last executing test programs: 1m47.15539016s ago: executing program 3 (id=1245): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000a00)={0x9, @win={{0x3, 0x8, 0xfffffeff, 0x1b6}, 0x3, 0x7fff, 0x0, 0x401, 0x0, 0x31}}) 1m47.039360513s ago: executing program 3 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x82f8a6adc2678f66}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1m46.836040178s ago: executing program 3 (id=1250): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0xaa) 1m46.718593311s ago: executing program 3 (id=1253): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nodiscard,discard=0x000000000000000\x00,discard=0x0000000000000006,quota,nointegrity,discard,noquota,iocharset=cp869,\x00'], 0x21, 0x6182, &(0x7f0000001140)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIddd3AD+zN6+dm4GQOqmBjWOCcTbZ9SW+0LqYcG24lUAo9ILtetdmwTe8dgk0ko0CJRJGRRVtw0NbQKjNS4VVIZVWgPKAWlWqBO0DfUFUqDxEVUABqVJbQbaac/7//87Mzs7sesfrmXM+Hyn5xTNn5pw585/Z/a7z3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt39+tlP17Isq/+T/2tzlt1c/++NE5vzy15zo48QAAAAWKtf5P9+/rZ0weEV3Khhm396+Xe+trCwsJC9b/hPRj+/sJCumMiy0Q1Zll8XXf3h+2uN2wRPZOO1oYY/D3XZ/XCX60e6XD/a5fqxLtdv6HL9eJfrl5yAJTYWP4/J72x7/p+bi1Oa3Z6N5tdtb3OrJ2obhobiz3Jytfw2C6MnsrnsVDabTTdtX2xby7f/xt31fb0li/saatjX1voK+enjx+Mx1MI53t60r8X7jH78umziZz99/PhfXXjuznaz62lour/iOHdsqx/nJ8MlxbHWsg3pnMTjHGo4zq1tnpPhpuOs5ber/3frcT6/wuMcXjzMddX6nI9nQ/l/fzc/TyONP9ZL52lruOx/7smy7PLiYbdus2Rf2VC2qemSocXnZ7xYkfX7qC+lF2cjq1qnd69gndbnzPbmddr6mojP/93hdiPLHEPj0/TjT4w1PO8/X7iWdRrVH/Vyr5XWNdjr10q/rMG4Lr6bP+gn267B7eHxP37v8muw7dppswbT425Yg9u6rcGhseH8mNOTUMtvs7gGdzVtP5zvqZbPZ+/tvAanLpw+NzX/sY/fP3f62MnZk7Nn9uzaNb1n374DBw5MnZg7NTtd/Psaz3b/25QNpdfAtnDu4mvgVS3bNi7VhS+NLXn/vdbX4XiH1+Hmlm17/TocaX1wtfV5QS5d08Vr4z31kz5+ZShb5jWWPz871/46TI+74XU40vA6bPs1pc3rcGQFr8P6Nud2rux7lpGGf9odw/JfC9a2Bjc3rMHW70da12Cvvx/plzU4HtbF93cu/7VgazjeJydX+/3I8JI1mB5ueO+pX5K+3x8/kI926/Ku+hU3jWUX52fPP/DYsQsXzu/KwlgXL2lYK63rdVPDY8qWrNehVa/Xw3Mvf/KuNpdvDudq/P76v8aXfa7q2+x9oPNzlX91a38+my7dnYXRY+t9Ptt9Na+fz7Es+8K3P/HINx//wuuXPZ/1vPnJqbV/L55yacP77+gy778x979Q7C/d1RPDoyPF63c4nZ3Rpvfj5qdqJH/vquX7fn5qZe/Ho+Gf9X4/vr3D+/GWlm17/X482vrg4vtxrdtPO9am9fkcD+vk1HTn9+P6Nlt2r3ZNjnR8P74nzFo4/68OSSHlooa1s9y6TfsaGRkNj2sk7qF5ne5p2n40ZLP6vp7efW3rdMc9xX0Np0e3aL3W6UTLtr1ep+lnX8ut01q3n75dm9bnczysi9v3dF6n9W2e2bv2986N8T8b3jvHuq3B0eGx+jGPpkWYv99nCxvjGnwgO56dzU5lM/m1Y/l6quX7mnxwZWtwLPyz3u+VWzqswR0t2/Z6DaavY8utvdrI0gffA63P53hYF0892HkN1rd5w/7efu+6I1yStmn43rX152vL/czrrpbTdL3Wykg4zm/v7/yz2fo2pw6sNmd2Pk/3hUtuanOeWl+/y72mZrL1OU9bwnE+d2D581Q/nvo2nz+4wvV0OMuySx95KP95b/j7lb+9+L2vNf29S7u/07n0kYd+csuJf1zN8QMw+F4oxqbia13D30yt5O//AQAAgIEQc/9QmIn8DwAAAKURc3/8v8IT+R8AAABKI+b+kTCTiuT/LW94bu6FS1lq5i8E8fp0Gh4utosd1+nw54mFRfXLH/rK7H//w6WV7Xsoy7KfP/wHbbff8nA8rsJEOM6rb2y+fImv3b+ifR999FLab2N//Yvh/uPjWekyaFfBnc6y7Bu3fTbfz8T7r+TzmYeP5vORy08+Ud/m+YPFn+Ptn31Jsf2fh/Lv4RPHmm7/bDgPPwpz+q3tz0e83VevvHrr/vcu7i/errbt1vxhP/WB4n7j78n53BPF9vE8L3f83/zM01+tb//YK9sf/6Wh9sf/dLjfr4T5vy8rtm98Dup/jrf7VDj+uL94uwe+/K22x3/108X2595UbHc0zLj/HeHP29/03Fzj+XqsdqzpcWVvLraL+5/+3h/l18f7i/ffevzjR640nY/W9fHMvxX3M9Wyfbw87if6+5b91++ncX3G/T/9h0ebznO3/V995NmX1e+3df/3tWx37iM78/0v3l/zb2z6i099tu3+4vEc/ptzTY/n8LvC6zjs/6kPhPUYrv+/q8X9tf52haPvan7/idt/cfOlpscTveVnxf6vvvZkPjeMb9x008233Hr5FfVzl2Xf3VDcX7f9n/zLs03H/6U7ivMRr48d/db9Lyfu//xHJ8+cnb84N5PO6uO35b87523F8cTjvS28t7b++cjZCx+cPT8xPTGdZRPl/RV61+zLYf6kGJc7b72w5B1056Ph+bzrz76x6d5//Uy8/N/fU1x+5a3F161Xhe0+Fy7fHJ6/1e1/qafuviN/fdeeCUe4sPT3Ba/F1u3/dWBFG4bH3/p9QVzv5176wfw81K/Lv27E1/Uaj/8HM8X9fD2c14Xwm5m33bG4v8bt4+9GuPLu4vW+5vMX3ubi8/rX4fl++4+K+4/HFR/vD8L3Md/a0vx+F9fH1y8Ntd5//ls8Lof3k+xycX3cKp7vK8/f0fbw4u8hyS7fmf/5j9P93Lmqh7mc+Y/NT52aO3PxsakLs/MXpuY/9vEjp89ePHPhSP67PI98qNvtF9+fNuXvTzOz+/Zm+bvV2WJcZzf6+M89enxm//S9M7Mnjl08ceHRc7PnTx6fnz8+OzN/77ETJ2Y/2u32czOHdu0+uGf/7smTczOHDhw8uOfg5NyZs/XDKA6qi33TH548c/5IfpP5Q3sP7nrwwb3Tk6fPzswe2j89PXmx2+3zr02T9Vv//uT52VPHLsydnp2cn/v47KFdB/ft2931twGePndifmLq/MUzUxfnZ89PFY9l4kJ+cf1rX7fbU07z/1F8P9uqVvwivuyd9+1Lv5+17iufWPauik1afoHoc+F30fzzi84dWMmfY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f0OYifwPAAAApRFz/3iYSUXyf+n6/1surWj/+v/6/43nS/+/Yv3/d/db/794v9D/74219u/1/wP9f/1//X/9f/1/eqDf+v8x92/MskrmfwAAAKiCmPs3hZnI/wAAAFAaMfffFGYi/wMAAEBpxNx/c5hJRfK//v/17v8P6//r/+v/x3Wp/6//vw70/zvT/+9C/38qq1b//3Ivj1//X/+fpfqt/x9z/y1hJhXJ/wAAAFAFMfffGmYi/wMAAEBpxNx/W5iJ/A8AAAClEXP/5jCTiuR//f+++fz/v8v0/3P6/4u30/8v6P/r/6+G/n9n+v9d6P/7/H/9f/1/eqrf+v8x978ozKQi+R8AAACqIOb+F4eZyP8AAADQf0au7WYx978kzGRJ/r/GHQAAAAA3XMz9t2ctRfCK/P2//n/f9P9z+v/6//r/g9j/H870//uH/n9n+v9d6P/r/+v/6//TU/3W/89zfzaevTTMpCL5HwAAAKog5v47wkzkfwAAACiNmPt/KcxE/gcAAIDSiLl/S5hJRfK//r/+v/6//r/+f/v9+/z/waT/35n+fxf6//r/+v/6//RUv/X/Y+6/M8ykIvkfAAAAqiDm/rvCTOR/AAAAKI2Y+385zET+BwAAgNKIuX9rmElF8r/+f5/3/2NzVP9f/1//X/9f/39F9P870//vQv9f/1//X/+fnuq3/n/M/S8LM6lI/gcAAIAqiLn/5WEm8j8AAACURsz9rwgzkf8BAACgNGLunwgzqUj+1//vUf9/+y1LLvP5//r/aX2Eqf+v/6//f/3p/3em/9+F/r/+v/6//j891W/9/5j77w4zqUj+BwAAgCqIuX9bmIn8DwAAAKURc/89YSbyPwAAAJRGzP3bw0wqkv/1//v88//1//X/9f/1//X/V0X/vzP9/y70//X/9f/1/+mpfuv/x9z/yjCTiuR/AAAAqIKY++8NM5H/AQAAoDRi7n9VmIn8DwAAAKURc/+OMJOK5H/9f/1//X/9f/3/9vvX/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/leHmVQk/wMAAEAVxNy/M8xE/gcAAIDSiLn/vjAT+R8AAABKI+b+yTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v77w0wqkv8BAACgCmLufyDMRP4HAACA0oi5fyrMRP4HAACA0oi5fzrMpCL5X/9f/1//X/9/Vf3/Vyzer/5/Qf+/v+j/d6b/34X+v/7/De//j+r/Uyr91v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj794SZyP8AAABQGjH37w0zqUj+1//X/9f/1//3+f/t96//P5j0/zvrff8/PkT9f/1//X+f/6//z1L91v+Puf/BMJOK5H8AAACogpj794WZyP8AAABQGjH37w8zkf8BAACgNGLuPxBmUpH8r/+v/6//r/+v/99+//r/g0n/vzOf/9+F/r/+v/6//j891W/9/5j7D4aZVCT/AwAAQBXE3P+aMBP5HwAAAEoj5v5fCTOR/wEAAKA0Yu7/1TCTiuR//X/9f/1//X/9//b71/8fTAPb/y++DOv/6//r/w/w8ev/6/+zVL/1/2PuPxRmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/NsxE/gcAAIDSiLn/cJhJRfK//r/+v/6//r/+f/v96/8PpoHt/wcV6/+PtV6g/6//P8jHr/+v/89S/db/j7n/dWEmFcn/AAAAUAUx9z8UZiL/AwAAQGnE3P/6MBP5HwAAAEoj5v43hJlUJP/r/+v/6//r/+v/t9+//v9g0v/vrM/6/0tc5/7/UNcD0P/X/9f/1/+np/qt/x9z/xvDTCqS/wEAAKAKYu5/U5iJ/A8AAAClEXP/m8NM5H8AAAAojZj73xJmUpH8r/+v/6//r/+v/99+//r/g0n/v7OK9/+70/8vWf9/4hb9f/1/rpd2CWipa+v/3/zzZXe4xv5/zP2/HmZSkfwPAAAAVRBz/8NhJvI/AAAAlEbM/W8NM5H/AQAAoDRi7n9bmElF8v+a+v9j+v+R/n/z8ev/t18f+v/6//r/15/+f2cD1v//xa3hcv3/gv5/fx9/X/b/f7hc/39hQ+vt9f+5Hq6t/99WT/r/Mfe/PcykIvkfAAAAqiDm/neEmcj/AAAAUBox978zzET+BwAAgNKIuf83wkwqkv99/n/9OBbby/r/+v/5Bfr/+v/6/wOrZ/3/hReaviDq/xd8/r/+fyf6/33Y//f5/9xg/db/j7n/XWEmFcn/AAAAUAUx9z8SZiL/AwAAQGnE3P/uMBP5HwAAAEoj5v73hJlUJP/r//v8f/1//X/9//b71/8fTD7/vzP9/y70//X/+63//5/6/wy2fuv/x9z/aJhJRfI/AAAAVEHM/e8NM5H/AQAAoDRi7v/NMBP5HwAAAEoj5v73hZlUJP/r/w9K/39C/1//X/+/5fHo/+v/t6P/35n+fxf6//r//db/9/n/DLh+6//H3P/+MJOV5//xFW8JAAAA3BAx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/0Hp//v8/0z/X/+/5fHo/+v/t7N+/f/4zqP/r/9/Hfr/G9sfnv5/fx+//r/+P0v1W/8/5v7fDTOpSP4HAACAKoi5/wNhJvI/AAAADIR2/092q5j7j4SZyP8AAABQGjH3Hw0zqUj+1//X/9f/79P+/59u+5fvf+cdR3fp/+v/6/+vyrp+/n/9xe/z//X/ff5/ov+v/6//T6t+6//H3H8szKQi+R8AAACqIOb+3wszkf8BAACgNGLuPx5mIv8DAABAacTcPxNmUpH8r/+v/6//3yf9/1oty0ry+f/xfOj/N+tZ/z++6er/t7Wu/f/3LvbE9f9X2/8fa3up/r/+/yAfv/6//j9L9Vv/P+b+2TCTiuR/AAAAqIKQ+4dOFHPxCvkfAAAASiPm/pNhJvI/AAAAlEbM/R8MM6lI/tf/1//X/++T/n/r5/8PcP/f5/+35/P/14f+f2f90/9vT/9f/3+Qj1//X/+fpfqt/x9z/1yYSUXyPwAAAFRBzP0fCjOR/wEAAKA0Yu7/cJiJ/A8AAAClEXP/qTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v7TYSYVyf8AAABQBTH3nwkzkf/5f/burNnSurrj+O6kId3FC8hFKlXc5xWkuEiqcpe8gFzkJhdJVSoXIQkZnGkUJ1ScZxTnGQdQxAnnCZxQnMV5VhxwxqEtPWut7nN6n2efbvbpfp7/+nxulnbT7iO2DT/gW38AAACGkbv/8rjF/gcAAIBh5O7/z7ilyf7X/+v/h+3//0b/v9/n6//1/yPT/0/T/2+g/9f/6//1/2zV3Pr/3P3/Fbc02f8AAADQQe7+/45b7H8AAAAYRu7+K+IW+x8AAACGkbv/f+KWJvt/T/9/ZNWz/8+MV/8/Uv/v/f99P1//r/8f2fnt/6/6w698+n/9v/4/6P/1//p/9ppb/5+7/3/jlib7HwAAADrI3f9/cYv9DwAAAMPI3f//cYv9DwAAAMPI3X+/uKXJ/vf+v/f/9f/6f/3/+s/X/y+T9/+nder/r7jzkv+45+a/uOVsPl//r//X/+v/2a659f+5++8ft+wefn+3989HAQAAgOXI3f+AuKXJ3/8HAACADnL3PzBusf8BAABgGLn7HxS3NNn/+n/9v/5f/6//X//5+v9l0v9P69T/n8vn6//1//p//T/bNbf+P3f/g+OWJvsfAAAAOsjd/5C4xf4HAACAYeTuvzJusf8BAABgGLn7T8QtTfa//v/w+//f6v/1/3H1//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9V8UtTfY/AAAAdJC7/6Fxi/0PAAAAw8jd/7C4xf4HAACAYeTuvzpuabL/9f/e/9f/6//1/+s/X/+/TPr/aee//1/3R8j96f8X3/9fpP/X/+v/Od1Z9v/3TvyyvZX+P3f/w+OWJvsfAAAAOsjd/4i4xf4HAACAYeTuf2TcYv8DAADAMHL3PypuabL/9f/6f/2//l//v/7z9f/LpP+fNpv3/48cXfvN+v/F9//e/9f/6//ZZW7v/+fuf3Tc0mT/AwAAQAe5+6+JW+x/AAAAGEbu/sfELfY/AAAADCN3/2Pjlib7X/+v/9f/6//1/+s/f6r/v+W0r0//Py8b+/sNv7Dr/8Nh9//70P/r/5f89ev/9f+caW79f+7+x8UtTfY/AAAAdJC7/9q4xf4HAACAYeTuf3zcYv8DAADAMHL3PyFuabL/1/f/p75f/38w+v/dX7/+f/3Pj231//mfqP+f7P//1vv/PXn/f5r+fwP9v/5f/79f/39804/X/7PO3Pr/3P1PjFua7H8AAADoIHf/k+IW+x8AAACGkbv/yXGL/Q8AAADDyN3/lLilyf73/r/+X/+/vP7f+/87LuT7/6vz3v8f1f8fkP5/mv5/A/2//l//7/1/tmpu/X/u/qfGLU32PwAAAHSQu/9pcYv9DwAAAMtw+j87sPcfKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f8fW0j/7/3/g9L/T9P/b3Bh+/8jg/b/Rwfr/6/f78fPof+/Uv/PzOzq/2899e0Xqv/P3f/MuKXJ/gcAAIAOcvc/K26x/wEAAGAYufufHbfY/wAAADCM3P3XxS1N9v+h9//H9/9s/f996v8v1v/r//X/nd7/1/8flP5/mv5/A+//e//f+//6f7ZqV/9/mgvV/+fuf07c0mT/AwAAQAe5+58bt9j/AAAAMIzc/dfHLfY/AAAADCN3//Pilib7f0v9/3XXXP3X3v/fw/v/+v+9Pz/0//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9z49bmux/AAAA6CB3/wviFvsfAAAAhpG7/4Vxi/0PAAAAw8jd/6K4pcn+P/T3/yd06P/z2/X/+v+V/l//r/8/L9r2/0fW/ZHoTPv0/7f/24l/2P0t+n/9v/5f/6//Zwtm0f+fPPVnl7n7Xxy3NNn/AAAA0EHu/pfELfY/AAAADCN3/0vjFvsfAAAAhpG7/2VxyyD7/9iG79f/e/9f/6//1/+v/3z9/zK17f8PyPv/G+j/9f/6f/0/WzWL/v+0f5+7/+VxyyD7HwAAAFjV7n9F3GL/AwAAwDBy978ybrH/AQAAYBi5+18VtzTZ//p//b/+X/+v/1//+fr/ZdL/T9P/b6D/1//r//X/bNXc+v/c/TfELU32PwAAAHSQu//VcYv9DwAAAMPI3f+auMX+BwAAgGHk7n9t3NJk/+v/9f/6f/2//n/95+v/l0n/P03/v1qtbpz4Atb1/yf/TP+v/9f/6/85R3Pr/3P3vy5uabL/AQAAoIPc/TfGLfY/AAAADCN3/01xi/0PAAAAw8jd//q4pcn+1//r//X/+n/9//rP1/8vk/5/mv5/A+//6//1//p/tmpu/X/u/jfELU32PwAAAHSQu//muMX+BwAAgGHk7n9j3GL/AwAAwDBy998StzTZ//p//b/+X/+v/1//+fr/ZTq8/n+l/9f/6/830P/r//X/7DW3/j93/5vilib7HwAAADrI3f/muMX+BwAAgGHk7n9L3GL/AwAAwDBy9781bmmy//X/1dz95Ur/r//X/+/67fT/+v8l8v7/NP3/Bvp//b/+X//PVs2t/8/d/7a4pcn+BwAAgA5y998at9j/AAAAMIzc/W+PW+x/AAAAGEbu/nfELU32v/7f+/+7+//VSv+v/9f/7zgP/f+xlf5/6/T/0/T/G+j/D9LPnzx5cv2fbM22//+T1UD9//F9f7z+nzmaW/+fu/+dcUuT/Q8AAAAd5O5/V9xi/wMAAMAwcve/O26x/wEAAGAYufvfE7c02f/6f/2/9//1//r/9Z/v/f9l0v9P0/9voP/3/v/s+//96f+Zo7n1/7n73xu3NNn/AAAA0EHu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wM799RfAGiy//X/+n/9v/5/b/9/YqX/X+n/F0v/P03/v4H+X/+v/9f/s1Vz6/9j968+GLc02f8AAADQQe7+2+IW+x8AAACGkbv/9rjF/gcAAIBh5O7/UNzSZP/r//X/+v9l9v/HvP+v/9f/rzWX/v+yy/7+Dv2//l//r//X/+v/u5tb/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDBy9380brH/AQAAYBi5+z8WtzTZ/2f2/xetdgrVHev6/2jU9P+n0f/v/vr1/+t/fizl/X/9/w79/zLNpf/3/v+5ff36f/3/kr/+s+r/Lz3zxx9m//+7A/x/Qf/PYZhb/5+7/464pcn+BwAAgA5y9388brH/AQAAYBi5+z8Rt9j/AAAAMIzc/XfGLU32v/f/9f/6f/3/dvr/E/U/o/5/Pf3/+aH/n6b/30D/r//3/v/l//Kn+n+2Z279f+7+T8YtTfY/AAAAdJC7/1Nxi/0PAAAAw8jd/+m4xf4HAACAYeTu/0zc0mT/6//1//p//b/3/9d/vv5/mfT/0/T/G+j/9f/6f+//s1Vz6/9z9382bmmy/wEAAKCD3P2fi1vsfwAAABhG7v7Pxy32PwAAAAwjd/8X4pYm+3/7/f+l+v+g/59L///P+v89n6//1/+PbCb9f/60uiD9/0UT36f/30D/r//X/+v/2aq59f+5+++KW5rsfwAAAOggd/8X4xb7HwAAAIaRu/9LcYv9DwAAAMPI3f/luKXJ/vf+f6/+/8iqY//v/X/9v/6/k5n0/97/1//r//X/+n/9PzPs/3P3fyVuabL/AQAAYKn+8a/+/a6D/ra5+78at9j/AAAAMIzc/V+LW+x/AAAAGEbu/q/HLU32v/6/V//f8/1//b/+X//fif5/mv5/A/2//l//r/9nq+bW/+fu/0bcctrwO3rW/y0BAACAOcnd/824pcnf/wcAAIAOcvd/K245Y/+fPOA/1Q4AAADMTe7+b8ctTf7+v/5/5v3/avz+/+6V/l//v0P/r//fBv3/tPvY/588ov/X/0/Q/+v/9f/sNbf+P3f/d+KWJvsfAAAABrXrryjk7v9u3GL/AwAAwDBy938vbrH/AQAAYBi5+78ftzTZ//r/mff/5/T+//H6V0vo/73/f4j9/7XH1n6+/l//PzL9/zTv/2+g/19w/5+/Kuv/9f/Mydz6/9z9d8ctTfY/AAAAdJC7/wdxi/0PAAAAw8jd/8O4xf4HAACAYeTu/1Hc0mT/6/8vWP//x9/hh9P/L+v9f/2/9//Pvf//80tO3PZP/3rTDfp/Tjmf/X/+XND/6//1/zu8/6//1/+z19z6/9z9P45bmux/AAAA6CB3/z1xi/0PAAAAw8jd/5O4xf4HAACAYeTu/2nc0mT/6/9HfP9/mf1//r6+AP3/ieX1/9kUd+//vf+v/z+T9/+n6f830P/r//X/+n+2am79f+7+n8UtTfY/AAAAdJC7/+dxi/0PAAAAw8jd/4u4xf4HAACAYeTu/2Xc0mT/r+//L67v1/8fjP5/99fv/f/1Pz+8/6//1/8fPv3/NP3/Bvp//b/+X//PVs2t/8/d/6u4pcn+BwAAgA5y998bt9j/AAAAMIzc/b+OW+x/AAAAGEbu/t/ELU32v/f/9f/6f/2//n/95+v/l0n/P03/v4H+X/+v/9f/s1Vz6/9z9/8+AAD//z/ddNg=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m46.060047586s ago: executing program 3 (id=1262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade36e9fe672ce5fbebe5b175c12cf16c48c2d4b61ce76443664e69106113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f396c", 0xfdef}], 0x1) 1m45.041952871s ago: executing program 3 (id=1276): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000280)) 1m44.486039274s ago: executing program 32 (id=1276): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000280)) 3.010804007s ago: executing program 2 (id=3104): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000300)) 2.869428851s ago: executing program 2 (id=3108): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x400, 0x0) 2.678410036s ago: executing program 1 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) 2.674305926s ago: executing program 2 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 2.49113711s ago: executing program 1 (id=3117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000008603300040000002100000041"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001b40)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x800, r0}, 0x38) 1.931846193s ago: executing program 1 (id=3127): open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x100) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.802446017s ago: executing program 1 (id=3131): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 1.65747509s ago: executing program 1 (id=3134): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) write(r0, 0x0, 0x0) 1.489401744s ago: executing program 1 (id=3138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) 1.448143985s ago: executing program 2 (id=3140): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000000)) 1.421518576s ago: executing program 4 (id=3141): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xa, {0x401, 0x1, 0x7b, 0xf7fc}}) 1.319504008s ago: executing program 2 (id=3144): r0 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000001200), &(0x7f0000001240)=@v2={0x99822cebffd62415, 0x1, 0x10, 0x3}, 0x9, 0x2) 1.296226529s ago: executing program 4 (id=3145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000000000000000000060000008500000023000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.180905731s ago: executing program 2 (id=3148): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.157429843s ago: executing program 4 (id=3149): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 1.016908835s ago: executing program 4 (id=3152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 992.147796ms ago: executing program 0 (id=3154): r0 = syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file1\x00', 0x8c6, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@discard}, {@rodir}, {@shortname_lower}]}, 0x1, 0x296, &(0x7f0000000680)="$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") getdents(r0, &(0x7f0000000240)=""/96, 0x60) 966.599267ms ago: executing program 4 (id=3155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0x10c, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{0xf8, 0x1, [@m_skbedit={0x5c, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0xfffffe00, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0xfffffd32, 0x2, {0x28000, 0x0, 0x0, 0x401, 0xffffffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0x35, 0x6, "a2d33bd4606873a15272f89e9058fb4fec8790e24f4313c509179a37e4fa060b823dc29900"/49}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 858.559719ms ago: executing program 5 (id=3156): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x6, 0x200000000000000}) 787.638451ms ago: executing program 5 (id=3157): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 742.088342ms ago: executing program 0 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\n'], 0x30}}, 0x0) 713.040843ms ago: executing program 4 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r0}, 0x38) 541.237177ms ago: executing program 5 (id=3160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 512.028308ms ago: executing program 0 (id=3161): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 330.138742ms ago: executing program 5 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0x0, 0x3f}}]}}}]}, 0x5c}}, 0x24000000) 313.998313ms ago: executing program 0 (id=3163): r0 = socket$inet6(0xa, 0x1, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_sfeatures}) 216.354765ms ago: executing program 5 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 161.878787ms ago: executing program 0 (id=3165): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, 0x0) 46.253149ms ago: executing program 5 (id=3166): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000100)="a7e0a96c5a5315c81f0d5113cf8a289e4adb6f4379041849cf14bf6ad2769b1cf90d056c5a126760c8b26553a3412cd7fbfa26dbfb0000000000000002688070d97f50f7d9b54d78fd1e06579847a85a5709e0f2211a57f6682a0000000000007b510db0c6f5070000007f462f75a52b6d11eb3ef68724a9a6abe2a2372a360060ac04000000000000002b19b1cb2336639c7f7e0000faeb18243a51eb1a3a62393919180d74d155162685b7d874391e9bdc7f12ec157fdb0bf6abc36e5607499c2107000000000000009c1e0c2f228a0a30e649810eaefcc14010c32302750616f99b31335d", 0xe6) 0s ago: executing program 0 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) kernel console output (not intermixed with test programs): bond_slave_1): Enslaving as an active interface with an up link [ 140.218838][ T7223] team0: Port device team_slave_0 added [ 140.262466][ T7337] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1334'. [ 140.270999][ T7335] loop2: detected capacity change from 0 to 64 [ 140.409692][ T7223] team0: Port device team_slave_1 added [ 140.522009][ T4298] device hsr_slave_0 left promiscuous mode [ 140.547181][ T4298] device hsr_slave_1 left promiscuous mode [ 140.565907][ T4298] device bridge_slave_1 left promiscuous mode [ 140.574518][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.623962][ T4298] device bridge_slave_0 left promiscuous mode [ 140.648793][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.729866][ T4298] device veth1_macvtap left promiscuous mode [ 140.743237][ T4298] device veth0_macvtap left promiscuous mode [ 140.769652][ T4298] device veth1_vlan left promiscuous mode [ 141.053894][ T4298] bond2 (unregistering): Released all slaves [ 141.103019][ T4298] bond1 (unregistering): Released all slaves [ 141.218886][ T7374] trusted_key: encrypted_key: master key parameter '' is invalid [ 141.303723][ T7355] loop0: detected capacity change from 0 to 32768 [ 141.326663][ T7355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1340 (7355) [ 141.396177][ T7355] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.414787][ T7355] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 141.444610][ T7355] BTRFS info (device loop0): using free space tree [ 141.532360][ T7383] loop2: detected capacity change from 0 to 16 [ 141.543350][ T7383] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.772606][ T7398] loop2: detected capacity change from 0 to 256 [ 141.789070][ T7355] BTRFS info (device loop0): enabling ssd optimizations [ 141.878706][ T7398] FAT-fs (loop2): Directory bread(block 64) failed [ 141.899007][ T7398] FAT-fs (loop2): Directory bread(block 65) failed [ 141.919422][ T7398] FAT-fs (loop2): Directory bread(block 66) failed [ 141.935773][ T4271] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.942553][ T7398] FAT-fs (loop2): Directory bread(block 67) failed [ 141.973123][ T7398] FAT-fs (loop2): Directory bread(block 68) failed [ 141.985134][ T7398] FAT-fs (loop2): Directory bread(block 69) failed [ 141.991805][ T7398] FAT-fs (loop2): Directory bread(block 70) failed [ 142.006102][ T7398] FAT-fs (loop2): Directory bread(block 71) failed [ 142.015602][ T7398] FAT-fs (loop2): Directory bread(block 72) failed [ 142.022175][ T7398] FAT-fs (loop2): Directory bread(block 73) failed [ 142.164407][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 142.424345][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.516634][ T4298] team0 (unregistering): Port device team_slave_1 removed [ 142.561587][ T4298] team0 (unregistering): Port device team_slave_0 removed [ 142.601136][ T4298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.639147][ T4298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.639199][ T7] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 142.658447][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.667632][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 103, changing to 7 [ 142.679332][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 24944, setting to 1024 [ 142.694132][ T7] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 142.705938][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.714191][ T7] usb 3-1: Product: syz [ 142.719047][ T7] usb 3-1: Manufacturer: syz [ 142.723842][ T7] usb 3-1: SerialNumber: syz [ 142.944773][ T7] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.957214][ T7] usb 3-1: 0:2 : does not exist [ 142.966548][ T4298] bond0 (unregistering): Released all slaves [ 142.990330][ T7] usb 3-1: USB disconnect, device number 8 [ 143.197222][ T7371] device macsec0 entered promiscuous mode [ 143.213638][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.234949][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.254504][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.324415][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.385772][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.394107][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.421272][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.514991][ T4326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.570515][ T7223] device hsr_slave_0 entered promiscuous mode [ 143.628917][ T7223] device hsr_slave_1 entered promiscuous mode [ 143.698120][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.732488][ T7223] Cannot create hsr debugfs directory [ 144.234317][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 144.434687][ T7223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.468515][ T7223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.517793][ T7223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.551703][ T7223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.588222][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 144.628877][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1370'. [ 144.689016][ T7431] loop0: detected capacity change from 0 to 32768 [ 144.890055][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.967722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.000135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.017406][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.059149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.085314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.125142][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.133487][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.148080][ T7470] loop0: detected capacity change from 0 to 4096 [ 145.174824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.212260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.233093][ T7475] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.242974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.283069][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.290273][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.299395][ T7470] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 145.341726][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.355591][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.412810][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.448930][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.482823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.536349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.557783][ T7485] overlayfs: missing 'lowerdir' [ 145.586698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.624947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.668373][ T7223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.685213][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.724703][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.742394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.766397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.314550][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 146.346465][ T7409] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.360778][ T7480] loop1: detected capacity change from 0 to 32768 [ 146.403358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.429116][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.448322][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.549345][ T7480] XFS (loop1): Mounting V5 Filesystem [ 146.576849][ T7409] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.617929][ T7409] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.642685][ T7480] XFS (loop1): Ending clean mount [ 146.690439][ T7409] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.754376][ T7409] usb 1-1: config 1 interface 1 has no altsetting 0 [ 146.784647][ T7409] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.793734][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.853602][ T7409] usb 1-1: Product: syz [ 146.874451][ T7409] usb 1-1: Manufacturer: syz [ 146.879519][ T7409] usb 1-1: SerialNumber: syz [ 146.917474][ T7409] cdc_ncm 1-1:1.0: skipping garbage [ 146.922742][ T7409] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 146.974286][ T7409] cdc_ncm 1-1:1.0: bind() failure [ 147.159877][ T4270] XFS (loop1): Unmounting Filesystem [ 147.379671][ T7407] usb 1-1: USB disconnect, device number 8 [ 147.389975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.421925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.459789][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.482449][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.541612][ T7223] device veth0_vlan entered promiscuous mode [ 147.550763][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.565596][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.588815][ T7223] device veth1_vlan entered promiscuous mode [ 147.652364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.666989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.686192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.700785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.713750][ T7223] device veth0_macvtap entered promiscuous mode [ 147.732247][ T7223] device veth1_macvtap entered promiscuous mode [ 147.747782][ T7548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.770300][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.786167][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.814190][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.836852][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.866715][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.881007][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.896358][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.917251][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.939882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.972137][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.008451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.046820][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.062100][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.072905][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.088092][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.104613][ T27] audit: type=1326 audit(2000000026.559:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.105104][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.174471][ T27] audit: type=1326 audit(2000000026.559:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.201465][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.206768][ T27] audit: type=1326 audit(2000000026.619:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.260287][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.271690][ T27] audit: type=1326 audit(2000000026.619:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.301676][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.322170][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.376709][ T7223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.384462][ T27] audit: type=1326 audit(2000000026.619:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.394167][ T7223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472473][ T27] audit: type=1326 audit(2000000026.699:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f139c95ea0e code=0x7ffc0000 [ 148.481882][ T7223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.524581][ T27] audit: type=1326 audit(2000000026.699:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.544275][ T7223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.625212][ T27] audit: type=1326 audit(2000000026.699:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.658309][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.704330][ T27] audit: type=1326 audit(2000000026.699:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.818589][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.824517][ T27] audit: type=1326 audit(2000000026.699:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.1399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 148.865346][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.896922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.932389][ T7593] loop2: detected capacity change from 0 to 512 [ 148.947440][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.964280][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.972037][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.005819][ T7593] EXT4-fs: Ignoring removed orlov option [ 149.036903][ T7593] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.142442][ T7593] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1412: Allocating blocks 41-42 which overlap fs metadata [ 149.221789][ T7593] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1412: Allocating blocks 41-42 which overlap fs metadata [ 149.264808][ T7593] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1412: Failed to acquire dquot type 1 [ 149.284951][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.300618][ T7593] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 149.357948][ T7593] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1412: corrupted inode contents [ 149.420338][ T7593] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.1412: mark_inode_dirty error [ 149.452560][ T7593] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1412: corrupted inode contents [ 149.473587][ T7617] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 149.488059][ T7593] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.1412: mark_inode_dirty error [ 149.516108][ T7593] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1412: corrupted inode contents [ 149.564343][ T7593] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 149.583558][ T7593] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1412: corrupted inode contents [ 149.616345][ T7593] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.1412: mark_inode_dirty error [ 149.649076][ T7593] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 149.688868][ T7593] EXT4-fs (loop2): 1 truncate cleaned up [ 149.712680][ T7593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.826336][ T7593] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.1412: Allocating blocks 41-42 which overlap fs metadata [ 149.884667][ T7593] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1412: Failed to acquire dquot type 1 [ 150.036431][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 150.052877][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1426'. [ 150.308561][ T7615] loop5: detected capacity change from 0 to 32768 [ 150.361128][ T7615] (syz.5.1419,7615,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.429026][ T7615] (syz.5.1419,7615,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.495111][ T7615] (syz.5.1419,7615,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 150.599034][ T7615] JBD2: Ignoring recovery information on journal [ 150.786043][ T7615] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 151.147046][ T7223] ocfs2: Unmounting device (7,5) on (node local) [ 151.710578][ T7692] loop4: detected capacity change from 0 to 256 [ 151.760160][ T7692] exfat: Deprecated parameter 'namecase' [ 151.814897][ T7692] exfat: Deprecated parameter 'utf8' [ 151.835223][ T7692] exfat: Deprecated parameter 'namecase' [ 151.855037][ T7692] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 151.885675][ T7699] comedi comedi2: das16m1: a I/O base address must be specified [ 151.912856][ T7692] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 152.841744][ T7739] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1467'. [ 153.203691][ T7720] loop1: detected capacity change from 0 to 32768 [ 153.428512][ T7759] qrtr: Invalid version 0 [ 153.514690][ T7764] loop5: detected capacity change from 0 to 164 [ 153.588343][ T7732] loop4: detected capacity change from 0 to 32768 [ 153.745312][ T7732] XFS (loop4): Mounting V5 Filesystem [ 153.829755][ T7732] XFS (loop4): Ending clean mount [ 153.979094][ T4280] XFS (loop4): Unmounting Filesystem [ 154.314700][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.395167][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.754312][ T5520] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 154.869903][ T7831] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1499'. [ 154.902734][ T7831] netlink: 'syz.0.1499': attribute type 3 has an invalid length. [ 154.966774][ T5520] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 154.994365][ T5520] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.018038][ T5520] usb 2-1: config 0 has no interface number 0 [ 155.029963][ T5520] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 155.060711][ T5520] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.105020][ T5520] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 155.128482][ T7842] loop0: detected capacity change from 0 to 1024 [ 155.145237][ T5520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.153308][ T5520] usb 2-1: Product: syz [ 155.189260][ T5520] usb 2-1: Manufacturer: syz [ 155.193908][ T5520] usb 2-1: SerialNumber: syz [ 155.201952][ T5520] usb 2-1: config 0 descriptor?? [ 155.209776][ T7807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.218802][ T7807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.251023][ T7842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.252739][ T5520] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 155.342006][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 155.342019][ T27] audit: type=1326 audit(2000000033.789:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.453938][ T27] audit: type=1326 audit(2000000033.809:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.497296][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 155.511824][ T5523] usb 2-1: USB disconnect, device number 11 [ 155.549120][ T27] audit: type=1326 audit(2000000033.829:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.638744][ T27] audit: type=1326 audit(2000000033.829:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.729618][ T27] audit: type=1326 audit(2000000033.849:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.799519][ T27] audit: type=1326 audit(2000000033.899:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.868660][ T27] audit: type=1326 audit(2000000033.899:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 155.907728][ T7872] CIFS: VFS: bad security option: kr!qÌ [ 155.933830][ T27] audit: type=1326 audit(2000000033.899:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cb6d5ea0e code=0x7ffc0000 [ 155.978788][ T27] audit: type=1326 audit(2000000033.899:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cb6d5ea0e code=0x7ffc0000 [ 156.010359][ T27] audit: type=1326 audit(2000000033.899:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.5.1507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7cb6d5ea0e code=0x7ffc0000 [ 156.419742][ T7895] CIFS mount error: No usable UNC path provided in device string! [ 156.419742][ T7895] [ 156.451850][ T7895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.638183][ T7906] comedi: No check for data length of config insn id 4 is implemented [ 156.682833][ T7906] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 156.710710][ T7906] comedi: Assuming n=15 is correct [ 156.923201][ T7924] loop5: detected capacity change from 0 to 64 [ 157.207637][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'. [ 157.757666][ T7969] dlm: no locking on control device [ 157.779383][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 157.864368][ T5520] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 158.000108][ T7980] capability: warning: `syz.1.1560' uses 32-bit capabilities (legacy support in use) [ 158.066702][ T5520] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 158.081235][ T5520] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 158.104321][ T5523] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.111931][ T5520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 158.134417][ T5520] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 158.147542][ T5520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 158.168180][ T5520] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 158.202219][ T5520] usb 1-1: string descriptor 0 read error: -22 [ 158.218550][ T5520] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 158.251975][ T5520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.282491][ T5520] usb 1-1: config 0 descriptor?? [ 158.300058][ T7961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.318233][ T5520] hub 1-1:0.0: bad descriptor, ignoring hub [ 158.325159][ T5523] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 158.344294][ T5520] hub: probe of 1-1:0.0 failed with error -5 [ 158.350905][ T5523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.376212][ T5520] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 158.392029][ T5523] usb 3-1: Product: syz [ 158.396435][ T5523] usb 3-1: Manufacturer: syz [ 158.401243][ T5523] usb 3-1: SerialNumber: syz [ 158.432943][ T7994] loop5: detected capacity change from 0 to 512 [ 158.438742][ T5523] ums-jumpshot 3-1:1.0: USB Mass Storage device detected [ 158.456471][ T7994] EXT4-fs: Ignoring removed orlov option [ 158.480413][ T7994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.512539][ T5523] ums-jumpshot 3-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 158.546807][ T7408] usb 1-1: USB disconnect, device number 9 [ 158.606859][ T7994] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.1567: Allocating blocks 41-42 which overlap fs metadata [ 158.659596][ T7994] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1567: Failed to acquire dquot type 1 [ 158.707942][ T8011] xt_hashlimit: size too large, truncated to 1048576 [ 158.708202][ T7407] usb 3-1: USB disconnect, device number 9 [ 158.727542][ T7994] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 158.765589][ T7994] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1567: corrupted inode contents [ 158.795829][ T7994] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #12: comm syz.5.1567: mark_inode_dirty error [ 158.818735][ T7994] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1567: corrupted inode contents [ 158.844323][ T8013] loop1: detected capacity change from 0 to 1024 [ 158.851105][ T7994] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.1567: mark_inode_dirty error [ 158.891506][ T7994] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1567: corrupted inode contents [ 158.926525][ T7994] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 158.970351][ T7994] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1567: corrupted inode contents [ 159.004850][ T7994] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.1567: mark_inode_dirty error [ 159.041096][ T7994] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 159.063595][ T7994] EXT4-fs (loop5): 1 truncate cleaned up [ 159.088368][ T7994] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.125920][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 159.191118][ T8018] loop0: detected capacity change from 0 to 64 [ 159.288603][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 159.308242][ T47] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 159.482172][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 159.987421][ T8044] ieee802154 phy0 wpan0: encryption failed: -90 [ 160.155498][ T5500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.168826][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.332668][ T8057] netlink: 'syz.5.1594': attribute type 49 has an invalid length. [ 160.830576][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 161.013778][ T8089] loop1: detected capacity change from 0 to 1024 [ 161.040651][ T5520] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.248641][ T5520] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 161.270831][ T5520] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.297196][ T5520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.311303][ T8093] hsr0: mtu greater than device maximum [ 161.317925][ T5520] usb 6-1: Product: syz [ 161.323085][ T5520] usb 6-1: Manufacturer: syz [ 161.334320][ T5520] usb 6-1: SerialNumber: syz [ 161.386946][ T5520] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.597005][ C0] usb 6-1: ath: unknown panic pattern! [ 161.822229][ T5513] usb 6-1: USB disconnect, device number 2 [ 161.870706][ T8105] loop0: detected capacity change from 0 to 1024 [ 161.935567][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 162.120900][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1619'. [ 162.126830][ T8112] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1620'. [ 162.208956][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1621'. [ 162.474482][ T5520] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 162.481761][ T5520] ath9k_htc: Failed to initialize the device [ 162.514174][ T5513] usb 6-1: ath9k_htc: USB layer deinitialized [ 162.516154][ T8133] loop1: detected capacity change from 0 to 512 [ 162.612350][ T8133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.626001][ T8133] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.630965][ T8140] loop4: detected capacity change from 0 to 256 [ 162.734023][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 162.842704][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.886205][ T8140] FAT-fs (loop4): Filesystem has been set read-only [ 162.892993][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.953858][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.976351][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030343][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030411][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030438][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030491][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030513][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.030538][ T8140] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 163.033481][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 163.033494][ T27] audit: type=1800 audit(2000000041.479:153): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1627" name="file1" dev="loop4" ino=1048672 res=0 errno=0 [ 163.065858][ T8140] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 163.679766][ T8188] xt_cgroup: path and classid specified [ 164.084315][ T5513] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.109130][ T8210] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1660'. [ 164.167936][ T8182] loop1: detected capacity change from 0 to 32768 [ 164.247491][ T8182] XFS (loop1): Mounting V5 Filesystem [ 164.287587][ T5513] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.297008][ T5513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.305306][ T5513] usb 1-1: Product: syz [ 164.309788][ T5513] usb 1-1: Manufacturer: syz [ 164.315071][ T5513] usb 1-1: SerialNumber: syz [ 164.337350][ T5513] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.403156][ T8182] XFS (loop1): Ending clean mount [ 164.460850][ T8230] xt_TCPMSS: Only works on TCP SYN packets [ 164.546128][ T4270] XFS (loop1): Unmounting Filesystem [ 164.798351][ T5520] usb 1-1: USB disconnect, device number 10 [ 164.853656][ T8240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.900724][ T8247] loop5: detected capacity change from 0 to 64 [ 165.274764][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.287209][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.354804][ T5513] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 165.364086][ T5513] ath9k_htc: Failed to initialize the device [ 165.387839][ T5520] usb 1-1: ath9k_htc: USB layer deinitialized [ 166.230257][ T27] audit: type=1400 audit(2000000044.679:154): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8307 comm="syz.1.1703" [ 166.345190][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.386486][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.415696][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.445065][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.478537][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.515460][ T8315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.931398][ T8350] loop1: detected capacity change from 0 to 128 [ 167.004890][ T8350] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 167.050975][ T8350] FAT-fs (loop1): Filesystem has been set read-only [ 167.087570][ T8354] loop2: detected capacity change from 0 to 2048 [ 167.125836][ T8354] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 167.184565][ T8354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.824452][ T5520] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.016708][ T5520] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.035978][ T5520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.070717][ T5520] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.110911][ T5520] usb 2-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 168.128559][ T8409] VFS: could not find a valid V7 on nullb0. [ 168.159071][ T5520] usb 2-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.198804][ T5520] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 168.230975][ T5520] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 168.265358][ T5520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.302252][ T5520] usb 2-1: Product: syz [ 168.331369][ T5520] usb 2-1: Manufacturer: syz [ 168.341486][ T5520] usb 2-1: SerialNumber: syz [ 168.581543][ T5520] usb 2-1: 1:2 : no or invalid class specific endpoint descriptor [ 168.606302][ T5520] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 168.627243][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.643926][ T5520] usb 2-1: unit 2 not found! [ 168.659484][ T5520] usb 2-1: unit 8 not found! [ 168.666768][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.704776][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.739001][ T5520] usb 2-1: USB disconnect, device number 12 [ 168.752762][ T8442] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 168.948287][ T27] audit: type=1326 audit(2000000047.399:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.005087][ T27] audit: type=1326 audit(2000000047.439:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.044442][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.133035][ T27] audit: type=1326 audit(2000000047.439:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.214769][ T27] audit: type=1326 audit(2000000047.439:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.244458][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 169.251336][ T22] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 169.288698][ T27] audit: type=1326 audit(2000000047.439:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.289696][ T8463] device bridge3 entered promiscuous mode [ 169.323700][ T22] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 169.343458][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.351489][ T27] audit: type=1326 audit(2000000047.439:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.364269][ T22] usb 6-1: Product: syz [ 169.383764][ T27] audit: type=1326 audit(2000000047.439:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f139c99e1d9 code=0x7ffc0000 [ 169.419888][ T22] usb 6-1: Manufacturer: syz [ 169.429915][ T22] usb 6-1: SerialNumber: syz [ 169.451944][ T22] r8152-cfgselector 6-1: config 0 descriptor?? [ 169.636426][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1771'. [ 169.821578][ T8487] loop0: detected capacity change from 0 to 256 [ 169.822697][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 169.882968][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 169.902777][ T22] r8152-cfgselector 6-1: Unknown version 0x0000 [ 169.933503][ T22] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 169.962930][ T8487] FAT-fs (loop0): Filesystem has been set read-only [ 169.993117][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.014424][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.064535][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.099730][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.133500][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.161823][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.186875][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.214647][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.243997][ T8487] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.284867][ T27] audit: type=1800 audit(2000000048.729:162): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1774" name="file1" dev="loop0" ino=1048674 res=0 errno=0 [ 170.311775][ T8487] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 170.713577][ T8530] loop0: detected capacity change from 0 to 256 [ 170.744307][ T22] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 170.899548][ T8537] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 170.924958][ T8537] netlink: 'syz.4.1793': attribute type 8 has an invalid length. [ 170.936233][ T22] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 170.954499][ T22] usb 2-1: config 0 has no interface number 0 [ 170.978809][ T22] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 171.006155][ T8537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1793'. [ 171.022123][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.031942][ T22] usb 2-1: Product: syz [ 171.045031][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.056434][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.078929][ T22] usb 2-1: Manufacturer: syz [ 171.083573][ T22] usb 2-1: SerialNumber: syz [ 171.105625][ T8545] program syz.0.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.112654][ T22] usb 2-1: config 0 descriptor?? [ 171.222689][ T8550] xt_TCPMSS: Only works on TCP SYN packets [ 171.339197][ T22] asix: probe of 2-1:0.251 failed with error -71 [ 171.390865][ T22] usb 2-1: USB disconnect, device number 13 [ 172.091284][ T8596] vivid-002: disconnect [ 172.129560][ T8594] vivid-002: reconnect [ 172.458131][ T8616] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.595723][ T8624] loop4: detected capacity change from 0 to 512 [ 172.627625][ T8624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.755884][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'. [ 172.781590][ T8624] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=7 [ 172.790715][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'. [ 172.791801][ T8624] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 172.816619][ T8624] EXT4-fs (loop4): mount failed [ 172.829111][ T8632] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 172.911478][ T8632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.363609][ T8668] loop2: detected capacity change from 0 to 256 [ 173.453707][ T8668] FAT-fs (loop2): Directory bread(block 64) failed [ 173.485508][ T8668] FAT-fs (loop2): Directory bread(block 65) failed [ 173.492155][ T8668] FAT-fs (loop2): Directory bread(block 66) failed [ 173.534911][ T8668] FAT-fs (loop2): Directory bread(block 67) failed [ 173.541558][ T8668] FAT-fs (loop2): Directory bread(block 68) failed [ 173.564865][ T8668] FAT-fs (loop2): Directory bread(block 69) failed [ 173.571522][ T8668] FAT-fs (loop2): Directory bread(block 70) failed [ 173.614325][ T8668] FAT-fs (loop2): Directory bread(block 71) failed [ 173.621033][ T8668] FAT-fs (loop2): Directory bread(block 72) failed [ 173.642440][ T8668] FAT-fs (loop2): Directory bread(block 73) failed [ 174.724471][ T7408] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.882574][ T8735] loop0: detected capacity change from 0 to 4096 [ 174.914394][ T7408] usb 6-1: Using ep0 maxpacket: 32 [ 174.921439][ T7408] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.937038][ T8741] delete_channel: no stack [ 174.957564][ T8735] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 174.974270][ T7408] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.017513][ T7408] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 175.046988][ T8735] ntfs3: loop0: mft corrupted [ 175.059522][ T7408] usb 6-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 175.074359][ T8735] ntfs3: loop0: Failed to load $Extend. [ 175.090410][ T7408] usb 6-1: Product: syz [ 175.104415][ T7408] usb 6-1: Manufacturer: syz [ 175.109059][ T7408] usb 6-1: SerialNumber: syz [ 175.163521][ T7408] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11 [ 175.358123][ T8720] loop1: detected capacity change from 0 to 32768 [ 175.449151][ T22] usb 6-1: USB disconnect, device number 4 [ 175.518237][ T22] appletouch 6-1:1.0: input: appletouch disconnected [ 175.599039][ T8720] XFS (loop1): Mounting V5 Filesystem [ 175.701409][ T8720] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 175.740972][ T8720] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 175.775187][ T8720] XFS (loop1): Ending clean mount [ 175.940684][ T4270] XFS (loop1): Unmounting Filesystem [ 176.156567][ T4326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.254902][ T8796] delete_channel: no stack [ 176.349744][ T8801] loop4: detected capacity change from 0 to 512 [ 176.401822][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1892'. [ 176.437391][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1892'. [ 176.465038][ T8801] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 176.521734][ T8801] EXT4-fs (loop4): 1 truncate cleaned up [ 176.572781][ T8801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.621763][ T8818] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 176.643703][ T8801] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 176.749085][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 176.797767][ T4326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.888759][ T8829] loop1: detected capacity change from 0 to 256 [ 176.933243][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 176.991747][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 177.023578][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 177.431628][ T7407] vcan0 speed is unknown, defaulting to 1000 [ 177.448140][ T8833] infiniband syz1: set active [ 177.459156][ T8833] infiniband syz1: added vcan0 [ 177.705120][ T8833] RDS/IB: syz1: added [ 177.726054][ T8833] smc: adding ib device syz1 with port count 1 [ 177.742529][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1915'. [ 177.759358][ T8833] smc: ib device syz1 port 1 has pnetid [ 177.794404][ T7407] vcan0 speed is unknown, defaulting to 1000 [ 177.838893][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 177.918243][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.977127][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.985763][ T8883] xt_hashlimit: max too large, truncated to 1048576 [ 178.012200][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.035482][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.133800][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 178.176269][ T8887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.248010][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 178.592652][ T8899] loop2: detected capacity change from 0 to 4096 [ 178.594334][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 178.628768][ T8899] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 179.006607][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 179.304071][ T8833] vcan0 speed is unknown, defaulting to 1000 [ 179.397086][ T8939] mmap: syz.5.1944 (8939) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.744023][ T8953] device bridge2 entered promiscuous mode [ 180.098066][ T8973] loop2: detected capacity change from 0 to 512 [ 180.186700][ T8973] EXT4-fs (loop2): 1 truncate cleaned up [ 180.192458][ T8973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.400771][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 180.570144][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1971'. [ 180.794607][ T5513] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.006744][ T5513] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 181.037986][ T5513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.065308][ T5513] usb 3-1: config 0 descriptor?? [ 181.087927][ T9024] loop4: detected capacity change from 0 to 2048 [ 181.151821][ T9024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.335358][ T9032] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1988'. [ 181.484032][ T5513] usb 3-1: Cannot set MAC address [ 181.498405][ T5513] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 181.527435][ T5513] usb 3-1: USB disconnect, device number 10 [ 181.736362][ T9049] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 182.332651][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2015'. [ 182.677571][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 182.868790][ T9121] netlink: set zone limit has 4 unknown bytes [ 183.001951][ T9131] netlink: 503 bytes leftover after parsing attributes in process `syz.5.2038'. [ 183.234081][ T9144] loop2: detected capacity change from 0 to 256 [ 183.244493][ T9145] rdma_rxe: rxe_register_device failed with error -23 [ 183.286731][ T9148] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2047'. [ 183.300587][ T9145] rdma_rxe: failed to add vcan0 [ 183.306729][ T9148] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 183.599824][ T9161] IPVS: length: 153 != 24 [ 183.728524][ T9169] netlink: 'syz.4.2057': attribute type 21 has an invalid length. [ 183.747619][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2058'. [ 183.885645][ T9181] loop2: detected capacity change from 0 to 64 [ 184.274858][ T9197] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2072'. [ 184.410727][ T9179] loop4: detected capacity change from 0 to 32768 [ 184.432488][ T9203] netlink: zone id is out of range [ 184.438674][ T9203] netlink: zone id is out of range [ 184.443961][ T9203] netlink: zone id is out of range [ 184.449833][ T9203] netlink: zone id is out of range [ 184.455823][ T9203] netlink: zone id is out of range [ 184.461423][ T9203] netlink: zone id is out of range [ 184.462588][ T9179] ERROR: (device loop4): diNewExt: no free extents [ 184.462588][ T9179] [ 184.467271][ T9203] netlink: zone id is out of range [ 184.494370][ T9203] netlink: zone id is out of range [ 184.499525][ T9203] netlink: zone id is out of range [ 184.499594][ T9179] ERROR: (device loop4): remounting filesystem as read-only [ 184.524464][ T7407] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.532541][ T9179] ialloc: diAlloc returned -5! [ 184.532935][ T9203] netlink: zone id is out of range [ 184.674484][ T7409] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.720635][ T7407] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.743813][ T7407] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.776577][ T7407] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 184.803868][ T7407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.823730][ T7407] usb 2-1: Product: syz [ 184.833262][ T7407] usb 2-1: Manufacturer: syz [ 184.844289][ T7407] usb 2-1: SerialNumber: syz [ 184.867085][ T7409] usb 1-1: config index 0 descriptor too short (expected 45, got 39) [ 184.892753][ T7409] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 184.921987][ T9217] loop4: detected capacity change from 0 to 128 [ 184.947095][ T7409] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.009248][ T9220] loop2: detected capacity change from 0 to 2048 [ 185.050234][ T7409] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice= 0.00 [ 185.053372][ T9220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.064942][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.110905][ T7409] usb 1-1: Product: syz [ 185.125385][ T7409] usb 1-1: Manufacturer: syz [ 185.154632][ T7409] usb 1-1: SerialNumber: syz [ 185.177745][ T7409] qcserial 1-1:1.0: Qualcomm USB modem converter detected [ 185.210525][ T7409] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 185.305539][ T7409] usb 2-1: USB disconnect, device number 14 [ 185.307555][ T4277] Bluetooth: hci5: CSR: Local version failed (-19) [ 185.401896][ T9224] loop4: detected capacity change from 0 to 4096 [ 185.439427][ T7408] usb 1-1: USB disconnect, device number 11 [ 185.457864][ T7408] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 185.474818][ T7408] qcserial 1-1:1.0: device disconnected [ 185.549298][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 185.562018][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 185.588274][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 185.634604][ T5523] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.727767][ T9234] loop2: detected capacity change from 0 to 2048 [ 185.765967][ T9234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.859306][ T5523] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 185.883053][ T5523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.914118][ T5523] usb 6-1: config 0 descriptor?? [ 185.923584][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 185.929672][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 185.934442][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 185.945293][ T5523] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 186.132569][ T9248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.239462][ T9257] comedi comedi0: comedi_config --init_data is deprecated [ 186.350599][ T5523] gspca_stv06xx: I2C: Read error writing address: -71 [ 186.369562][ T5523] usb 6-1: USB disconnect, device number 5 [ 186.402910][ T9262] loop1: detected capacity change from 0 to 256 [ 186.554151][ T9265] nvme nvme0: failed to connect socket: -111 [ 186.951269][ T9263] loop2: detected capacity change from 0 to 32768 [ 187.682133][ T9318] loop2: detected capacity change from 0 to 1024 [ 188.001778][ T9334] loop0: detected capacity change from 0 to 256 [ 188.150590][ T9340] tmpfs: Bad value for 'mpol' [ 188.405321][ T9344] nvme nvme0: failed to connect socket: -101 [ 188.593170][ T9365] loop2: detected capacity change from 0 to 512 [ 188.650369][ T9365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.667758][ T9371] loop1: detected capacity change from 0 to 256 [ 188.689260][ T9365] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.2153: inode has both inline data and extents flags [ 188.703925][ T9365] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2153: couldn't read orphan inode 15 (err -117) [ 188.717803][ T9365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.791636][ T9371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 188.815521][ T5520] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.029175][ T5520] usb 1-1: Using ep0 maxpacket: 32 [ 189.037022][ T5520] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.058031][ T5520] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.074849][ T5520] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 189.084033][ T5520] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 189.107275][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 189.121891][ T5520] usb 1-1: Product: syz [ 189.142009][ T5520] usb 1-1: Manufacturer: syz [ 189.157427][ T5520] usb 1-1: SerialNumber: syz [ 189.183566][ T5520] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 189.238766][ T9388] loop2: detected capacity change from 0 to 64 [ 189.310930][ T27] audit: type=1800 audit(2000000067.759:163): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2162" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 189.311591][ T9388] Trying to free block not in datazone [ 189.432397][ T5520] usb 1-1: USB disconnect, device number 12 [ 189.458564][ T9388] Trying to free block not in datazone [ 189.466466][ T5520] appletouch 1-1:1.0: input: appletouch disconnected [ 189.669254][ T9400] loop1: detected capacity change from 0 to 512 [ 189.691604][ T9400] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 189.730359][ T9400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.740030][ T9400] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.2170: Block bitmap for bg 0 marked uninitialized [ 189.759406][ T9400] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 189.769742][ T9400] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.2170: Block bitmap for bg 0 marked uninitialized [ 189.784030][ T9400] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 189.799025][ T9400] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.2170: Block bitmap for bg 0 marked uninitialized [ 189.826796][ T9400] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 189.841386][ T9400] EXT4-fs (loop1): 1 orphan inode deleted [ 189.847561][ T9400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.872405][ T9400] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 189.926601][ T9400] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 190.001291][ T9409] netlink: 'syz.4.2173': attribute type 13 has an invalid length. [ 190.028539][ T9392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2165 (9392) [ 190.084038][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 190.104183][ T9392] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.132364][ T9392] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 190.193132][ T9392] BTRFS warning (device loop5): excessive commit interval 3581 [ 190.233995][ T9392] BTRFS info (device loop5): force zlib compression, level 3 [ 190.269867][ T9392] BTRFS info (device loop5): metadata ratio 107050 [ 190.284011][ T9419] IPv6: Can't replace route, no match found [ 190.302762][ T9392] BTRFS info (device loop5): turning on flush-on-commit [ 190.344274][ T9392] BTRFS info (device loop5): max_inline at 4096 [ 190.380010][ T9392] BTRFS info (device loop5): using free space tree [ 190.617851][ T9444] xt_hashlimit: size too large, truncated to 1048576 [ 190.703799][ T9444] xt_hashlimit: invalid rate [ 190.814512][ T9392] BTRFS info (device loop5): enabling ssd optimizations [ 191.021574][ T7223] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.202990][ T9469] set_capacity_and_notify: 1 callbacks suppressed [ 191.203008][ T9469] loop1: detected capacity change from 0 to 4096 [ 191.216917][ T7408] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.243397][ T4262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (4262) [ 191.404267][ T7408] usb 5-1: Using ep0 maxpacket: 16 [ 191.411733][ T7408] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.441276][ T7408] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 191.480519][ T7408] usb 5-1: config 1 has no interface number 0 [ 191.502069][ T7408] usb 5-1: config 1 interface 237 has no altsetting 0 [ 191.539849][ T7408] usb 5-1: string descriptor 0 read error: -22 [ 191.579512][ T7408] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 191.616351][ T7408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.660168][ T7408] ipaq 5-1:1.237: PocketPC PDA converter detected [ 191.676487][ T27] audit: type=1400 audit(2000000070.129:164): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=9479 comm="syz.5.2199" [ 191.770164][ T9463] loop2: detected capacity change from 0 to 32768 [ 191.804256][ T9463] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2191 (9463) [ 191.869979][ T7408] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 191.902185][ T9463] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.958549][ T9463] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 191.998637][ T9463] BTRFS info (device loop2): using free space tree [ 192.087882][ T22] usb 5-1: USB disconnect, device number 6 [ 192.106847][ T22] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 192.161673][ T9509] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2207'. [ 192.169815][ T22] ipaq 5-1:1.237: device disconnected [ 192.274522][ T9463] BTRFS info (device loop2): enabling ssd optimizations [ 192.322175][ T9463] BTRFS warning (device loop2): can't clear the default_subvol feature bit while mounted [ 192.389530][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.477402][ T9521] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 192.579643][ T9519] loop0: detected capacity change from 0 to 4096 [ 193.042981][ T9497] loop5: detected capacity change from 0 to 32768 [ 193.106195][ T9497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2205 (9497) [ 193.173065][ T9497] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.200292][ T9497] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 193.228913][ T9497] BTRFS info (device loop5): using free space tree [ 193.288327][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2223'. [ 193.585253][ T9497] BTRFS info (device loop5): enabling ssd optimizations [ 193.628475][ T9497] BTRFS info (device loop5): resizing devid 73709551615 [ 193.660901][ T9497] BTRFS info (device loop5): resizer unable to find device 73709551615 [ 193.763452][ T7223] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.925677][ T9589] loop0: detected capacity change from 0 to 512 [ 194.052097][ T9589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.065469][ T9589] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.091394][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.097777][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.162486][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 194.231108][ T27] audit: type=1326 audit(2000000072.679:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.358121][ T27] audit: type=1326 audit(2000000072.679:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.390522][ T9545] loop1: detected capacity change from 0 to 32768 [ 194.482126][ T27] audit: type=1326 audit(2000000072.679:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.530259][ T9610] loop5: detected capacity change from 0 to 64 [ 194.573223][ T27] audit: type=1326 audit(2000000072.719:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.660512][ T27] audit: type=1326 audit(2000000072.719:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.701608][ T9615] loop0: detected capacity change from 0 to 1024 [ 194.758734][ T27] audit: type=1326 audit(2000000072.719:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.881547][ T27] audit: type=1326 audit(2000000072.719:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 194.961878][ T27] audit: type=1326 audit(2000000072.719:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 195.070813][ T27] audit: type=1326 audit(2000000072.719:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.5.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7cb6d9e1d9 code=0x7ffc0000 [ 195.849157][ T9673] loop2: detected capacity change from 0 to 256 [ 196.204168][ T9691] loop0: detected capacity change from 0 to 2048 [ 196.270801][ T9699] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.284442][ T9700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.504334][ T4315] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.694587][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 196.703511][ T4315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.730591][ T4315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.767461][ T4315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.798276][ T4315] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 196.820808][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.858543][ T4315] usb 2-1: Product: syz [ 196.870725][ T4315] usb 2-1: Manufacturer: syz [ 196.880591][ T9726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2296'. [ 196.883023][ T4315] usb 2-1: SerialNumber: syz [ 196.923968][ T9726] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2296'. [ 197.151229][ T9741] loop5: detected capacity change from 0 to 128 [ 197.191143][ T9741] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.206530][ T9741] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.219971][ T9744] loop0: detected capacity change from 0 to 128 [ 197.230887][ T9737] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 197.316991][ T9744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.323437][ T4315] usb 2-1: cannot find UAC_HEADER [ 197.333956][ T9744] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.376148][ T4315] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 197.438011][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.456997][ T4315] usb 2-1: USB disconnect, device number 15 [ 197.486498][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 197.494405][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 197.674058][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2308'. [ 197.759583][ T9767] netlink: 'syz.5.2311': attribute type 10 has an invalid length. [ 197.857937][ T9767] device veth0_vlan left promiscuous mode [ 197.911294][ T9767] device veth0_vlan entered promiscuous mode [ 197.923925][ T9767] team0: Device veth0_vlan failed to register rx_handler [ 198.261018][ T9791] loop5: detected capacity change from 0 to 64 [ 198.308763][ T9791] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 198.409429][ T9799] binder: 9798:9799 ioctl c0306201 200000000680 returned -14 [ 198.694531][ T9817] cgroup: none used incorrectly [ 198.912213][ T9832] binder: 9828:9832 ioctl c0306201 200000000680 returned -14 [ 198.925273][ T9833] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2352'. [ 198.974638][ T9833] net_ratelimit: 332 callbacks suppressed [ 198.974654][ T9833] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 199.114434][ T4318] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.132759][ T9844] netlink: 'syz.5.2348': attribute type 9 has an invalid length. [ 199.157410][ T9844] netlink: 90128 bytes leftover after parsing attributes in process `syz.5.2348'. [ 199.315820][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.336317][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.368868][ T4318] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 199.397078][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.414672][ T4318] usb 3-1: Product: syz [ 199.419437][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 199.434309][ T4318] usb 3-1: Manufacturer: syz [ 199.438998][ T4318] usb 3-1: SerialNumber: syz [ 199.562028][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2358'. [ 199.900637][ T4318] usb 3-1: USB disconnect, device number 11 [ 199.909247][ T4283] Bluetooth: hci5: CSR: Local version failed (-19) [ 199.970126][ T9886] x_tables: duplicate underflow at hook 3 [ 200.083894][ T9892] loop5: detected capacity change from 0 to 512 [ 200.116246][ T9892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.162131][ T9892] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.2371: inode has both inline data and extents flags [ 200.172285][ T9894] loop1: detected capacity change from 0 to 2048 [ 200.197962][ T9900] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 200.199841][ T9892] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2371: couldn't read orphan inode 15 (err -117) [ 200.211656][ T9900] device veth0_vlan left promiscuous mode [ 200.231021][ T9892] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.257864][ T9900] device veth0_vlan entered promiscuous mode [ 200.271338][ T9901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.277324][ T9900] team0: Device veth0_vlan failed to register rx_handler [ 200.313157][ T9892] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.2371: Directory hole found for htree leaf block 0 [ 200.390373][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 200.667745][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 200.733735][ T9919] device vti0 entered promiscuous mode [ 200.863617][ T9927] loop1: detected capacity change from 0 to 256 [ 200.929666][ T9927] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.976473][ T9927] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 201.009885][ T9931] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 201.150383][ T9937] loop0: detected capacity change from 0 to 512 [ 201.198859][ T9937] EXT4-fs: Ignoring removed orlov option [ 201.244967][ T9937] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.303150][ T9937] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2394: Allocating blocks 41-42 which overlap fs metadata [ 201.328955][ T9949] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 201.350484][ T9937] Quota error (device loop0): write_blk: dquota write failed [ 201.359156][ T9937] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 201.368428][ T9937] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2394: Allocating blocks 41-42 which overlap fs metadata [ 201.384669][ T9937] Quota error (device loop0): write_blk: dquota write failed [ 201.392170][ T9937] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 201.448008][ T9951] loop2: detected capacity change from 0 to 16 [ 201.457072][ T9937] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2394: Failed to acquire dquot type 1 [ 201.533859][ T9951] erofs: (device loop2): mounted with root inode @ nid 36. [ 201.556181][ T9937] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 201.609238][ T9937] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2394: corrupted inode contents [ 201.656673][ T9937] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.2394: mark_inode_dirty error [ 201.697185][ T9937] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2394: corrupted inode contents [ 201.730060][ T9937] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.2394: mark_inode_dirty error [ 201.782982][ T9937] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2394: corrupted inode contents [ 201.818221][ T9937] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 201.838576][ T9937] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.2394: corrupted inode contents [ 201.866666][ T9937] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.2394: mark_inode_dirty error [ 201.882354][ T9937] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 201.899621][ T9937] EXT4-fs (loop0): 1 truncate cleaned up [ 201.919622][ T9937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.962472][ T9937] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2394: Allocating blocks 41-42 which overlap fs metadata [ 201.990197][ T9937] Quota error (device loop0): write_blk: dquota write failed [ 202.014867][ T9937] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 202.035835][ T9937] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2394: Failed to acquire dquot type 1 [ 202.055949][ T9977] block device autoloading is deprecated and will be removed. [ 202.103218][ T9977] syz.5.2413: attempt to access beyond end of device [ 202.103218][ T9977] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 202.125764][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 202.579733][ T9981] loop2: detected capacity change from 0 to 32768 [ 202.601723][ T9981] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2415 (9981) [ 202.628579][ T9981] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 202.644407][ T4350] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.675806][T10001] loop5: detected capacity change from 0 to 512 [ 202.683375][ T9981] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 202.704385][ T9981] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.721789][ T9981] BTRFS info (device loop2): use zstd compression, level 3 [ 202.729989][T10001] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 202.760935][ T9981] BTRFS info (device loop2): using free space tree [ 202.768131][T10001] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 202.833947][T10001] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 202.853543][ T4350] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 202.882240][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.914331][T10001] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.923613][T10001] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 202.929066][ T4350] usb 2-1: Product: syz [ 202.932958][T10001] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.951893][T10001] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2425: bg 0: block 34: padding at end of block bitmap is not set [ 202.972590][ T9981] BTRFS info (device loop2): enabling ssd optimizations [ 202.982330][ T9987] loop4: detected capacity change from 0 to 32768 [ 202.994628][ T9987] XFS: attr2 mount option is deprecated. [ 203.001131][ T9987] XFS (loop4): invalid log iosize: 0 [not 12-30] [ 203.016840][T10001] Quota error (device loop5): write_blk: dquota write failed [ 203.018345][ T4350] usb 2-1: Manufacturer: syz [ 203.024676][T10001] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 203.039628][T10001] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2425: Failed to acquire dquot type 1 [ 203.049796][ T4350] usb 2-1: SerialNumber: syz [ 203.089239][T10001] EXT4-fs (loop5): 1 truncate cleaned up [ 203.148671][T10001] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.233459][ T4278] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 203.252916][T10030] SET target dimension over the limit! [ 203.331972][ T4350] usb 2-1: unit 5 not found! [ 203.333511][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 203.354774][ T4350] usb 2-1: unit 102 not found! [ 203.407902][ T4350] usb 2-1: USB disconnect, device number 16 [ 203.676703][ T8006] udevd[8006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.760898][ T4283] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 204.933428][T10101] loop4: detected capacity change from 0 to 4096 [ 204.988694][T10101] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 205.543124][T10098] loop0: detected capacity change from 0 to 32768 [ 206.115672][T10110] loop5: detected capacity change from 0 to 32768 [ 206.204425][T10110] XFS (loop5): Mounting V5 Filesystem [ 206.339540][T10110] XFS (loop5): Ending clean mount [ 206.456641][ T7223] XFS (loop5): Unmounting Filesystem [ 206.540825][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'. [ 206.647189][T10175] loop1: detected capacity change from 0 to 4096 [ 206.672465][T10175] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 207.162129][T10191] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.210223][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'. [ 207.392557][T10209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2511'. [ 207.412049][T10209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2511'. [ 207.696493][T10225] loop5: detected capacity change from 0 to 2048 [ 207.762897][T10225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.803642][T10232] netlink: 'syz.0.2521': attribute type 7 has an invalid length. [ 208.113005][T10249] loop4: detected capacity change from 0 to 512 [ 208.119056][T10248] device ip6tnl1 entered promiscuous mode [ 208.131146][T10249] EXT4-fs: Invalid gid value -1 [ 208.156040][T10251] netlink: 4244 bytes leftover after parsing attributes in process `syz.1.2533'. [ 208.541783][T10270] netlink: 'syz.4.2542': attribute type 10 has an invalid length. [ 208.635566][T10270] device veth0_vlan left promiscuous mode [ 208.669283][T10270] device veth0_vlan entered promiscuous mode [ 208.684112][T10270] team0: Device veth0_vlan failed to register rx_handler [ 208.926994][ T76] nvme nvme0: rdma_resolve_route failed (-110). [ 208.970353][T10280] nvme nvme0: rdma connection establishment failed (-19) [ 209.357661][T10287] loop2: detected capacity change from 0 to 32768 [ 209.462036][T10287] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 209.646142][T10308] loop1: detected capacity change from 0 to 32768 [ 209.677204][T10308] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2559 (10308) [ 209.690704][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 209.730689][T10308] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 209.771463][T10308] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 209.796705][T10319] netlink: 'syz.2.2561': attribute type 10 has an invalid length. [ 209.802093][T10308] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 209.844396][T10308] BTRFS info (device loop1): use zstd compression, level 3 [ 209.861991][T10308] BTRFS info (device loop1): using free space tree [ 209.904461][ T4318] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.960882][T10319] device veth0_vlan left promiscuous mode [ 209.982388][T10319] device veth0_vlan entered promiscuous mode [ 209.993294][T10319] team0: Device veth0_vlan failed to register rx_handler [ 210.043099][T10308] BTRFS info (device loop1): enabling ssd optimizations [ 210.098351][ T4318] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 210.114272][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 210.142939][ T4318] usb 5-1: Product: syz [ 210.153097][ T4318] usb 5-1: Manufacturer: syz [ 210.190256][ T4270] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.214330][ T4315] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.336583][T10347] netlink: 'syz.5.2569': attribute type 2 has an invalid length. [ 210.391452][T10347] netlink: 'syz.5.2569': attribute type 2 has an invalid length. [ 210.421884][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 210.429485][ T4318] scsi host1: uas [ 210.439606][ T4315] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.456663][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.477875][ T4315] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 210.491980][ T4315] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 210.501937][ T4315] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 210.513087][ T4315] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 210.535844][ T4315] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.545485][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.553503][ T4315] usb 1-1: Product: syz [ 210.557851][ T4315] usb 1-1: Manufacturer: syz [ 210.562462][ T4315] usb 1-1: SerialNumber: syz [ 210.611259][ C0] usb 5-1: stat urb: status -71 [ 210.617173][ C0] usb 5-1: cmd cmplt err -71 [ 210.624300][ T4350] usb 5-1: USB disconnect, device number 7 [ 210.632220][ T4350] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 210.640671][ T4350] scsi 1:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00 [ 210.823384][ T4315] usb 1-1: USB disconnect, device number 13 [ 210.851259][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.864702][T10363] loop1: detected capacity change from 0 to 64 [ 210.983631][ T9] kworker/u4:0: attempt to access beyond end of device [ 210.983631][ T9] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 211.010674][ T9] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 211.276740][T10382] loop4: detected capacity change from 0 to 128 [ 211.320897][T10382] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.382013][T10382] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.540759][ T4326] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.649867][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 211.669382][T10401] device netdevsim0 entered promiscuous mode [ 211.748778][T10408] device ip6tnl1 entered promiscuous mode [ 212.572139][T10445] loop4: detected capacity change from 0 to 1024 [ 212.626641][T10445] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 212.678963][T10445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.715599][T10445] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.2614: Abort forced by user [ 212.825556][T10445] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 213.019694][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 213.257326][T10467] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.927174][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.957299][T10493] loop0: detected capacity change from 0 to 512 [ 213.961386][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.985385][T10493] EXT4-fs: Ignoring removed orlov option [ 214.024371][T10493] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 214.099430][T10493] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2921: inode #15: comm syz.0.2633: corrupted xattr block 252 [ 214.153452][T10493] EXT4-fs (loop0): Remounting filesystem read-only [ 214.160560][T10493] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 214.169983][T10493] EXT4-fs (loop0): 1 orphan inode deleted [ 214.175937][T10493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.191044][T10493] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 4: comm syz.0.2633: lblock 0 mapped to illegal pblock 4 (length 1) [ 214.215325][T10493] EXT4-fs (loop0): Remounting filesystem read-only [ 214.321463][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 214.523194][T10510] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.593595][T10483] loop4: detected capacity change from 0 to 32768 [ 214.637046][T10483] [ 214.637046][T10483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.637046][T10483] [ 214.672806][T10483] ERROR: (device loop4): diWrite: ixpxd invalid [ 214.672806][T10483] [ 214.712813][T10483] ERROR: (device loop4): txCommit: [ 214.712813][T10483] [ 214.834462][T10514] loop2: detected capacity change from 0 to 4096 [ 214.844416][ T4280] [ 214.844416][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.844416][ T4280] [ 214.885084][ T4280] [ 214.885084][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.885084][ T4280] [ 214.908685][T10514] ntfs3: loop2: Failed to load $Extend. [ 215.497065][T10549] CIFS mount error: No usable UNC path provided in device string! [ 215.497065][T10549] [ 215.518261][T10549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.960922][T10580] loop4: detected capacity change from 0 to 64 [ 216.114645][ T5500] kworker/u4:8: attempt to access beyond end of device [ 216.114645][ T5500] loop4: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 216.161083][ T5500] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 216.340057][ T27] audit: type=1326 audit(2000000014.829:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.1.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbf19e1d9 code=0x7ffc0000 [ 216.361131][T10599] ip6t_srh: unknown srh invflags 4000 [ 216.399984][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 216.416093][ T27] audit: type=1326 audit(2000000014.869:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.1.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fdcbf19e1d9 code=0x7ffc0000 [ 216.429907][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 216.440281][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.461337][ T27] audit: type=1326 audit(2000000014.869:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.1.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbf19e1d9 code=0x7ffc0000 [ 216.496523][ T27] audit: type=1326 audit(2000000014.869:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.1.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbf19e1d9 code=0x7ffc0000 [ 216.521159][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 216.724274][ T4350] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 216.914369][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 216.922908][ T4350] usb 3-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.952093][ T4350] usb 3-1: config 30 interface 0 has no altsetting 0 [ 216.970389][ T4350] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 216.992950][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.011899][ T4350] usb 3-1: Product: syz [ 217.016180][ T4350] usb 3-1: Manufacturer: syz [ 217.020858][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 217.065690][ T4350] usb 3-1: SerialNumber: syz [ 217.089605][ T4350] snd_usb_toneport 3-1:30.0: Line 6 TonePort UX2 found [ 217.194414][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 217.202641][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 217.229559][ T22] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 217.253082][ T22] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 217.263879][T10623] loop4: detected capacity change from 0 to 32768 [ 217.270536][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.283856][ T22] usb 6-1: Product: syz [ 217.289669][T10623] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2695 (10623) [ 217.309552][ T22] usb 6-1: Manufacturer: syz [ 217.315156][ T22] usb 6-1: SerialNumber: syz [ 217.333405][ T4350] snd_usb_toneport 3-1:30.0: cannot get proper max packet size [ 217.341328][T10623] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 217.346324][ T4350] snd_usb_toneport 3-1:30.0: Line 6 TonePort UX2 now disconnected [ 217.362142][T10623] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 217.395561][T10623] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 217.404451][ T4350] snd_usb_toneport: probe of 3-1:30.0 failed with error -22 [ 217.437815][T10623] BTRFS info (device loop4): use zstd compression, level 3 [ 217.467771][T10623] BTRFS info (device loop4): using free space tree [ 217.536841][ T22] usb 6-1: Invalid number of CPorts: 0 [ 217.542572][ T22] es2_ap_driver: probe of 6-1:7.0 failed with error -22 [ 217.626925][ T4350] usb 3-1: USB disconnect, device number 12 [ 217.667420][T10623] BTRFS info (device loop4): enabling ssd optimizations [ 217.779376][ T22] usb 6-1: USB disconnect, device number 6 [ 217.877944][ T4280] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.138973][ T6710] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (6710) [ 218.670916][ T27] audit: type=1326 audit(2000000017.159:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 218.688385][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 218.694994][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.748713][ T27] audit: type=1326 audit(2000000017.189:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 218.757683][T10692] netlink: 'syz.1.2720': attribute type 10 has an invalid length. [ 218.772845][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.801183][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 218.845208][ T27] audit: type=1326 audit(2000000017.189:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 218.896651][ T27] audit: type=1326 audit(2000000017.189:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 218.926133][T10692] device veth0_vlan left promiscuous mode [ 218.934437][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 218.945966][ T22] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 218.959503][ T27] audit: type=1326 audit(2000000017.189:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 218.968965][T10692] device veth0_vlan entered promiscuous mode [ 218.989998][ T22] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 218.997399][ T27] audit: type=1326 audit(2000000017.189:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10687 comm="syz.4.2718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041ab9e1d9 code=0x7ffc0000 [ 219.010208][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.022694][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.048635][T10692] team0: Device veth0_vlan failed to register rx_handler [ 219.066056][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 219.078096][ T22] usb 3-1: config 1 has no interface number 0 [ 219.097735][ T22] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 219.124432][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.153074][ T22] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 219.195295][T10704] loop5: detected capacity change from 0 to 2048 [ 219.250355][T10704] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 219.289762][T10704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.337432][T10706] binder: 10705:10706 ioctl 40046210 0 returned -14 [ 219.352630][ T22] snd_usb_pod 3-1:1.1: set_interface failed [ 219.364817][ T22] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 219.372612][ T22] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 219.384438][ T5518] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.389582][ T22] usb 3-1: USB disconnect, device number 13 [ 219.586112][ T5518] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.620878][ T5518] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 219.632330][T10711] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 219.640173][ T5518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.674905][ T5518] usb 5-1: Product: syz [ 219.679121][ T5518] usb 5-1: Manufacturer: syz [ 219.683961][ T5518] usb 5-1: SerialNumber: syz [ 219.881039][T10727] loop0: detected capacity change from 0 to 4096 [ 219.906687][ T5518] usb 5-1: Limiting number of CPorts to U8_MAX [ 219.916659][T10727] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 219.935933][ T5518] usb 5-1: Not enough endpoints found in device, aborting! [ 220.135368][ T5514] usb 5-1: USB disconnect, device number 8 [ 220.489451][T10758] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 220.505016][T10758] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2752'. [ 220.730580][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.930244][ T22] usb 1-1: config 255 has an invalid interface number: 97 but max is 1 [ 220.958957][ T22] usb 1-1: config 255 has an invalid interface number: 227 but max is 1 [ 220.981062][ T22] usb 1-1: config 255 has no interface number 0 [ 220.999740][ T22] usb 1-1: config 255 has no interface number 1 [ 221.010522][T10782] loop1: detected capacity change from 0 to 512 [ 221.010583][ T22] usb 1-1: config 255 interface 97 has no altsetting 0 [ 221.035567][ T22] usb 1-1: config 255 interface 227 has no altsetting 0 [ 221.052363][T10782] EXT4-fs: inline encryption not supported [ 221.075132][ T22] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 221.090873][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.101374][ T22] usb 1-1: Product: syz [ 221.124045][T10782] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2763: Invalid inode bitmap blk 4 in block_group 0 [ 221.146260][ T22] usb 1-1: Manufacturer: syz [ 221.161242][ T22] usb 1-1: SerialNumber: syz [ 221.172696][T10786] loop2: detected capacity change from 0 to 256 [ 221.183055][T10782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.217052][T10788] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2766'. [ 221.277015][T10786] exfat: Deprecated parameter 'utf8' [ 221.290171][T10782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 221.308250][T10786] exfat: Deprecated parameter 'utf8' [ 221.313646][T10786] exfat: Deprecated parameter 'namecase' [ 221.335695][T10786] exfat: Deprecated parameter 'namecase' [ 221.362897][T10786] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 221.378140][T10790] netlink: 'syz.5.2767': attribute type 21 has an invalid length. [ 221.416484][T10782] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2763: Invalid inode bitmap blk 4 in block_group 0 [ 221.440804][ T22] usb 1-1: bad CDC descriptors [ 221.441913][T10790] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2767'. [ 221.450523][ T22] usb 1-1: bad CDC descriptors [ 221.468470][T10786] overlayfs: filesystem on './file0' not supported [ 221.481900][T10782] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 221.555066][ T22] usb 1-1: USB disconnect, device number 14 [ 221.601286][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 221.856479][T10801] loop2: detected capacity change from 0 to 256 [ 221.879559][T10801] FAT-fs (loop2): Directory bread(block 1285) failed [ 221.901102][T10801] FAT-fs (loop2): Directory bread(block 1286) failed [ 221.924422][T10801] FAT-fs (loop2): Directory bread(block 1287) failed [ 221.931322][T10801] FAT-fs (loop2): Directory bread(block 1288) failed [ 221.991504][T10801] FAT-fs (loop2): Directory bread(block 1285) failed [ 222.018220][T10808] loop5: detected capacity change from 0 to 1024 [ 222.024776][T10801] FAT-fs (loop2): Directory bread(block 1286) failed [ 222.031496][T10801] FAT-fs (loop2): Directory bread(block 1287) failed [ 222.064950][T10801] FAT-fs (loop2): Directory bread(block 1288) failed [ 222.073407][T10801] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 222.100808][T10808] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 222.180420][T10808] hfsplus: filesystem is marked journaled, leaving read-only. [ 222.206931][T10817] loop0: detected capacity change from 0 to 256 [ 222.271223][T10817] exfat: Deprecated parameter 'namecase' [ 222.293545][T10817] exfat: Deprecated parameter 'namecase' [ 222.324512][T10823] x_tables: unsorted underflow at hook 1 [ 222.349342][T10817] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 222.710493][T10839] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 223.087302][T10852] loop2: detected capacity change from 0 to 256 [ 223.148523][T10852] FAT-fs (loop2): Directory bread(block 64) failed [ 223.148562][T10852] FAT-fs (loop2): Directory bread(block 65) failed [ 223.148634][T10852] FAT-fs (loop2): Directory bread(block 66) failed [ 223.148661][T10852] FAT-fs (loop2): Directory bread(block 67) failed [ 223.148732][T10852] FAT-fs (loop2): Directory bread(block 68) failed [ 223.148759][T10852] FAT-fs (loop2): Directory bread(block 69) failed [ 223.148827][T10852] FAT-fs (loop2): Directory bread(block 70) failed [ 223.148852][T10852] FAT-fs (loop2): Directory bread(block 71) failed [ 223.148920][T10852] FAT-fs (loop2): Directory bread(block 72) failed [ 223.148944][T10852] FAT-fs (loop2): Directory bread(block 73) failed [ 223.368596][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'. [ 223.429518][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2798'. [ 223.453752][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2798'. [ 223.884770][T10883] loop2: detected capacity change from 0 to 1024 [ 223.927074][T10883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.038858][T10883] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 224.202065][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 224.202326][T10896] loop0: detected capacity change from 0 to 1024 [ 224.494363][ T5518] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.684358][ T5518] usb 5-1: Using ep0 maxpacket: 8 [ 224.691282][ T5518] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.720143][ T5518] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.740712][ T5518] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.754672][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2832'. [ 224.764031][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2832'. [ 224.788824][ T5518] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.809394][ T5518] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.832679][T10926] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2832'. [ 224.854774][ T5518] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.881834][T10931] 9pnet_fd: p9_fd_create_tcp (10931): problem connecting socket to 127.0.0.1 [ 224.892282][ T5518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.913447][T10934] loop1: detected capacity change from 0 to 256 [ 225.191035][T10941] lo: Caught tx_queue_len zero misconfig [ 225.372713][ T1181] usb 5-1: USB disconnect, device number 9 [ 225.480763][T10948] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 225.763689][T10969] netlink: 'syz.2.2847': attribute type 5 has an invalid length. [ 225.798649][T10971] vivid-007: ================= START STATUS ================= [ 225.805411][T10969] device ip6erspan0 entered promiscuous mode [ 225.842607][T10971] vivid-007: Generate PTS: true [ 225.872378][T10971] vivid-007: Generate SCR: true [ 225.885640][T10971] tpg source WxH: 640x360 (Y'CbCr) [ 225.919038][T10971] tpg field: 1 [ 225.943031][T10971] tpg crop: 640x360@0x0 [ 225.953458][T10971] tpg compose: 640x360@0x0 [ 225.958522][T10971] tpg colorspace: 8 [ 225.962347][T10971] tpg transfer function: 0/0 [ 225.967039][T10971] tpg Y'CbCr encoding: 0/0 [ 225.982242][T10971] tpg quantization: 0/0 [ 225.986837][T10971] tpg RGB range: 0/2 [ 225.990753][T10971] vivid-007: ================== END STATUS ================== [ 226.343616][T10999] loop5: detected capacity change from 0 to 256 [ 226.410848][T10999] FAT-fs (loop5): Directory bread(block 64) failed [ 226.428092][T10995] loop2: detected capacity change from 0 to 4096 [ 226.441226][T10999] FAT-fs (loop5): Directory bread(block 65) failed [ 226.469740][T10995] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 226.484719][T10999] FAT-fs (loop5): Directory bread(block 66) failed [ 226.528912][T10999] FAT-fs (loop5): Directory bread(block 67) failed [ 226.549199][T10999] FAT-fs (loop5): Directory bread(block 68) failed [ 226.577509][T10999] FAT-fs (loop5): Directory bread(block 69) failed [ 226.596235][T10999] FAT-fs (loop5): Directory bread(block 70) failed [ 226.624343][T10999] FAT-fs (loop5): Directory bread(block 71) failed [ 226.654795][T10999] FAT-fs (loop5): Directory bread(block 72) failed [ 226.709339][T10999] FAT-fs (loop5): Directory bread(block 73) failed [ 226.836636][T11013] loop0: detected capacity change from 0 to 1024 [ 226.872195][T11013] EXT4-fs (loop0): orphan cleanup on readonly fs [ 226.888936][T11013] EXT4-fs error (device loop0): ext4_quota_enable:7049: comm syz.0.2867: inode #17152: comm syz.0.2867: iget: illegal inode # [ 226.908881][T11013] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.2867: Bad quota inode: 17152, type: 2 [ 226.921067][T11013] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 226.937312][T11013] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 226.944044][T11013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.039569][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 227.280860][T11022] loop2: detected capacity change from 0 to 4096 [ 227.326197][T11022] __ntfs_error: 9 callbacks suppressed [ 227.326217][T11022] ntfs: (device loop2): parse_options(): Invalid gid option argument: 0xffffffffffffffff [ 227.405255][ T5514] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 227.468503][T11031] netlink: 'syz.5.2876': attribute type 21 has an invalid length. [ 227.485146][T11031] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2876'. [ 227.614334][ T5514] usb 1-1: Using ep0 maxpacket: 32 [ 227.621405][ T5514] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 227.655604][ T5514] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 227.688485][ T5514] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.718259][ T5514] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 227.735459][ T5514] usb 1-1: config 1 has no interface number 0 [ 227.735504][ T5514] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 227.735529][ T5514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.741432][ T5514] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 227.943847][ T5514] snd_usb_pod 1-1:1.1: set_interface failed [ 227.944009][ T5514] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 227.944109][ T5514] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 227.953811][ T5514] usb 1-1: USB disconnect, device number 15 [ 228.203669][T11062] loop4: detected capacity change from 0 to 1024 [ 228.482352][T11073] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 228.696611][T11088] x_tables: duplicate underflow at hook 1 [ 228.787952][T11092] No source specified [ 228.917264][T11100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2909'. [ 229.008955][T11106] binder: 11105:11106 ioctl c018620c 200000000080 returned -22 [ 229.075171][T11096] infiniband syz0: set down [ 229.097451][T11096] infiniband syz0: added bridge_slave_0 [ 229.169133][T11096] RDS/IB: syz0: added [ 229.174486][T11096] smc: adding ib device syz0 with port count 1 [ 229.180893][T11096] smc: ib device syz0 port 1 has pnetid [ 229.524733][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 229.610273][T11129] xt_hashlimit: size too large, truncated to 1048576 [ 230.427249][T11145] loop1: detected capacity change from 0 to 32768 [ 230.456160][T11162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.546406][T11145] XFS (loop1): Mounting V5 Filesystem [ 230.640193][T11145] XFS (loop1): Ending clean mount [ 230.769264][T11179] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 230.828126][ T4270] XFS (loop1): Unmounting Filesystem [ 230.923907][T11185] netlink: 'syz.0.2946': attribute type 10 has an invalid length. [ 231.145762][T11185] team0: Device veth1_vlan failed to register rx_handler [ 231.467486][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2955'. [ 232.236816][T11248] xt_hashlimit: max too large, truncated to 1048576 [ 232.243794][T11248] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 232.341404][T11258] bond0: (slave xfrm0): Error: Device can not be enslaved while up [ 232.420080][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'. [ 232.445162][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'. [ 232.770369][T11281] MTDSB: Device #1 doesn't appear to exist [ 232.770369][T11281] [ 232.812853][T11287] loop5: detected capacity change from 0 to 16 [ 232.856556][T11287] erofs: (device loop5): mounted with root inode @ nid 36. [ 232.907813][ T4283] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 232.927599][T11287] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -42 in[46, 4050] out[9000] [ 232.944909][ T27] audit: type=1800 audit(2000000031.439:193): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2995" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 233.043317][T11291] loop0: detected capacity change from 0 to 256 [ 233.047088][T11293] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 233.316398][T11305] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 233.384100][T11305] team0: Device wg1 is of different type [ 233.481233][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3008'. [ 233.718778][T11327] netlink: 'syz.1.3016': attribute type 10 has an invalid length. [ 233.787722][T11327] team0: Device veth1_vlan failed to register rx_handler [ 233.951346][T11340] xt_TCPMSS: Only works on TCP SYN packets [ 234.277409][T11355] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 234.484722][T11374] loop0: detected capacity change from 0 to 128 [ 234.711905][T11383] loop4: detected capacity change from 0 to 256 [ 234.714404][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.924412][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 234.931522][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.965092][ T22] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 234.991906][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.014281][ T22] usb 6-1: Product: syz [ 235.018488][ T22] usb 6-1: Manufacturer: syz [ 235.030240][ T22] usb 6-1: SerialNumber: syz [ 235.052774][ T22] usb 6-1: config 0 descriptor?? [ 235.067161][ T22] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 235.095085][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 235.153148][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.183531][ T22] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 235.218759][ T22] usb 6-1: media controller created [ 235.262851][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.313602][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 235.322174][ T22] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 235.350224][T11381] loop1: detected capacity change from 0 to 32768 [ 235.360719][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 235.376021][T11381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3042 (11381) [ 235.389528][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 235.396745][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 235.418928][T11381] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.434302][ T22] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 235.454517][T11381] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 235.497919][ T22] usb 6-1: USB disconnect, device number 7 [ 235.503900][T11381] BTRFS info (device loop1): force clearing of disk cache [ 235.523500][T11381] BTRFS info (device loop1): enabling auto defrag [ 235.531649][T11381] BTRFS info (device loop1): max_inline at 0 [ 235.544324][T11381] BTRFS info (device loop1): enabling disk space caching [ 235.554389][ T1181] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 235.584824][T11381] BTRFS info (device loop1): disk space caching is enabled [ 235.612394][ T22] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 235.760532][ T1181] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 235.780051][ T1181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.792632][T11381] BTRFS info (device loop1): enabling ssd optimizations [ 235.804378][ T1181] usb 1-1: Product: syz [ 235.810048][ T1181] usb 1-1: Manufacturer: syz [ 235.810134][T11381] BTRFS info (device loop1): rebuilding free space tree [ 235.815383][ T1181] usb 1-1: SerialNumber: syz [ 235.869756][ T1181] usb 1-1: USB2VGA dongle found at address 16 [ 235.903938][ T1181] usb 1-1: Allocated 8 output buffers [ 235.982777][T11381] BTRFS info (device loop1): disabling free space tree [ 236.014396][T11381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 236.048270][T11381] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 236.289547][ T1181] usb 1-1: Failed to early initialize device [ 236.335712][ T1181] usb 1-1: USB disconnect, device number 16 [ 236.372443][T11455] loop4: detected capacity change from 0 to 256 [ 236.449262][ T4270] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.844345][ T5512] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.888718][T11472] netlink: 'syz.0.3072': attribute type 4 has an invalid length. [ 237.056353][ T5512] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.076965][ T5512] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.107622][ T5512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 237.134296][ T5512] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.180381][ T5512] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 237.204277][ T5512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.232706][ T5512] usb 3-1: Product: syz [ 237.241653][ T5512] usb 3-1: Manufacturer: syz [ 237.246560][ T5512] usb 3-1: SerialNumber: syz [ 237.299766][T11490] ieee802154 phy0 wpan0: encryption failed: -90 [ 237.473540][ T5512] usb 3-1: Limiting number of CPorts to U8_MAX [ 237.487468][ T5512] usb 3-1: Not enough endpoints found in device, aborting! [ 237.617360][T11478] loop4: detected capacity change from 0 to 32768 [ 237.658142][T11478] (syz.4.3074,11478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.676558][T11501] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3085'. [ 237.690756][ T5520] usb 3-1: USB disconnect, device number 14 [ 237.691630][T11478] (syz.4.3074,11478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.800383][T11478] JBD2: Ignoring recovery information on journal [ 237.860951][T11508] loop5: detected capacity change from 0 to 2048 [ 237.901078][T11478] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 237.916769][T11508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 237.980383][T11508] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.3088: lblock 0 mapped to illegal pblock 2 (length 1) [ 238.062501][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 238.139648][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 238.867564][T11552] kAFS: Can only specify source 'none' with -o dyn [ 239.032778][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 239.076283][T11566] loop5: detected capacity change from 0 to 256 [ 240.027833][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3132'. [ 240.484419][ T1181] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 240.674323][ T1181] usb 2-1: Using ep0 maxpacket: 16 [ 240.681380][ T1181] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 240.707297][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.708959][ T1181] usb 2-1: config 0 has no interface number 0 [ 240.727226][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.729743][T11646] loop0: detected capacity change from 0 to 256 [ 240.742934][ T1181] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.752014][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.774497][ T5520] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.785963][ T1181] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.786724][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.829065][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.834491][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 240.849399][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.863298][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 240.875273][ T1181] usb 2-1: Product: syz [ 240.889681][ T1181] usb 2-1: SerialNumber: syz [ 240.935351][ T1181] usb 2-1: config 0 descriptor?? [ 240.974450][ T5520] usb 3-1: Using ep0 maxpacket: 16 [ 240.977787][ T1181] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 240.981315][ T5520] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 241.047852][ T5520] usb 3-1: config 0 has no interface number 0 [ 241.078454][ T5520] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.108297][ T5520] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 241.134711][ T5520] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 241.162860][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 241.173393][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 241.183802][ T5520] usb 3-1: Product: syz [ 241.184380][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 241.196188][ T5520] usb 3-1: SerialNumber: syz [ 241.198518][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 241.208183][ T1181] usb 2-1: USB disconnect, device number 17 [ 241.214388][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 241.221350][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 241.241819][ T5520] usb 3-1: config 0 descriptor?? [ 241.256779][ T1181] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 241.291301][ T5520] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 241.327177][ T5520] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 241.718616][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 241.725718][ C0] ------------[ cut here ]------------ [ 241.731203][ C0] URB ffff88802f2e1300 submitted while active [ 241.737923][ C0] WARNING: CPU: 0 PID: 15 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 241.747361][ C0] Modules linked in: [ 241.751294][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 241.758603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.768683][ C0] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 241.774287][ C0] Code: 2f 8b 44 89 ea e8 b9 07 00 04 e9 bb fb ff ff e8 2e a5 55 fb c6 05 e7 c9 bf 08 01 48 c7 c7 60 11 2f 8b 48 89 de e8 58 18 21 fb <0f> 0b e9 be f0 ff ff e8 0c a5 55 fb eb 1f e8 05 a5 55 fb 44 8b 64 [ 241.794028][ C0] RSP: 0018:ffffc900001476f8 EFLAGS: 00010046 [ 241.800142][ C0] RAX: ae775ade7b855300 RBX: ffff88802f2e1300 RCX: 0000000000040000 [ 241.808140][ C0] RDX: ffffc90002121000 RSI: 0000000000006015 RDI: 0000000000006016 [ 241.816116][ C0] RBP: 000000000000000f R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 241.824114][ C0] R10: dffffc0000000000 R11: ffffed1017184f3c R12: 0000000000000a20 [ 241.832112][ C0] R13: ffff88801f741030 R14: ffff88802f2e1308 R15: dffffc0000000000 [ 241.840100][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 241.849032][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.855615][ C0] CR2: 0000200000188000 CR3: 0000000057b64000 CR4: 00000000003506f0 [ 241.863589][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.871561][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.879543][ C0] Call Trace: [ 241.882817][ C0] [ 241.885751][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 241.890953][ C0] cm109_urb_irq_callback+0x73d/0xcc0 [ 241.896326][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 241.901868][ C0] dummy_timer+0xa39/0x34e0 [ 241.906396][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 241.911421][ C0] ? lock_chain_count+0x20/0x20 [ 241.916276][ C0] ? dummy_free_streams+0x520/0x520 [ 241.921475][ C0] __hrtimer_run_queues+0x522/0xc90 [ 241.926675][ C0] ? dummy_free_streams+0x520/0x520 [ 241.931875][ C0] ? hrtimer_interrupt+0x980/0x980 [ 241.936986][ C0] hrtimer_run_softirq+0x173/0x290 [ 241.942097][ C0] handle_softirqs+0x291/0x910 [ 241.946886][ C0] ? run_ksoftirqd+0xa4/0x100 [ 241.951575][ C0] ? do_softirq+0x210/0x210 [ 241.956078][ C0] run_ksoftirqd+0xa4/0x100 [ 241.960577][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 241.965771][ C0] ? takeover_tasklets+0x770/0x770 [ 241.970874][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 241.976064][ C0] smpboot_thread_fn+0x667/0xa30 [ 241.981177][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 241.986207][ C0] kthread+0x29d/0x330 [ 241.990269][ C0] ? cpu_report_death+0x250/0x250 [ 241.995296][ C0] ? kthread_blkcg+0xd0/0xd0 [ 241.999890][ C0] ret_from_fork+0x1f/0x30 [ 242.004317][ C0] [ 242.007354][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.014621][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 242.021892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.031936][ C0] Call Trace: [ 242.035207][ C0] [ 242.038130][ C0] dump_stack_lvl+0x188/0x24e [ 242.042804][ C0] ? memcpy+0x3c/0x60 [ 242.046864][ C0] ? show_regs_print_info+0x12/0x12 [ 242.052081][ C0] ? load_image+0x410/0x410 [ 242.056600][ C0] panic+0x2d3/0x710 [ 242.060508][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 242.065023][ C0] ? ret_from_fork+0x1f/0x30 [ 242.069624][ C0] __warn+0x2f8/0x4f0 [ 242.073629][ C0] ? usb_submit_urb+0xfb8/0x18d0 [ 242.078585][ C0] ? usb_submit_urb+0xfb8/0x18d0 [ 242.083723][ C0] report_bug+0x2ba/0x4f0 [ 242.088059][ C0] ? usb_submit_urb+0xfb8/0x18d0 [ 242.093000][ C0] handle_bug+0x3a/0x70 [ 242.097245][ C0] exc_invalid_op+0x16/0x40 [ 242.101750][ C0] asm_exc_invalid_op+0x16/0x20 [ 242.106597][ C0] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 242.112171][ C0] Code: 2f 8b 44 89 ea e8 b9 07 00 04 e9 bb fb ff ff e8 2e a5 55 fb c6 05 e7 c9 bf 08 01 48 c7 c7 60 11 2f 8b 48 89 de e8 58 18 21 fb <0f> 0b e9 be f0 ff ff e8 0c a5 55 fb eb 1f e8 05 a5 55 fb 44 8b 64 [ 242.131779][ C0] RSP: 0018:ffffc900001476f8 EFLAGS: 00010046 [ 242.137849][ C0] RAX: ae775ade7b855300 RBX: ffff88802f2e1300 RCX: 0000000000040000 [ 242.145812][ C0] RDX: ffffc90002121000 RSI: 0000000000006015 RDI: 0000000000006016 [ 242.153771][ C0] RBP: 000000000000000f R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 242.161739][ C0] R10: dffffc0000000000 R11: ffffed1017184f3c R12: 0000000000000a20 [ 242.169705][ C0] R13: ffff88801f741030 R14: ffff88802f2e1308 R15: dffffc0000000000 [ 242.177704][ C0] ? usb_submit_urb+0xfb8/0x18d0 [ 242.182653][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 242.187946][ C0] cm109_urb_irq_callback+0x73d/0xcc0 [ 242.193316][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 242.198770][ C0] dummy_timer+0xa39/0x34e0 [ 242.203296][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 242.208321][ C0] ? lock_chain_count+0x20/0x20 [ 242.213175][ C0] ? dummy_free_streams+0x520/0x520 [ 242.218374][ C0] __hrtimer_run_queues+0x522/0xc90 [ 242.223571][ C0] ? dummy_free_streams+0x520/0x520 [ 242.228771][ C0] ? hrtimer_interrupt+0x980/0x980 [ 242.233881][ C0] hrtimer_run_softirq+0x173/0x290 [ 242.238987][ C0] handle_softirqs+0x291/0x910 [ 242.243746][ C0] ? run_ksoftirqd+0xa4/0x100 [ 242.248419][ C0] ? do_softirq+0x210/0x210 [ 242.252917][ C0] run_ksoftirqd+0xa4/0x100 [ 242.257415][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 242.262609][ C0] ? takeover_tasklets+0x770/0x770 [ 242.267886][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 242.273075][ C0] smpboot_thread_fn+0x667/0xa30 [ 242.278013][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 242.283038][ C0] kthread+0x29d/0x330 [ 242.287096][ C0] ? cpu_report_death+0x250/0x250 [ 242.292123][ C0] ? kthread_blkcg+0xd0/0xd0 [ 242.296702][ C0] ret_from_fork+0x1f/0x30 [ 242.301123][ C0] [ 242.304493][ C0] Kernel Offset: disabled [ 242.308885][ C0] Rebooting in 86400 seconds..