.416141][T31377] dump_stack_lvl+0x188/0x250 [ 601.420870][T31377] ? rcu_lock_release+0x5/0x20 [ 601.425695][T31377] ? show_regs_print_info+0x20/0x20 [ 601.430953][T31377] ? load_image+0x410/0x410 [ 601.435519][T31377] warn_alloc+0x245/0x320 [ 601.439925][T31377] ? zone_watermark_ok_safe+0x250/0x250 [ 601.445528][T31377] ? __mutex_lock_common+0x435/0x2400 [ 601.450962][T31377] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 601.456649][T31377] __vmalloc_node_range+0x2b1/0x8b0 [ 601.461917][T31377] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 601.467112][T31377] vmalloc+0x75/0x80 [ 601.471056][T31377] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 601.476218][T31377] dvb_dvr_do_ioctl+0x12a/0x220 [ 601.481151][T31377] dvb_usercopy+0x191/0x2b0 [ 601.485727][T31377] ? dvb_dvr_release+0x3d0/0x3d0 [ 601.490747][T31377] ? dvb_generic_ioctl+0xb0/0xb0 [ 601.495750][T31377] ? dvb_dvr_poll+0x230/0x230 [ 601.500473][T31377] dvb_dvr_ioctl+0x25/0x30 [ 601.504934][T31377] __se_sys_ioctl+0xfa/0x170 [ 601.507880][T24495] usb 4-1: not running at top speed; connect to a high speed hub [ 601.509566][T31377] do_syscall_64+0x4c/0xa0 [ 601.521727][T31377] ? clear_bhb_loop+0x30/0x80 [ 601.526451][T31377] ? clear_bhb_loop+0x30/0x80 [ 601.531171][T31377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.537147][T31377] RIP: 0033:0x7fbb22d1d0d9 [ 601.541603][T31377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.561252][T31377] RSP: 002b:00007fbb20f75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.569850][T31377] RAX: ffffffffffffffda RBX: 00007fbb22fa4fa0 RCX: 00007fbb22d1d0d9 [ 601.577872][T31377] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003 [ 601.585900][T31377] RBP: 00007fbb22db4024 R08: 0000000000000000 R09: 0000000000000000 [ 601.593912][T31377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.601923][T31377] R13: 00007fbb22fa5038 R14: 00007fbb22fa4fa0 R15: 00007ffea07dd848 [ 601.609957][T31377] [ 601.711108][T31279] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 601.777354][T24495] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 601.793383][T24495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.822684][T24495] usb 4-1: Product: syz [ 601.827223][T31377] Mem-Info: [ 601.830763][T31377] active_anon:470 inactive_anon:12104 isolated_anon:0 [ 601.830763][T31377] active_file:17269 inactive_file:38523 isolated_file:0 [ 601.830763][T31377] unevictable:768 dirty:435 writeback:0 [ 601.830763][T31377] slab_reclaimable:18280 slab_unreclaimable:101857 [ 601.830763][T31377] mapped:30464 shmem:7173 pagetables:735 bounce:0 [ 601.830763][T31377] kernel_misc_reclaimable:0 [ 601.830763][T31377] free:1359478 free_pcp:5407 free_cma:0 [ 601.872713][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.908867][T24495] usb 4-1: Manufacturer: syz [ 601.927618][T24495] usb 4-1: SerialNumber: syz [ 601.948485][T31377] Node 0 active_anon:1848kB inactive_anon:47704kB active_file:68828kB inactive_file:154092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121812kB dirty:1736kB writeback:0kB shmem:26612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11804kB pagetables:2840kB all_unreclaimable? no [ 601.979861][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.005707][T24495] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 602.034145][T24495] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 602.058777][T24495] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 602.073130][T24495] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 602.127607][T24495] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 602.482516][T24495] usb 4-1: USB disconnect, device number 45 [ 602.503183][T31377] Node 1 active_anon:32kB inactive_anon:512kB active_file:248kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 602.552148][T24495] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 602.607442][T24495] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 602.662966][T24495] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 602.702127][T24495] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 602.722450][T24495] keyspan 4-1:1.0: device disconnected [ 602.745684][T31377] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.772015][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.828110][T31377] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 602.834057][T31377] Node 0 DMA32 free:1505108kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1528kB inactive_anon:28168kB active_file:68512kB inactive_file:154140kB unevictable:1536kB writepending:1692kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:31532kB local_pcp:21528kB free_cma:0kB [ 602.864104][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.022244][T31377] lowmem_reserve[]: 0 0 0 0 0 [ 603.042908][T31377] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 603.068715][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.167011][T31377] lowmem_reserve[]: 0 0 0 0 0 [ 603.172163][T31377] Node 1 Normal free:3918792kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:248kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9668kB local_pcp:6144kB free_cma:0kB [ 603.177015][T31479] loop0: detected capacity change from 0 to 164 [ 603.200962][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.356949][T31377] lowmem_reserve[]: 0 0 0 0 0 [ 603.384278][T31377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 603.444728][T31479] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 603.453497][T31377] Node 0 DMA32: 1360*4kB (UM) 369*8kB (UME) 458*16kB (UME) 335*32kB (UME) 152*64kB (UME) 78*128kB (ME) 41*256kB (ME) 27*512kB (UME) 15*1024kB (UM) 9*2048kB (UM) 342*4096kB (UM) = 1505096kB [ 603.537919][T31377] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 603.555599][T31377] Node 1 Normal: 160*4kB (UE) 47*8kB (UE) 39*16kB (UE) 151*32kB (UME) 72*64kB (UME) 25*128kB (UME) 12*256kB (U) 6*512kB (UE) 1*1024kB (U) 3*2048kB (M) 950*4096kB (M) = 3918792kB [ 603.681154][T31377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.752614][T31377] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 603.807055][T31377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.876900][T31377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 603.886632][T31377] 57786 total pagecache pages [ 603.933186][T31526] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10238'. [ 603.951991][T31377] 0 pages in swap cache [ 603.956222][T31377] Swap cache stats: add 295, delete 295, find 75/106 [ 603.997317][T31377] Free swap = 124216kB [ 604.001662][T31377] Total swap = 124996kB [ 604.033908][T31377] 2097051 pages RAM [ 604.102017][T31377] 0 pages HighMem/MovableOnly [ 604.116117][T31377] 411499 pages reserved [ 604.139124][T31377] 0 pages cma reserved [ 604.315166][T31556] loop1: detected capacity change from 0 to 128 [ 604.339946][T31559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10250'. [ 604.372445][T31556] FAT-fs (loop1): Directory bread(block 32) failed [ 604.406488][T31556] FAT-fs (loop1): Directory bread(block 33) failed [ 604.430041][T31556] FAT-fs (loop1): Directory bread(block 34) failed [ 604.436695][T31556] FAT-fs (loop1): Directory bread(block 35) failed [ 604.493201][T31556] FAT-fs (loop1): Directory bread(block 36) failed [ 604.517357][T31556] FAT-fs (loop1): Directory bread(block 37) failed [ 604.524132][T31556] FAT-fs (loop1): Directory bread(block 38) failed [ 604.597190][T31556] FAT-fs (loop1): Directory bread(block 39) failed [ 604.600862][T31576] loop0: detected capacity change from 0 to 16 [ 604.654302][T31556] FAT-fs (loop1): Directory bread(block 40) failed [ 604.689165][T31556] FAT-fs (loop1): Directory bread(block 41) failed [ 604.730441][T31576] erofs: (device loop0): mounted with root inode @ nid 36. [ 604.758894][T10701] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 604.796954][T31576] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -19 in[52, 4044] out[2639] [ 604.855220][T31576] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 605.009326][T10701] usb 3-1: Using ep0 maxpacket: 16 [ 605.142574][T31556] FAT-fs (loop1): Filesystem has been set read-only [ 605.167112][T10701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 605.247034][T10701] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 255 [ 605.276895][T10701] usb 3-1: config 1 interface 0 has no altsetting 0 [ 605.355997][T31617] loop4: detected capacity change from 0 to 164 [ 605.517318][T31617] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 605.547213][T10701] usb 3-1: string descriptor 0 read error: -22 [ 605.547308][T10701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.547337][T10701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.567458][T31567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 605.604399][T10701] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 605.637020][T31641] loop1: detected capacity change from 0 to 16 [ 605.673325][T31641] erofs: (device loop1): mounted with root inode @ nid 36. [ 605.689159][T31641] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -19 in[52, 4044] out[2639] [ 605.692442][T31641] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 605.880392][T10701] usb 3-1: USB disconnect, device number 46 [ 606.878542][T31644] loop0: detected capacity change from 0 to 40427 [ 606.937273][ T5574] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 606.951286][T31644] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 606.971761][T31644] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 607.026143][T31644] F2FS-fs (loop0): invalid crc value [ 607.050788][T31644] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 607.257459][T31739] xt_policy: output policy not valid in PREROUTING and INPUT [ 607.272248][T31644] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 607.289684][T31644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 607.421217][ T5574] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.447026][ T5574] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.518958][T31644] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 607.527181][ T5574] usb 2-1: config 1 has no interface number 0 [ 607.717482][ T5574] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 607.726608][ T5574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.776489][ T5574] usb 2-1: Product: syz [ 607.802415][ T5574] usb 2-1: Manufacturer: syz [ 607.820195][ T5574] usb 2-1: SerialNumber: syz [ 608.027107][T10701] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 608.237163][ T5574] usb 2-1: 1:0 : does not exist [ 608.242114][ T5574] usb 2-1: 1:2 : does not exist [ 608.266861][ T5574] usb 2-1: 1:3 : does not exist [ 608.277062][T10701] usb 3-1: Using ep0 maxpacket: 32 [ 608.277130][ T5574] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 608.288689][T31796] loop3: detected capacity change from 0 to 128 [ 608.348391][ T5574] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 608.380451][T31796] FAT-fs (loop3): Directory bread(block 32) failed [ 608.394956][T31796] FAT-fs (loop3): Directory bread(block 33) failed [ 608.407272][T10701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.418115][ T5574] usb 2-1: USB disconnect, device number 43 [ 608.421826][T31796] FAT-fs (loop3): Directory bread(block 34) failed [ 608.458074][T10701] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 608.479696][T31796] FAT-fs (loop3): Directory bread(block 35) failed [ 608.487844][T10701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.498515][T31796] FAT-fs (loop3): Directory bread(block 36) failed [ 608.515164][T10701] usb 3-1: config 0 descriptor?? [ 608.520471][T31796] FAT-fs (loop3): Directory bread(block 37) failed [ 608.531540][T31796] FAT-fs (loop3): Directory bread(block 38) failed [ 608.538614][T31796] FAT-fs (loop3): Directory bread(block 39) failed [ 608.545368][T31796] FAT-fs (loop3): Directory bread(block 40) failed [ 608.553033][T31796] FAT-fs (loop3): Directory bread(block 41) failed [ 608.713585][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.787274][T10701] cdc_subset: probe of 3-1:0.0 failed with error -22 [ 608.844428][T31830] loop0: detected capacity change from 0 to 256 [ 608.873309][T31796] FAT-fs (loop3): Filesystem has been set read-only [ 608.990200][T10701] usb 3-1: USB disconnect, device number 47 [ 609.018993][T31830] FAT-fs (loop0): Directory bread(block 64) failed [ 609.046963][T31830] FAT-fs (loop0): Directory bread(block 65) failed [ 609.053732][T31830] FAT-fs (loop0): Directory bread(block 66) failed [ 609.092257][T31830] FAT-fs (loop0): Directory bread(block 67) failed [ 609.117111][T31830] FAT-fs (loop0): Directory bread(block 68) failed [ 609.138951][T31830] FAT-fs (loop0): Directory bread(block 69) failed [ 609.155944][T31830] FAT-fs (loop0): Directory bread(block 70) failed [ 609.175920][T31830] FAT-fs (loop0): Directory bread(block 71) failed [ 609.187061][T31830] FAT-fs (loop0): Directory bread(block 72) failed [ 609.207282][T31830] FAT-fs (loop0): Directory bread(block 73) failed [ 609.384076][ T5574] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 609.697575][ T5574] usb 2-1: Using ep0 maxpacket: 16 [ 609.837316][ T5574] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 610.034142][T10701] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 610.067326][ T5574] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 610.084539][ T5574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.130874][ T5574] usb 2-1: Product: syz [ 610.152358][ T5574] usb 2-1: Manufacturer: syz [ 610.152384][ T5574] usb 2-1: SerialNumber: syz [ 610.154278][ T5574] usb 2-1: config 0 descriptor?? [ 610.200518][ T5574] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 610.200583][ T5574] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 610.397138][T10701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.424990][T10701] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.443563][ T5574] usb 2-1: USB disconnect, device number 44 [ 610.637261][T10701] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 610.646385][T10701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.700902][T10701] usb 3-1: Product: syz [ 610.705153][T10701] usb 3-1: Manufacturer: syz [ 610.727024][T10701] usb 3-1: SerialNumber: syz [ 610.808290][T10701] usb-storage 3-1:1.0: USB Mass Storage device detected [ 610.852473][T10701] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 610.938453][T31963] ALSA: mixer_oss: invalid OSS volume 'u' [ 610.985791][T31970] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10356'. [ 611.059354][ T5574] usb 3-1: USB disconnect, device number 48 [ 611.374876][T31995] loop4: detected capacity change from 0 to 16 [ 611.465189][T31995] erofs: (device loop4): mounted with root inode @ nid 36. [ 611.588591][T32007] loop3: detected capacity change from 0 to 64 [ 611.714760][T32017] loop4: detected capacity change from 0 to 128 [ 611.904827][T32017] FAT-fs (loop4): Directory bread(block 32) failed [ 611.934013][T32017] FAT-fs (loop4): Directory bread(block 33) failed [ 611.970306][T32017] FAT-fs (loop4): Directory bread(block 34) failed [ 612.016138][T32017] FAT-fs (loop4): Directory bread(block 35) failed [ 612.068433][T32017] FAT-fs (loop4): Directory bread(block 36) failed [ 612.115703][T32017] FAT-fs (loop4): Directory bread(block 37) failed [ 612.137079][ T5574] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 612.183035][T32017] FAT-fs (loop4): Directory bread(block 38) failed [ 612.227211][T32017] FAT-fs (loop4): Directory bread(block 39) failed [ 612.270954][T32017] FAT-fs (loop4): Directory bread(block 40) failed [ 612.306893][T32017] FAT-fs (loop4): Directory bread(block 41) failed [ 612.408762][T32058] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10383'. [ 612.446201][ T5574] usb 1-1: Using ep0 maxpacket: 16 [ 612.616181][ T5574] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.634327][T32068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10387'. [ 612.670476][T32017] FAT-fs (loop4): Filesystem has been set read-only [ 612.682927][T32068] openvswitch: netlink: Missing key (keys=40, expected=100) [ 612.799318][T32076] ALSA: mixer_oss: invalid OSS volume 'u' [ 612.819713][T32080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.887850][ T5574] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 612.909981][ T5574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.963340][ T5574] usb 1-1: Product: syz [ 612.987462][ T5574] usb 1-1: Manufacturer: syz [ 613.006858][ T5574] usb 1-1: SerialNumber: syz [ 613.031296][ T5574] usb 1-1: config 0 descriptor?? [ 613.145533][ T5574] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 613.167586][ T5574] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 613.340529][T32121] loop1: detected capacity change from 0 to 256 [ 613.352181][T32119] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 613.399144][ T5583] usb 1-1: USB disconnect, device number 52 [ 613.511170][T32121] FAT-fs (loop1): Directory bread(block 64) failed [ 613.525217][T32131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.557448][T32121] FAT-fs (loop1): Directory bread(block 65) failed [ 613.577069][T32121] FAT-fs (loop1): Directory bread(block 66) failed [ 613.594567][T32121] FAT-fs (loop1): Directory bread(block 67) failed [ 613.607895][T32121] FAT-fs (loop1): Directory bread(block 68) failed [ 613.619318][T32121] FAT-fs (loop1): Directory bread(block 69) failed [ 613.667087][T32121] FAT-fs (loop1): Directory bread(block 70) failed [ 613.673704][T32121] FAT-fs (loop1): Directory bread(block 71) failed [ 613.757218][T32121] FAT-fs (loop1): Directory bread(block 72) failed [ 613.763876][T32121] FAT-fs (loop1): Directory bread(block 73) failed [ 614.227011][ T5583] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 614.487058][T27056] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 614.534658][ T5583] usb 3-1: Using ep0 maxpacket: 8 [ 614.538716][T32189] netlink: ct family unspecified [ 614.544771][T32189] openvswitch: netlink: Actions may not be safe on all matching packets [ 614.712290][ T5583] usb 3-1: unable to get BOS descriptor or descriptor too short [ 614.824929][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 614.856316][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 614.886947][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 614.946875][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 614.964368][T27056] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 614.987590][T27056] usb 1-1: config 8 has no interface number 0 [ 615.004009][T27056] usb 1-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 615.015240][ T5583] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 615.036919][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 615.075227][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 615.111068][ T5583] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 615.248178][T32186] loop4: detected capacity change from 0 to 32768 [ 615.294328][T27056] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 615.324215][T32186] (syz.4.10422,32186,1):ocfs2_verify_heartbeat:827 ERROR: Mismatching o2cb heartbeat modes [ 615.334941][T27056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.334974][T27056] usb 1-1: Product: syz [ 615.334991][T27056] usb 1-1: Manufacturer: syz [ 615.335010][T27056] usb 1-1: SerialNumber: syz [ 615.367044][ T5583] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 615.385714][T32186] (syz.4.10422,32186,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 615.397400][T32168] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 615.417905][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.425976][ T5583] usb 3-1: Product: syz [ 615.455915][ T5583] usb 3-1: Manufacturer: syz [ 615.467267][ T5583] usb 3-1: SerialNumber: syz [ 615.497949][ T5583] usb 3-1: config 0 descriptor?? [ 615.509695][ T6176] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 615.547835][T32150] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 615.554875][T32230] loop3: detected capacity change from 0 to 256 [ 615.666233][T27056] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 615.680447][ T5583] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 615.712701][T32230] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 615.755366][T27056] usb 1-1: USB disconnect, device number 53 [ 615.757846][ T6176] usb 2-1: Using ep0 maxpacket: 32 [ 615.805964][ T5583] usb 3-1: USB disconnect, device number 49 [ 615.813363][T32230] exFAT-fs (loop3): error, broken FAT chain. [ 615.879021][T32230] exFAT-fs (loop3): Filesystem has been set read-only [ 615.890392][ T6176] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.907312][ T6176] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 615.918058][T32230] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ed4a860 iblock : 0, err : -5) [ 615.940848][ T6176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.966320][ T6176] usb 2-1: config 0 descriptor?? [ 616.048223][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.201172][T32278] loop0: detected capacity change from 0 to 128 [ 616.217203][ T6176] cdc_subset: probe of 2-1:0.0 failed with error -22 [ 616.284642][T32286] xt_recent: Unsupported userspace flags (000000b1) [ 616.392234][T32278] FAT-fs (loop0): Directory bread(block 32) failed [ 616.406927][T32278] FAT-fs (loop0): Directory bread(block 33) failed [ 616.435822][T32278] FAT-fs (loop0): Directory bread(block 34) failed [ 616.465873][ T6176] usb 2-1: USB disconnect, device number 45 [ 616.477807][T32278] FAT-fs (loop0): Directory bread(block 35) failed [ 616.484482][T32278] FAT-fs (loop0): Directory bread(block 36) failed [ 616.532260][T32278] FAT-fs (loop0): Directory bread(block 37) failed [ 616.540779][T32302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10445'. [ 616.567196][T32278] FAT-fs (loop0): Directory bread(block 38) failed [ 616.604301][T32278] FAT-fs (loop0): Directory bread(block 39) failed [ 616.627127][T32306] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 616.647035][T32278] FAT-fs (loop0): Directory bread(block 40) failed [ 616.674042][T32278] FAT-fs (loop0): Directory bread(block 41) failed [ 617.047449][T32278] FAT-fs (loop0): Filesystem has been set read-only [ 617.624153][T32348] loop1: detected capacity change from 0 to 8192 [ 617.760885][T32348] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 617.810305][T32348] REISERFS (device loop1): using ordered data mode [ 617.898311][T32348] reiserfs: using flush barriers [ 617.917355][T32348] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 618.028704][T32348] REISERFS (device loop1): checking transaction log (loop1) [ 618.099396][T32348] REISERFS (device loop1): Using rupasov hash to sort names [ 618.138946][T32348] REISERFS (device loop1): using 3.5.x disk format [ 618.150460][T32407] loop0: detected capacity change from 0 to 24 [ 618.183058][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 618.248801][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 618.277012][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 618.357311][T32348] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 618.369326][T32420] SET target dimension over the limit! [ 618.396288][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 618.487062][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 618.573524][T32431] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10483'. [ 618.576992][T32348] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 619.332874][T32480] netlink: 'syz.0.10502': attribute type 10 has an invalid length. [ 619.388434][T32480] team0: Device vxcan1 is of different type [ 619.496927][T24495] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 619.685017][T32498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10506'. [ 619.877333][T24495] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 619.890876][T24495] usb 4-1: config 8 has no interface number 0 [ 619.920520][T24495] usb 4-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 620.137157][T24495] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 620.160982][T24495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.201305][T24495] usb 4-1: Product: syz [ 620.205547][T24495] usb 4-1: Manufacturer: syz [ 620.230881][T24495] usb 4-1: SerialNumber: syz [ 620.267365][T32476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 620.551666][T24495] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 620.608734][T24495] usb 4-1: USB disconnect, device number 46 [ 621.104415][T32581] netlink: 'syz.4.10531': attribute type 10 has an invalid length. [ 621.163269][T32581] team0: Device vxcan1 is of different type [ 621.222823][T32591] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 621.256246][T32591] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 621.263890][T32592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10535'. [ 621.724719][T32627] netlink: 'syz.3.10546': attribute type 20 has an invalid length. [ 621.762410][T32627] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.838461][T32635] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 621.874043][T32635] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 621.999940][T27056] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 622.408099][T27056] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 622.437764][T27056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.459075][T27056] usb 1-1: config 0 descriptor?? [ 622.504714][T27056] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 622.810376][T32684] netlink: 'syz.2.10566': attribute type 1 has an invalid length. [ 622.857736][T32684] netlink: 'syz.2.10566': attribute type 2 has an invalid length. [ 622.906406][T32684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10566'. [ 622.938537][T27056] gp8psk: usb in 137 operation failed. [ 622.946203][T27056] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 622.997332][T27056] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 623.045307][T27056] usb 1-1: USB disconnect, device number 54 [ 623.063684][T32645] loop3: detected capacity change from 0 to 32768 [ 623.237599][T32645] XFS (loop3): Mounting V5 Filesystem [ 623.379166][T32645] XFS (loop3): Ending clean mount [ 623.551821][T32736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10577'. [ 623.581643][T32737] netlink: 'syz.2.10576': attribute type 10 has an invalid length. [ 624.096908][ T6176] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 624.124532][ T4191] XFS (loop3): Unmounting Filesystem [ 624.173102][T32737] team0: Device vxcan1 is of different type [ 624.379486][ T6176] usb 5-1: Using ep0 maxpacket: 8 [ 624.547079][ T6176] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.637229][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 624.677997][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 624.737465][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 624.773904][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 624.826469][ T6176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 624.856460][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 624.906496][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 624.942090][ T6176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 625.127266][ T6176] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 625.156776][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.165201][ T6176] usb 5-1: Product: syz [ 625.180148][ T6176] usb 5-1: Manufacturer: syz [ 625.190278][ T6176] usb 5-1: SerialNumber: syz [ 625.209341][ T6176] usb 5-1: config 0 descriptor?? [ 625.238077][T32750] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 625.245233][T10701] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 625.330923][ T6176] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 625.397742][T11403] udevd[11403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.465941][ T364] loop3: detected capacity change from 0 to 736 [ 625.608932][ T6176] usb 5-1: USB disconnect, device number 52 [ 625.627169][T10701] usb 3-1: config 11 has an invalid interface number: 109 but max is 0 [ 625.635533][T10701] usb 3-1: config 11 has no interface number 0 [ 625.694025][ T313] loop1: detected capacity change from 0 to 32768 [ 625.710915][T10701] usb 3-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 625.741089][ T379] loop0: detected capacity change from 0 to 256 [ 625.743499][T10701] usb 3-1: config 11 interface 109 has no altsetting 0 [ 625.814204][ T379] exfat: Deprecated parameter 'namecase' [ 625.843073][ T379] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d) [ 625.928587][ T313] XFS (loop1): Mounting V5 Filesystem [ 625.937319][T10701] usb 3-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 625.958992][T10701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.018263][T10701] usb 3-1: Product: syz [ 626.022754][T10701] usb 3-1: Manufacturer: syz [ 626.027974][T10701] usb 3-1: SerialNumber: syz [ 626.064512][ T313] XFS (loop1): Ending clean mount [ 626.195707][ T4193] XFS (loop1): Unmounting Filesystem [ 626.452800][T10701] usb 3-1: USB disconnect, device number 50 [ 626.495140][ T433] loop4: detected capacity change from 0 to 736 [ 626.531691][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:11.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.915143][ T459] CIFS: Attempting to mount \\::1\share [ 626.987749][ T459] CIFS: VFS: No username specified [ 627.180958][ T477] netlink: 'syz.0.10628': attribute type 1 has an invalid length. [ 627.247017][ T477] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.10628'. [ 627.263664][ T483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 627.292523][ T477] netlink: 'syz.0.10628': attribute type 1 has an invalid length. [ 627.625510][ T508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10638'. [ 627.882472][ T525] device bond6 entered promiscuous mode [ 627.908057][ T21] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 628.186055][ T581] loop0: detected capacity change from 0 to 512 [ 628.306422][ T581] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.10653: bad orphan inode 13 [ 628.396843][ T581] ext4_test_bit(bit=12, block=4) = 1 [ 628.404243][ T600] netlink: 'syz.3.10659': attribute type 9 has an invalid length. [ 628.416270][ T581] is_bad_inode(inode)=0 [ 628.427090][ T21] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 628.436193][ T21] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 628.446914][ T581] NEXT_ORPHAN(inode)=0 [ 628.451051][ T581] max_ino=32 [ 628.460817][ T21] usb 2-1: Product: syz [ 628.470850][ T21] usb 2-1: Manufacturer: syz [ 628.487199][ T21] usb 2-1: SerialNumber: syz [ 628.495146][ T581] i_nlink=1 [ 628.521223][ T581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 628.539569][ T21] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 628.609684][ T581] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.10653: Hash code is SIPHASH, but hash not in dirent [ 628.664554][ T581] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.10653: Corrupt directory, running e2fsck is recommended [ 628.718332][ T581] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.10653: Hash code is SIPHASH, but hash not in dirent [ 628.781881][ T581] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.10653: Corrupt directory, running e2fsck is recommended [ 628.844152][ T581] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.10653: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 628.938235][ T638] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10666'. [ 628.968600][ T21] vp7045: USB control message 'in' went wrong. [ 628.974831][ T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 628.998491][ T638] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10666'. [ 629.038315][ T21] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 629.121529][ T21] usb 2-1: USB disconnect, device number 46 [ 629.362933][ T665] netlink: 'syz.4.10675': attribute type 9 has an invalid length. [ 629.775096][ T697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10684'. [ 629.827772][ T697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10684'. [ 630.286215][ T722] loop0: detected capacity change from 0 to 4096 [ 630.804215][ T755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10704'. [ 630.897309][ T755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10704'. [ 631.076442][ T778] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10711'. [ 631.398036][ T778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10711'. [ 632.106350][ T860] netlink: 19 bytes leftover after parsing attributes in process `syz.1.10737'. [ 632.126946][ T21] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 632.197111][T27056] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 632.309678][ T855] loop4: detected capacity change from 0 to 4096 [ 632.376864][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 632.497160][ T21] usb 4-1: config 5 has an invalid interface number: 234 but max is 0 [ 632.505409][ T21] usb 4-1: config 5 has no interface number 0 [ 632.546971][ T21] usb 4-1: config 5 interface 234 has no altsetting 0 [ 632.640092][ T882] loop1: detected capacity change from 0 to 512 [ 632.657020][T27056] usb 3-1: config index 0 descriptor too short (expected 16480, got 96) [ 632.666935][T27056] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.723421][T27056] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 632.738079][ T21] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 632.748622][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.756763][ T21] usb 4-1: Product: syz [ 632.764680][ T21] usb 4-1: Manufacturer: syz [ 632.769538][ T21] usb 4-1: SerialNumber: syz [ 632.807526][ T882] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.10744: bad orphan inode 13 [ 632.843919][ T882] ext4_test_bit(bit=12, block=4) = 1 [ 632.853370][ T882] is_bad_inode(inode)=0 [ 632.864706][ T882] NEXT_ORPHAN(inode)=0 [ 632.869311][ T882] max_ino=32 [ 632.872583][ T882] i_nlink=1 [ 632.896487][ T882] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 632.948359][ T882] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.10744: Hash code is SIPHASH, but hash not in dirent [ 632.972611][ T882] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.10744: Corrupt directory, running e2fsck is recommended [ 632.986134][ T904] netlink: 'syz.0.10747': attribute type 6 has an invalid length. [ 633.004805][ T882] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.10744: Hash code is SIPHASH, but hash not in dirent [ 633.027159][ T882] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.10744: Corrupt directory, running e2fsck is recommended [ 633.027500][T27056] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 633.041390][ T882] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.10744: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 633.091060][T27056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.109621][ T21] ipw 4-1:5.234: IPWireless converter converter detected [ 633.115387][T27056] usb 3-1: Product: syz [ 633.134611][T27056] usb 3-1: Manufacturer: syz [ 633.151871][T27056] usb 3-1: SerialNumber: syz [ 633.172079][ T21] usb 4-1: USB disconnect, device number 47 [ 633.194617][ T21] ipw 4-1:5.234: device disconnected [ 633.567497][T27056] usb 3-1: MIDIStreaming interface descriptor not found [ 633.574665][T27056] usb 3-1: 0:2 : does not exist [ 633.689476][T27056] usb 3-1: USB disconnect, device number 51 [ 633.947491][ T1002] netlink: 'syz.4.10765': attribute type 5 has an invalid length. [ 633.986649][ T1002] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.10765'. [ 634.056416][ T1008] dlm: no locking on control device [ 634.118130][T11403] udevd[11403]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.204892][ T1021] xt_TCPMSS: Only works on TCP SYN packets [ 634.406956][ T1037] netlink: 'syz.3.10779': attribute type 6 has an invalid length. [ 634.646537][ T1072] device wlan0 entered promiscuous mode [ 635.515941][ T21] ------------[ cut here ]------------ [ 635.527128][ T21] WARNING: CPU: 1 PID: 21 at net/netfilter/nft_set_pipapo.c:2297 nft_pipapo_destroy+0x8b0/0x960 [ 635.544000][ T1134] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 635.588030][ T21] Modules linked in: [ 635.592289][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 635.667727][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.731612][ T21] Workqueue: events nf_tables_trans_destroy_work [ 635.748520][ T21] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 635.754530][ T21] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 bb d0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 ad 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 635.835215][ T21] RSP: 0018:ffffc90000db7a68 EFLAGS: 00010293 [ 635.845331][ T21] RAX: ffffffff883c4f50 RBX: ffff888061294cf0 RCX: ffff8880179c1dc0 [ 635.870531][ T21] RDX: 0000000000000000 RSI: ffff888061294c00 RDI: ffff888051bb6528 [ 635.886860][ T21] RBP: ffffc90000db7c30 R08: ffff8880179c1dc0 R09: 0000000000000008 [ 635.905119][ T21] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888061294cc0 [ 635.915617][ T21] R13: dffffc0000000000 R14: ffff888061294d10 R15: dffffc0000000000 [ 635.946879][ T21] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 635.986363][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.994499][ T21] CR2: 00007fbb22d6a7c0 CR3: 0000000075163000 CR4: 00000000003506e0 [ 636.001647][ T1082] loop3: detected capacity change from 0 to 32768 [ 636.023622][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.052509][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.083750][ T21] Call Trace: [ 636.097624][ T21] [ 636.100640][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 636.127496][ T21] ? do_raw_spin_lock+0x128/0x2f0 [ 636.137453][ T21] nft_set_destroy+0x488/0xa30 [ 636.142308][ T21] ? do_raw_spin_unlock+0x11d/0x230 [ 636.176895][ T21] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 636.182890][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 636.208632][ T21] ? nft_object_dump+0x1e0/0x1e0 [ 636.213665][ T21] ? __schedule+0x11cb/0x4350 [ 636.226889][ T21] ? _raw_spin_unlock_irq+0x1f/0x40 [ 636.232255][ T21] process_one_work+0x867/0xff0 [ 636.237841][ T21] ? worker_detach_from_pool+0x240/0x240 [ 636.243561][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 636.249323][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 636.254399][ T21] ? _raw_spin_lock_irqsave+0x100/0x100 [ 636.267500][ T21] ? wq_worker_running+0x97/0x170 [ 636.272610][ T21] worker_thread+0xad7/0x12a0 [ 636.289600][ T21] kthread+0x42e/0x520 [ 636.293757][ T21] ? rcu_lock_release+0x20/0x20 [ 636.317103][ T21] ? kthread_blkcg+0xd0/0xd0 [ 636.321791][ T21] ret_from_fork+0x1f/0x30 [ 636.326698][ T21] [ 636.336951][ T21] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 636.344291][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 636.351696][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.361791][ T21] Workqueue: events nf_tables_trans_destroy_work [ 636.368267][ T21] Call Trace: [ 636.371573][ T21] [ 636.374552][ T21] dump_stack_lvl+0x188/0x250 [ 636.379282][ T21] ? show_regs_print_info+0x20/0x20 [ 636.384519][ T21] ? load_image+0x410/0x410 [ 636.389072][ T21] panic+0x2f8/0x850 [ 636.393014][ T21] ? bpf_jit_dump+0xd0/0xd0 [ 636.397566][ T21] ? ret_from_fork+0x1f/0x30 [ 636.402299][ T21] ? nft_pipapo_destroy+0x8b0/0x960 [ 636.407557][ T21] __warn+0x248/0x2b0 [ 636.411582][ T21] ? nft_pipapo_destroy+0x8b0/0x960 [ 636.416823][ T21] report_bug+0x1b9/0x2e0 [ 636.421300][ T21] handle_bug+0x3a/0x70 [ 636.425502][ T21] exc_invalid_op+0x16/0x40 [ 636.430070][ T21] asm_exc_invalid_op+0x16/0x20 [ 636.434960][ T21] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 636.440825][ T21] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 bb d0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 ad 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 636.460470][ T21] RSP: 0018:ffffc90000db7a68 EFLAGS: 00010293 [ 636.466585][ T21] RAX: ffffffff883c4f50 RBX: ffff888061294cf0 RCX: ffff8880179c1dc0 [ 636.474634][ T21] RDX: 0000000000000000 RSI: ffff888061294c00 RDI: ffff888051bb6528 [ 636.482653][ T21] RBP: ffffc90000db7c30 R08: ffff8880179c1dc0 R09: 0000000000000008 [ 636.490670][ T21] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888061294cc0 [ 636.498682][ T21] R13: dffffc0000000000 R14: ffff888061294d10 R15: dffffc0000000000 [ 636.506728][ T21] ? nft_pipapo_destroy+0x8b0/0x960 [ 636.511982][ T21] ? nft_pipapo_destroy+0x8b0/0x960 [ 636.517253][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 636.522338][ T21] ? do_raw_spin_lock+0x128/0x2f0 [ 636.527408][ T21] nft_set_destroy+0x488/0xa30 [ 636.532338][ T21] ? do_raw_spin_unlock+0x11d/0x230 [ 636.537611][ T21] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 636.543547][ T21] ? __lock_acquire+0x7b50/0x7b50 [ 636.548621][ T21] ? nft_object_dump+0x1e0/0x1e0 [ 636.553601][ T21] ? __schedule+0x11cb/0x4350 [ 636.558326][ T21] ? _raw_spin_unlock_irq+0x1f/0x40 [ 636.563561][ T21] process_one_work+0x867/0xff0 [ 636.568472][ T21] ? worker_detach_from_pool+0x240/0x240 [ 636.574137][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 636.579466][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 636.584529][ T21] ? _raw_spin_lock_irqsave+0x100/0x100 [ 636.590116][ T21] ? wq_worker_running+0x97/0x170 [ 636.595269][ T21] worker_thread+0xad7/0x12a0 [ 636.600017][ T21] kthread+0x42e/0x520 [ 636.604121][ T21] ? rcu_lock_release+0x20/0x20 [ 636.609015][ T21] ? kthread_blkcg+0xd0/0xd0 [ 636.613659][ T21] ret_from_fork+0x1f/0x30 [ 636.618135][ T21] [ 636.621448][ T21] Kernel Offset: disabled [ 636.626295][ T21] Rebooting in 86400 seconds..