last executing test programs: 6.469097736s ago: executing program 3 (id=9767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x100, 0x4, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 6.237598213s ago: executing program 3 (id=9769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010227bd7000fcdbdf250300000008e304470001000018809479e48a993d2a6e78078143068f0af7b90fd7c84603ab9a24249b0e96e2f6391a272c620a524d6fbe32cddfa014f270b8b73457193447d382dbd053d48895f729"], 0x1c}}, 0x44000) 6.02825336s ago: executing program 3 (id=9773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() fcntl$lock(r0, 0x26, &(0x7f0000002000)={0x2, 0x0, 0x6, 0xf4, r1}) 5.789371218s ago: executing program 3 (id=9776): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000a00)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.224004916s ago: executing program 3 (id=9780): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x80, 0x0}, 0x11) 4.019279616s ago: executing program 3 (id=9797): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x5}, 0x14}}, 0x48000) 3.683428758s ago: executing program 32 (id=9797): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x5}, 0x14}}, 0x48000) 3.149593025s ago: executing program 0 (id=9810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000b00)="54739b0892c3cde82ea97d7a17b6008512c3e7867961a2cebc8422d3dfc96b5524f1f0a8461183d4e50269", 0x2b}], 0x1}, 0x800) 2.931649363s ago: executing program 0 (id=9814): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.503117536s ago: executing program 0 (id=9818): set_mempolicy(0x3, &(0x7f0000000000)=0x319c2f0d, 0x738) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kexec_load(0x4, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x7, 0xd07}], 0x0) 2.40671736s ago: executing program 0 (id=9819): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xb, 0x40000, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x20}}, 0x50) syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c2402"], 0x0) 1.741201162s ago: executing program 4 (id=9825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) 1.642009595s ago: executing program 4 (id=9827): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) 1.529712169s ago: executing program 4 (id=9829): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.402522643s ago: executing program 2 (id=9832): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 1.265624608s ago: executing program 1 (id=9833): timer_create(0x7, 0x0, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 1.222153279s ago: executing program 2 (id=9834): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="0100", 0x2, 0x2a21}]) 1.214424839s ago: executing program 1 (id=9835): r0 = mq_open(&(0x7f0000000480)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x5}, &(0x7f0000000140)) lseek(r0, 0x4b, 0x3) 1.117654733s ago: executing program 1 (id=9836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x305, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) 1.042337065s ago: executing program 2 (id=9837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x2070bd2c, 0x0, {0x2, 0x18, 0x0, 0xff, r1}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x14) 1.012340106s ago: executing program 1 (id=9838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090700000000040000000500000008000300", @ANYBLOB="0800a4"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) 897.91236ms ago: executing program 2 (id=9839): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 883.67306ms ago: executing program 1 (id=9840): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfd, 0x10ff, &(0x7f0000000440)="$eJzs2T+L1EAYB+DfJOufLpLrg6CFhRx3rF/gCoVtbbURucqrbivFj+PH0avsj+u1OLCPxE12VVYEd9XmeWCYNy95JzPlOwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTvlqiQl6bqLxVWSbsrfeV9XKXl6ulg+Pp8/WSapv71eniVlqBrK0h7fu93O23l73D46OLn/Yfn6zasXZ2en5+MyJV0ur/d/lDLuBwAAAPhRv7PmP38fAAAA+J29XSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/KG+2cTtFFRJStJ1F4urJN2Wuhv/aH8AAADA7kqqPG+25VfXABsP87Ep6/wwfylDfJR3W+oBAACAX+pvjcH3/9fLzVXPPYwHma378qEHv5tZDg9Xz+OUzydJneTop8Uvr9++nEbp6799FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAr+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAA2CsAAP//s6PW0A==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x20ff7ffffc) 746.533645ms ago: executing program 2 (id=9841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 597.49384ms ago: executing program 4 (id=9842): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="5500c20b252f", 0x0, 0x2000005, 0x0, 0x2000, 0x0}) 537.872342ms ago: executing program 4 (id=9843): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004b00)=""/176, 0xb0}], 0x5}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0x20008004) 471.637314ms ago: executing program 0 (id=9844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x10}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x49}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 303.34137ms ago: executing program 1 (id=9845): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 298.11375ms ago: executing program 2 (id=9846): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1010003, &(0x7f00000002c0)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRESHEX=0x0, @ANYRESDEC], 0x23, 0x61fb, &(0x7f0000009680)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQeJ/HGU93vXYS76w9n4/kzPzmmfE+k+++emb2CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgfviDH58rIuLKr9KCExGfi35EL2KlqtciYmXtRH2bF2K7OZ6PiOFSRLX99j/PRrweER8/E3H/wZ31avH5ffbj+3/+xx9+8tSP/v6n4Zn//uVW/41p692+/dv//PXuo+8vAAAAdFFZlmWRPuafjIhB+mwPABx/+fW/TPJy9cLVmwvWH7VarVYfwbqunOxuvYiIzfo21XsGh+MB4IjZjE/a7gItkn+nDSLiqbY7ASy0ou0OcCjuP7izXqR8i/rrwdq4PZ8Lsiv/zWLn+o5p01ma55jM6/61Ff14bkp/VubUh0WS8+81878ybh+l9Q47/3mZlv9ofOlT5+T8+838G45P/r2J+XdVzn9woPz78gcAAAAAgAWW//5/ouXjv0uPvyv7stfx37U59QEAAAAAAAAAnrSDjv83aIz/t8P4fwAAALCwqs/qld8983DZtO9iq5ZfLiKebqwPdEy6WGa17X4AAAAAAAAAAAAAQJcMxufwXi4ihhHx9OpqWZbVT12zPqjH3f6o6/r+Q5e1/SQPAABjHz/TuJa/iFiOiMvpu/6Gq6urZbm8slqulitL+f3saGm5XKl9rs3TatnSaB9viAejsvply7Xt6mZ9Xp7V3vx91W2Nyv4+OjYfLQYOABExfjW6P+0V6X9er46msnw2Wn6TwxGxx+OfI8rjn/1o+34KAAAAHL6yLMsifZ33yXTMv9d2pwCAuciv/83jAmq1Wq1Wq49fXVdOdrdeRMRmfZvqPYPh+AHgiNmMT9ruAi2Sf6cNIuKFtjsBLLSi7Q5wKO4/uLNepHyL+utBGt89nwuyK//NYnu7vP2k6SzNc0zmdf/ain48N6U/z8+pD4sk599r5n9l3D5K6x12/vMyLf9qP0+00J+25fz7zfwbjk/+vYn5d1XOf3Cg/PvyBwAAAACABZb//n9ioY7/jh51d2ba6/jv2sQtDq8vAAAAAAAAAPCk3H9wZz1f95qP/39hwnqu/zyecv6F/Dsp599r5P/Vxnr92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeKdM8q0j2iSLdUDNL0cfbus7aG/VF1S8Oi1x+kc37K4btxLa7HRpzdtW4v/X88bD+3q73q6XC7veyP28/vah/stOftL+xqH6azi8qVQdU+jDgd6/HzuB7vbLdXbUsz9n95Rns5oz3n3/f476Sc/6D2U+W/mtqLxrRy76PeZx739emk23nr2hd/c/bwd2emrejv7FtdtX8vtdCf7f+Tp0bxy5sbN07fvnrr1o1zkSa7lp6PNHnCcv7D9LPz/P/yuD0/79cfr/c+Gh04/0WxFYOp+b9cm6/295U5960NOf9R+sn5v5PaJz/+j3L+0x//r7bQHwAAAAAAAAAAAAAAANhLWZbbl4i+FREX0/U/bV2bCQDMV379L5O8fF51f863p1Yf8bpYsP7Mtf60PKTfPxovbHv/1Op51HXlZG/Wi4j4W32b6j3Dryf9MgBgkX0aEf9suxO0Rv4dlr/vr5qemrHum3PqEzAfNz/48KdXr1/fuHGz7Z4AAAAAAAAAAI8qj/+5Vhv/+VRZlncb6+0a//XtWHvc8T8HeWZngNEpA1X3D75Pe9nqjfq92nDjL8a08b+HO3N7jf89mHF7wxntoxntSzPal2e0T7zQoybn/2JtvPNTEXGyMfx6F8Z/bY553wU5/5dq9+cq/6801qvnX/7+KOff25X/mVvv/+LMzQ8+fO3a+1ff23hv42cXzp07e+HixUuXLp1599r1jbPjf1vs8eHK+eexr/dzHijHR84/Zy7/bsn5fynV8u+WnP+XUy3/bsn55/d78u+WnH/+7CP/bsn5v5Jq+XdLzv9rqZZ/t+T8X021/Lsl5//1VMu/W3L+r6Va/t2S8z+davl3S87/TKr3mf/KYfeL+cj55yNcHv/dkvPPZzbIv1ty/udTLf9uyflfSLX8uyXn/3qq5d8tOf9vpFr+3ZLzv5hq+XdLzv+bqZZ/t+T8L6Va/t2S8/9WquXfLTn/b6da/t2S838j1fLvlpz/d1It/27J+X831fLvlpz/91It/27J+eexHeTfLQ+//9+MGTNm8kzbz0wAAAAAAAAAAAAAQNM8Tiduex8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzda4xcZ30/8LNXbxxIDIT8nfwNbBzjGGeTXV/iC62LCdeGWwmEQi/YrndtFnzDa5dAI9lRoETCqKiibXjRFhBq86bCL3hBK0B5gVohVYJWFVUlREXLi6gKKCBVohWw1ZzzPM/OzM7O7HrX6zPnfD6S/fPOnJnnmTPPnJ3frr9zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABodtfrZj45kGVZ40/+16Yse0Hj3zeNb8ove/WNniEAAACwWr/I/37+1nTB4WXcqGmbf3j5t78yPz8/n7136E9GPjs/n64Yz7KRDVmWXxdd/cH7Bpq3CZ7IxgYGm74e7DH8UI/rh3tcP9Lj+tEe12/ocf1Yj+sX7YBFbip+HpPf2bb8n5uKXZrdlo3k123rcKsnBjYMDsaf5eQG8tvMj5zIZrNT2Uw21bJ9se1Avv3X7mqM9eYsjjXYNNaWxgr5yWPH4xwGwj7e1jLWwn1GP3ptNv7Tnzx2/K8uPHdHp9pzN7TcXzHPHVsb8/x4uKSY60C2Ie2TOM/Bpnlu6fCcDLXMcyC/XePf7fN8fpnzHFqY5rpqf87HssH839/J99Nw84/10n7aEi772d1Zll1emHb7NovGygazjS2XDC48P2PFimzcR2MpvTgbXtE6vWsZ67RRp7e1rtP210R8/u8KtxteYg7NT9OPHh9tet5/Pn8t6zRqPOqlXivta3CtXytlWYNxXXwnf9BPdlyD28Ljf2z70muw49rpsAbT425ag1t7rcHB0aF8zulJGMhvs7AGd7VsP5SPNJDXZ7d3X4OTF06fm5z76Mfumz197OTMyZkze3btmtqzb9+BAwcmT8yempkq/r7GvV1+G7PB9BrYGvZdfA3c07Zt81Kd/8LoouPvtb4Ox7q8Dje1bbvWr8Ph9gc3sD4vyMVrunhtvLux08euDGZLvMby52fn6l+H6XE3vQ6Hm16HHb+ndHgdDi/jddjY5tzO5b1nGW7602kOS38vWN0a3NS0Btvfj7SvwbV+P1KWNTgW1sX3di79vWBLmO+TEyt9PzK0aA2mhxuOPY1L0vv9sQN56bQu72xccfNodnFu5vz9jx67cOH8riyUdfGSprXSvl43Nj2mbNF6HVzxej08+/In7+xw+aawr8bua/w1tuRz1dhm7/3dn6v8u1vn/dly6e4slDW23vuz03fzxv4czbLPffPxh7/+2Odet+T+bPSbH59c/Xvx1Jc2HX9Hljj+xr7/l8V46a6eGBoZLl6/Q2nvjLQcj1ufquH82DWQj/385PKOxyPhz3ofj2/rcjze3LbtWh+PR9ofXDweD/T6acfqpOfzvn/Lvx4L6+TUVPfjcWObzbtXuiaHux6P7w51IOz/V4VOIfVFTWtnqXWbxhoeHgnrdDiO0LpO97RsPxJ6s8ZYT+++tnW64+7ivobSo1uwXut0vG3btV6n6WdfS63TgV4/fbs27c/nWFgXt+3pvk4b2zyzd/XHzpviP5uOnaO91uDI0GhjziNpEebH+2z+prgG78+OZ2ezU9l0fu1ovp4G8rEmHljeGhwNf9b7WLm5yxrc0bbtWq/B9H1sqbU3MLz4wa+B9udzLKyLpx7ovgYb27x+/9q+d90RLknbNL13bf/52lI/87qzbTddr7UyHOb5zf3dfzbb2ObUgZX2md33073hkps77Kf21+9Sr6npbH320+Ywz+cOLL2fGvNpbPPZg8tcT4ezLLv04Qfzn/eG369cuvjdr7T83qXT73QuffjBH7/wxN+vZP4A9L9fFmVj8b2u6TdTy/n9PwAAANAXYt8/GGqi/wcAAIDKiH3/UKiJ/h8AAAAqI/b9w6EmNen/N7/+udlfXspSMn8+iNen3fBQsV3MuE6Fr8fnFzQuf/BLM//9d5eWN/ZglmU/f+gPOm6/+aE4r8J4mOfVN7RevshX7lvW2EcfuZTGbc6vfz7cf3w8y10GnSK4U1mWfe3WT+fjjL/vSl6feehoXh++/OQTjW2eP1h8HW//7EuK7f88hH8PnzjWcvtnw374YahTb+m8P+LtvnzlVVv2v2dhvHi7ga235A/7qfcX9xs/J+czTxTbx/281Py//qmnv9zY/tFXdp7/pcHO83863O+XQv2flxXbNz8Hja/j7T4R5h/Hi7e7/4vf6Dj/q58stj/3xmK7o6HG8XeEr7e98bnZ5v316MCxlseVvanYLo4/9d0/yq+P9xfvv33+Y0eutOyP9vXxzD8X9zPZtn28PI4T/W3b+I37aV6fcfyn//Boy37uNf7Vh599WeN+28e/t227cx/emY+/cH+tn9j0F5/4dMfx4nwO/825lsdz+J3hdRzGf+r9YT2G6//3anF/7Z+ucPSdrcefuP3nN11qeTzRm39ajH/1NSfzumHspo03v+CFt1x+RWPfZdl3NhT312v8k395tmX+X7i92B/x+pjRbx9/KXH88x+ZOHN27uLsdNqrj92af3bOW4v5xPneGo6t7V8fOXvhAzPnx6fGp7JsvLofoXfNvhjqj4tyufvW84uOoDsfCc/nnX/2tY3b/+lT8fJ/fXdx+ZW3FN+37gnbfSZcvik8fysbf7Gn7ro9f30PPBNmOL/484JXY8u2/zqwrA3D429/XxDX+7mXfiDfD43r8u8b8XW9yvl/f7q4n6+G/TofPpl56+0L4zVvHz8b4cq7itf7qvdfOMzF5/Wvw/P9th8W9x/nFR/v98P7mG9sbj3exfXx1UuD7feff4rH5XA8yS4X18et4v6+8vztHacXP4cku3xH/vUfp/u5Y8ntV2Luo3OTp2bPXHx08sLM3IXJuY9+7MjpsxfPXDiSf5bnkQ/2uv3C8Wljfnyantm3N8uPVmeLcp3d6Pmfe+T49P6p7dMzJ45dPHHhkXMz508en5s7PjM9t/3YiRMzH+l1+9npQ7t2H9yzf/fEydnpQwcOHtxzcGL2zNnGNIpJ9bBv6kMTZ84fyW8yd2jvwV0PPLB3auL02emZQ/unpiYu9rp9/r1ponHr3584P3Pq2IXZ0zMTc7Mfmzm06+C+fbt7fhrg6XMn5sYnz188M3lxbub8ZPFYxi/kFze+9/W6PdU09+/F+9l2A8UH8WXvuHdf+nzWhi89vuRdFZu0fYDoc+GzaL71onMHlvN17PtHQk1q0v8DAABAHcS+fzTURP8PAAAAlRH7/g2hJvp/AAAAqIzY94+Fmv5LQE36/8rl/zdfWtb48v/y/837S/6/Zvn/d5Ut/18cL+T/18Zq8/fy/4H8fyXy/yt1o/Pz/T5/+X/5fxYrW/4/9v03ZZnf/wMAAEBFxb5/Y6iJ/h8AAAAqI/b9N4ea6P8BAACgMmLf/4JQk5r0//L/8v/y//L/8v+dx5f/70/y/93J//cg/z+Z1Sv/f3kt5y//L//PYmXL/8e+/4WhJjXp/wEAAKAOYt9/S6iJ/h8AAAAqI/b9t4aa6P8BAACgMmLfvynUpCb9v/y//L/8v/y//H/n8eX/+5P8f3fy/z3I/zv/v/y//D9rqmz5/9j3vyjUpCb9PwAAANRB7PtfHGqi/wcAAIDyGb62m8W+/yWhJov6/2scAAAAALjhYt9/W9YWBK/J7//7Jv//uPy//L/8v/x/6+MpT/5/KJP/Lw/5/+6qk/9/UZ6Flv+X/y/T/OX/5f9ZrGz5/7zvz8ayl4aa1KT/BwAAgDqIff/toSb6fwAAAKiM2Pf/v1AT/T8AAABURuz7N4ea1KT/75v8v/P/98r//6z5qZP/l//vNr78v/P/V5n8f3fVyf8X5P/l/8s0/+uZ/78nk/+nP5Ut/x/7/jtCTWrS/wMAAEAdxL7/zlAT/T8AAABURuj7T48WdeEK/T8AAABUxv/P/x7LtoSa1KT/l/8vef4/Jked/1/+X/6/lPn/Mfn/0pH/707+vwf5f/n/kub/nf+fflW2/H/s+18WalKT/h8AAAD633ynX8u2iH3/y0NN9P8AAABQGbHvf0Woif4fAAAAKiP2/eOhJjXp/+X/S57/L3Lwo8s4/38L+X/5/27jy/87/3+Vyf93J//fg/y//L/8v/w/a6ps+f/Y998ValKT/h8AAADqIPb9W0NN9P8AAABQGbHvvzvURP8PAAAAlRH7/m2hJjXp/+X/+yL/n8n/y//L/197/j/LMvn/GpH/707+vwf5f/l/+f+O+f/P/Iv8P9embPn/2Pe/MtSkJv0/AAAA1EHs+7eHmuj/AQAAoDJi339PqIn+HwAAACoj9v07Qk1q0v/L/8v/y//L/1c9/+/8//Ui/9+d/H8P8v/y//L/zv/Pmipb/j/2/a8KNalJ/w8AAAB1EPv+naEm+n8AAACojNj33xtqov8HAACAyoh9/0SoSU36f/l/+X/5f/l/+f/O48v/96cS5P/HVjO+/L/8v/x//85f/l/+n8XKlv+Pff99oSY16f8BAACgDmLff3+oif4fAAAAKiP2/ZOhJvp/AAAAqIzY90+FmtSk/5f/l/+X/5f/X1H+/xUL9yv/X5D/L5cS5P9XNb78v/y//H//zn9t8v8j8v9UStny/7Hv3xVqUpP+HwAAAOog9v27Q030/wAAAFAZse/fE2qi/wcAAIDKiH3/3lCTmvT/8v/y//L/8v/O/995fPn//iT/393a5//jQ5T/l/+X/3f+f/l/Fitb/j/2/Q+EmtSk/wcAAIA6iH3/vlAT/T8AAABURuz794ea6P8BAACgMmLffyDUpCb9v/y//L/8v/y//H/n8eX/+5P8f3fO/9+D/L/8fx/n/xtrS/6fsll2/j8cra93/j/2/QdDTWrS/wMAAEAdxL7/1aEm+n8AAACojNj3/0qoif4fAAAAKiP2/b8aalKT/l/+X/5f/l/+v+z5/1H5f/n/FZD/707+vwf5f/n/Ps7/O/8/ZbTs/H+4/Hrn/2PffyjUpCb9PwAAANRB7Pt/LdRE/w8AAACVEfv+14Sa6P8BAACgMmLffzjUpCb9v/z/OuX/44Xy/32Y//8P+f90T87/L/9ffvL/3cn/9yD/L/8v/y//z5oqW/4/9v2vDTWpSf8PAAAAdRD7/gdDTfT/AAAAUBmx739dqIn+HwAAACoj9v2vDzWpSf8v/+/8/zc+/z/SMvfy5f+d/1/+vyD/3x/k/7uT/+9B/l/+X/5f/p81Vbb8f+z73xBqUpP+HwAAAOog9v1vDDXR/wMAAEBlxL7/TaEm+n8AAACojNj3vznUpCb9v/y//P+Nz/+X/fz/8v/y/wX5//4g/9+d/H8P8v/y//L/8v+sqbLl/2Pf/+uhJjXp/wEAAKAOYt//UKiJ/h8AAAAqI/b9bwk10f8DAABAZcS+/62hJjXp/+X/5f/l/+X/5f87jy//35/k/7vrs/z/L24Jl8v/F25M/v/yvPz/9cn/D7d9fV3y/z9YKv8/v6H99vL/XA9ly//Hvv9toSY16f8BAACgDmLf//ZQE/0/AAAAVEbs+98RaqL/BwAAgMqIff9vhJrUpP+X/2/MYyG9LP8v/59fIP8v/y//37fk/7vrs/y/8/+3cf7/cs/f+f/l/1msbPn/2Pe/M9SkJv0/AAAA1EHs+x8ONdH/AwAAQGXEvv9doSb6fwAAAKiM2Pe/O9SkJv2//L/z/8v/y//L/3ceX/6/P8n/dyf/34P8v/x/2fL//yn/T38rW/4/9v2PhJrUpP8HAACAOoh9/3tCTfT/AAAAUBmx7//NUBP9PwAAAFRG7PvfG2pSk/5f/r9f8v/j8v/y//L/bY9H/l/+vxP5/+7k/3uQ/5f/L1v+3/n/6XNly//Hvv99oSbL7//Hlr0lAAAAcEPEvv+3Qk1q8vt/AAAAqIPY9/92qIn+HwAAACoj9v2/E2pSk/5f/r9f8v/O/5/J/8v/tz0e+X/5/07WL/8fjzzy//L/8v+R/L/8v/w/7cqW/499/++GmtSk/wcAAIA6iH3/+0NN9P8AAADQFzr9n+x2se8/Emqi/wcAAIDKiH3/0VCTmvT/8v/y//L/Jc3//+nWf/zet99+dJf8v/y//P+KrOv5/xsvfuf/l/+X/0/k/+X/5f9pV7b8f+z7j4WaLDR+b3WCfwAAAOhvse//vVCTmvz+HwAAAOog9v3HQ030/wAAAFAZse+fDjWpSf8v/y//L/9f0vx/H5//P+6Pfsr/T2zoo/x/POjK/3e0rvn/9yzkxOX/V5r/H+14qfy//P8az/9bWZbJ/8v/cwOVLf8f+/6ZUJOa9P8AAABQB6HvHzxR1IUr9P8AAABQGbHvPxlqov8HAACAyoh9/wdCTWrS/8v/y//L/8v/O/9/5/FLm/93/v+u5P+7K0/+vzP5f/n/fp6//L/8P4uVLf8f+/7ZUJOa9P8AAABQB7Hv/2Coif4fAAAAKiP2/R8KNdH/AwAAQGXEvv9UqElN+n/5f/l/+X/5f/n/zuPL//cn+f+l7Ty0go3l/+X/5f/l/+X/WQNly//Hvv90qMn/sXcfTZbW1x3H79iDmSk27Lzwwt54Y78EFvbafgF2lTfeuMrlBQ44JwbniINyRFkooAASQgnlBEpIKAtJKEckoYxQjQrmnDMdnnnu9Mzt7uf+z+ez8JEbxreNp8A/hi//JvsfAAAAOsjdf23cYv8DAADAMHL3/2HcYv8DAADAMHL3/1Hc0mT/6//1/8P2/792uf3/z+n/9f/6/y2k/5/n/f819P/6f/2//p+NWlr/n7v/j+OWJvsfAAAAOsjd/ydxi/0PAAAAw8jdf13cYv8DAADAMHL3/2nc0mT/7+n/T6x69v+Z8er/R+r/vf9/wc/X/+v/R3a0/f8Nj/yZT/+v/9f/B/2//l//z15L6/9z9/9Z3NJk/wMAAEAHufv/PG6x/wEAAGAYufv/Im6x/wEAAGAYufv/Mm5psv+9/+/9f/2//l//P/35+v/t5P3/eZ36/+vuveraB2//hTsO8vn6f/2//l//z2Ytrf/P3f9XcUuT/Q8AAAAd5O7/67jF/gcAAIBh5O7/m7jF/gcAAIAtdHryq7n7/zZuabL/9f/6f/2//l//P/35i+v/T+n/L4b+f16n/v9SPl//r//X/+v/2ayl9f+5+/8ubmmy/wEAAKCD3P1/H7fY/wAAADCM3P3Xxy32PwAAAAwjd/+ZuKXJ/tf/H37//xP9v/4/rv5f/+/9/8On/5+n/19D/6//1//r/9mopfX/uftviFua7H8AAADoIHf/P8Qt9j8AAAAMI3f/P8Yt9j8AAAAMI3f/P8UtTfa//t/7//p//b/+f/rz9f/bSf8/T/+/hv7/cvv5K/T/+n/9PzsdsP9/aOZP2xvp/3P3/3Pc0mT/AwAAQAe5+/8lbrH/AQAAYBi5+/81brH/AQAAYBi5+/8tbmmy//X/+n/9v/7/kvv//T/1HqX/n6b/Pxr6/3mL6f9PnJz8sv5/6/t/7//r//X/7LK09/9z9/973NJk/wMAAEAHufv/I26Z2f8H/pv5AAAAwLHK3f+fcYtf/wcAAICtl9VZ7v7/ilua7H/9v/5f/6//9/7/9OfP9f937Pj+9P/Lov+ft5j+/wL0//r/bf7+9f/6f/ZbWv+fu/+/45Ym+x8AAAA6yN1/Y9xi/wMAAMAwcvf/T9xi/wMAAMAwcvf/b9zSZP9P9//nf7v+/+Lo/3d///r/6Z8fm+r/83+i/n+2//917//3dPj9/2/HV/T/+n/9/176/6H7/9Prfrz+nylL6/9z9/9f3NJk/wMAAEAHufv/P26x/wEAAGAYufsfE7fY/wAAADCM3P2PjVua7H/v/+v/9f/b1/97//+c43z/f3Xk/f9J/f9F8v7/PP3/Gvp//b/+f/79/5l/C4D+nylL6/9z9z8ubmmy/wEAAKCD3P2Pj1vsfwAAANgOO//Zgb3/QGnI3f+EuMX+BwAAgGHk7n9i3NJk/+v/9f/6f/3/5fb/e+n/p3n//2jo/+fp/9fQ/x9GP39ysP7/pgv9+CX0/9cfdv8/Q//PlF39/53nv35c/X/u/ifFLU32PwAAAHSQu//JcYv9DwAAAMPI3f+UuMX+BwAAgGHk7n9q3NJk/x96/z/zRqj+X/+v/x+j//f+v/5/SfT/8/T/a+j/vf/v/X/9Pxu1q//f4bj6/9z9T4tbmux/AAAA6CB3/9PjFvsfAAAAhpG7/6a4xf4HAACAYeTuf0bc0mT/e/9f/6//1//r/6c/X/+/nfT/8/T/a+j/9f/6f/0/G7W0/j93/zPjlib7HwAAADrI3f+suMX+BwAAgGHk7n923GL/AwAAwDBy9z8nbmmy//X/h9v/59f1//r/lf5f/6//PxJt+/8TU38l2u8C/f/dv3/mN3d/Rf+v/9f/6//1/1ykq2d+2yL6/7Pn/7/L3P3PjVua7H8AAADoIHf/8+IW+x8AAACGkbv/+XGL/Q8AAADDyN1/c9xywP0/1zwsmf7f+//6f/2//n/68/X/26lt/3+RvP+/hv5f/6//1/+zUYvo/3f897n7XxC3+PV/AAAAGEbu/hfGLfY/AAAADCN3/4viFvsfAAAAhpG7/8VxS5P9r//X/+v/9f/6/+nP1/9vJ/3/PP3/GtvU/9+s/1/a96//1/+z39L6/9z9t8QtTfY/AAAAdJC7/yVxi/0PAAAAw8jd/9K4xf4HAACAYeTuf1nc0mT/6//1//p//b/+f/rz9f/bSf8/T/+/Wq1unfkGpvr/s1cus//3/v/ivn/9v/6f/ZbW/+fuf3nc0mT/AwAAQAe5+2+NW+x/AAAAGEbu/tviFvsfAAAAhpG7/xVxS5P9r//X/+v/9f/6/+nP1/9vJ/3/PP3/Gtv0/r/+f3Hfv/5f/89+S+v/c/e/Mm5psv8BAACgg9z9t8ct9j8AAAAMI3f/q+IW+x8AAACGkbv/jrilyf7X/+v/9f/6/679/8P6/yEdXv+/0v/r//X/a+j/9f/6f/ZaWv+fu//VcUuT/Q8AAAAd5O5/Tdxi/wMAAMAwcve/Nm6x/wEAAGAYuftfF7c02f/6f/2//l//37X/9/7/mLz/P0//v4b+X/+v/9f/s1HT/f/1x9b/5+5/fdzSZP8DAABAB7n774xb7H8AAAAYRu7+N8Qt9j8AAAAMI3f/G+OWJvtf/6//393/r1b6f/2//v+cI+j/T630/xun/5+n/19D/z9m//8zq4H6/9MX/PH6f5Zoae//5+5/U9zSZP8DAABAB7n73xy32P8AAAAwjNz9b4lb7H8AAAAYRu7+t8YtTfa//l//7/3/Y+3/4zed0f/37P/rj6r+f3P0//P0/2vo/8fs/73/P93/7/lXCej/OQxL6/9z978tbmmy/wEAAKCD3P1vj1vsfwAAABhG7v53xC32PwAAAAwjd/8745Ym+1//r//X/3v/X/8//fn6/+2k/5+n/19D/6//79T/76H/5zAsrf/P3f+uuKXJ/gcAAIAOcvffFbfY/wAAADCM3P13xy32PwAAAAwjd/+745Ym+1//r//X/29n/39K/6//1/9PWkr/f801v3GP/l//r//X/+v/9f/dLa3/z93/nrilyf4HAACADnL3vzdusf8BAABgGLn73xe32P8AAAAwjNz9749bmuz//f3/Fatzheo5U/1/NGr6/x30/7u/f/3/9M8P7//r//X/h28p/b/3/y/t+9f/6/+3+fs/UP//S/t/vP6fES2t/8/df0/c0mT/AwAAQAe5+z8Qt9j/AAAAMIzc/R+MW+x/AAAAGEbu/nvjlib73/v/+n/9v/5f/z/9+fr/7aT/n6f/X0P/r/+/tO//0f+zDPP+/8/q/9mcpfX/ufs/FLc02f8AAADQQe7+D8ct9j8AAAAMI3f/R+IW+x8AAACGkbv/o3FLk/2v/9f/6//1//r/6c/X/28n/f88/f8affr/U1Nf1P8f4fv/ExbT/3v/nw1aWv+fu/9jcUuT/Q8AAAAd5O7/eNxi/wMAAMAwcvd/Im6x/wEAAGAYufs/Gbc02f/6f/3/+P3/7+r/93y+/l//PzL9f/4VfZr+f40+/f+k4+7nt/371//r/9lvaf1/7v774pYm+x8AAAA6yN3/qbjF/gcAAIBh5O7/dNxi/wMAAMAwcvd/Jm5psv/1/736/xOrjv2/9//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93//0nTrbc/wAAALCtfutX/+C+i/1973/0v55afTZusf8BAABgGLn7Pxe32P8AAAAwjNz9n49bmux//X+v/r/n+//6f/2//r8T/f88/f8a+n/9v/5f/89GLa3/z93/hbhlx/A7eeD/LQEAAIAlyd3/xbilya//AwAAQAe5+78Ut+zb/2cv8p9qBwAAAJYmd/+X45Ymv/6v/194/786pP4/fj/9/zn6f/3/1Ofr/7eT/n/eZfb/Z0/o//X/M46t/796Gd+//l//z35L6/9z938lbmmy/wEAAGBQu/6OQu7+r8Yt9j8AAAAMI3f/1+IW+x8AAACGkbv/63FLk/2v/z/y/j9T9UN8//90/Sfv/zfv/288Nfn5+n/9/8j0//O8/7+G/n87+//93/+VO77/R/6w6f/1/xyTpfX/ufu/Ebc02f8AAADQQe7+B+IW+x8AAACGkbv/m3GL/Q8AAADDyN3/rbilyf7X/y/8/f+5/v+XL+P9f/1/j/7/Ap8/Tv//81eduet3fu+2W/T/nHeU/X/+XND/6//1/+csqP/3/r/+n4XYfP9/ctcXD9r/5+7/dtzSZP8DAABAB7n7H4xb7H8AAAAYRu7+78Qt9j8AAAAMI3f/d+OWJvtf/7/F/f8F3//fzv4//1gfQ/9/Zvv6/2yKu/f/3v/X/+/n/f95+v819P/6f/2//p+N2nz/v/uLB+3/c/d/L25psv8BAACgg9z9349bcv+fOPDfugcAAAAWJnf/D+IWv/4PAAAAw8jd/8O4pcn+1//r/5fS/6cN9P8P/Mpq5f3/mc/X/x9H//+L9Z/0/4dL/z9P/7+G/l//r//X/7NRS+v/c/f/KG5psv8BAACgg9z9D8Ut9j8AAAAMI3f/j+MW+x8AAACGkbv/4bilyf7X/4/a/2cR37L/P+j7//p//f/k53v/fzvp/+fp/9fQ/+v/9f/6fzZqaf1/7v6fBgAA///8RWtY") mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000, 0x0) 199.071923ms ago: executing program 4 (id=9847): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x3fd, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 0s ago: executing program 0 (id=9848): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r0, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) kernel console output (not intermixed with test programs): 97] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 418.600384][T21137] FAT-fs (loop0): Directory bread(block 65) failed [ 418.615669][ T6597] usb 2-1: Product: syz [ 418.621350][T21137] FAT-fs (loop0): Directory bread(block 66) failed [ 418.636840][ T6597] usb 2-1: SerialNumber: syz [ 418.636995][T14629] usb 4-1: Using ep0 maxpacket: 8 [ 418.646395][ T6597] usb 2-1: config 0 descriptor?? [ 418.658751][T21137] FAT-fs (loop0): Directory bread(block 67) failed [ 418.666614][T21139] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 418.683055][T21137] FAT-fs (loop0): Directory bread(block 68) failed [ 418.694469][T21139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7879: bg 0: block 248: padding at end of block bitmap is not set [ 418.718162][T21137] FAT-fs (loop0): Directory bread(block 69) failed [ 418.746356][T21137] FAT-fs (loop0): Directory bread(block 70) failed [ 418.767056][T21139] Quota error (device loop4): write_blk: dquota write failed [ 418.774537][T21139] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 418.793857][T21137] FAT-fs (loop0): Directory bread(block 71) failed [ 418.815928][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7883'. [ 418.823510][T21137] FAT-fs (loop0): Directory bread(block 72) failed [ 418.837224][T21139] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.7879: Failed to acquire dquot type 1 [ 418.837459][T21137] FAT-fs (loop0): Directory bread(block 73) failed [ 418.879908][T21139] EXT4-fs (loop4): 1 truncate cleaned up [ 418.885742][T21139] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 418.947301][ T6597] hso 2-1:0.0: Can't find BULK IN endpoint [ 418.958284][T14629] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 418.984446][T14629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 419.004694][T14629] usb 4-1: Product: syz [ 419.016371][T14629] usb 4-1: Manufacturer: syz [ 419.023910][T14629] usb 4-1: SerialNumber: syz [ 419.036713][ T1163] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 419.058935][T14629] usb 4-1: config 0 descriptor?? [ 419.074968][ T1163] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 1 [ 419.099370][T14629] gspca_main: sq905-2.14.0 probing 2770:9120 [ 419.166338][ T6597] usb 2-1: USB disconnect, device number 33 [ 419.535238][T21180] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7897'. [ 419.536927][T14629] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 419.550208][T21181] loop4: detected capacity change from 0 to 256 [ 419.573372][T14629] sq905: probe of 4-1:0.0 failed with error -71 [ 419.593809][T14629] usb 4-1: USB disconnect, device number 33 [ 419.634306][T21181] FAT-fs (loop4): Directory bread(block 64) failed [ 419.667191][T21181] FAT-fs (loop4): Directory bread(block 65) failed [ 419.674344][T21181] FAT-fs (loop4): Directory bread(block 66) failed [ 419.718640][T21181] FAT-fs (loop4): Directory bread(block 67) failed [ 419.743178][T21181] FAT-fs (loop4): Directory bread(block 68) failed [ 419.756884][T21181] FAT-fs (loop4): Directory bread(block 69) failed [ 419.778148][T21181] FAT-fs (loop4): Directory bread(block 70) failed [ 419.816955][T21181] FAT-fs (loop4): Directory bread(block 71) failed [ 419.847123][T21181] FAT-fs (loop4): Directory bread(block 72) failed [ 419.864239][T21181] FAT-fs (loop4): Directory bread(block 73) failed [ 420.032400][T21195] loop0: detected capacity change from 0 to 1024 [ 420.064563][T21199] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7908'. [ 420.113610][T21195] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 420.194479][T21195] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 420.311968][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7914'. [ 420.412880][T21217] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 420.475345][T21221] loop0: detected capacity change from 0 to 256 [ 420.491545][T14629] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 420.594779][T21226] loop1: detected capacity change from 0 to 512 [ 420.700485][T21226] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.809355][T21226] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 420.869749][T14629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 420.888479][T14629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 420.898619][T14629] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 420.906843][T21226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.7920: bg 0: block 248: padding at end of block bitmap is not set [ 420.956027][T21247] netlink: 328 bytes leftover after parsing attributes in process `syz.0.7931'. [ 421.003806][T14629] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 421.019021][T21226] Quota error (device loop1): write_blk: dquota write failed [ 421.022915][T14629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.035518][T14629] usb 4-1: SerialNumber: syz [ 421.036113][T21226] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 421.087030][ T7213] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 421.099469][T21226] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.7920: Failed to acquire dquot type 1 [ 421.129299][T21226] EXT4-fs (loop1): 1 truncate cleaned up [ 421.137037][T21226] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 421.338554][T14629] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 421.350510][T14629] usbtest: probe of 4-1:1.0 failed with error -22 [ 421.377876][ T4978] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 421.395321][T14629] usb 4-1: USB disconnect, device number 34 [ 421.414751][ T4978] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 1 [ 421.514612][T21245] loop2: detected capacity change from 0 to 32768 [ 421.592479][T21245] (syz.2.7930,21245,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 421.647287][ T7213] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 421.664765][T21245] (syz.2.7930,21245,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 421.681767][ T7213] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 421.711116][ T7213] usb 5-1: Product: syz [ 421.715544][ T7213] usb 5-1: Manufacturer: syz [ 421.733505][ T7213] usb 5-1: SerialNumber: syz [ 421.783799][T21245] JBD2: Ignoring recovery information on journal [ 421.809390][ T7213] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 421.886891][T21276] loop1: detected capacity change from 0 to 64 [ 421.901089][T21245] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 422.021316][T21284] FAT-fs (loop1): bogus number of reserved sectors [ 422.037481][T21284] FAT-fs (loop1): Can't find a valid FAT filesystem [ 422.166264][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 422.171622][T21291] device sit0 entered promiscuous mode [ 422.211470][T21291] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 422.246987][T21291] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7952'. [ 422.251359][ T7213] vp7045: USB control message 'in' went wrong. [ 422.275104][ T7213] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 422.316873][ T7213] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 422.397431][ T7213] usb 5-1: USB disconnect, device number 31 [ 422.575644][ T26] audit: type=1400 audit(1774993512.775:26): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=21305 comm="syz.0.7961" [ 422.769197][T21323] dlm: no locking on control device [ 422.868828][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7969'. [ 422.934397][T21331] device netdevsim0 left promiscuous mode [ 422.981840][T21331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.214841][T21347] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.311747][T21350] netlink: 'syz.4.7982': attribute type 2 has an invalid length. [ 423.701274][T21317] loop1: detected capacity change from 0 to 32768 [ 423.823147][T21317] (syz.1.7965,21317,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.855445][T21317] (syz.1.7965,21317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.864012][T21383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.990617][T21392] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8001'. [ 423.992756][T21317] JBD2: Ignoring recovery information on journal [ 424.085655][T21396] loop2: detected capacity change from 0 to 764 [ 424.221042][T21317] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 424.225333][T21401] device bond4 entered promiscuous mode [ 424.298020][T21401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.427743][T21418] netlink: 'syz.2.8012': attribute type 10 has an invalid length. [ 424.494091][T21418] team0: Device ipvlan1 failed to register rx_handler [ 424.533117][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 424.689809][T21435] overlayfs: missing 'lowerdir' [ 424.932543][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8029'. [ 424.964619][T21448] loop2: detected capacity change from 0 to 2048 [ 425.063587][T21448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.235660][T21466] rdma_rxe: rxe creation allowed on top of a real device only [ 425.338393][T21468] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8038'. [ 425.360148][T21468] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 425.406929][ T7212] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 425.508687][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8042'. [ 425.769490][ T7212] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 425.796924][ T7212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.821123][ T7212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.841159][ T7212] usb 2-1: config 1 has no interface number 0 [ 425.851318][ T7212] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 425.854978][T21444] loop4: detected capacity change from 0 to 32768 [ 425.871699][ T7212] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 425.946898][ C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 425.971986][T21444] JBD2: Ignoring recovery information on journal [ 426.016965][ T6597] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 426.050596][T21492] loop3: detected capacity change from 0 to 64 [ 426.081657][ T7212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.088239][T21444] JBD2: Unrecognised features on journal [ 426.096932][T21444] (syz.4.8025,21444,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 426.106130][T21444] (syz.4.8025,21444,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22 [ 426.115878][ T7212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.118309][T21444] (syz.4.8025,21444,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 426.153876][ T7212] usb 2-1: Product: syz [ 426.166204][ T7212] usb 2-1: Manufacturer: syz [ 426.187956][T21444] (syz.4.8025,21444,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 426.193411][ T7212] usb 2-1: SerialNumber: syz [ 426.234867][T21444] (syz.4.8025,21444,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 426.276986][ T6597] usb 1-1: Using ep0 maxpacket: 32 [ 426.437119][ T6597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.637229][ T6597] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 426.646437][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.667331][ T6597] usb 1-1: Product: syz [ 426.672755][T21444] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.702538][ T6597] usb 1-1: Manufacturer: syz [ 426.714951][ T6597] usb 1-1: SerialNumber: syz [ 426.730118][ T6597] usb 1-1: config 0 descriptor?? [ 426.746456][ T7212] usb 2-1: USB disconnect, device number 34 [ 426.898499][T21520] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 426.997297][ T6597] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels) [ 427.207131][ T6597] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 427.233486][ T6597] peak_usb 1-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71) [ 427.337945][ T6597] peak_usb: probe of 1-1:0.0 failed with error -71 [ 427.354974][ T6597] usb 1-1: USB disconnect, device number 33 [ 428.079231][T21590] comedi comedi0: comedi_config --init_data is deprecated [ 428.232911][T21600] loop4: detected capacity change from 0 to 64 [ 428.326422][T21591] loop2: detected capacity change from 0 to 8192 [ 428.380400][T21605] loop3: detected capacity change from 0 to 64 [ 428.388095][T21591] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 428.397918][T21591] REISERFS (device loop2): using ordered data mode [ 428.404467][T21591] reiserfs: using flush barriers [ 428.424964][T21591] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.446550][T21591] REISERFS (device loop2): checking transaction log (loop2) [ 428.468983][T21591] REISERFS (device loop2): Using tea hash to sort names [ 428.497597][T21591] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 428.830838][T21605] attempt to access beyond end of device [ 428.830838][T21605] loop3: rw=0, want=414, limit=64 [ 428.886953][T21620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8104'. [ 428.951114][T21605] Trying to free block not in datazone [ 429.070243][T21627] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 429.091500][T21628] loop1: detected capacity change from 0 to 512 [ 429.116955][T21627] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 429.141601][T21627] overlayfs: missing 'lowerdir' [ 429.237975][T21628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 429.321122][T21628] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.8107: bad orphan inode 131083 [ 429.324179][T21594] loop0: detected capacity change from 0 to 32768 [ 429.354079][T21628] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 429.420265][T21640] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 429.516987][T21628] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.8107: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 429.640479][T21594] XFS (loop0): Mounting V5 Filesystem [ 429.786894][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 429.883414][T21594] XFS (loop0): Ending clean mount [ 430.007487][ T4186] XFS (loop0): Unmounting Filesystem [ 430.194329][T21670] device bridge2 entered promiscuous mode [ 430.247075][T21667] loop1: detected capacity change from 0 to 4096 [ 430.459124][T21667] ntfs3: loop1: ino=5, "/" directory corrupted [ 431.070537][T21703] loop2: detected capacity change from 0 to 1024 [ 431.488131][T21730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8153'. [ 431.533680][T21734] netlink: 'syz.1.8155': attribute type 3 has an invalid length. [ 431.585758][T21734] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 432.667535][T14629] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 432.862300][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 432.880684][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 432.906856][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 432.967259][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 433.020658][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 433.048371][T14629] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 433.068107][T14629] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 433.100061][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 433.128640][T14629] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.145750][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 433.224362][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 433.317120][T14629] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.337395][T14629] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.345656][T14629] usb 4-1: Product: syz [ 433.370785][T14629] usb 4-1: Manufacturer: syz [ 433.384924][T14629] usb 4-1: SerialNumber: syz [ 433.410105][T14629] usb 4-1: config 0 descriptor?? [ 433.421735][T21857] loop0: detected capacity change from 0 to 64 [ 433.477768][T14629] hub 4-1:0.0: bad descriptor, ignoring hub [ 433.484253][T14629] hub: probe of 4-1:0.0 failed with error -5 [ 433.542299][T14629] usb 4-1: selecting invalid altsetting 0 [ 433.548977][T21857] hfs: keylen 40 too large [ 433.837059][ T6597] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 433.847353][T21875] loop0: detected capacity change from 0 to 64 [ 433.917302][T14629] usb 4-1: USB disconnect, device number 35 [ 434.024216][T21879] program syz.0.8226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.106877][ T6597] usb 2-1: Using ep0 maxpacket: 32 [ 434.222099][T21885] loop4: detected capacity change from 0 to 256 [ 434.277224][ T6597] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 434.287438][ T6597] usb 2-1: config 0 has no interface number 0 [ 434.299030][ T6597] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 777 [ 434.345004][T21885] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 434.421408][T21885] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value [ 434.452317][T21885] befs: (nullb0): cannot parse mount options [ 434.517222][ T6597] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 434.528419][ T6597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.536531][ T6597] usb 2-1: Product: syz [ 434.550533][ T6597] usb 2-1: Manufacturer: syz [ 434.566922][ T6597] usb 2-1: SerialNumber: syz [ 434.574146][ T6597] usb 2-1: config 0 descriptor?? [ 434.621273][ T8411] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 434.629921][T21864] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 434.648767][ T6597] redrat3 2-1:0.83: Couldn't find all endpoints [ 434.747049][ T8817] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 434.894349][ T6597] usb 2-1: USB disconnect, device number 35 [ 434.916915][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.013616][ T8817] usb 3-1: Using ep0 maxpacket: 16 [ 435.019211][T21925] loop4: detected capacity change from 0 to 64 [ 435.138503][ T8817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.161172][ T8817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 435.178243][ T8817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 435.192478][ T8817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 435.205735][ T8817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.235138][ T8817] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.257293][ T8411] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.271654][ T8817] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 435.281454][ T8411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.281484][ T8411] usb 1-1: Product: syz [ 435.281501][ T8411] usb 1-1: Manufacturer: syz [ 435.281518][ T8411] usb 1-1: SerialNumber: syz [ 435.304261][ T8817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.335002][ T8817] usb 3-1: config 0 descriptor?? [ 435.352378][ T8411] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.486822][ T8817] rc_core: IR keymap rc-hauppauge not found [ 435.492874][ T8817] Registered IR keymap rc-empty [ 435.514509][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.521454][T21948] netlink: 'syz.3.8260': attribute type 1 has an invalid length. [ 435.541756][T21948] netlink: 'syz.3.8260': attribute type 2 has an invalid length. [ 435.562578][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.598649][ T8817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 435.619391][ T8817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 435.653878][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.666835][ C1] mceusb 3-1:0.0: Error: urb status = -75 [ 435.697042][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.727348][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.752394][T21961] netlink: 'syz.1.8266': attribute type 1 has an invalid length. [ 435.765044][T21961] __nla_validate_parse: 8 callbacks suppressed [ 435.765061][T21961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8266'. [ 435.767073][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.774424][T21961] NCSI netlink: No device for ifindex 0 [ 435.798760][ T6597] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 435.817252][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.854166][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.897188][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.947119][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 435.976935][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.017082][ T8817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.022931][T21977] ipt_rpfilter: unknown options [ 436.030221][ T8411] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 436.058334][ T8817] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 436.074351][ T8817] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 436.105055][ T8817] usb 3-1: USB disconnect, device number 35 [ 436.268102][ T6597] usb 5-1: unable to get BOS descriptor or descriptor too short [ 436.379687][ T6597] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 436.390722][ T6597] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 436.437036][T13212] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 436.447918][ T8817] usb 1-1: USB disconnect, device number 34 [ 436.457712][T21989] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 436.547039][T14629] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 436.597314][ T6597] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 436.613522][ T6597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.629177][ T6597] usb 5-1: Product: syz [ 436.633907][ T6597] usb 5-1: Manufacturer: syz [ 436.639409][ T6597] usb 5-1: SerialNumber: syz [ 436.706912][T13212] usb 2-1: Using ep0 maxpacket: 32 [ 436.875552][T13212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.917462][T14629] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 436.925816][T14629] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 436.939026][T14629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.950139][T14629] usb 4-1: config 0 has no interface number 0 [ 436.956403][T14629] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 436.968106][T14629] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 436.981983][T13212] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 437.000587][T13212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.011085][T14629] usb 4-1: config 0 interface 255 has no altsetting 0 [ 437.011128][T14629] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 437.011153][T14629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.036875][T14629] usb 4-1: config 0 descriptor?? [ 437.048012][T13212] usb 2-1: config 1 has no interface number 2 [ 437.057123][ T6597] usb 5-1: Can't get UAC3 power state for id 10 [ 437.075412][T13212] usb 2-1: config 1 interface 255 has no altsetting 0 [ 437.083424][ T8411] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 437.087878][T14629] usb-storage 4-1:0.255: USB Mass Storage device detected [ 437.096013][ T8411] ath9k_htc: Failed to initialize the device [ 437.125670][ T8817] usb 1-1: ath9k_htc: USB layer deinitialized [ 437.153790][T22022] netlink: 'syz.2.8295': attribute type 1 has an invalid length. [ 437.165487][T14629] usb-storage 4-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 437.174998][T22022] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8295'. [ 437.186068][ T6597] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 437.197949][T22022] block nbd0: not configured, cannot reconfigure [ 437.204816][ T6597] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 437.317736][ T6597] usb 5-1: USB disconnect, device number 32 [ 437.324270][ T7213] usb 4-1: USB disconnect, device number 36 [ 437.343363][T13212] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 437.384220][T13212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.421205][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8297'. [ 437.436935][T13212] usb 2-1: Product: syz [ 437.441147][T13212] usb 2-1: Manufacturer: syz [ 437.446056][T13212] usb 2-1: SerialNumber: syz [ 437.646339][ T4589] udevd[4589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.690709][T22041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8303'. [ 437.847019][T13212] usb 2-1: USB disconnect, device number 36 [ 437.850677][T22043] xt_CT: No such helper "snmp" [ 438.138071][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.355374][T22071] netlink: 'syz.2.8318': attribute type 10 has an invalid length. [ 438.375039][T22071] device veth1_vlan left promiscuous mode [ 438.406110][T22071] team0: Device veth1_vlan failed to register rx_handler [ 438.466186][T22079] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 438.573737][T22085] netlink: 'syz.0.8325': attribute type 10 has an invalid length. [ 438.606880][T22085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.749158][T22097] loop1: detected capacity change from 0 to 512 [ 438.930827][T22097] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.8330: bad orphan inode 11862016 [ 438.951835][T22097] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.969750][T22097] ext4 filesystem being mounted at /1631/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.048255][T22119] netlink: 'syz.2.8340': attribute type 21 has an invalid length. [ 439.061921][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8340'. [ 439.616122][T22154] loop0: detected capacity change from 0 to 2048 [ 439.726049][T22154] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 439.807548][T22154] UDF-fs: unknown compression code (0) [ 439.837448][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8362'. [ 439.867140][T13212] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 440.029080][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.035483][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.307321][T13212] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 440.328276][T13212] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 440.379451][T22195] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 440.389494][T13212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 440.439507][T13212] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.587253][T13212] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.618164][T13212] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.626372][T13212] usb 4-1: Manufacturer: syz [ 440.659565][T13212] usb 4-1: config 0 descriptor?? [ 440.854280][T22223] trusted_key: encrypted_key: master key parameter '' is invalid [ 440.973484][T13212] usb 4-1: USB disconnect, device number 37 [ 441.469202][T22258] netlink: 'syz.1.8405': attribute type 1 has an invalid length. [ 441.870882][T22282] loop4: detected capacity change from 0 to 64 [ 441.956469][T22286] netlink: 'syz.1.8430': attribute type 10 has an invalid length. [ 442.076376][T22292] netlink: 'syz.1.8422': attribute type 3 has an invalid length. [ 442.100453][T22290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8420'. [ 442.121635][T22292] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8422'. [ 442.157497][T22290] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8420'. [ 442.178297][T22290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8420'. [ 442.229884][T22298] netlink: 'syz.4.8424': attribute type 1 has an invalid length. [ 442.247077][T22290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8420'. [ 442.371158][T22304] loop4: detected capacity change from 0 to 1024 [ 442.406893][T13212] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 442.471530][T22304] hfsplus: invalid length 789 has been corrected to 255 [ 442.531438][T22312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8433'. [ 442.817101][T13212] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 442.851999][T13212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.886986][T13212] usb 4-1: config 0 has no interface number 0 [ 442.906871][T13212] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 442.922733][T22325] loop4: detected capacity change from 0 to 4096 [ 442.939554][T13212] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 442.966117][T13212] usb 4-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.989563][T13212] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 443.009860][T13212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.033840][T13212] usb 4-1: config 0 descriptor?? [ 443.078991][T13212] xbox_remote_probe: Unexpected endpoint_in [ 443.110289][T22325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 443.135649][T22342] loop0: detected capacity change from 0 to 256 [ 443.206863][ T6597] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 443.240781][T22342] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 443.293994][ T8411] usb 4-1: USB disconnect, device number 38 [ 443.547390][ T6597] usb 3-1: Using ep0 maxpacket: 8 [ 443.605457][T22358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8454'. [ 443.727187][ T6597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.786997][T13212] Bluetooth: hci4: command 0x0405 tx timeout [ 443.857008][ T6597] usb 3-1: config 86 has an invalid interface number: 246 but max is 0 [ 443.865419][ T6597] usb 3-1: config 86 has no interface number 0 [ 443.916812][ T6597] usb 3-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023 [ 443.956017][ T6597] usb 3-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 443.989457][ T6597] usb 3-1: config 86 interface 246 has no altsetting 0 [ 444.052603][T22382] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 444.097093][T22382] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 444.183466][ T6597] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36 [ 444.197038][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.215586][ T6597] usb 3-1: Product: syz [ 444.224113][ T6597] usb 3-1: Manufacturer: syz [ 444.229137][T22390] netlink: 'syz.4.8470': attribute type 10 has an invalid length. [ 444.237759][ T6597] usb 3-1: SerialNumber: syz [ 444.277277][T22323] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 444.289966][T22390] team0: Port device virt_wifi0 added [ 444.339350][T22395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8473'. [ 444.375410][T22395] openvswitch: netlink: Missing key (keys=40, expected=100) [ 444.422751][T22402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.520141][T22404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8477'. [ 444.617545][ T6597] kvaser_usb 3-1:86.246: Cannot get usb endpoint(s) [ 444.647852][ T6597] usb 3-1: USB disconnect, device number 36 [ 444.915500][T22430] loop4: detected capacity change from 0 to 64 [ 445.147098][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 445.364158][T22460] loop4: detected capacity change from 0 to 1024 [ 445.520583][T22471] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8510'. [ 445.530008][ T8817] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 445.597740][T22460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.666814][T22460] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 32: comm syz.4.8502: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=255, rec_len=0, size=1024 fake=0 [ 445.731348][T22482] netlink: 'syz.1.8513': attribute type 1 has an invalid length. [ 445.776865][ T8817] usb 4-1: Using ep0 maxpacket: 16 [ 445.897020][ T8817] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 445.905720][ T8817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.946356][T22493] loop2: detected capacity change from 0 to 512 [ 445.948710][ T8817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 446.036661][T22493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 446.117250][T22493] System zones: 1-12 [ 446.189911][T22493] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.8519: Directory hole found for htree index block 0 [ 446.219341][T22493] EXT4-fs (loop2): Remounting filesystem read-only [ 446.227163][ T8817] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 446.228854][T22493] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 446.236284][ T8817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.256319][T22493] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.8519: Directory hole found for htree index block 0 [ 446.301352][ T8817] usb 4-1: Product: syz [ 446.310701][T22493] EXT4-fs (loop2): Remounting filesystem read-only [ 446.328570][T22493] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 446.330152][ T8817] usb 4-1: Manufacturer: syz [ 446.356611][T22493] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 446.362381][ T8817] usb 4-1: SerialNumber: syz [ 446.468823][ T8817] usb 4-1: config 0 descriptor?? [ 446.945259][T22545] loop1: detected capacity change from 0 to 64 [ 447.143310][T22555] openvswitch: netlink: Actions may not be safe on all matching packets [ 447.222403][T22560] loop2: detected capacity change from 0 to 128 [ 447.274952][T22563] loop1: detected capacity change from 0 to 256 [ 447.357192][T22560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 447.374040][T22563] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 447.377866][T22568] __nla_validate_parse: 2 callbacks suppressed [ 447.377882][T22568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8556'. [ 447.392644][T22563] FAT-fs (loop1): Filesystem has been set read-only [ 447.414555][T22560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.654714][T22577] openvswitch: netlink: Message has 4 unknown bytes. [ 448.086988][ T8817] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 448.220941][T22610] tipc: Can't bind to reserved service type 2 [ 448.271371][T14629] usb 4-1: USB disconnect, device number 39 [ 448.332176][T22612] netlink: 'syz.1.8580': attribute type 3 has an invalid length. [ 448.447217][ T8817] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 448.455484][ T8817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.495095][ T8817] usb 3-1: config 0 has no interface number 0 [ 448.517396][ T8817] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 448.529281][ T8817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.539890][ T8817] usb 3-1: config 0 descriptor?? [ 448.584678][ T8817] ttusbir 3-1:0.83: cannot find expected altsetting [ 448.789346][ T8817] usb 3-1: USB disconnect, device number 37 [ 448.802781][T22638] x_tables: duplicate entry at hook 2 [ 449.044930][T22650] netlink: 340 bytes leftover after parsing attributes in process `syz.4.8597'. [ 449.217499][T22662] netlink: 'syz.1.8603': attribute type 10 has an invalid length. [ 449.302894][T22664] device ~ÿ entered promiscuous mode [ 449.401045][T22671] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.8607'. [ 450.180689][ T7213] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 450.257041][T13212] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 450.388303][T22726] loop1: detected capacity change from 0 to 2048 [ 450.434166][T22703] loop2: detected capacity change from 0 to 32768 [ 450.475513][T22726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.522176][T22726] Invalid option length (0) for dns_resolver key [ 450.559660][T22703] XFS (loop2): Mounting V5 Filesystem [ 450.607023][ T7213] usb 4-1: unable to get BOS descriptor or descriptor too short [ 450.647726][ T7213] usb 4-1: not running at top speed; connect to a high speed hub [ 450.687721][T13212] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 450.696329][T13212] usb 1-1: config 0 has no interface number 0 [ 450.722343][T13212] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 450.726924][ T7213] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 450.740975][ T7213] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 450.746861][T13212] usb 1-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.758563][ T7213] usb 4-1: config 17 has no interface number 0 [ 450.769970][ T7213] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 450.781120][T13212] usb 1-1: config 0 interface 110 has no altsetting 0 [ 450.784924][ T7213] usb 4-1: config 17 interface 8 has no altsetting 0 [ 450.800907][T22703] XFS (loop2): Ending clean mount [ 450.808614][T22703] XFS (loop2): Quotacheck needed: Please wait. [ 450.841002][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8642'. [ 450.891141][T22752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8643'. [ 450.900937][T22752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8643'. [ 450.910893][T22703] XFS (loop2): Quotacheck: Done. [ 450.957090][ T7213] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 450.973770][ T8411] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 450.976856][ T7213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.987031][T13212] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 451.007162][ T7213] usb 4-1: Product: syz [ 451.012215][ T7213] usb 4-1: Manufacturer: syz [ 451.015688][T13212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.025841][ T7213] usb 4-1: SerialNumber: syz [ 451.036576][T13212] usb 1-1: Product: syz [ 451.057453][T13212] usb 1-1: Manufacturer: syz [ 451.062117][T13212] usb 1-1: SerialNumber: syz [ 451.073824][ T4185] XFS (loop2): Unmounting Filesystem [ 451.090259][T13212] usb 1-1: config 0 descriptor?? [ 451.121711][T22758] loop1: detected capacity change from 0 to 256 [ 451.214472][T22758] FAT-fs (loop1): Directory bread(block 64) failed [ 451.221578][T22758] FAT-fs (loop1): Directory bread(block 65) failed [ 451.228509][T22758] FAT-fs (loop1): Directory bread(block 66) failed [ 451.235166][T22758] FAT-fs (loop1): Directory bread(block 67) failed [ 451.248593][T22758] FAT-fs (loop1): Directory bread(block 68) failed [ 451.255475][T22758] FAT-fs (loop1): Directory bread(block 69) failed [ 451.268836][T22758] FAT-fs (loop1): Directory bread(block 70) failed [ 451.275434][T22758] FAT-fs (loop1): Directory bread(block 71) failed [ 451.285646][ T8411] usb 5-1: Using ep0 maxpacket: 16 [ 451.293190][T22758] FAT-fs (loop1): Directory bread(block 72) failed [ 451.301281][T22758] FAT-fs (loop1): Directory bread(block 73) failed [ 451.382084][T13212] cdc_subset: probe of 1-1:0.110 failed with error -22 [ 451.403891][ T7213] usb 4-1: selecting invalid altsetting 0 [ 451.433106][ T7213] usb 4-1: USB disconnect, device number 40 [ 451.447060][ T8411] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 451.646656][T13212] usb 1-1: USB disconnect, device number 35 [ 451.667405][ T8411] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 451.686243][ T8411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.696102][ T8411] usb 5-1: Product: syz [ 451.703732][ T8411] usb 5-1: Manufacturer: syz [ 451.709787][ T8411] usb 5-1: SerialNumber: syz [ 451.718020][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.922934][T22775] loop1: detected capacity change from 0 to 2048 [ 451.973956][T13212] usb 5-1: USB disconnect, device number 33 [ 452.025858][T22780] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.053384][T22775] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 452.103206][T22775] Remounting filesystem read-only [ 452.113510][T22775] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 452.123857][T22775] NILFS (loop1): error -5 truncating bmap (ino=16) [ 452.187416][ T4187] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 452.252280][T22788] loop2: detected capacity change from 0 to 4096 [ 452.313008][T22792] loop3: detected capacity change from 0 to 764 [ 452.416111][T22799] netlink: 'syz.1.8665': attribute type 5 has an invalid length. [ 452.453810][T22799] device ip6erspan0 entered promiscuous mode [ 452.920474][T22829] netlink: 798 bytes leftover after parsing attributes in process `syz.0.8680'. [ 453.185547][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8688'. [ 453.227445][T22851] loop2: detected capacity change from 0 to 512 [ 453.317922][T22860] netlink: 'syz.3.8694': attribute type 6 has an invalid length. [ 453.330955][T22851] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.392988][T22851] ext4 filesystem being mounted at /1821/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.406959][T22864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8696'. [ 453.505721][T22851] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.8691: invalid size [ 454.069830][T22922] loop1: detected capacity change from 0 to 64 [ 454.071534][T22919] loop0: detected capacity change from 0 to 256 [ 454.085731][T22916] loop4: detected capacity change from 0 to 2048 [ 454.156341][T22928] xt_hashlimit: max too large, truncated to 1048576 [ 454.164365][T22919] exfat: Deprecated parameter 'utf8' [ 454.172709][T22928] No such timeout policy "syz1" [ 454.179473][T22916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.184148][T22919] exfat: Deprecated parameter 'namecase' [ 454.205084][T22919] exfat: Deprecated parameter 'utf8' [ 454.271010][T22919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 454.426908][ T8411] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 454.734767][T22955] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.8740' sets config #0 [ 454.823881][T22959] QAT: Stopping all acceleration devices. [ 454.857047][ T8411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.879968][ T8411] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 455.087254][ T8411] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 455.104708][ T8411] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 455.141833][T22968] UDF-fs: bad mount option "shortan$uid½forget" or missing value [ 455.157878][ T8411] usb 3-1: Product: syz [ 455.167097][ T8411] usb 3-1: Manufacturer: syz [ 455.210996][T22968] cifs: Unknown parameter 'anchor' [ 455.219046][ T8411] usb 3-1: SerialNumber: syz [ 455.249453][ T8411] usb 3-1: config 0 descriptor?? [ 455.282595][T22977] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 455.309076][ T8411] imon_raw 3-1:0.0: IR endpoint missing [ 455.323540][T22977] [U] J"—e:ÀÆ" [ 455.583089][T22995] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 455.607756][T22995] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 455.648572][T22997] kernel read not supported for file /  (pid: 22997 comm: syz.4.8762) [ 455.670023][T22995] Error parsing options; rc = [-22] [ 455.675432][ T26] audit: type=1800 audit(1774993545.885:27): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8762" name=200120 dev="mqueue" ino=91929 res=0 errno=0 [ 455.724966][ T8411] usb 3-1: USB disconnect, device number 38 [ 456.065175][T23021] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 456.367096][T23029] set_capacity_and_notify: 2 callbacks suppressed [ 456.367115][T23029] loop2: detected capacity change from 0 to 4096 [ 456.401281][T23041] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 456.552118][T23029] ntfs3: loop2: ino=3, Correct links count -> 2. [ 456.562489][T23048] loop3: detected capacity change from 0 to 512 [ 456.608134][T23049] loop1: detected capacity change from 0 to 2048 [ 456.652408][T23048] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 456.722411][T23048] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 456.750566][T23049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.821903][T23048] ext4 filesystem being mounted at /1649/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.079943][T23071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8796'. [ 457.158073][T13212] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 457.206352][T23071] device bond6 entered promiscuous mode [ 457.409954][T23085] netlink: 'syz.0.8804': attribute type 1 has an invalid length. [ 457.418185][T13212] usb 5-1: Using ep0 maxpacket: 16 [ 457.458816][T23085] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8804'. [ 457.479707][T23075] loop1: detected capacity change from 0 to 4096 [ 457.486313][T23087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8805'. [ 457.528631][T23075] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 457.547347][T13212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 457.556642][T13212] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 457.599014][T13212] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 457.644127][T13212] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 457.686933][T13212] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 457.711681][T13212] usb 5-1: config 1 interface 0 has no altsetting 0 [ 457.727930][T13212] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 457.746782][T13212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.793009][T23099] loop3: detected capacity change from 0 to 2048 [ 457.821753][T13212] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 457.905991][ T4588] loop3: p1 p2 p3 [ 457.968292][T23099] loop3: p1 p2 p3 [ 458.050431][T13212] scsi host1: usb-storage 5-1:1.0 [ 458.180075][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 458.195624][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 458.209931][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 458.231249][T13212] usb 5-1: USB disconnect, device number 34 [ 458.278865][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8821'. [ 458.308459][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 458.308979][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 458.362130][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 458.806181][T23114] loop2: detected capacity change from 0 to 32768 [ 459.038671][T23158] dlm: dev_write: no op 0 74000000000000 [ 459.049222][T23161] netlink: 'syz.1.8840': attribute type 1 has an invalid length. [ 459.277103][T13212] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 459.308518][T23173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8846'. [ 459.326831][ T7213] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 459.360110][T23173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8846'. [ 459.567032][ T7213] usb 3-1: Using ep0 maxpacket: 16 [ 459.567080][T13212] usb 1-1: Using ep0 maxpacket: 16 [ 459.685319][T23191] Unknown options in mask b7f2 [ 459.688565][ T7213] usb 3-1: config 8 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 459.725531][ T7213] usb 3-1: config 8 interface 0 has no altsetting 0 [ 459.773454][T23195] device bridge2 entered promiscuous mode [ 459.787141][T13212] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.838345][ T7213] usb 3-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 459.862090][ T7213] usb 3-1: New USB device strings: Mfr=230, Product=0, SerialNumber=0 [ 459.886903][ T7213] usb 3-1: Manufacturer: syz [ 459.897233][T13212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.074748][T23189] loop1: detected capacity change from 0 to 32768 [ 460.097064][T13212] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 460.137745][T13212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.146469][T13212] usb 1-1: Product: syz [ 460.161762][T13212] usb 1-1: Manufacturer: syz [ 460.166420][T13212] usb 1-1: SerialNumber: syz [ 460.210836][ T8411] usb 3-1: USB disconnect, device number 39 [ 460.217672][T23209] loop4: detected capacity change from 0 to 1024 [ 460.282282][T23209] EXT4-fs (loop4): inline encryption not supported [ 460.364377][T23209] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.8863: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.407189][T23209] EXT4-fs (loop4): Remounting filesystem read-only [ 460.425639][T23209] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.8863: Invalid inode bitmap blk 0 in block_group 0 [ 460.454220][T23209] EXT4-fs (loop4): Remounting filesystem read-only [ 460.483103][T23209] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 460.530611][ T8817] usb 1-1: USB disconnect, device number 36 [ 460.539900][T23209] EXT4-fs (loop4): Remounting filesystem read-only [ 460.546593][T23209] EXT4-fs (loop4): 1 orphan inode deleted [ 460.561272][T23209] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 460.617033][ T7213] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 460.659593][T23209] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.8863: Invalid inode table block 0 in block_group 0 [ 460.682455][T23209] EXT4-fs (loop4): Remounting filesystem read-only [ 460.869461][ T7213] usb 2-1: Using ep0 maxpacket: 8 [ 461.142218][T23255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8885'. [ 461.152453][ T7213] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 461.177109][T23255] netlink: 'syz.3.8885': attribute type 1 has an invalid length. [ 461.183977][ T7213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.203972][ T7213] usb 2-1: Product: syz [ 461.215853][ T7213] usb 2-1: Manufacturer: syz [ 461.234293][ T7213] usb 2-1: SerialNumber: syz [ 461.463324][T23271] XFS (nullb0): Invalid superblock magic number [ 461.528186][ T8411] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 461.746966][ T7213] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 461.768170][T23298] tmpfs: Bad value for 'mpol' [ 461.775308][ T7213] mxuport: probe of 2-1:254.0 failed with error -5 [ 461.802768][ T7213] usb 2-1: USB disconnect, device number 37 [ 461.817024][ T8411] usb 3-1: Using ep0 maxpacket: 16 [ 462.002611][T23309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8910'. [ 462.117594][ T8411] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 462.146869][ T8411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.173812][ T8411] usb 3-1: Product: syz [ 462.198757][ T8411] usb 3-1: Manufacturer: syz [ 462.203492][ T8411] usb 3-1: SerialNumber: syz [ 462.231021][ T8411] usb 3-1: config 0 descriptor?? [ 462.241883][T23322] loop3: detected capacity change from 0 to 128 [ 462.269344][ T8411] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 462.330256][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8918'. [ 462.450646][T23322] loop3: detected capacity change from 0 to 512 [ 462.474961][T23330] loop1: detected capacity change from 0 to 4096 [ 462.476614][T23336] xt_limit: Overflow, try lower: 65536/2147483648 [ 462.482009][ T8411] ssu100: probe of 3-1:0.0 failed with error -71 [ 462.524598][ T8411] usb 3-1: USB disconnect, device number 40 [ 462.542117][T23330] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 462.581678][T23322] EXT4-fs (loop3): Ignoring removed nobh option [ 462.641446][T23322] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 462.767422][T23322] EXT4-fs (loop3): mount failed [ 463.181104][T23366] netlink: 'syz.0.8937': attribute type 1 has an invalid length. [ 463.237746][T23366] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8937'. [ 463.674402][T23405] xt_socket: unknown flags 0x50 [ 463.973571][T23427] loop2: detected capacity change from 0 to 16 [ 464.063258][T23427] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 464.469362][T23464] netlink: 748 bytes leftover after parsing attributes in process `syz.4.8983'. [ 464.593080][T23475] x_tables: ip_tables: osf match: only valid for protocol 6 [ 464.613316][ T8411] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 464.729948][T23483] loop2: detected capacity change from 0 to 1024 [ 464.866675][ T4978] hfsplus: b-tree write err: -5, ino 25 [ 464.873255][ T4978] hfsplus: b-tree write err: -5, ino 4 [ 464.897214][ T4978] hfsplus: b-tree write err: -5, ino 2 [ 464.913721][ T4978] hfsplus: b-tree write err: -5, ino 22 [ 464.934115][T23498] loop0: detected capacity change from 0 to 64 [ 465.033385][T23502] loop4: detected capacity change from 0 to 1024 [ 465.047175][ T8411] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 465.065759][ T8411] usb 4-1: config 0 has no interface number 1 [ 465.090881][ T8411] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 465.108835][ T8411] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 465.197071][T23502] hfsplus: invalid length 256 has been corrected to 255 [ 465.237238][ T8411] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 465.250240][ T8411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.273713][ T4978] hfsplus: b-tree write err: -5, ino 25 [ 465.286218][ T4978] hfsplus: b-tree write err: -5, ino 4 [ 465.292023][ T8411] usb 4-1: SerialNumber: syz [ 465.299689][ T8411] usb 4-1: config 0 descriptor?? [ 465.336144][ T4978] hfsplus: b-tree write err: -5, ino 2 [ 465.524410][T23531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9018'. [ 465.587274][ T8411] usb 4-1: Found UVC 0.00 device (0002:0000) [ 465.600700][ T8411] usb 4-1: No valid video chain found. [ 465.626911][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.668112][ T8411] usb 4-1: USB disconnect, device number 41 [ 465.859154][T23546] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.298836][ T26] audit: type=1326 audit(1774993556.515:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23566 comm="syz.0.9036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc048607819 code=0x0 [ 466.423349][T23577] loop0: detected capacity change from 0 to 256 [ 466.513602][ T6597] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 466.616981][ T7213] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 466.647023][T23577] FAT-fs (loop0): Directory bread(block 64) failed [ 466.669213][T23577] FAT-fs (loop0): Directory bread(block 65) failed [ 466.699963][T23577] FAT-fs (loop0): Directory bread(block 66) failed [ 466.749219][T23577] FAT-fs (loop0): Directory bread(block 67) failed [ 466.767671][T23577] FAT-fs (loop0): Directory bread(block 68) failed [ 466.774402][T23577] FAT-fs (loop0): Directory bread(block 69) failed [ 466.781701][T23577] FAT-fs (loop0): Directory bread(block 70) failed [ 466.789071][T23577] FAT-fs (loop0): Directory bread(block 71) failed [ 466.795679][T23577] FAT-fs (loop0): Directory bread(block 72) failed [ 466.802328][T23577] FAT-fs (loop0): Directory bread(block 73) failed [ 466.938320][ T6597] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 466.987057][ T7213] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 467.026943][ T7213] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.042771][T23602] kAFS: No cell specified [ 467.062902][ T7213] usb 3-1: config 2 interface 0 has no altsetting 0 [ 467.166954][ T6597] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 467.176063][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.201317][T23608] loop4: detected capacity change from 0 to 736 [ 467.215575][ T6597] usb 4-1: Product: syz [ 467.220049][ T6597] usb 4-1: Manufacturer: syz [ 467.224732][ T6597] usb 4-1: SerialNumber: syz [ 467.237094][ T7213] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 467.246303][ T7213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.266460][ T7213] usb 3-1: Product: syz [ 467.271186][ T7213] usb 3-1: Manufacturer: syz [ 467.275812][ T7213] usb 3-1: SerialNumber: syz [ 467.290810][ T6597] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 467.300610][T23614] loop1: detected capacity change from 0 to 256 [ 467.316900][ T6597] dvb-usb: bulk message failed: -22 (3/0) [ 467.341147][T23608] rock: directory entry would overflow storage [ 467.361848][T23608] rock: sig=0x3b10, size=4, remaining=3 [ 467.398589][ T6597] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 467.431460][ T6597] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 467.450447][ T6597] dvb_usb_umt_010: probe of 4-1:54.0 failed with error -22 [ 467.462771][T23614] FAT-fs (loop1): Directory bread(block 64) failed [ 467.488725][T23614] FAT-fs (loop1): Directory bread(block 65) failed [ 467.496873][ T6597] usb 4-1: USB disconnect, device number 42 [ 467.500008][T23614] FAT-fs (loop1): Directory bread(block 66) failed [ 467.533964][T23614] FAT-fs (loop1): Directory bread(block 67) failed [ 467.553474][T23614] FAT-fs (loop1): Directory bread(block 68) failed [ 467.595515][T23620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9062'. [ 467.622196][T23614] FAT-fs (loop1): Directory bread(block 69) failed [ 467.632805][T23614] FAT-fs (loop1): Directory bread(block 70) failed [ 467.647692][T23614] FAT-fs (loop1): Directory bread(block 71) failed [ 467.655502][T23614] FAT-fs (loop1): Directory bread(block 72) failed [ 467.676426][ T7213] usb 3-1: USB disconnect, device number 41 [ 467.695479][T23614] FAT-fs (loop1): Directory bread(block 73) failed [ 467.747397][T23624] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9064'. [ 467.903763][T23630] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 468.231560][T23646] loop3: detected capacity change from 0 to 512 [ 468.236896][ T7213] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 468.250071][T23650] IPv6: Can't replace route, no match found [ 468.388356][T23646] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 468.447001][T23646] ext4 filesystem being mounted at /1702/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.519040][T23646] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.9076: Attempting to read directory block (0) that is past i_size (3) [ 468.607082][ T7213] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.637025][ T7213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.654387][ T7213] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 468.686946][ T8817] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 468.712012][ T7213] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 468.807113][ T7213] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.816305][ T7213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.850661][T23684] loop2: detected capacity change from 0 to 764 [ 468.865951][ T7213] usb 2-1: SerialNumber: syz [ 468.919041][T23684] Symlink component flag not implemented [ 468.960580][T23684] Symlink component flag not implemented (105) [ 469.060853][ T8817] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 469.073524][ T8817] usb 5-1: config 0 has no interface number 0 [ 469.097032][ T8817] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 469.133096][ T8817] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 469.166301][T23698] program syz.3.9100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.178840][ T7213] usb 2-1: 0:2 : does not exist [ 469.183786][ T7213] usb 2-1: unit 5 not found! [ 469.203949][ T8817] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 469.244105][ T7213] usb 2-1: USB disconnect, device number 38 [ 469.257001][ T8817] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 469.284313][ T8817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.302437][ T8817] usb 5-1: config 0 descriptor?? [ 469.327492][T23665] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 469.348508][ T8817] ldusb 5-1:0.55: Interrupt in endpoint not found [ 469.518807][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.618128][T13212] usb 5-1: USB disconnect, device number 35 [ 469.761158][T23731] netlink: 'syz.1.9115': attribute type 1 has an invalid length. [ 470.262891][T23764] loop3: detected capacity change from 0 to 512 [ 470.308455][T23764] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 470.344892][T23764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 470.351189][ T3231] block nbd4: Attempted send on invalid socket [ 470.359443][ T3231] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 470.371808][T13212] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 470.379509][ T3231] gfs2: error 10 reading superblock [ 470.388968][T23764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 470.437067][T23764] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.9132: bad orphan inode 267 [ 470.448679][T23764] EXT4-fs (loop3): Remounting filesystem read-only [ 470.455391][T23764] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000080000. Quota mode: none. [ 470.570706][T23764] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.9132: dx entry: limit 0 != root limit 125 [ 470.646992][T13212] usb 2-1: Using ep0 maxpacket: 32 [ 470.652581][T23764] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.9132: Corrupt directory, running e2fsck is recommended [ 470.787234][T13212] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.807604][T13212] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.877691][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9145'. [ 470.987079][T13212] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 470.996195][T13212] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 471.034854][T13212] usb 2-1: Product: syz [ 471.059273][T13212] usb 2-1: Manufacturer: syz [ 471.128295][T13212] hub 2-1:4.0: USB hub found [ 471.294348][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9155'. [ 471.347246][T13212] hub 2-1:4.0: 6 ports detected [ 471.366942][T13212] hub 2-1:4.0: insufficient power available to use all downstream ports [ 471.557222][T13212] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 471.563625][T13212] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 471.648303][T23836] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 471.658500][T13212] usb 2-1: USB disconnect, device number 39 [ 471.776955][ T8817] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 471.976796][ T8411] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 472.016855][ T8817] usb 1-1: Using ep0 maxpacket: 8 [ 472.137033][ T8817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 472.192318][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9176'. [ 472.236948][ T8411] usb 4-1: Using ep0 maxpacket: 32 [ 472.292888][T23862] loop1: detected capacity change from 0 to 512 [ 472.320374][ T8817] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 472.333950][ T8817] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 472.345206][ T8817] usb 1-1: Product: syz [ 472.349660][T23864] No such timeout policy "syz0" [ 472.354039][ T8817] usb 1-1: Manufacturer: syz [ 472.363372][ T8817] usb 1-1: SerialNumber: syz [ 472.377035][ T8411] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.399313][ T8411] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.504370][T23862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 472.547016][ T8411] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 472.556216][ T8411] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 472.574994][T23862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.9178: bg 0: bad block bitmap checksum [ 472.576838][ T8411] usb 4-1: Product: syz [ 472.606198][ T8411] usb 4-1: Manufacturer: syz [ 472.627045][ T8817] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 472.668240][ T8817] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 472.677507][T23862] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Filesystem failed CRC [ 472.678016][ T8411] hub 4-1:4.0: USB hub found [ 472.694508][ T8817] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 472.722975][ T8817] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 472.847004][ T8817] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 472.855357][ T8817] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 472.899770][ T8817] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 472.917431][ T8411] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 472.934102][ T8817] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 473.018497][ T8817] usb 1-1: USB disconnect, device number 37 [ 473.045645][ T8817] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 473.063745][T23887] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 473.086394][ T8817] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 473.129062][ T8817] visor 1-1:1.0: device disconnected [ 473.133498][T23890] loop4: detected capacity change from 0 to 1764 [ 473.327096][ T4885] usb 4-1: USB disconnect, device number 43 [ 473.405819][T23902] loop2: detected capacity change from 0 to 128 [ 473.574297][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9200'. [ 474.208122][T23945] netlink: 'syz.3.9216': attribute type 3 has an invalid length. [ 474.351955][T23951] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 474.361641][T23895] loop1: detected capacity change from 0 to 32768 [ 474.395056][T23951] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.420105][T23955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9222'. [ 474.420714][T23954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9221'. [ 474.439108][T23955] netlink: 'syz.2.9222': attribute type 1 has an invalid length. [ 474.470715][ T4174] loop1: p1 p3 < p5 p6 > [ 474.475267][ T4174] loop1: partition table partially beyond EOD, truncated [ 474.477866][T23954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9221'. [ 474.505212][T23954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9221'. [ 474.608617][T23895] loop1: p1 p3 < p5 p6 > [ 474.623260][T23895] loop1: partition table partially beyond EOD, truncated [ 474.688432][T23961] netlink: 'syz.0.9225': attribute type 8 has an invalid length. [ 474.721804][T23964] loop2: detected capacity change from 0 to 64 [ 474.874419][T23969] loop3: detected capacity change from 0 to 1764 [ 475.012266][T23930] loop4: detected capacity change from 0 to 32768 [ 475.016394][T23969] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 475.110735][T23930] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 475.110735][T23930] [ 475.419137][T23983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9236'. [ 475.477336][T23983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9236'. [ 475.660193][T23993] xt_hashlimit: max too large, truncated to 1048576 [ 475.699951][T23993] xt_limit: Overflow, try lower: 0/0 [ 475.972329][T24005] loop0: detected capacity change from 0 to 1764 [ 475.985119][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9250'. [ 476.054569][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 476.078100][T24013] x_tables: duplicate underflow at hook 3 [ 476.088850][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 476.102905][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 476.119579][ T4589] udevd[4589]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 476.270888][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 476.291106][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 476.305239][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 476.321364][ T4589] udevd[4589]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 476.346218][T23973] loop2: detected capacity change from 0 to 32768 [ 476.454801][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 476.454966][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 476.458076][T23973] [ 476.458076][T23973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 476.458076][T23973] [ 476.527989][ T4185] [ 476.527989][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 476.527989][ T4185] [ 476.528292][ T4185] [ 476.528292][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 476.528292][ T4185] [ 476.782448][T24041] loop0: detected capacity change from 0 to 2048 [ 476.848111][T24041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.060842][T24049] loop1: detected capacity change from 0 to 512 [ 477.120860][T24049] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9269: inode has both inline data and extents flags [ 477.122016][T24049] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9269: couldn't read orphan inode 15 (err -117) [ 477.122239][T24049] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 477.734312][T24084] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9282'. [ 478.397680][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9308'. [ 478.428833][T24132] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9308'. [ 478.557981][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9314'. [ 478.602490][T24145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9314'. [ 478.696073][T24153] netlink: 'syz.3.9318': attribute type 1 has an invalid length. [ 478.847107][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9323'. [ 478.900940][T24164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9323'. [ 478.937214][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9323'. [ 478.967173][T24164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9323'. [ 479.387050][ T4885] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 479.759500][ T4885] usb 1-1: config 5 has an invalid interface number: 182 but max is 0 [ 479.776894][ T4885] usb 1-1: config 5 has no interface number 0 [ 479.800303][ T4885] usb 1-1: config 5 interface 182 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 479.832120][ T4885] usb 1-1: config 5 interface 182 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 479.843752][ T8817] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 479.861755][ T4885] usb 1-1: config 5 interface 182 has no altsetting 0 [ 479.869480][T24203] loop1: detected capacity change from 0 to 4096 [ 479.948806][T24218] loop2: detected capacity change from 0 to 256 [ 479.961567][T24203] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 480.019269][T24203] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 480.027254][ T4885] usb 1-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=38.5e [ 480.034946][T24218] FAT-fs (loop2): Directory bread(block 64) failed [ 480.037972][ T4885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.054537][T24218] FAT-fs (loop2): Directory bread(block 65) failed [ 480.058307][T24203] ntfs3: loop1: Inode r=b is not in use! [ 480.073653][T24218] FAT-fs (loop2): Directory bread(block 66) failed [ 480.084399][ T4885] usb 1-1: Product: syz [ 480.088859][ T8817] usb 4-1: Using ep0 maxpacket: 8 [ 480.094128][T24203] ntfs3: loop1: Failed to load $Extend. [ 480.103742][T24218] FAT-fs (loop2): Directory bread(block 67) failed [ 480.108607][ T4885] usb 1-1: Manufacturer: syz [ 480.114934][ T4885] usb 1-1: SerialNumber: syz [ 480.141419][T24218] FAT-fs (loop2): Directory bread(block 68) failed [ 480.177271][T24218] FAT-fs (loop2): Directory bread(block 69) failed [ 480.184985][T24218] FAT-fs (loop2): Directory bread(block 70) failed [ 480.186824][ T8411] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 480.192874][T24218] FAT-fs (loop2): Directory bread(block 71) failed [ 480.207176][ T8817] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 480.216845][ T8817] usb 4-1: config 179 has no interface number 0 [ 480.224762][T24218] FAT-fs (loop2): Directory bread(block 72) failed [ 480.249574][ T8817] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 480.267569][T24218] FAT-fs (loop2): Directory bread(block 73) failed [ 480.279551][ T8817] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 480.307125][ T8817] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.351401][ T8817] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 480.376312][ T8817] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.401587][ T8817] usb 4-1: config 179 interface 65 has no altsetting 0 [ 480.440578][ T8817] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 480.452820][ T8817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.466889][ T8411] usb 5-1: Using ep0 maxpacket: 32 [ 480.473029][ T4885] radio-si470x 1-1:5.182: could not find interrupt in endpoint [ 480.481214][ T4885] radio-si470x: probe of 1-1:5.182 failed with error -5 [ 480.497644][ T4885] usbhid 1-1:5.182: couldn't find an input interrupt endpoint [ 480.514050][ T4885] usb 1-1: USB disconnect, device number 38 [ 480.546234][ T8817] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input33 [ 480.689349][T24234] loop2: detected capacity change from 0 to 128 [ 480.699163][ T8411] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.784481][ T8817] usb 4-1: USB disconnect, device number 44 [ 480.798667][ T8411] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 480.803108][ T8817] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 480.872963][T24234] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 480.897054][T24234] ext4 filesystem being mounted at /1933/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 480.912895][T24234] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 481.003431][ T8411] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 481.016824][ T8411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.042560][T24250] loop0: detected capacity change from 0 to 64 [ 481.045826][ T8411] usb 5-1: Product: syz [ 481.065852][ T8411] usb 5-1: Manufacturer: syz [ 481.078422][ T8411] usb 5-1: SerialNumber: syz [ 481.165819][T24250] attempt to access beyond end of device [ 481.165819][T24250] loop0: rw=2049, want=268435470, limit=64 [ 481.257182][T24250] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 481.350597][T24266] netlink: 'syz.3.9370': attribute type 1 has an invalid length. [ 481.448041][ T8411] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 481.580200][ T8411] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 481.629259][ T8411] usb 5-1: USB disconnect, device number 36 [ 481.829986][T24291] loop2: detected capacity change from 0 to 256 [ 481.896987][T24296] __nla_validate_parse: 2 callbacks suppressed [ 481.897008][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9384'. [ 481.919756][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.929983][T24291] exfat: Deprecated parameter 'namecase' [ 481.972377][T24291] exfat: Deprecated parameter 'namecase' [ 481.986971][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9384'. [ 482.018918][T24291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d) [ 482.203480][T24291] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 482.256343][T24291] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805fa2aee0 iblock : 8, err : -5) [ 482.358366][T24319] netlink: 'syz.3.9396': attribute type 15 has an invalid length. [ 482.377846][T24291] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 482.396341][T24291] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 482.414858][T24319] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.437283][T24324] netlink: 'syz.4.9398': attribute type 21 has an invalid length. [ 482.469787][ T1478] attempt to access beyond end of device [ 482.469787][ T1478] loop2: rw=1, want=34225520826, limit=256 [ 482.496872][ T1478] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 482.526291][ T1478] attempt to access beyond end of device [ 482.526291][ T1478] loop2: rw=1, want=34225520827, limit=256 [ 482.577070][ T1478] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 482.628092][ T1478] attempt to access beyond end of device [ 482.628092][ T1478] loop2: rw=1, want=34225520828, limit=256 [ 482.664497][ T1478] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 482.683889][T24339] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9407'. [ 482.685330][ T1478] attempt to access beyond end of device [ 482.685330][ T1478] loop2: rw=1, want=34225520829, limit=256 [ 482.695206][T24342] loop3: detected capacity change from 0 to 64 [ 482.710058][ T1478] Buffer I/O error on dev loop2, logical block 34225520828, lost async page write [ 482.721814][ T1478] attempt to access beyond end of device [ 482.721814][ T1478] loop2: rw=1, want=34225520830, limit=256 [ 482.745299][ T1478] Buffer I/O error on dev loop2, logical block 34225520829, lost async page write [ 482.755889][ T1478] attempt to access beyond end of device [ 482.755889][ T1478] loop2: rw=1, want=34225520831, limit=256 [ 482.768436][ T1478] Buffer I/O error on dev loop2, logical block 34225520830, lost async page write [ 482.779103][ T1478] attempt to access beyond end of device [ 482.779103][ T1478] loop2: rw=1, want=34225520832, limit=256 [ 482.856991][ T1478] Buffer I/O error on dev loop2, logical block 34225520831, lost async page write [ 482.948306][T14629] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 483.010987][T24353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.144607][T24361] netlink: 'syz.2.9416': attribute type 28 has an invalid length. [ 483.160098][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9416'. [ 483.397105][T14629] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 483.397141][T14629] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 483.397163][T14629] usb 2-1: Manufacturer: syz [ 483.399623][T14629] usb 2-1: config 0 descriptor?? [ 483.444428][T24383] libceph: resolve 'c' (ret=-3): failed [ 483.445857][T14629] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 483.446539][T14629] usb 2-1: Detected FT-X [ 483.603531][T24390] device ip6tnl4 entered promiscuous mode [ 483.664432][T24341] loop1: detected capacity change from 0 to 256 [ 483.793787][T24341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 483.818654][T24399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9432'. [ 483.877126][T14629] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 483.898214][T14629] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 483.916985][T14629] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 483.935021][T14629] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 483.961129][T24407] (syz.0.9437,24407,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 483.985711][T14629] usb 2-1: USB disconnect, device number 40 [ 483.993659][T24410] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.9440'. [ 484.007887][T24407] (syz.0.9437,24407,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 484.063679][T14629] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 484.094216][T14629] ftdi_sio 2-1:0.0: device disconnected [ 484.432570][T24440] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.9454'. [ 484.678435][T24455] loop3: detected capacity change from 0 to 1024 [ 484.804898][T24455] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 484.868138][T24455] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 484.925464][T24455] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9462: Failed to acquire dquot type 0 [ 484.938609][T24455] EXT4-fs error (device loop3): mb_free_blocks:1874: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 484.983308][T24455] EXT4-fs (loop3): 1 truncate cleaned up [ 485.010847][T24455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 485.048185][T24455] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 485.070262][T24455] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 485.088568][T24455] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9462: Failed to acquire dquot type 0 [ 485.426701][T24487] loop4: detected capacity change from 0 to 1024 [ 485.664361][ T4366] hfsplus: b-tree write err: -5, ino 25 [ 485.670456][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 485.676055][ T4366] hfsplus: b-tree write err: -5, ino 2 [ 485.754755][T24498] loop3: detected capacity change from 0 to 4096 [ 485.770898][T24446] loop0: detected capacity change from 0 to 32768 [ 485.824918][T24446] loop0: p1 p3 < p5 p6 > [ 485.835279][T24498] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 485.848970][T24446] loop0: partition table partially beyond EOD, truncated [ 485.857985][T24498] ntfs3: loop3: Failed to load $MFT. [ 485.984996][ T3561] loop0: p1 p3 < p5 p6 > [ 485.999336][ T3561] loop0: partition table partially beyond EOD, truncated [ 486.011696][T24517] overlayfs: missing 'lowerdir' [ 486.107068][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 486.166912][ T6597] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 486.447031][ T6597] usb 3-1: Using ep0 maxpacket: 32 [ 486.587220][ T6597] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.608353][ T6597] usb 3-1: config 0 has no interface number 0 [ 486.632934][ T6597] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 486.669196][ T6597] usb 3-1: config 0 interface 1 has no altsetting 0 [ 486.676393][T24534] xt_CT: No such helper "snmp_trap" [ 486.831207][T24547] loop1: detected capacity change from 0 to 64 [ 486.907141][ T6597] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 486.918829][T24498] loop3: detected capacity change from 0 to 32768 [ 486.932054][T24547] Trying to free block not in datazone [ 486.938179][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.947452][T24547] Trying to free block not in datazone [ 486.957839][T24498] XFS: attr2 mount option is deprecated. [ 486.974605][ T6597] usb 3-1: Product: syz [ 486.979466][T24547] Trying to free block not in datazone [ 486.995415][ T6597] usb 3-1: Manufacturer: syz [ 487.000646][T24547] Trying to free block not in datazone [ 487.006423][ T6597] usb 3-1: SerialNumber: syz [ 487.013071][T24547] Trying to free block not in datazone [ 487.019997][T24498] XFS (loop3): invalid logbufsize: 14336 [not 16k,32k,64k,128k or 256k] [ 487.032540][ T6597] usb 3-1: config 0 descriptor?? [ 487.037806][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 487.052871][T24547] minix_free_block (loop1:6): bit already cleared [ 487.060434][T24547] Trying to free block not in datazone [ 487.068104][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 487.078521][T24547] Trying to free block not in datazone [ 487.087415][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 487.098308][ T4589] udevd[4589]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 487.149399][ T4589] udevd[4589]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 487.149523][T10228] udevd[10228]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 487.162910][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 487.180211][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 487.318930][T24561] loop0: detected capacity change from 0 to 64 [ 487.389223][ T6597] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 487.401545][ T6597] cx231xx 3-1:0.1: Not found matching IAD interface [ 487.449861][ T6597] usb 3-1: USB disconnect, device number 42 [ 487.718622][T24574] loop4: detected capacity change from 0 to 164 [ 487.753091][T14629] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 487.795800][T24574] Unsupported NM flag settings (240) [ 487.930665][T24585] loop3: detected capacity change from 0 to 256 [ 488.036870][T14629] usb 1-1: Using ep0 maxpacket: 8 [ 488.049314][T24585] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 488.157043][T14629] usb 1-1: config 7 has an invalid interface number: 143 but max is 1 [ 488.186949][T14629] usb 1-1: config 7 has an invalid interface number: 217 but max is 1 [ 488.203744][T14629] usb 1-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 488.230723][T24594] device team0 entered promiscuous mode [ 488.266853][T14629] usb 1-1: config 7 has no interface number 0 [ 488.273166][T14629] usb 1-1: config 7 has no interface number 1 [ 488.279771][T24594] device team_slave_0 entered promiscuous mode [ 488.298762][T14629] usb 1-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 488.301530][T24594] device team_slave_1 entered promiscuous mode [ 488.341914][T24594] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.373980][T24594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.376648][T14629] usb 1-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 488.492495][T14629] usb 1-1: config 7 interface 143 has no altsetting 0 [ 488.540138][T24605] MTD: Couldn't look up '': -22 [ 488.677201][T14629] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 488.686404][T14629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.745117][T24621] ieee802154 phy0 wpan0: encryption failed: -22 [ 488.747032][T14629] usb 1-1: Product: syz [ 488.755600][T14629] usb 1-1: Manufacturer: syz [ 488.812659][T14629] usb 1-1: SerialNumber: syz [ 488.842549][T24580] loop1: detected capacity change from 0 to 32768 [ 488.862052][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9542'. [ 488.999419][T24580] XFS (loop1): Mounting V5 Filesystem [ 489.109343][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9549'. [ 489.137943][T14629] qmi_wwan: probe of 1-1:7.143 failed with error -22 [ 489.256972][T14629] usb 1-1: Could not set interface, error -71 [ 489.281922][T14629] usb 1-1: USB disconnect, device number 39 [ 489.338856][T24580] XFS (loop1): Ending clean mount [ 489.425288][ T4187] XFS (loop1): Unmounting Filesystem [ 489.506822][ T4885] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 489.757176][ T4885] usb 3-1: Using ep0 maxpacket: 8 [ 489.893598][ T4885] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 489.924936][ T4885] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.945488][ T4885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 490.127521][ T4885] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 490.155561][ T4885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.176351][ T4885] usb 3-1: Product: syz [ 490.196660][ T4885] usb 3-1: Manufacturer: syz [ 490.222183][ T4885] usb 3-1: SerialNumber: syz [ 490.238397][ T4885] usb 3-1: config 0 descriptor?? [ 490.280150][T24706] loop3: detected capacity change from 0 to 512 [ 490.323996][ T4885] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 490.341689][T24709] netlink: 'syz.4.9579': attribute type 1 has an invalid length. [ 490.360265][T24709] netlink: 'syz.4.9579': attribute type 3 has an invalid length. [ 490.378474][T24709] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9579'. [ 490.394991][T24709] NCSI netlink: No device for ifindex 2986344450 [ 490.411180][T24706] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.9576: invalid indirect mapped block 256 (level 2) [ 490.433870][T24714] netlink: 'syz.1.9580': attribute type 21 has an invalid length. [ 490.452115][T24706] EXT4-fs (loop3): 2 truncates cleaned up [ 490.458088][T24706] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 490.470220][T24714] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9580'. [ 490.514242][ T4885] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 490.571434][ T4885] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 490.610528][ T4885] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 490.809895][T24730] binder: 24729:24730 ioctl c018620c 200000000100 returned -22 [ 490.814250][ T4885] usb 3-1: USB disconnect, device number 43 [ 491.053416][T24747] IPv6: sit1: Disabled Multicast RS [ 491.530174][T24779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.909086][T24805] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9624'. [ 492.323945][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.366850][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.386095][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.396427][T24847] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9644'. [ 492.416952][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.438592][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.466862][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.477539][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.505371][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.535765][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.545906][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.563134][T24850] loop3: detected capacity change from 0 to 2048 [ 492.586702][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.604774][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.626600][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.654835][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.663270][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.679269][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.695286][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.708847][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.722071][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.743547][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.766860][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.784668][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.815057][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.822755][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.839533][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.857129][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.864674][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.872183][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.886820][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.904586][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.912207][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.926814][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.934720][T24873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9656'. [ 492.937315][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.951267][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.958750][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.966378][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.974006][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.981564][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 492.995732][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.003769][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.011630][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.031285][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.039322][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.047098][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.054602][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.062443][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.070240][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.081506][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.089335][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.095405][T24879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9659'. [ 493.097278][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.114915][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.122832][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.130793][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.138509][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.146126][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.154098][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.161948][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.169671][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.177503][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.185008][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.193153][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.200944][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.208799][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.216337][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.224287][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.232665][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.240542][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.256826][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.264409][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.272306][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.280871][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.288594][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.296262][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.304161][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.312033][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.319822][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.327659][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.335185][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.343173][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.350907][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.358729][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.366144][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.374062][ T4885] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 493.389711][ T4885] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 493.654732][T24900] i2c i2c-0: Invalid block write size 33 [ 493.785538][T24908] netlink: 'syz.3.9673': attribute type 1 has an invalid length. [ 493.797817][ T4885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 493.836593][T24914] loop2: detected capacity change from 0 to 128 [ 493.959076][T24914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.007066][T24914] ext4 filesystem being mounted at /1989/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 494.029830][T24914] EXT4-fs (loop2): Can't set test_dummy_encryption on remount [ 494.059056][ T4885] usb 1-1: Using ep0 maxpacket: 8 [ 494.177232][ T4885] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.185549][ T4885] usb 1-1: config 179 has no interface number 0 [ 494.267732][ T4885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 494.316773][ T4885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 494.386840][ T4885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.404685][T24931] fido_id[24931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.445367][ T4885] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 494.497346][ T4885] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.568581][ T4885] usb 1-1: config 179 interface 65 has no altsetting 0 [ 494.589537][ T4885] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 494.599390][ T4885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.691074][ T4885] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34 [ 494.716586][T24952] syz.2.9694 (24952): drop_caches: 4 [ 494.924125][ T4885] usb 1-1: USB disconnect, device number 40 [ 494.940993][ T4885] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 494.947151][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9699'. [ 495.022883][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9699'. [ 495.128178][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.138541][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.159930][T24972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.161450][T24971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.181606][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.259385][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9699'. [ 495.285815][T24930] loop1: detected capacity change from 0 to 32768 [ 495.291850][T24975] ax25_connect(): syz.4.9703 uses autobind, please contact jreuter@yaina.de [ 495.529485][T24930] XFS (loop1): Mounting V5 Filesystem [ 495.700205][T24930] XFS (loop1): Ending clean mount [ 495.817190][T24930] XFS (loop1): Quotacheck needed: Please wait. [ 496.000875][T24930] XFS (loop1): Quotacheck: Done. [ 496.147840][ T4187] XFS (loop1): Unmounting Filesystem [ 496.556944][T14629] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 496.803923][T25029] program syz.0.9725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.916962][T14629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.936809][T14629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.963536][T14629] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 497.000175][T14629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.057890][T14629] usb 3-1: config 0 descriptor?? [ 497.086263][T25017] loop3: detected capacity change from 0 to 32768 [ 497.111091][T14629] hub 3-1:0.0: USB hub found [ 497.192862][T25040] loop1: detected capacity change from 0 to 256 [ 497.295260][T25045] loop0: detected capacity change from 0 to 64 [ 497.327213][T14629] hub 3-1:0.0: 1 port detected [ 497.388451][T25040] FAT-fs (loop1): Directory bread(block 64) failed [ 497.395048][T25040] FAT-fs (loop1): Directory bread(block 65) failed [ 497.459872][T25040] FAT-fs (loop1): Directory bread(block 66) failed [ 497.471000][T25050] loop4: detected capacity change from 0 to 256 [ 497.479821][T25040] FAT-fs (loop1): Directory bread(block 67) failed [ 497.542806][T25050] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.547061][T14629] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 497.561592][T25040] FAT-fs (loop1): Directory bread(block 68) failed [ 497.576836][T14629] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 497.587920][T25040] FAT-fs (loop1): Directory bread(block 69) failed [ 497.633708][T25040] FAT-fs (loop1): Directory bread(block 70) failed [ 497.664358][T25052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9736'. [ 497.683952][T25040] FAT-fs (loop1): Directory bread(block 71) failed [ 497.723751][T25040] FAT-fs (loop1): Directory bread(block 72) failed [ 497.737404][T14629] usbhid 3-1:0.0: can't add hid device: -71 [ 497.743915][T14629] usbhid: probe of 3-1:0.0 failed with error -71 [ 497.754007][T25040] FAT-fs (loop1): Directory bread(block 73) failed [ 497.813781][T14629] usb 3-1: USB disconnect, device number 44 [ 497.856674][T25058] loop4: detected capacity change from 0 to 16 [ 497.876032][T25040] attempt to access beyond end of device [ 497.876032][T25040] loop1: rw=0, want=1196, limit=256 [ 497.925508][T25058] erofs: (device loop4): mounted with root inode @ nid 36. [ 498.119142][T25068] loop2: detected capacity change from 0 to 8 [ 498.915801][T25107] loop1: detected capacity change from 0 to 4096 [ 498.923023][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9763'. [ 499.035667][T25114] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.438412][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9769'. [ 499.473992][T25128] loop2: detected capacity change from 0 to 64 [ 499.573729][T25128] hfs: filesystem is marked locked, mounting read-only. [ 499.593491][T25129] loop1: detected capacity change from 0 to 2048 [ 499.613654][T25128] hfs: walked past end of dir [ 499.679327][T25129] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.752346][ T26] audit: type=1800 audit(1774993589.965:29): pid=25129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9770" name="file2" dev="loop1" ino=1347 res=0 errno=0 [ 499.889747][T25135] loop2: detected capacity change from 0 to 1024 [ 499.925365][T25135] EXT4-fs (loop2): Ignoring removed orlov option [ 499.934727][T25137] loop3: detected capacity change from 0 to 2048 [ 499.998867][T25135] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,bsddf,block_validity,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: none. [ 500.022832][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.057979][T25137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.083921][T25146] loop4: detected capacity change from 0 to 8192 [ 500.122340][T25091] loop0: detected capacity change from 0 to 32768 [ 500.138646][T25135] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.9774: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 500.175811][ T3561] loop4: AHDI p1 p2 p4 [ 500.189915][ T3561] loop4: p4 start 117378816 is beyond EOD, truncated [ 500.228909][T25146] loop4: AHDI p1 p2 p4 [ 500.233346][T25091] XFS (loop0): Mounting V5 Filesystem [ 500.238164][T25146] loop4: p4 start 117378816 is beyond EOD, truncated [ 500.257386][T25148] overlayfs: upper fs needs to support d_type. [ 500.312200][T25148] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 500.321416][T25148] overlayfs: failed to set xattr on upper [ 500.343879][T25148] overlayfs: ...falling back to index=off,metacopy=off. [ 500.431530][T25091] XFS (loop0): Ending clean mount [ 500.644619][ T4186] XFS (loop0): Unmounting Filesystem [ 500.817862][T25165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9784'. [ 500.894902][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 500.981526][T25169] netlink: 'syz.1.9785': attribute type 29 has an invalid length. [ 500.991101][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 501.017275][T25169] netlink: 'syz.1.9785': attribute type 29 has an invalid length. [ 501.079739][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 501.089886][T25172] netlink: 'syz.1.9785': attribute type 29 has an invalid length. [ 501.180882][T25177] loop2: detected capacity change from 0 to 64 [ 501.391703][T25186] binder: 25184:25186 ioctl c0306201 2000000001c0 returned -22 [ 501.466954][ C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 501.479376][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486224][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.780862][T25196] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 501.853544][T25196] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.9799: invalid indirect mapped block 256 (level 2) [ 501.909434][T25196] EXT4-fs (loop2): 2 truncates cleaned up [ 501.915414][T25196] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 501.944364][T25196] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.9799: bg 0: block 5: invalid block bitmap [ 502.013550][T25196] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 502.065400][T25196] EXT4-fs (loop2): This should not happen!! Data will be lost [ 502.065400][T25196] [ 502.101918][T25196] EXT4-fs (loop2): Total free blocks count 0 [ 502.116831][T25196] EXT4-fs (loop2): Free/Dirty block details [ 502.125257][T25196] EXT4-fs (loop2): free_blocks=0 [ 502.131607][T25196] EXT4-fs (loop2): dirty_blocks=2 [ 502.137191][T25196] EXT4-fs (loop2): Block reservation details [ 502.143402][T25196] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 502.278753][T25214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9806'. [ 502.318556][T25214] netem: invalid attributes len -17 [ 502.356795][ T8817] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 502.382485][T25214] netem: change failed [ 502.513140][T25221] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 502.662509][T25221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 502.678443][T25221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 502.684991][T25221] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.9811: bad orphan inode 267 [ 502.747270][ T8817] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 502.755466][ T8817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.844255][T25221] EXT4-fs (loop4): Remounting filesystem read-only [ 502.861673][ T8817] usb 2-1: config 0 has no interface number 0 [ 502.868060][T25221] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,grpquota. Quota mode: writeback. [ 502.945816][T25217] chnl_net:caif_netlink_parms(): no params data found [ 503.074596][ T8817] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 503.077658][T25217] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.091173][T25217] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.100317][T25217] device bridge_slave_0 entered promiscuous mode [ 503.103813][ T8817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.109479][T25217] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.123314][T25217] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.158282][T25217] device bridge_slave_1 entered promiscuous mode [ 503.164159][ T8817] usb 2-1: Product: syz [ 503.187532][T25221] System zones: 1-12 [ 503.191553][T25221] EXT4-fs (loop4): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 503.226949][ T8817] usb 2-1: Manufacturer: syz [ 503.231605][ T8817] usb 2-1: SerialNumber: syz [ 503.242638][T25217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.266009][ T8817] usb 2-1: config 0 descriptor?? [ 503.323797][T25217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.330799][ T8817] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 503.365864][ T8817] ims_pcu: probe of 2-1:0.41 failed with error -22 [ 503.421968][T25217] team0: Port device team_slave_0 added [ 503.440126][T25217] team0: Port device team_slave_1 added [ 503.497931][T25217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.505085][T25217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.544086][ T13] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 503.591429][ T8817] usb 2-1: USB disconnect, device number 41 [ 503.612078][T25217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.624871][T25217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.632355][T25217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.747413][T25217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.826939][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 503.829950][T25217] device hsr_slave_0 entered promiscuous mode [ 503.849680][T25217] device hsr_slave_1 entered promiscuous mode [ 503.856576][T25217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.906931][T25217] Cannot create hsr debugfs directory [ 503.948506][ T13] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 503.977078][ T13] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 504.007004][ T13] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 504.033600][ T13] usb 1-1: config 0 has no interface number 0 [ 504.237421][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 504.237458][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.237482][ T13] usb 1-1: Product: syz [ 504.237499][ T13] usb 1-1: Manufacturer: syz [ 504.237516][ T13] usb 1-1: SerialNumber: syz [ 504.248014][ T13] usb 1-1: config 0 descriptor?? [ 504.301326][ T13] usb 1-1: Found UVC 0.40 device syz (045e:0703) [ 504.301366][ T13] usb 1-1: No valid video chain found. [ 504.493605][T25217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 504.508971][T25217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 504.512276][T25217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.517270][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 504.531477][T25217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.532865][ T13] usb 1-1: USB disconnect, device number 41 [ 504.672231][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9838'. [ 504.828128][T25217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.873481][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.918309][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.940125][T25217] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.953190][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.968900][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.985994][T25291] set_capacity_and_notify: 4 callbacks suppressed [ 504.986012][T25291] loop1: detected capacity change from 0 to 8192 [ 504.987962][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.006144][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.105610][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.106070][T25291] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 505.117533][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.157831][T25291] REISERFS (device loop1): using ordered data mode [ 505.164393][T25291] reiserfs: using flush barriers [ 505.181494][T25291] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 505.188377][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9843'. [ 505.206100][T25291] REISERFS (device loop1): checking transaction log (loop1) [ 505.224976][T25291] REISERFS (device loop1): Using r5 hash to sort names [ 505.234225][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.235400][T25291] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 505.285544][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.292882][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.363307][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.414972][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.479898][T25300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9844'. [ 505.526854][T25300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9844'. [ 505.628155][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.685669][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.718334][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.755314][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.783244][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.809873][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.837461][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.873739][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.898034][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.092260][T25217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.107317][T25306] [ 506.109680][T25306] ====================================================== [ 506.116712][T25306] WARNING: possible circular locking dependency detected [ 506.123752][T25306] syzkaller #0 Not tainted [ 506.128330][T25306] ------------------------------------------------------ [ 506.135366][T25306] syz.1.9845/25306 is trying to acquire lock: [ 506.141449][T25306] ffff888024cfcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 506.152540][T25306] [ 506.152540][T25306] but task is already holding lock: [ 506.159927][T25306] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 506.169620][T25306] [ 506.169620][T25306] which lock already depends on the new lock. [ 506.169620][T25306] [ 506.180132][T25306] [ 506.180132][T25306] the existing dependency chain (in reverse order) is: [ 506.189165][T25306] [ 506.189165][T25306] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 506.197373][T25306] __mutex_lock_common+0x1e3/0x2400 [ 506.203215][T25306] mutex_lock_nested+0x17/0x20 [ 506.208543][T25306] rfkill_register+0x33/0x8a0 [ 506.213775][T25306] hci_register_dev+0x452/0x970 [ 506.219183][T25306] vhci_create_device+0x32c/0x5c0 [ 506.224763][T25306] vhci_write+0x391/0x450 [ 506.229690][T25306] vfs_write+0x745/0xd60 [ 506.234474][T25306] ksys_write+0x152/0x260 [ 506.239335][T25306] do_syscall_64+0x4c/0xa0 [ 506.244284][T25306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.250739][T25306] [ 506.250739][T25306] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 506.258718][T25306] __mutex_lock_common+0x1e3/0x2400 [ 506.264469][T25306] mutex_lock_nested+0x17/0x20 [ 506.269864][T25306] vhci_send_frame+0x88/0x100 [ 506.275090][T25306] hci_send_frame+0x1a9/0x2e0 [ 506.280310][T25306] hci_tx_work+0x9f9/0x1710 [ 506.285368][T25306] process_one_work+0x85f/0x1010 [ 506.290846][T25306] worker_thread+0xaa6/0x1290 [ 506.296082][T25306] kthread+0x436/0x520 [ 506.300700][T25306] ret_from_fork+0x1f/0x30 [ 506.305680][T25306] [ 506.305680][T25306] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 506.314922][T25306] __flush_work+0x116/0x210 [ 506.320068][T25306] hci_dev_do_close+0x1e7/0x1030 [ 506.325690][T25306] hci_unregister_dev+0x2d7/0x580 [ 506.331248][T25306] vhci_release+0x73/0xc0 [ 506.336119][T25306] __fput+0x234/0x930 [ 506.340628][T25306] task_work_run+0x125/0x1a0 [ 506.345756][T25306] do_exit+0x626/0x20c0 [ 506.350437][T25306] do_group_exit+0x12e/0x300 [ 506.355558][T25306] __x64_sys_exit_group+0x3b/0x40 [ 506.361197][T25306] do_syscall_64+0x4c/0xa0 [ 506.366147][T25306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.372580][T25306] [ 506.372580][T25306] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 506.380257][T25306] __mutex_lock_common+0x1e3/0x2400 [ 506.386015][T25306] mutex_lock_nested+0x17/0x20 [ 506.391401][T25306] bg_scan_update+0x44/0x3b0 [ 506.396635][T25306] process_one_work+0x85f/0x1010 [ 506.402118][T25306] worker_thread+0xaa6/0x1290 [ 506.407336][T25306] kthread+0x436/0x520 [ 506.412154][T25306] ret_from_fork+0x1f/0x30 [ 506.417289][T25306] [ 506.417289][T25306] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 506.427301][T25306] __lock_acquire+0x2c42/0x7d10 [ 506.432699][T25306] lock_acquire+0x19e/0x400 [ 506.437749][T25306] __flush_work+0x116/0x210 [ 506.442793][T25306] __cancel_work_timer+0x3f4/0x560 [ 506.448443][T25306] hci_request_cancel_all+0xcc/0x300 [ 506.454273][T25306] hci_dev_do_close+0x4e/0x1030 [ 506.459684][T25306] hci_rfkill_set_block+0x10a/0x190 [ 506.465425][T25306] rfkill_set_block+0x1c6/0x420 [ 506.470819][T25306] rfkill_fop_write+0x452/0x560 [ 506.476213][T25306] vfs_write+0x30b/0xd60 [ 506.481000][T25306] ksys_write+0x152/0x260 [ 506.485881][T25306] do_syscall_64+0x4c/0xa0 [ 506.490832][T25306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.497359][T25306] [ 506.497359][T25306] other info that might help us debug this: [ 506.497359][T25306] [ 506.503424][T25302] loop2: detected capacity change from 0 to 32768 [ 506.507945][T25306] Chain exists of: [ 506.507945][T25306] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 506.507945][T25306] [ 506.507987][T25306] Possible unsafe locking scenario: [ 506.507987][T25306] [ 506.507993][T25306] CPU0 CPU1 [ 506.507998][T25306] ---- ---- [ 506.508003][T25306] lock(rfkill_global_mutex); [ 506.508016][T25306] lock(&data->open_mutex); [ 506.508032][T25306] lock(rfkill_global_mutex); [ 506.508047][T25306] lock((work_completion)(&hdev->bg_scan_update)); [ 506.508063][T25306] [ 506.508063][T25306] *** DEADLOCK *** [ 506.508063][T25306] [ 506.508067][T25306] 1 lock held by syz.1.9845/25306: [ 506.508080][T25306] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 506.508139][T25306] [ 506.508139][T25306] stack backtrace: [ 506.508146][T25306] CPU: 0 PID: 25306 Comm: syz.1.9845 Not tainted syzkaller #0 [ 506.508166][T25306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.508178][T25306] Call Trace: [ 506.508185][T25306] [ 506.508193][T25306] dump_stack_lvl+0x188/0x250 [ 506.508214][T25306] ? load_image+0x400/0x400 [ 506.508232][T25306] ? show_regs_print_info+0x20/0x20 [ 506.508259][T25306] ? print_circular_bug+0x12b/0x1a0 [ 506.508280][T25306] check_noncircular+0x296/0x330 [ 506.508298][T25306] ? look_up_lock_class+0x71/0x110 [ 506.508321][T25306] ? add_chain_block+0x940/0x940 [ 506.508338][T25306] ? lockdep_lock+0xf1/0x1f0 [ 506.508360][T25306] ? __lock_acquire+0x12e8/0x7d10 [ 506.508382][T25306] ? mark_lock+0x94/0x320 [ 506.508398][T25306] ? _find_first_zero_bit+0xce/0xf0 [ 506.508422][T25306] __lock_acquire+0x2c42/0x7d10 [ 506.508452][T25306] ? verify_lock_unused+0x140/0x140 [ 506.508475][T25306] ? verify_lock_unused+0x140/0x140 [ 506.606767][ T8817] Bluetooth: hci0: command 0x041b tx timeout [ 506.611829][T25306] ? mark_lock+0x94/0x320 [ 506.611863][T25306] lock_acquire+0x19e/0x400 [ 506.712056][T25306] ? __flush_work+0xfa/0x210 [ 506.716679][T25306] ? __lock_acquire+0x7d10/0x7d10 [ 506.721722][T25306] ? read_lock_is_recursive+0x10/0x10 [ 506.727292][T25306] ? start_flush_work+0x776/0x820 [ 506.732340][T25306] __flush_work+0x116/0x210 [ 506.736854][T25306] ? __flush_work+0xfa/0x210 [ 506.741460][T25306] ? flush_work+0x20/0x20 [ 506.745810][T25306] ? try_to_grab_pending+0xfa/0x7f0 [ 506.751026][T25306] ? mark_lock+0x94/0x320 [ 506.755368][T25306] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 506.761798][T25306] ? lock_chain_count+0x20/0x20 [ 506.766754][T25306] ? mark_lock+0x94/0x320 [ 506.771108][T25306] ? __cancel_work_timer+0x36a/0x560 [ 506.776491][T25306] __cancel_work_timer+0x3f4/0x560 [ 506.781620][T25306] ? cancel_work_sync+0x20/0x20 [ 506.786495][T25306] ? __cancel_work+0x1f9/0x2e0 [ 506.791358][T25306] ? lockdep_hardirqs_on+0x94/0x140 [ 506.796567][T25306] ? __cancel_work+0x27b/0x2e0 [ 506.801349][T25306] ? cancel_work+0x20/0x20 [ 506.805779][T25306] ? lock_chain_count+0x20/0x20 [ 506.810659][T25306] hci_request_cancel_all+0xcc/0x300 [ 506.815966][T25306] hci_dev_do_close+0x4e/0x1030 [ 506.820835][T25306] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.826736][T25306] ? _raw_spin_unlock+0x40/0x40 [ 506.831860][T25306] hci_rfkill_set_block+0x10a/0x190 [ 506.837157][T25306] ? rcu_lock_release+0x20/0x20 [ 506.842025][T25306] rfkill_set_block+0x1c6/0x420 [ 506.846902][T25306] rfkill_fop_write+0x452/0x560 [ 506.851860][T25306] ? rfkill_fop_read+0x4d0/0x4d0 [ 506.856807][T25306] ? common_file_perm+0x110/0x1c0 [ 506.861847][T25306] ? fsnotify_perm+0x5d/0x560 [ 506.866538][T25306] ? security_file_permission+0x75/0xa0 [ 506.872181][T25306] ? rfkill_fop_read+0x4d0/0x4d0 [ 506.877133][T25306] vfs_write+0x30b/0xd60 [ 506.881393][T25306] ? file_end_write+0x250/0x250 [ 506.886263][T25306] ? __fget_files+0x40f/0x480 [ 506.890952][T25306] ? __fdget_pos+0x1e2/0x370 [ 506.896161][T25306] ? ksys_write+0x71/0x260 [ 506.900683][T25306] ksys_write+0x152/0x260 [ 506.905041][T25306] ? __ia32_sys_read+0x80/0x80 [ 506.909821][T25306] ? lockdep_hardirqs_on+0x94/0x140 [ 506.915040][T25306] do_syscall_64+0x4c/0xa0 [ 506.919467][T25306] ? clear_bhb_loop+0x30/0x80 [ 506.924156][T25306] ? clear_bhb_loop+0x30/0x80 [ 506.928851][T25306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 506.934948][T25306] RIP: 0033:0x7fd39cbf0819 [ 506.939476][T25306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.959113][T25306] RSP: 002b:00007fd39ae4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 506.967542][T25306] RAX: ffffffffffffffda RBX: 00007fd39ce69fa0 RCX: 00007fd39cbf0819 [ 506.975524][T25306] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 506.983500][T25306] RBP: 00007fd39cc86c91 R08: 0000000000000000 R09: 0000000000000000 [ 506.991740][T25306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.999721][T25306] R13: 00007fd39ce6a038 R14: 00007fd39ce69fa0 R15: 00007ffceb90abc8 [ 507.007706][T25306] [ 507.285937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.303429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.324571][T25217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.359225][ T1163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.382912][ T1163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60558 - 0 [ 507.404753][ T1163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 43534 - 0 [ 507.476599][ T1163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.494957][ T1163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60558 - 0 [ 507.515782][ T1163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 43534 - 0 [ 507.582086][ T1163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.606808][ T1163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60558 - 0 [ 507.627446][ T1163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 43534 - 0 [ 507.655626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 507.675326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.704749][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 507.713538][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.741981][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.754061][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60558 - 0 [ 507.765024][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 43534 - 0 [ 507.778814][T25217] device veth0_vlan entered promiscuous mode [ 507.790770][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.799471][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.811634][T25217] device veth1_vlan entered promiscuous mode [ 507.860262][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 507.872764][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 507.881373][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 507.890559][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.901791][T25217] device veth0_macvtap entered promiscuous mode [ 507.928777][T25217] device veth1_macvtap entered promiscuous mode [ 507.942734][ T1163] device ~ÿ left promiscuous mode [ 507.963147][T25217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.971853][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.980956][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 507.989408][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 507.998868][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.010110][T25217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.020899][T25217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.032294][T25217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.057837][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.066545][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.079199][T25217] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.088662][T25217] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.097532][T25217] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.106368][T25217] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.202746][T25217] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 508.231733][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.244374][T25217] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 508.254307][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.266248][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.298713][ T4979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.307237][ T4979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.314827][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.947237][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.954862][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.964333][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.972225][ T1163] device bridge_slave_1 left promiscuous mode [ 508.978522][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.987365][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.998452][ T1163] device veth1_vlan left promiscuous mode [ 509.120935][ T1163] bond4 (unregistering): Released all slaves [ 509.130140][ T1163] bond3 (unregistering): Released all slaves [ 509.139653][ T1163] bond2 (unregistering): Released all slaves [ 509.149755][ T1163] bond1 (unregistering): Released all slaves [ 509.219517][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 509.231920][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 509.245219][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.257069][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.303877][ T1163] bond0 (unregistering): Released all slaves