last executing test programs: 8.099099679s ago: executing program 0 (id=13451): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101f5b94c6120c80a23038fa7010203010902"], &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0}) 4.8410694s ago: executing program 1 (id=13567): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, '\x00', @buffer={"4190d0749e95f7b83b3685ef724624c2b6f98956f56e6f9343dd7821f6223b33", 0x20}, 0xfffffffd}]}) 4.820365471s ago: executing program 0 (id=13569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.756431712s ago: executing program 1 (id=13571): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) 4.688777604s ago: executing program 0 (id=13573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}]}, 0x44}}, 0x0) 4.654273045s ago: executing program 1 (id=13575): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002180009240302010100010009040100000e0200000e240101470081000200000001001b24040101595559320000100080"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.560732637s ago: executing program 0 (id=13577): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X1sVeUdB/BzKQWkQLs4FEMyGUNdls0gZoJOscjAUUHuwA1Jxmhl0iBBu2ZuaRdd49hwcS6Vl20sQV0iI6uNdnSDzBHFhCjE8TI0xoxXGaMZccjrwpjGpffe53LvubS9Mmd9+XxIe85zf+d57nNPzh/3e+lzbgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRFCWntzYv/t1Vm9849c7TDVe93LfvoxP+Vv+TW1cOHfu5R/5atvJP+1+aN7Jm+MTLWvcl5jbsHbskihKpfolM/7k3fWXG/Jlzpw0IA1Z/Nb2tqOjqKdNd96cb/fIe7OyX/1MTRVFpbICSzHZSWXrbJ2+A7G594YDdGjfozcWDj1a1rKkuq1368NRjhS+dTgN6ewK9JXNdHTx7LVWmfveJHZFt51x6ibxLNN0/fsG9Ly8CAHhXRidTm+zb0cxb3Gy7KV6PtStj7eZYO7xDaM5tnI/0uP26mueIeL2X5lmZjgr9u5xnrJ45/9l2Mt4/1o5FjXcxz/xDM5FmQFfzrIvVe2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8kD2zd9K+bpz13eOJNT0y5bu9rs58/Oelrzy/63rED/x5+8eoD/1mz/6V5I2uGT7ysdV9ibsPesUuiqCLVL5Hunpg5cPLFX/hV1fd/39Ewdd2g5pdLMuOGbd+cg6PXws615VF0R07lYBj2H0OiKJlfSDWjlYWFBamdKaEAAADAR8klqd99su10HCzNaydSaTKR+hekw+K4QW8uHny0qmVNdVnt0oenHjv/8ZJdjFd5zvGy7YqzP4mcYBzib3y8s/VwaH3BON2LjxjP8yUdVy5Pbl/7jR2Pnn7x6r23bxtec881F97VUrv2kxdUHd/x99kF+b+i+/wfzpz8DwAAwP9C/o+P072e8v9FB8p2Ljrz6obrv/zHZ75527a7T/3mx1u+fVfHoSNNY35Qu2TzloL8PyLvKQvyf5hxyP99ovPL/wAAAPBB9v/O/5UF43Svp/xfOfrtZffcW7d26c6tZ8b/4fLWJ9reuHz1tTNGrWiN5j/bfuitgvw/urj83zd32uHBP4cJLyyPotHFn1QAAAAgT/h/97MfLYS8nv7kIJ7X77hlQvnu45d+d9Km2+7fM6zhwJ2n7xxXs3bh5gWfGX3ftMcqDxbk/8ri8n/p+/NyAQAAgCKMWrWj5q1ZV+4e88qe++qf2t06YPX0f75y/faWK5pOHF60ZeftBfk/WVz+7987LwcAAAA4h58+c82Pbm5c/K05VZvGnznx+uAH395zYX3rrgk/W7Fv2zvPrthVkP+ri8v/AzPbzMqHdKcXwl8hLCuPogGdO3XpwotR843ZAgAAAPAeCTl96aixHSvmD/3srP5TaluWr3ro0hGHP5VofnDonMbxpXs2Hrm3IP/XdX///3Cng7D+P+/+fwXr/3MK6bv+fcmNAQAAAPg4KlzPH26Pn/7mgq6+f7/Y9f+rrtv6622JG1+f3nTJvF+OWDRu8uQj+zY2nnyg+vObXh24ft0jBfm/qbj8X5K7fS+//w8AAADOw4ft+/9mF4zTvZ7u/998dePTj+2/+7kXntx8y6kLDp25of2KJ9vX33p/++HhJ6PG7acL8n9zcfk/bMtyX97GcH5+WB5Fwzp3MncT/G2Y7sJYoa00p5A+8bEeM0OPTKGtf04hpS7WY0x5FH26c6cpVvhEKDTHCkeHZAqPxwrbQyFzPWQLT8UKG8OV9vMhmenGC+tDIbPAoi2soCjLLomI9TjRVY/Owjl77Mo+OQAAwMdKCM+ZLFua34ziUbYt0dMBA3s6oE9PB5T0dEDf2AHxA7t6PKrOL4TH23+xoGb+X5bdMHRD+YxZO0u+fnDahC8uX1f9nQ1zJh8feVF5R0H+f7y4/B9ORb/0pqv1/1FY/5/5XsPs+v/qUKiIFdpCIRm/Y0AyPEc67D4UnqMimelxdFi2AAAAAB9p4XOBkl6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyXvTsPk6q6EwZ8uumFbpruNvoIar6EYNh8pGkg4hITUQwkaLSJe4wKQqNIiyiQCEE/XOJuPk38RmNmDIyJWxBxGbfRiKJohESigyOKS6IO7ga3jMsj83RXnaLqVpddCCjtvO8fXafqd9ZbS9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/w4HvTB63pQZZ6y67JUVr4ehd14+6uKSX2w3fOnSPtf98urrf/XSA88tHd973HYj+sx/tuSomc/sfHYITW3lSlLFSw6oHtlj4OWjf3rL6pn73lpz0WMV6XrT8dCt9U9p+s6ZsdUXuodwW0kIZcnAwJpUoDx9vybW9+WaELYI6wKZEs3VqRLJhsMDVSHMDesCmaruqAqhJitw4KP33XNha+KSqhD6hBAqk208XZlqoyoZ6FuRClQnAyeUpQL/WJuSCdxemgrABotvhsyLfmFTbob69ssVeP2Vb7SOfb6Sw+sSE/WF872+5ybuVJaK5ANNG/S05VXHJpH39ljk3dYJ3m152/kiT1v2F6n0N5S160KVoXRC88RxM1qmx0dKQ0NDl0I1baLneeWa2ePXJ91pXoexA/Ub5XVY3nfYQX16jj7yyhXLFz1Ut3iD/xk8kbVJs9ObWmVIv+Y6zfMYDfd50gnefnlvjF6+dIUQDt1y5ajdRx700qDD6v+1zwU7X9/wq5t/WPrKlFW7HLzbguU/O7Iqb/5f/8nz/8zHUvq2NCd3bPXD2tTcPD5SExNv1qbm5gAAANBpdIa9pv94f8sF7yy5t/n6c4a+d8OcGwYuvq9uSfWYAbcePGzfO9b0bVqRN//vVdzx/3jIvyZ7tItCGN6WOKMuhJ5tj6cC18buHF0XwtfaUk25gT0TgUUhbNOWGJCpKlGiayzRKxFYXZsODE8ElsRAUyLwuxi4KBE4MwYWJgLjY2BRIrBXDIRJuePYoTY9jqIDVTEwNrURF8azEN6uja0lttVTmaoAAAA2kvTssDz3bta5DhuaIU4vF1Z1lCGegV0wQ2WihuQMNjOtKlhDWUc1lHZUQ2bccz55+Hk1l3RUc95pGCW5GUZc++C8Pz92Vp/59b9d/fX/6vnfO15+yHHTzxy65Yw5r75z6MrVPfLm/42fPP+vbKcjJXnH/0MY0/Y35i5NR1oy8bFNORkAAACADTB7h0sefuX42of7TVn0+nn//uP/X/H7W2cdsetri3/x5DM/Kq1ZdXDe/H94cef/x30iXbIyh2VxN8TkuhAacwOpar+ZH0gd9e6WDgAAAEBnkDkenzkWPil9mzpFOzmfzs/ftJ7544H/4e3mP7Bl0ZcOm95/7KPbXvKP+7f//d3zljXsf832V+yy8poRS7b69qiP8+b/TcWd/1+de5vqxJLYi1/WhdA1K/Bg7GVroE2vGHhuj9xAevxL4gY4P1aVPjEhU9X5scTYGGhMBOYWKrE8U6JnbiD9ZGUaPyMzjknpElkBAAAA+MzF3QHxuHw8//+qv/W/eeceF2+9d/3ybd6d/MJPbnj+vv5rSpde+vZ7x5z75Qtv/Hne/H/s+p3/3zYPzju9v6VbCIPKQuiS/GHAsurUwoAxUFOSTtxdnaqrS7Kq06pD2L11YMmq/ppe/78sucbgo1WpqmKgZ+9r1vRtTVxZFcKg7MDjh8/bqTUxPRHINH5QVQhfbR1tsvF/65pqvDzZ+KVdQ/hKViBT1dFdQ2htrCJZ1X2V6esYJKu6oTKELbMCmaqGVYYwMwDQScV/pROyH5w2c9bkcS0tzSdtwkTch18VJk5qaW4Yf0LLhMoCfZqQ6HPOMkan5Y+p2CvfPJVeouij7/SuLyad+Z1gY3Zb6f34eScOpu/H70LlbeMcUp5zd2hyyP23z28iZH2TKjTk0k085OrsStY9iXn1x/wVoVvoOmNa80kNJ4+bPv2kwam/xWYfkvobDzOlttXg5Laqbq9vRbw8Cq6WlfBpt1W/7EoGTT9+6qBpM2cNnHT8uGOaj2meMnhIY+OuuwwdOqRxUOuo0n87GGq/9qpODHXtvCLHtRGHum1ZViWfxaeGhIREZ0t87YRjH5l65VtX7Fe3y1m3DPv+DTce98bBP2nceu3ZNYfvM/m1xbPy5v9TP3n+Hz914id/en2GQsf/6+Nh/tTj6w7zj42BucUe/68vdDQ/c2JAr0RgTgzMcZgfAACAL4a4OzLuzYx7pbc85Nu3r9rjr8+8stuu/+cPdx9a++FVXQ4b9f+m7fjkFo+U//Hwl/bJm//PKe73/xtp/f/M0vWjCy3zPyCWaCy0/n9ymf/M+v9zCq3/n1zmP7P+/9zPYf3/GZlAYpO8bf1/AADgi+CzW/+/w+X9kxcIyMvQ4fL+yQsE5GXocBn/Yi8QsN7r/zesOnrkhT1//dWXv3nIvj+Y8uKUBf2P/NYe1/zwvHvDNXd/Y0W/OXnz/4uKm/9buB8AAAA2HxOe/N3qwcfv+sEjD91eutdPl7/4lTeeOKbp7gfWXvzqHe9cMWKbiXnz/7nFzf8/+/X/QqHz/3sVCjQVWhjQ+n8AAAB0UoXW/3vxT996cGTlTxpPffS3f7hqp8sP3+PUh6+6d6+JV9fuc9MOo3913q558/+Fxc3/42kXpTm5Y28+rE2taReSa9q9WZv5yQAAAAB0DqWhoaG8yLw5K6Pu+enbXJleCvST0tlmXP7uqgmX7D1w3N9eHXDgf9w4+83vn/jEHac/PfvpWUsve3Pvd5blzf8XFTf/z/ldRnnfYQf16Tn6yA+vXLF80UN1iyvWHf8HAAAANp1i90sAAAAAAAAAAAAAAACfvzvXvPfro7a+b9jP77z1xj1Hvdpnu4/3ffGt58/Z7XsPz/7z1Y99sDTv9/9hTFu5Qr//j9f9i78v2Cond2y14/X/0vcP3GfBzLYlC5fVhrB9dmDy6ZO3COlr8/fLDtxzxIAerYnTkyXuemavF1sTRyUD3x34pfdaE7snAmPjIonbJAPxqorvdU8E4vKKjyUDcXssTAYq0oFzu6fGUZLcVi/XpLZVSXJbPVkTQl1WILOtbqtJtVGSHOAliUBmgCcmA3GA+6UDpcleLeiW6lUM1MSiv+mW6hUAAJut+C2wPEyc1NLcGL/Cx9tty3Jvo5wly07Lr7akyOafSi9N9tF3etcXk+6S/C667lrj5aGydQiD876uZmcpaRvlxqmlg023VYEhd7TaW2mBcknru+kqCo+oKjWihvEntEwo73DgQzvOMqSswyyD8yY72VlK2zZpEbUU0ZciRlTktimiy/F+aWho6JLItVsM1occHb0iiv29fvY6f4VeBdl56vcetcfWpTsNOXjns08cM2TJN7ZY/MrbO52y7OQXVvzTbd8be2rPvPl/fXHz/8rscb2XvhjAnHhlvW/WhTC2yBEBAADAF9/1/3f+TYeesOTliYvK/vMvf5lcuv+h5Wtn3zJ71s+evPv8756749UbGr/goVNaRk4sq7jx5t/ude3yc07ft+nQ5mGr7yx9ftmfLm3u/0b++v+9ipv/xz1Y6UPBqb0di+L1/8+oC6Ht0vr1qcC1cbhH14XwtbZUUyyRuqD+6FiiMRW4Nu4wGRBLjG3KraprDCxMBFbXpgOLEoElMZDeS3FNSO/Kubg2hJ3aUmNyS0yNJeoTgf1joFci0BADjYlA9xgYngi81j0daEoElsZAmJS7rW7unt5WAAAA6yM9zyrPvRuS87yFZR1lKOkoQ3VHGUo7ylDZUYZCo4j3b4oZyhMnr5RkZSpP1lqVqCUvQ7wY/nr3Ky9DWJ6bM1kwr+l4/kHmfIOS3AyndLvgrMe/HYYteG23h2e+Nbphu7/vd/9T90+/dPm5Kz8896DlL+TN/xuLm/9X596mWl8S5//rrv+XCjwYu/fLeOp4rxh4bo/cQHrHwJI42T0/U1VTukR60n5+LDE8BnolAlNjYHgiMHZMOjC3R24gPdPONH5GpvFJ6RJZAQAAAPjMxR0EcTdNnP8fu1/vRy+/+bqWxecMuP3da689r9eIZ2+cc9ezFxz2VGh6feWEN/Pm/8OLm//H9rplN3Zm7M0L3UO4rWRdbzKBgTWpQNyPURN/Hv/lmhC2yNrBkSnRXJ0qUZFoODxQlfqFekWyqjuqUmsMxPsHPnrfPRe2Ji6pCqFP1t6XTBtPV6baqEoG+lakAtXJwAllqUDc85MJ3F6aCsAGy+wVjC+o9KkuGfXtlyvw+vuiXBM0Oby8faDt5GvvN1ebSmXygfQ+1Yz1e9ryqmOTyHt7LPJu64zvtnrvtuwvUulvKGvXhSpD6YTmieNmtEyPj2T/kjXPJnqes3+lWkx6I7wO53z63nasMtmBxsTHR2P75dp/HZZkFtrqO+ygPj1HH3nliuWLHqpbXFF0NwqIPxQ+o+7i+ieyNu+mVhnSr7lO93nS5POkM/4b6OVpCyF0feK4poV7f/z02V23fmCbmz96aOdDV1z19rfuOXr3J7cYNeKKhT/Mm/83FTf/L0vctnk/bsxpdSH0z9q4y+LmH1GX+hzMCqQ+JbfMD6QOuT9fW/CTEwAAADa2zO6OzP6CSenb1AnhyXlyfv6m9cwf91cMbzd/sf1++eNVP3p+4bwPTq2bcdabp87d9/2xj1837u8Nu9xXd/Ir/zLvgGPz5v9jP3n+3zXRTcf/Hf9nE3H8v12b+67orskH5mzQrui86tgkHP9v1+b+bnP8v12O/zv+3x7H/zvg+H+7NvenLe9b0lRfukII83+0w13LLxt/y0tNLVefPWvk19/9ftPiU+4aPuXXD7y6ZOaf7+yXN/+fWtz83/p/7S/al1n/b2yh9f+mFlr/b471/wAAgE2qwEJzyXle3up9eRmSq/flZehwgcAOlxi0/t96r/939KpH99/jlt1/80TpvBuv2/+DytuOGLLVDdvPn3j4+688tWb+vb/Pm//PKW7+H18O3bJb7yzr//UaU6Cqi2JgqoUBAQAA2BwV2kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA56ux/48fm73ghSUf/vjIvd4+f/FFlx6wY8/5Y+5/640eB77z1iEjlz63dHzvcduN6DP/2ZKjZj6z89khTGorV5IqXnJA9cgeAy8f/dNbVs/c99aaix6rTNdbnr7dLid3bPXD2hDmZj1SExNv1rbeWRc4cJ8FM8taE8tqQ9g+OzD59MlbtCZ+VxtCv+zAPUcM6NGaOD1Z4q5n9nqxNXFUMvDdgV96rzWxezpQkuzuP3dPdbck2d0Lu4dQlxXIdPe47rlVZdoYlQ6UJtu4uibVRgzUxKKX1aTaiIGWWGJS1xAGlYXQJVnVHytTVXVJVnVnZaqqLsmqTq0MYfcQQlmyqmcqUlWVJUf+SEWqqhjo2fuaNX1bE3MrQhiUHXj88Hk7tSZOTAQyjf+gIoSvtr5kko3fVJ5qvDzZ+CXlIXwlhFCRLPFOWapERbLEX8tC2DIrkGn82LIQZga+EOKHz4TsB6fNnDV5XEtL80mbMFGRbqsqTJzU0tww/oSWCZWJPhVSkpVee9qnH/tTa2aPb7396Du964tJl6XLlbd1eUh5zt2hm3vvY7+qsytZ93zk1R/zV4RuoeuMac0nNZw8bvr0kwan/habfUjqb5d0NLWtBneWbdUvu5JB04+fOmjazFkDJx0/7pjmY5qnDB7S2LjrLkOHDmkc1Dqq9N+NMdR5n/1Qty3LquSz+ACQkJDobInSnE+3xs39gzzvi/66jpaHyrYP6LxpRXaWkrZRboxB7/kpR/xpvqd0OKLBeROHvCxDOs4yNG8ysS5LVSpL2/e6vMlhdk2lbZs03i8NDQ1dCm2H+ty72Zv39Q3YvCvTm67YNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8d6cf4") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000000)={{}, 0x0, 0x6, @unused=[0x7ff, 0xfffffffffffffffa, 0xa, 0x1], @devid}) 3.364832587s ago: executing program 0 (id=13597): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.851210089s ago: executing program 1 (id=13611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.804517801s ago: executing program 1 (id=13612): syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303f64810"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.446531854s ago: executing program 3 (id=13641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8) 1.353097346s ago: executing program 3 (id=13642): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, 0x0) 1.352966646s ago: executing program 3 (id=13643): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x101400c, &(0x7f0000000000)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x1, 0x485, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) 1.084137933s ago: executing program 3 (id=13651): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000700), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000740)={0x2, 0x8, 0xcee, 0x8, 0xfffff0b1, 0x10}) 925.012147ms ago: executing program 1 (id=13655): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 909.126008ms ago: executing program 3 (id=13658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 794.9131ms ago: executing program 3 (id=13663): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x4040802) syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f092405"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 786.966161ms ago: executing program 2 (id=13664): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 681.028313ms ago: executing program 2 (id=13665): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x7, @output={0x1000, 0x0, {0x3, 0x10000}, 0x2, 0x8f9}}) 671.640124ms ago: executing program 2 (id=13666): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x27) 593.651956ms ago: executing program 2 (id=13667): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x480, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000140)=0x1) 471.212168ms ago: executing program 2 (id=13670): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 471.109019ms ago: executing program 2 (id=13671): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5521, &(0x7f0000007b80)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) 280.753953ms ago: executing program 4 (id=13675): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835842323488b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) 216.091565ms ago: executing program 4 (id=13676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x1, 0x0, 0x1, 0x5}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x68000}, 0x4000) 186.896366ms ago: executing program 4 (id=13677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) 108.911038ms ago: executing program 4 (id=13678): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMSETBADBLOCK(r0, 0x40084d0c, &(0x7f0000000040)=0x5) 108.056728ms ago: executing program 0 (id=13679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) 90.686228ms ago: executing program 4 (id=13680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G%') 0s ago: executing program 4 (id=13681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00641000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000038100380341000800800034000000002141002800c00028008000180ff"], 0x10f8}}, 0x4000840) kernel console output (not intermixed with test programs): my_hcd.0/usb1/1-1/input/input51 [ 828.067670][T28574] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 828.265011][ T7] usb 1-1: USB disconnect, device number 63 [ 828.307112][T28587] ieee802154 phy0 wpan0: encryption failed: -22 [ 828.782535][T28632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11042'. [ 828.886288][T28643] netlink: 'syz.0.11046': attribute type 21 has an invalid length. [ 828.901434][T28643] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.953091][T28643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11046'. [ 829.205451][T28670] ubi16: attaching mtd0 [ 829.224772][T28672] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 829.236502][T28670] ubi16: scanning is finished [ 829.268329][T28670] ubi16: empty MTD device detected [ 829.287387][T28678] set match dimension is over the limit! [ 829.319989][T28680] loop4: detected capacity change from 0 to 64 [ 829.464859][T28670] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 829.475908][T28670] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 829.508025][T28670] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 829.528554][T28670] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 829.552350][T28670] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 829.571679][T28670] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 829.620738][T28670] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2387742352 [ 829.645917][T28693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11069'. [ 829.655259][T28670] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 829.681801][T28693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11069'. [ 829.770744][T28685] ubi16: background thread "ubi_bgt16d" started, PID 28685 [ 829.793580][ T4542] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 829.991927][ T7] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 830.090135][ T4542] usb 2-1: Using ep0 maxpacket: 16 [ 830.259285][ T4542] usb 2-1: unable to get BOS descriptor or descriptor too short [ 830.344991][ T4542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.362681][ T4542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.387460][ T7] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 830.402887][ T7] usb 4-1: config 0 has no interface number 0 [ 830.480859][T28715] loop4: detected capacity change from 0 to 64 [ 830.590620][ T4542] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 830.599803][ T4542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.608142][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 830.631491][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.654653][ T4542] usb 2-1: Product: syz [ 830.658892][ T4542] usb 2-1: Manufacturer: syz [ 830.666870][ T7] usb 4-1: Product: syz [ 830.671062][ T7] usb 4-1: Manufacturer: syz [ 830.675672][ T7] usb 4-1: SerialNumber: syz [ 830.684029][ T4542] usb 2-1: SerialNumber: syz [ 830.694395][ T7] usb 4-1: config 0 descriptor?? [ 831.092959][ T7] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 831.099776][ T4542] usb 2-1: 0:1 : does not exist [ 831.104837][ T4542] usb 2-1: unit 5 not found! [ 831.115397][ T7] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 831.125549][ T4542] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 831.152754][ T7] usb 4-1: No valid video chain found. [ 831.186605][ T4542] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 831.194675][ T7] usb 4-1: USB disconnect, device number 69 [ 831.215213][T28764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11101'. [ 831.242285][ T4542] usb 2-1: USB disconnect, device number 68 [ 831.501725][ T4324] udevd[4324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.137432][T28836] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11138'. [ 832.590243][T28872] SET target dimension over the limit! [ 832.653730][T18886] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 832.664636][ T4260] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 832.953407][T18886] usb 5-1: Using ep0 maxpacket: 32 [ 833.041076][T28903] tmpfs: Bad value for 'mpol' [ 833.074198][T28906] netlink: 'syz.0.11173': attribute type 32 has an invalid length. [ 833.092467][T18886] usb 5-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 833.135300][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 833.160405][T28908] netlink: 'syz.1.11174': attribute type 3 has an invalid length. [ 833.268276][ T4260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 833.284562][ T4260] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 833.304452][ T4260] usb 4-1: config 1 interface 0 has no altsetting 0 [ 833.316737][ T4260] usb 4-1: config 1 interface 0 has no altsetting 1 [ 833.338350][T18886] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 833.370507][T18886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.372826][T28926] netlink: 'syz.0.11183': attribute type 10 has an invalid length. [ 833.386811][T18886] usb 5-1: Product: syz [ 833.403374][T18886] usb 5-1: Manufacturer: syz [ 833.408032][T18886] usb 5-1: SerialNumber: syz [ 833.432164][T18886] usb 5-1: config 0 descriptor?? [ 833.462613][T28926] team0: Device vxcan1 is of different type [ 833.491911][T28932] rdma_rxe: rxe creation allowed on top of a real device only [ 833.492455][T18886] usb 5-1: bad CDC descriptors [ 833.505754][T18886] usb 5-1: unsupported MDLM descriptors [ 833.511899][ T4260] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 833.522824][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.556276][ T4260] usb 4-1: Product: syz [ 833.565952][ T4260] usb 4-1: Manufacturer: syz [ 833.586124][ T4260] usb 4-1: SerialNumber: syz [ 833.606914][T28929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.621562][T28936] loop1: detected capacity change from 0 to 4096 [ 833.655003][T28936] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 833.688805][T28936] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 833.736499][T28936] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 833.771802][T28936] System zones: 0-5 [ 833.806416][T28936] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpjquota=./file1,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 833.812757][ T6340] usb 5-1: USB disconnect, device number 68 [ 833.905978][ T4260] smsusb:smsusb_probe: board id=8, interface number 0 [ 833.924128][ T4260] usb 4-1: selecting invalid altsetting 0 [ 833.945669][ T4260] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 833.956481][ T4260] smsusb: probe of 4-1:1.0 failed with error -22 [ 833.960316][T28948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11192'. [ 833.976252][ T4260] usb 4-1: USB disconnect, device number 70 [ 834.016308][T28950] loop2: detected capacity change from 0 to 256 [ 834.328757][T28963] loop2: detected capacity change from 0 to 256 [ 834.658704][T28979] overlayfs: workdir and upperdir must be separate subtrees [ 834.703974][T28983] netlink: 'syz.4.11210': attribute type 11 has an invalid length. [ 834.723754][T28983] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11210'. [ 834.738839][ T7] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 834.815123][T28967] loop1: detected capacity change from 0 to 32768 [ 834.850710][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11214'. [ 834.876106][T28967] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.11202 (28967) [ 834.910301][T28993] loop4: detected capacity change from 0 to 2048 [ 834.920198][T28967] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 834.950426][T28967] BTRFS info (device loop1): using free space tree [ 834.979974][T28967] BTRFS info (device loop1): has skinny extents [ 835.018194][T28993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 835.176958][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 835.262609][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 835.279779][T28967] BTRFS info (device loop1): enabling ssd optimizations [ 835.444102][ T7] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 835.471722][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.509572][ T7] usb 4-1: Product: syz [ 835.524721][ T7] usb 4-1: Manufacturer: syz [ 835.534858][ T7] usb 4-1: SerialNumber: syz [ 835.588320][ T5199] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop1 scanned by udevd (5199) [ 835.630117][T28969] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 835.675406][T29051] ubi: mtd0 is already attached to ubi16 [ 836.032113][ T7] usb 4-1: MIDIStreaming interface descriptor not found [ 836.116757][ T7] usb 4-1: USB disconnect, device number 71 [ 836.256903][T29072] nfs: Unexpected value for 'lock' [ 836.418986][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.480234][T29090] netlink: 'syz.2.11251': attribute type 10 has an invalid length. [ 836.536753][T29090] team0: Device vxcan1 is of different type [ 836.839695][T29117] x_tables: duplicate entry at hook 2 [ 837.121007][T29142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11279'. [ 837.150214][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11279'. [ 837.352099][T29166] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.11289' sets config #0 [ 837.378285][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11292'. [ 837.666722][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11304'. [ 837.737482][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11306'. [ 837.764022][T29198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11306'. [ 837.806668][ T7575] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 838.020059][T29210] loop2: detected capacity change from 0 to 1024 [ 838.095488][T29210] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 838.155857][T29210] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 838.224117][T29210] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 838.277138][ T7575] usb 4-1: unable to get BOS descriptor or descriptor too short [ 838.331066][ T7575] usb 4-1: not running at top speed; connect to a high speed hub [ 838.437922][ T7575] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.468173][ T7575] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 838.556818][T29238] loop1: detected capacity change from 0 to 2048 [ 838.569973][T29244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11328'. [ 838.634620][T29238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 838.666585][T29238] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 838.683846][ T7575] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 838.693012][ T7575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.730157][ T7575] usb 4-1: Product: syz [ 838.734367][ T7575] usb 4-1: Manufacturer: syz [ 838.739929][T29238] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 838.761699][ T7575] usb 4-1: SerialNumber: syz [ 838.770908][T29238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 838.806749][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 838.806764][ T26] audit: type=1800 audit(2000526182.885:47): pid=29238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11325" name=2E02 dev="loop1" ino=1367 res=0 errno=0 [ 839.024688][T29270] netlink: 'syz.1.11338': attribute type 27 has an invalid length. [ 839.175330][ T7575] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 839.247015][ T7575] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 839.278475][ T7575] usb 4-1: selecting invalid altsetting 1 [ 839.297663][ T7575] usb_set_interface error [ 839.302313][ T7575] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 839.336204][ T7575] usb 4-1: USB disconnect, device number 72 [ 839.594806][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.710516][T29322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11367'. [ 839.770842][T29328] CIFS mount error: No usable UNC path provided in device string! [ 839.770842][T29328] [ 839.794617][T29328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 839.811504][T29331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11372'. [ 839.836852][T29331] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11372'. [ 839.870006][T29331] netlink: 'syz.4.11372': attribute type 6 has an invalid length. [ 839.900513][T29331] netlink: 'syz.4.11372': attribute type 5 has an invalid length. [ 839.969916][T29344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.818804][T29397] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.11400' sets config #0 [ 840.983523][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.989890][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.128658][T29421] xt_socket: unknown flags 0x50 [ 841.435837][T29442] xt_NFQUEUE: number of total queues is 0 [ 841.519884][T29453] tc_dump_action: action bad kind [ 841.580594][ T4542] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 841.636348][T29463] netdevsim netdevsim3: Direct firmware load for ÿÿ failed with error -2 [ 841.687356][T29463] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿÿ [ 841.847837][ T4542] usb 2-1: Using ep0 maxpacket: 32 [ 841.976302][ T4542] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 841.995566][ T4542] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 842.027965][ T4542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 842.049601][ T4542] usb 2-1: config 1 has no interface number 0 [ 842.056340][ T4542] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 842.066250][ T4542] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 842.080228][ T4542] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 842.089356][ T4542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.149231][ T4542] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 842.389934][ T4542] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 842.414456][ T4542] snd_usb_pod 2-1:1.1: invalid control EP [ 842.420261][ T4542] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 842.468221][ T4542] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 842.475774][ T4542] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 842.605413][ T4542] usb 2-1: USB disconnect, device number 69 [ 842.819115][T29534] delete_channel: no stack [ 843.010891][T29553] loop4: detected capacity change from 0 to 512 [ 843.063648][T29555] __nla_validate_parse: 3 callbacks suppressed [ 843.063666][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11478'. [ 843.142024][T29559] x_tables: unsorted underflow at hook 1 [ 843.147888][T29553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.11476: bg 0: block 5: invalid block bitmap [ 843.253517][T29553] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 843.323228][T29553] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.11476: invalid indirect mapped block 3 (level 2) [ 843.377373][T29553] EXT4-fs (loop4): 1 orphan inode deleted [ 843.383181][T29553] EXT4-fs (loop4): 1 truncate cleaned up [ 843.400696][T29575] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 843.412153][T29553] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 843.420929][T29577] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 843.475134][T29577] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 843.696511][T29591] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11495'. [ 843.727289][T29597] loop1: detected capacity change from 0 to 64 [ 843.750554][ T7960] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 844.140462][ T7575] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 844.151766][ T7960] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 844.183304][ T7960] usb 1-1: config 0 has no interface number 0 [ 844.205943][ T7960] usb 1-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 844.228330][ T7960] usb 1-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 844.263560][ T7960] usb 1-1: config 0 interface 13 has no altsetting 0 [ 844.355344][T29644] kAFS: unable to lookup cell '.,' [ 844.445643][ T7960] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 844.466684][ T7960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.475712][ T7960] usb 1-1: Product: syz [ 844.480603][ T7960] usb 1-1: Manufacturer: syz [ 844.485253][ T7960] usb 1-1: SerialNumber: syz [ 844.507060][ T7960] usb 1-1: config 0 descriptor?? [ 844.532828][T29658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 844.569424][ T7960] ftdi_sio 1-1:0.13: FTDI USB Serial Device converter detected [ 844.589046][ T7960] usb 1-1: Detected FT8U232AM [ 844.607726][ T7960] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 844.650498][T29664] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 844.728199][ T3519] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 844.734415][ T7575] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 844.755476][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.769755][ T7575] usb 3-1: Product: syz [ 844.773988][ T7575] usb 3-1: Manufacturer: syz [ 844.793648][ T7575] usb 3-1: SerialNumber: syz [ 844.807161][ T7960] usb 1-1: USB disconnect, device number 64 [ 844.821599][ T7960] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 844.847967][ T7960] ftdi_sio 1-1:0.13: device disconnected [ 844.921282][T29675] loop4: detected capacity change from 0 to 4096 [ 844.922664][T29678] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11537'. [ 844.994371][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11538'. [ 844.996092][T29675] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 845.140741][ T3519] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.153001][ T3519] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.153084][T29684] netlink: 200 bytes leftover after parsing attributes in process `syz.4.11540'. [ 845.163329][ T3519] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.183780][ T3519] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.308190][T29686] netlink: 'syz.4.11541': attribute type 1 has an invalid length. [ 845.316752][T29686] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11541'. [ 845.375813][ T3519] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 845.384894][ T3519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.418537][ T3519] usb 4-1: Product: syz [ 845.435329][ T3519] usb 4-1: Manufacturer: syz [ 845.440828][ T3519] usb 4-1: SerialNumber: syz [ 845.568313][ T4542] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 845.605974][T29700] libceph: resolve '0' (ret=-3): failed [ 845.750607][ T3519] usb 4-1: Limiting number of CPorts to U8_MAX [ 845.766638][ T3519] usb 4-1: Not enough endpoints found in device, aborting! [ 845.835349][ T6340] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 845.845981][ C0] usb 3-1: ath9k_htc: invalid pkt_len (ff2c) [ 845.976336][ T3519] usb 4-1: USB disconnect, device number 73 [ 846.046759][ T7960] usb 3-1: USB disconnect, device number 50 [ 846.048230][T29708] loop1: detected capacity change from 0 to 32768 [ 846.127105][T29708] XFS (loop1): Mounting V5 Filesystem [ 846.156205][ T6340] usb 1-1: Using ep0 maxpacket: 32 [ 846.165286][T29708] XFS (loop1): Ending clean mount [ 846.202413][ T4188] XFS (loop1): Unmounting Filesystem [ 846.322503][ T6340] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 846.330703][ T6340] usb 1-1: config 0 has no interface number 0 [ 846.337402][ T6340] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.347931][ T6340] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 846.357817][ T6340] usb 1-1: config 0 interface 12 has no altsetting 0 [ 846.535417][ T6340] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 846.574341][ T6340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.582383][ T6340] usb 1-1: Product: syz [ 846.593649][ T6340] usb 1-1: Manufacturer: syz [ 846.631251][ T6340] usb 1-1: SerialNumber: syz [ 846.653824][ T6340] usb 1-1: config 0 descriptor?? [ 846.711974][ T4542] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 846.713361][ T6340] f81534 1-1:0.12: unsupported endpoint max packet size [ 846.719015][ T4542] ath9k_htc: Failed to initialize the device [ 846.742582][ T7960] usb 3-1: ath9k_htc: USB layer deinitialized [ 847.000757][ T6339] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 847.294555][ T6339] usb 4-1: Using ep0 maxpacket: 32 [ 847.444108][ T6339] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 847.455926][ T6339] usb 4-1: config 0 has no interface number 0 [ 847.480730][ T6339] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.513434][ T6339] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.543319][ T6339] usb 4-1: config 0 interface 85 has no altsetting 0 [ 847.608830][T29759] loop2: detected capacity change from 0 to 32768 [ 847.630506][T29759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11572 (29759) [ 847.668515][T29759] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 847.679014][T29759] BTRFS info (device loop2): setting nodatasum [ 847.686644][T29759] BTRFS info (device loop2): force zlib compression, level 3 [ 847.695509][ T7960] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 847.703869][T29759] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 847.714869][T29759] BTRFS info (device loop2): use lzo compression, level 0 [ 847.723322][T29759] BTRFS info (device loop2): turning on flush-on-commit [ 847.732197][T29759] BTRFS info (device loop2): enabling auto defrag [ 847.740025][T29759] BTRFS info (device loop2): max_inline at 4096 [ 847.747496][T29759] BTRFS info (device loop2): using free space tree [ 847.768588][T29759] BTRFS info (device loop2): has skinny extents [ 847.794684][ T6339] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 847.808823][ T6339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.833612][ T6339] usb 4-1: Product: syz [ 847.849816][ T6339] usb 4-1: Manufacturer: syz [ 847.867999][ T6339] usb 4-1: SerialNumber: syz [ 847.880473][T29759] BTRFS info (device loop2): enabling ssd optimizations [ 847.896874][ T6339] usb 4-1: config 0 descriptor?? [ 848.037674][ T7960] usb 5-1: not running at top speed; connect to a high speed hub [ 848.094161][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11584'. [ 848.133888][ T7960] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.150568][ T7960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 848.170793][ T7960] usb 5-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 848.193256][ T7960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.264234][ T7960] usb 5-1: Found UVC 1.00 device (0000:d970) [ 848.357335][T29802] loop1: detected capacity change from 0 to 4096 [ 848.376426][T29802] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 848.410506][T29802] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 848.454632][ T6339] appletouch 4-1:0.85: Failed to request geyser raw mode [ 848.457768][T29802] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 848.461927][ T6339] appletouch: probe of 4-1:0.85 failed with error -5 [ 848.486669][ T7960] usb 5-1: No streaming interface found for terminal 2. [ 848.500944][T29802] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 848.556287][T29802] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 848.576958][T29802] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 848.616080][ T6339] usb 4-1: USB disconnect, device number 74 [ 848.641266][T29802] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 848.651220][T29802] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 848.686015][T29802] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 848.696387][T29802] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 848.726874][ T7960] usb 5-1: USB disconnect, device number 69 [ 848.776586][T29802] ntfs: volume version 3.1. [ 848.785524][ T4542] usb 1-1: USB disconnect, device number 65 [ 848.818669][T29814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11591'. [ 848.841348][T29814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11591'. [ 848.921875][T29820] No source specified [ 849.187908][T29835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11600'. [ 849.380500][T29851] loop2: detected capacity change from 0 to 16 [ 849.453596][T29851] erofs: (device loop2): mounted with root inode @ nid 36. [ 849.501611][T21630] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 849.571969][T29851] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 849.865122][T29879] dlm: Unknown command passed to DLM device : 152 [ 849.865122][T29879] [ 850.147366][T29892] loop3: detected capacity change from 0 to 512 [ 850.295880][T29892] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 850.355304][T29892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 850.380016][T29907] loop1: detected capacity change from 0 to 8 [ 850.390794][T29892] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 850.403019][T29892] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 850.414166][T29907] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 850.420883][T29892] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 850.449369][T29892] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.11629: dx entry: limit 65535 != root limit 120 [ 850.461504][ T4324] udevd[4324]: incorrect cramfs checksum on /dev/loop1 [ 850.463784][T29892] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.11629: Corrupt directory, running e2fsck is recommended [ 850.678107][ T4542] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 850.817649][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11649'. [ 850.859831][T13215] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 850.949504][T29943] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11654'. [ 851.127292][ T4542] usb 3-1: unable to get BOS descriptor or descriptor too short [ 851.223697][ T4542] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 851.232119][ T4542] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 851.266152][ T4542] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 851.266931][T29966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 851.306385][ T4542] usb 3-1: config 129 has no interface number 0 [ 851.325389][ T4542] usb 3-1: config 129 has no interface number 1 [ 851.347005][ T4542] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 851.393317][ T4542] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 851.406774][ T4542] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 851.420245][T29974] printk: syz.1.11669 (29974): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 851.433806][T13215] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 851.443286][T13215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.451895][T13215] usb 5-1: Product: syz [ 851.456170][ T4542] usb 3-1: config 129 interface 135 has no altsetting 0 [ 851.468717][T13215] usb 5-1: Manufacturer: syz [ 851.478918][T13215] usb 5-1: SerialNumber: syz [ 851.489802][ T4542] usb 3-1: config 129 interface 5 has no altsetting 0 [ 851.509730][T13215] usb 5-1: config 0 descriptor?? [ 851.556881][T13215] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 851.635726][T29986] program syz.1.11675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.771856][ T4542] usb 3-1: string descriptor 0 read error: -22 [ 851.787288][ T4542] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 851.805059][ T4542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.869569][ T4542] usb 3-1: MIDIStreaming interface descriptor not found [ 851.897347][ T7960] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 852.040038][T13215] gspca_sunplus: reg_w_riv err -71 [ 852.045624][T13215] sunplus: probe of 5-1:0.0 failed with error -71 [ 852.070062][T13215] usb 5-1: USB disconnect, device number 70 [ 852.174811][ T7960] usb 4-1: Using ep0 maxpacket: 8 [ 852.175581][ T6339] usb 3-1: USB disconnect, device number 51 [ 852.303678][ T7960] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 852.312585][ T7960] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 852.320972][ T7960] usb 4-1: config 0 has no interface number 1 [ 852.327435][ T7960] usb 4-1: config 0 has no interface number 2 [ 852.333699][ T7960] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 852.344998][ T7960] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 852.360830][ T7960] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.376946][ T7960] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 852.388240][ T7960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.404358][ T7960] usb 4-1: config 0 descriptor?? [ 852.452367][T30015] Process accounting resumed [ 852.542288][ T6334] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 852.677443][ T7960] usb 4-1: Could not set interface, error -71 [ 852.691564][ T7960] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 852.715840][ T7960] usb 4-1: USB disconnect, device number 75 [ 852.837706][ T6334] usb 2-1: Using ep0 maxpacket: 16 [ 852.989148][ T6334] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 852.997393][ T6334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.040285][ T6334] usb 2-1: config 0 has no interface number 0 [ 853.297684][ T6334] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 853.306773][ T6334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.345022][ T6334] usb 2-1: Product: syz [ 853.349343][ T6334] usb 2-1: Manufacturer: syz [ 853.361720][ T6334] usb 2-1: SerialNumber: syz [ 853.374686][ T6334] usb 2-1: config 0 descriptor?? [ 853.434682][T30035] loop2: detected capacity change from 0 to 32768 [ 853.506122][T30035] [ 853.506122][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.506122][T30035] [ 853.533770][T30073] netlink: 'syz.0.11718': attribute type 1 has an invalid length. [ 853.571805][T30035] [ 853.571805][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.571805][T30035] [ 853.596660][ T4542] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 853.607778][T30035] [ 853.607778][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.607778][T30035] [ 853.701242][T30035] [ 853.701242][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.701242][T30035] [ 853.713068][T18886] usb 2-1: USB disconnect, device number 70 [ 853.743535][T30035] [ 853.743535][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.743535][T30035] [ 853.776712][T30035] [ 853.776712][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.776712][T30035] [ 853.816829][T30035] [ 853.816829][T30035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.816829][T30035] [ 853.855606][ T276] [ 853.855606][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.855606][ T276] [ 853.894681][T30089] comedi comedi4: bad chanlist[0]=0x0fffffff chan=65535 range length=2 [ 853.909146][ T4191] [ 853.909146][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.909146][ T4191] [ 853.940031][ T4191] [ 853.940031][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.940031][ T4191] [ 854.004991][ T4542] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 854.028957][ T4542] usb 4-1: config 0 has no interface number 0 [ 854.047732][ T4542] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 854.090243][ T4542] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.233906][T30103] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by ""[30103] [ 854.281177][ T4542] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 854.316310][ T4542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.325372][T30107] loop1: detected capacity change from 0 to 16 [ 854.337186][ T4542] usb 4-1: Product: syz [ 854.355015][ T4542] usb 4-1: Manufacturer: syz [ 854.370818][ T4542] usb 4-1: SerialNumber: syz [ 854.386764][T30107] erofs: (device loop1): mounted with root inode @ nid 36. [ 854.398413][T13215] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 854.408322][ T4542] usb 4-1: config 0 descriptor?? [ 854.430844][T30061] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 854.446177][T21630] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 854.475208][ T4542] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 854.491511][ T4542] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 854.498150][T30107] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 854.595632][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 854.595646][ T26] audit: type=1800 audit(2000526197.655:50): pid=30107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11736" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 854.819890][T13215] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 854.843760][T13215] usb 5-1: config 0 has no interface number 1 [ 854.852094][T13215] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 854.866406][T13215] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 854.954566][T13215] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 854.963660][T13215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.973060][T13215] usb 5-1: SerialNumber: syz [ 854.981594][T13215] usb 5-1: config 0 descriptor?? [ 854.992074][ T6334] usb 4-1: USB disconnect, device number 76 [ 855.014902][ T6334] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 855.031950][ T6334] cyberjack 4-1:0.69: device disconnected [ 855.285969][T13215] usb 5-1: Found UVC 0.00 device (0002:0000) [ 855.293896][T13215] usb 5-1: No valid video chain found. [ 855.329788][T13215] usb 5-1: USB disconnect, device number 71 [ 855.566299][T30140] program syz.1.11749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.670237][T30146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11754'. [ 856.096909][T30183] loop3: detected capacity change from 0 to 128 [ 856.166042][T30183] FAT-fs (loop3): bogus logical sector size 65535 [ 856.172531][T30183] FAT-fs (loop3): Can't find a valid FAT filesystem [ 856.730066][T30224] loop2: detected capacity change from 0 to 1764 [ 856.754878][T30229] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11795'. [ 856.783613][T30229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.794542][T30222] loop3: detected capacity change from 0 to 4096 [ 856.855747][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11799'. [ 856.889336][T30222] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 856.969460][T30242] trusted_key: encrypted_key: master key parameter is missing [ 857.184024][T30254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11805'. [ 857.221258][T30254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11805'. [ 857.304438][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11813'. [ 858.089598][T30311] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 858.098978][T13215] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 858.119262][T30313] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 858.132858][T30317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11839'. [ 858.144008][T30311] overlayfs: missing 'lowerdir' [ 858.161662][T30313] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 858.239000][T30323] netlink: 'syz.2.11842': attribute type 1 has an invalid length. [ 858.240576][T30322] 0x000000000000-0x000000020000 : "" [ 858.268578][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11842'. [ 858.308117][T30322] ftl_cs: FTL header not found. [ 858.396811][ T6339] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 858.525109][T13215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 858.624727][T13215] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.644082][T13215] usb 5-1: config 1 interface 0 has no altsetting 0 [ 858.835286][T13215] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 858.835591][ T6339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.853982][T13215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.867212][ T6339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.877422][ T6339] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.877843][T13215] usb 5-1: Product: syz [ 858.905108][ T6339] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.913360][T13215] usb 5-1: Manufacturer: syz [ 858.931211][T13215] usb 5-1: SerialNumber: syz [ 859.045862][T30346] loop3: detected capacity change from 0 to 32768 [ 859.077893][T30346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.11853 (30346) [ 859.109578][T30346] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 859.118891][ T6339] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 859.131655][ T6339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.146570][T30346] BTRFS info (device loop3): setting nodatasum [ 859.153516][ T6339] usb 2-1: Product: syz [ 859.158514][ T6339] usb 2-1: Manufacturer: syz [ 859.163208][T30346] BTRFS info (device loop3): force zlib compression, level 3 [ 859.177504][ T6339] usb 2-1: SerialNumber: syz [ 859.193717][T30346] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 859.212544][T30346] BTRFS info (device loop3): use lzo compression, level 0 [ 859.235751][T30346] BTRFS info (device loop3): turning on flush-on-commit [ 859.261883][T30346] BTRFS info (device loop3): enabling auto defrag [ 859.275787][T30346] BTRFS info (device loop3): max_inline at 4096 [ 859.316037][T30346] BTRFS info (device loop3): using free space tree [ 859.322661][T30346] BTRFS info (device loop3): has skinny extents [ 859.466034][T13215] usbhid 5-1:1.0: can't add hid device: -71 [ 859.472991][T13215] usbhid: probe of 5-1:1.0 failed with error -71 [ 859.487306][ T6339] usb 2-1: Limiting number of CPorts to U8_MAX [ 859.505261][ T6339] usb 2-1: Not enough endpoints found in device, aborting! [ 859.512690][T13215] usb 5-1: USB disconnect, device number 72 [ 859.588355][T30346] BTRFS info (device loop3): enabling ssd optimizations [ 859.749806][T13215] usb 2-1: USB disconnect, device number 71 [ 860.567083][ T7960] Bluetooth: hci0: command 0x080f tx timeout [ 860.568309][T30415] loop2: detected capacity change from 0 to 1764 [ 860.770170][T13215] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 861.064823][T30417] loop1: detected capacity change from 0 to 32768 [ 861.127954][T30417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.11878 (30417) [ 861.176483][T30417] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 861.176561][T13215] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 861.219477][T30417] BTRFS info (device loop1): setting nodatasum [ 861.225686][T30417] BTRFS info (device loop1): force zlib compression, level 3 [ 861.258248][T13215] usb 5-1: config 0 has no interface number 0 [ 861.274477][T30417] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 861.311184][T30417] BTRFS info (device loop1): use lzo compression, level 0 [ 861.346801][T30417] BTRFS info (device loop1): turning on flush-on-commit [ 861.375938][T30417] BTRFS info (device loop1): enabling auto defrag [ 861.405304][T30417] BTRFS info (device loop1): max_inline at 4096 [ 861.432317][T30417] BTRFS info (device loop1): using free space tree [ 861.451476][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11895'. [ 861.454504][T13215] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 861.476262][T30417] BTRFS info (device loop1): has skinny extents [ 861.502417][T13215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.580216][T13215] usb 5-1: Product: syz [ 861.591662][T13215] usb 5-1: Manufacturer: syz [ 861.640001][T13215] usb 5-1: SerialNumber: syz [ 861.697276][T13215] usb 5-1: config 0 descriptor?? [ 861.753378][T30417] BTRFS info (device loop1): enabling ssd optimizations [ 861.999630][T13215] asix: probe of 5-1:0.251 failed with error -71 [ 862.007785][T30491] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 862.053300][T13215] usb 5-1: USB disconnect, device number 73 [ 862.165310][T30500] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 862.188805][T30500] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 862.215114][T30500] overlayfs: missing 'lowerdir' [ 862.321610][T30506] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11913'. [ 862.676805][T30524] x_tables: duplicate entry at hook 2 [ 862.786864][T30537] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11926'. [ 862.922495][T30546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11931'. [ 863.044615][T30559] netlink: 'syz.0.11938': attribute type 3 has an invalid length. [ 863.314454][T18886] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 863.461099][T30590] device bridge4 entered promiscuous mode [ 863.693296][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11963'. [ 863.695146][T30612] loop4: detected capacity change from 0 to 256 [ 863.731752][T18886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.775627][T18886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.793695][T18886] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 863.824880][T18886] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 863.889535][T30612] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 863.911188][T30612] FAT-fs (loop4): Filesystem has been set read-only [ 864.067126][T18886] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 864.099249][T18886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.152155][T18886] usb 3-1: Product: syz [ 864.178489][T18886] usb 3-1: Manufacturer: syz [ 864.201752][T18886] usb 3-1: SerialNumber: syz [ 864.270348][T30644] loop4: detected capacity change from 0 to 512 [ 864.322882][T30644] EXT4-fs (loop4): Ignoring removed orlov option [ 864.342657][T30644] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 864.342657][T30644] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 864.342657][T30644] [ 864.441273][T30644] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 864.511859][T18886] usb 3-1: Limiting number of CPorts to U8_MAX [ 864.518731][T30644] ext4 filesystem being mounted at /2347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.529399][T18886] usb 3-1: Not enough endpoints found in device, aborting! [ 864.770964][T13218] usb 3-1: USB disconnect, device number 52 [ 864.889400][T30673] netlink: 'syz.0.11991': attribute type 1 has an invalid length. [ 864.917986][T30673] netlink: 'syz.0.11991': attribute type 2 has an invalid length. [ 865.141903][T30688] loop3: detected capacity change from 0 to 1024 [ 865.256410][T30688] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 865.368756][T30688] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,nombcache,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 865.430557][T30717] loop4: detected capacity change from 0 to 256 [ 865.707790][T30727] autofs4:pid:30727:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 865.741262][T30727] autofs4:pid:30727:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 866.155048][T30756] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 866.325301][T30770] openvswitch: netlink: IP tunnel dst address not specified [ 866.459212][T30779] netlink: 'syz.3.12043': attribute type 3 has an invalid length. [ 866.521601][ T4549] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 866.529495][T30783] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.873666][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 866.930630][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 866.949322][ T4549] usb 1-1: unable to get BOS descriptor or descriptor too short [ 866.987802][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.009553][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.019047][T30809] nvme_fabrics: missing parameter 'host_traddr=%s' [ 867.035038][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.044262][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.045610][ T4549] usb 1-1: config 114 has an invalid interface number: 216 but max is 0 [ 867.055239][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.093440][ T4549] usb 1-1: config 114 has no interface number 0 [ 867.111778][ T4549] usb 1-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 867.113930][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.131486][ T4549] usb 1-1: config 114 interface 216 has no altsetting 0 [ 867.148186][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.172149][T30805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12059'. [ 867.302796][ T4549] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 867.335603][ T4549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.343656][ T4549] usb 1-1: Product: syz [ 867.366449][ T4549] usb 1-1: Manufacturer: syz [ 867.393654][ T4549] usb 1-1: SerialNumber: syz [ 867.430513][T30764] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 867.488449][T30843] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 867.495017][T30843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 867.528279][T30843] vhci_hcd vhci_hcd.0: Device attached [ 867.552847][T30851] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 867.559390][T30851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 867.580556][T30851] vhci_hcd vhci_hcd.0: Device attached [ 867.614210][T30855] vhci_hcd: connection closed [ 867.614400][T30845] vhci_hcd: connection closed [ 867.619388][T18646] vhci_hcd: stop threads [ 867.646929][T18646] vhci_hcd: release socket [ 867.667401][T18646] vhci_hcd: disconnect device [ 867.686635][T18646] vhci_hcd: stop threads [ 867.700494][T18646] vhci_hcd: release socket [ 867.727084][T18646] vhci_hcd: disconnect device [ 867.763999][ T6338] vhci_hcd: vhci_device speed not set [ 867.793086][T30873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.886491][T30876] loop1: detected capacity change from 0 to 1024 [ 867.934628][ T4549] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 867.942479][ T4549] usb 1-1: selecting invalid altsetting 0 [ 867.974782][ T2420] pvrusb2: Invalid read control endpoint [ 867.985369][ T4549] usb 1-1: USB disconnect, device number 66 [ 868.039844][ T2420] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 868.086892][ T2420] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 868.307106][ T7960] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 868.353401][T30907] netlink: 'syz.2.12106': attribute type 4 has an invalid length. [ 868.649736][T30931] netlink: 'syz.2.12118': attribute type 2 has an invalid length. [ 868.745463][ T7960] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.831035][ T7960] usb 2-1: config 3 has an invalid interface number: 73 but max is 1 [ 868.845008][ T7960] usb 2-1: config 3 has no interface number 1 [ 868.852132][T13218] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 868.859869][ T7960] usb 2-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 868.871991][ T7960] usb 2-1: config 3 interface 0 has no altsetting 0 [ 868.878710][ T7960] usb 2-1: config 3 interface 73 has no altsetting 0 [ 869.044627][ T4542] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 869.140912][ T7960] usb 2-1: string descriptor 0 read error: -22 [ 869.147185][ T7960] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 869.159136][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.206748][ T7960] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 869.213214][ T7960] dvb_usb_af9035: probe of 2-1:3.0 failed with error -22 [ 869.247771][T13218] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 869.256069][T13218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.269546][T13218] usb 5-1: config 0 has no interface number 0 [ 869.422487][ T6338] usb 2-1: USB disconnect, device number 72 [ 869.440284][ T4542] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.451063][T13218] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 869.460089][T13218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.468296][ T4542] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 869.479290][T13218] usb 5-1: Product: syz [ 869.483502][T13218] usb 5-1: Manufacturer: syz [ 869.488128][T13218] usb 5-1: SerialNumber: syz [ 869.493016][ T4542] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 869.506614][ T4542] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 869.517158][T13218] usb 5-1: config 0 descriptor?? [ 869.522249][ T4542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.558410][T13218] hub 5-1:0.31: bad descriptor, ignoring hub [ 869.564611][T13218] hub: probe of 5-1:0.31 failed with error -5 [ 869.574479][T13218] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 869.580967][T13218] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 869.589534][T13218] usb 5-1: Failed to create links for entity 6 [ 869.595828][T13218] usb 5-1: Failed to register entities (-22). [ 869.806924][ T4542] cxacru 4-1:1.0: receive of cm 0x90 failed (-71) [ 869.828091][T30949] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 869.839937][ T4542] usb 4-1: USB disconnect, device number 77 [ 869.858930][T30949] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 869.924029][T13218] usb 5-1: USB disconnect, device number 74 [ 870.138712][T30969] sctp: [Deprecated]: syz.2.12136 (pid 30969) Use of int in max_burst socket option. [ 870.138712][T30969] Use struct sctp_assoc_value instead [ 870.470639][T13218] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 870.522207][T30991] xt_TCPMSS: Only works on TCP SYN packets [ 870.733758][T13218] usb 3-1: Using ep0 maxpacket: 16 [ 870.808561][T31013] ip6t_REJECT: ECHOREPLY is not supported [ 870.862134][T13218] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.894324][T13218] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.915373][T13218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 871.096151][T13218] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 871.121721][T13218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.140458][T13218] usb 3-1: Product: syz [ 871.144707][T13218] usb 3-1: Manufacturer: syz [ 871.149308][T13218] usb 3-1: SerialNumber: syz [ 871.170535][T13218] usb 3-1: config 0 descriptor?? [ 871.179069][T31040] loop1: detected capacity change from 0 to 1764 [ 871.478414][T13218] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 871.507548][T13218] imon 3-1:0.0: unable to initialize intf0, err -90 [ 871.524772][T13218] imon:imon_probe: failed to initialize context! [ 871.546662][T13218] imon 3-1:0.0: unable to register, err -19 [ 871.570000][T13218] usb 3-1: USB disconnect, device number 53 [ 871.588090][T31066] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 872.057533][T31105] device sit0 left promiscuous mode [ 872.076728][T31105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 872.095670][T31107] loop3: detected capacity change from 0 to 512 [ 872.110093][T31105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 872.142186][T31105] device bond1 left promiscuous mode [ 872.152052][T31105] device geneve2 left promiscuous mode [ 872.156078][T13218] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 872.165326][T31107] EXT4-fs (loop3): Ignoring removed orlov option [ 872.194106][T31105] device bridge3 left promiscuous mode [ 872.200880][T31113] tmpfs: Bad value for 'mpol' [ 872.222856][T31105] device bridge4 left promiscuous mode [ 872.235447][T31107] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 872.269938][T31107] ext4 filesystem being mounted at /2317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.294599][ T7960] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 872.305348][T31120] __nla_validate_parse: 17 callbacks suppressed [ 872.305363][T31120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12210'. [ 872.342949][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12211'. [ 872.352809][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12211'. [ 872.572839][T13218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.690652][ T7960] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 872.775909][T13218] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 872.806746][T13218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.828336][T13218] usb 5-1: Product: syz [ 872.839341][T31149] delete_channel: no stack [ 872.843311][T13218] usb 5-1: Manufacturer: syz [ 872.854110][T13218] usb 5-1: SerialNumber: syz [ 872.874839][T13218] usb 5-1: config 0 descriptor?? [ 872.882700][ T7960] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 872.919262][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.947816][ T7960] usb 2-1: Product: syz [ 872.952683][ T7960] usb 2-1: Manufacturer: syz [ 872.959446][T13218] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 872.966830][ T7960] usb 2-1: SerialNumber: syz [ 873.241637][ T6342] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 873.283049][T31176] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 873.292463][T31176] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 873.298993][T31176] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 873.299488][ T7960] usb 2-1: Cannot retrieve CPort count: -71 [ 873.306368][T31176] comedi comedi1: 8255: I/O port conflict (0x14000000,4) [ 873.311633][ T7960] usb 2-1: Cannot retrieve CPort count: -71 [ 873.311660][ T7960] es2_ap_driver: probe of 2-1:246.0 failed with error -71 [ 873.322632][ T7960] usb 2-1: USB disconnect, device number 73 [ 873.332204][T31176] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 873.349256][T31176] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 873.357238][T31176] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 873.368358][T31176] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 873.377322][T31176] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 873.384092][T31176] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 873.393035][T31176] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 873.400981][T31176] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4) [ 873.410390][T31176] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffa7,4) [ 873.417193][T13218] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 873.419993][T31176] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 873.424921][T13218] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 873.432621][T31176] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 873.449689][T13218] usb 5-1: USB disconnect, device number 75 [ 873.450805][T31176] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 873.464409][T31176] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 873.470975][T31176] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 873.477513][T31176] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 873.555973][ T6342] usb 3-1: Using ep0 maxpacket: 16 [ 873.882218][ T6342] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 873.906970][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.934610][ T6342] usb 3-1: Product: syz [ 873.950417][ T6342] usb 3-1: Manufacturer: syz [ 873.960606][ T6342] usb 3-1: SerialNumber: syz [ 873.976450][ T6342] usb 3-1: config 0 descriptor?? [ 874.036220][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12253'. [ 874.059435][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12253'. [ 874.079354][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12254'. [ 874.222481][T31220] loop1: detected capacity change from 0 to 128 [ 874.262125][ T6342] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 874.269552][ T6342] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 874.309369][T31220] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 874.368977][T31220] ext4 filesystem being mounted at /2422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 874.491020][ T6342] usb 3-1: USB disconnect, device number 54 [ 874.496132][T31237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12268'. [ 874.576646][T31241] device ipip0 entered promiscuous mode [ 874.644489][T31245] loop4: detected capacity change from 0 to 512 [ 874.807703][T31245] EXT4-fs (loop4): orphan cleanup on readonly fs [ 874.824732][T31245] EXT4-fs error (device loop4): ext4_find_extent:893: inode #4: comm syz.4.12272: inode has invalid extent depth: 7 [ 874.858511][T31245] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 874.873475][T31245] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 874.897410][T31245] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 874.907732][T31245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 874.970242][T31268] netlink: 'syz.1.12283': attribute type 8 has an invalid length. [ 874.995089][T31268] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.12283'. [ 875.073524][T31272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12282'. [ 875.938276][T31333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 876.025617][ T7960] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 876.132834][ T7575] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 876.391166][ T7575] usb 3-1: Using ep0 maxpacket: 32 [ 876.464733][ T7960] usb 5-1: config 220 has an invalid interface number: 142 but max is 0 [ 876.473123][ T7960] usb 5-1: config 220 has no interface number 0 [ 876.491076][ T7960] usb 5-1: config 220 interface 142 has no altsetting 0 [ 876.535256][ T26] audit: type=1400 audit(2000526218.177:51): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=31364 comm="syz.0.12328" [ 876.571119][ T7575] usb 3-1: unable to get BOS descriptor or descriptor too short [ 876.656806][ T7575] usb 3-1: config index 0 descriptor too short (expected 321, got 65) [ 876.665069][ T7575] usb 3-1: config 48 has an invalid interface descriptor of length 2, skipping [ 876.677880][ T7960] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 876.691503][ T7960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.701636][ T7960] usb 5-1: Product: syz [ 876.705917][ T7575] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 876.722493][ T7960] usb 5-1: Manufacturer: syz [ 876.727236][ T7960] usb 5-1: SerialNumber: syz [ 876.744809][ T7575] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 3 [ 876.832207][T31384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12337'. [ 876.923958][ T7575] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 876.956234][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.977741][ T7575] usb 3-1: Product: syz [ 876.981953][ T7575] usb 3-1: Manufacturer: syz [ 877.006664][ T7575] usb 3-1: SerialNumber: syz [ 877.096722][ T7960] ttusb_dec_send_command: command bulk message failed: error -22 [ 877.121410][ T7960] ttusb-dec: probe of 5-1:220.142 failed with error -22 [ 877.160827][ T7960] usb 5-1: USB disconnect, device number 76 [ 877.323585][ T7575] usb 3-1: USB disconnect, device number 55 [ 878.083726][T31469] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 878.185174][ T6342] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 878.479079][ T6342] usb 2-1: Using ep0 maxpacket: 16 [ 878.496900][T25260] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 878.536302][T31497] tc_dump_action: action bad kind [ 878.618610][ T6342] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 878.638725][ T6342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.645379][T31505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12397'. [ 878.658014][ T6342] usb 2-1: config 1 has no interface number 0 [ 878.658052][ T6342] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.658086][ T6342] usb 2-1: config 1 interface 105 has no altsetting 0 [ 878.858875][ T6342] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 878.875106][ T6342] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 878.897394][ T6342] usb 2-1: Product: syz [ 878.902181][ T6342] usb 2-1: Manufacturer: syz [ 878.907456][ T6342] usb 2-1: SerialNumber: syz [ 878.943497][T31523] loop2: detected capacity change from 0 to 2048 [ 878.991558][T31523] EXT4-fs (loop2): inline encryption not supported [ 879.026400][T31523] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,inlinecrypt,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 879.046370][T31523] ext4 filesystem being mounted at /2594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.063597][T25260] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 879.079595][T31523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.12407: bg 0: block 345: padding at end of block bitmap is not set [ 879.096189][T25260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.104201][T25260] usb 5-1: Product: syz [ 879.108544][T25260] usb 5-1: Manufacturer: syz [ 879.113146][T25260] usb 5-1: SerialNumber: syz [ 879.113462][T31523] EXT4-fs error (device loop2): ext4_xattr_block_set:2197: inode #15: comm syz.2.12407: bad block 128 [ 879.213799][ T6342] aqc111: probe of 2-1:1.105 failed with error -22 [ 879.412949][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12414'. [ 879.429977][ T7960] usb 2-1: USB disconnect, device number 74 [ 879.636431][T31556] loop2: detected capacity change from 0 to 64 [ 879.768497][T25260] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 879.893561][T31571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12429'. [ 880.254325][ T7960] usb 5-1: USB disconnect, device number 77 [ 880.269947][ T6338] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 880.309975][T31593] loop1: detected capacity change from 0 to 128 [ 880.363652][T31593] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 880.376026][T31593] hpfs: filesystem error: improperly stopped [ 880.382390][T31593] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 880.390712][T31593] hpfs: You really don't want any checks? You are crazy... [ 880.398487][T31593] hpfs: Code page index out of array [ 880.403885][T31593] hpfs: code page support is disabled [ 880.410793][T31593] hpfs: hpfs_map_4sectors(): unaligned read [ 880.416821][T31593] hpfs: hpfs_map_4sectors(): unaligned read [ 880.424664][T31593] hpfs: filesystem error: unable to find root dir [ 880.697803][ T6338] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 880.706038][ T6338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.717884][ T6338] usb 3-1: config 0 has no interface number 0 [ 880.724618][ T6338] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 880.736235][ T6338] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 880.746501][ T6338] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.922144][T25260] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 880.931129][T31620] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 880.940892][T25260] ath9k_htc: Failed to initialize the device [ 880.949271][ T7960] usb 5-1: ath9k_htc: USB layer deinitialized [ 880.958967][ T6338] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 880.996615][ T6338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.020459][ T6338] usb 3-1: Product: syz [ 881.029902][ T6338] usb 3-1: Manufacturer: syz [ 881.034595][ T6338] usb 3-1: SerialNumber: syz [ 881.052352][ T6338] usb 3-1: config 0 descriptor?? [ 881.338786][ T7960] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 881.495480][T31649] netlink: 'syz.1.12467': attribute type 79 has an invalid length. [ 881.563458][ T6342] usb 3-1: USB disconnect, device number 56 [ 881.608694][ T7960] usb 5-1: Using ep0 maxpacket: 8 [ 881.734651][ T7960] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.753220][ T7960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.778260][T31671] xt_cgroup: xt_cgroup: no path or classid specified [ 881.926968][ T7960] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 881.936147][ T7960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.944210][ T7960] usb 5-1: Product: syz [ 881.948645][ T7960] usb 5-1: Manufacturer: syz [ 881.953264][ T7960] usb 5-1: SerialNumber: syz [ 881.963407][ T7575] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 882.354596][ T7575] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 882.365271][ T7960] usb 5-1: unit 5 not found! [ 882.369906][ T7960] usb 5-1: unit 0 not found! [ 882.374786][ T7575] usb 2-1: config 0 has no interface number 0 [ 882.421266][ T7575] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.454556][ T7960] usb 5-1: USB disconnect, device number 78 [ 882.498089][ T4686] udevd[4686]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.653992][ T7575] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 882.668484][ T7575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.677878][ T7575] usb 2-1: Product: syz [ 882.682084][ T7575] usb 2-1: Manufacturer: syz [ 882.690879][ T7575] usb 2-1: SerialNumber: syz [ 882.698249][ T7575] usb 2-1: config 0 descriptor?? [ 882.740867][ T7575] yurex 2-1:0.50: Could not find endpoints [ 882.981527][ T7575] usb 2-1: USB disconnect, device number 75 [ 883.043373][T31736] netlink: 'syz.0.12503': attribute type 2 has an invalid length. [ 883.055638][T31737] netlink: 'syz.4.12504': attribute type 1 has an invalid length. [ 883.095296][T31737] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.12504'. [ 883.342990][T31757] device geneve1 entered promiscuous mode [ 883.754901][ T7575] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 884.107862][ T7575] usb 5-1: not running at top speed; connect to a high speed hub [ 884.143029][T31803] IPv6: sit1: Disabled Multicast RS [ 884.377791][ T7575] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 884.403249][ T7575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.423226][ T7575] usb 5-1: Product: syz [ 884.432478][ T7575] usb 5-1: Manufacturer: syz [ 884.441570][ T7575] usb 5-1: SerialNumber: syz [ 884.499160][ T7575] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 884.525381][ T7575] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 884.555371][ T7575] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 884.593226][ T7575] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 884.625308][ T7575] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 884.728026][ C0] usb 5-1: malformed indat packet [ 884.937220][ T4230] usb 5-1: USB disconnect, device number 79 [ 884.974144][ T4230] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 885.009378][ T4230] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 885.054973][ T4230] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 885.106670][T31860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12565'. [ 885.117718][ T4230] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 885.146108][T31860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12565'. [ 885.156479][ T4230] keyspan 5-1:1.0: device disconnected [ 885.176222][T31863] loop1: detected capacity change from 0 to 1764 [ 885.237699][T31871] loop2: detected capacity change from 0 to 64 [ 885.276114][T31871] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 885.779976][T31903] netlink: 288 bytes leftover after parsing attributes in process `syz.3.12587'. [ 886.147706][T31926] loop3: detected capacity change from 0 to 2048 [ 886.220473][T31926] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 886.296547][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop3 [ 886.336576][T31936] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 886.437065][T31926] NILFS (loop3): error -2 truncating bmap (ino=16) [ 886.746035][T31917] loop2: detected capacity change from 0 to 32768 [ 886.804557][T31949] loop1: detected capacity change from 0 to 4096 [ 886.865501][T31949] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 886.893513][T31917] JBD2: Ignoring recovery information on journal [ 887.074883][T31917] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 887.150536][T31949] ntfs3: loop1: failed to convert "c46c" to iso8859-15 [ 887.207878][ T7575] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 887.293687][T31917] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 887.334578][T31917] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 887.353658][T31917] OCFS2: Returning error to the calling process. [ 887.361592][T31917] (syz.2.12592,31917,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 887.407823][T31917] (syz.2.12592,31917,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 887.465204][T31917] (syz.2.12592,31917,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 887.482758][T31917] (syz.2.12592,31917,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 887.518173][T31917] (syz.2.12592,31917,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 887.526535][T31917] (syz.2.12592,31917,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 887.540958][T31917] (syz.2.12592,31917,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 887.549288][T31917] (syz.2.12592,31917,1):ocfs2_mknod:385 ERROR: status = -5 [ 887.562345][T31917] (syz.2.12592,31917,1):ocfs2_mknod:502 ERROR: status = -5 [ 887.575945][T31917] (syz.2.12592,31917,1):ocfs2_mkdir:659 ERROR: status = -5 [ 887.603652][ T7575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.619465][ T7575] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 887.657524][ T7575] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 887.672774][ T7575] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.709823][ T7575] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 887.735828][ T7575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.770713][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 888.207617][T31981] loop1: detected capacity change from 0 to 32768 [ 888.272250][ T7575] usb 5-1: USB disconnect, device number 80 [ 888.329085][T32013] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12637'. [ 888.354704][T31981] XFS (loop1): Mounting V5 Filesystem [ 888.459071][ T6338] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 888.508489][T31981] XFS (loop1): Ending clean mount [ 888.539201][T31981] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 888.569983][T31992] loop3: detected capacity change from 0 to 40427 [ 888.637620][ T4188] XFS (loop1): Unmounting Filesystem [ 888.660127][T31992] F2FS-fs (loop3): Found nat_bits in checkpoint [ 888.759850][T31992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 888.862507][ T6338] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 888.885980][ T6338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.908039][ T6338] usb 3-1: config 0 has no interface number 0 [ 888.914185][ T6338] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.974920][ T4192] attempt to access beyond end of device [ 888.974920][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 889.066378][T32043] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 889.135690][ T6338] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 889.148459][ T6338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.183474][ T6338] usb 3-1: Product: syz [ 889.193446][ T6338] usb 3-1: Manufacturer: syz [ 889.217727][ T6338] usb 3-1: SerialNumber: syz [ 889.248112][ T6338] usb 3-1: config 0 descriptor?? [ 889.324476][T32053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12655'. [ 889.326794][ T6338] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 889.378739][ T6338] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 889.560061][ T6338] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 889.795280][ T6338] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 889.810956][T32079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12666'. [ 889.813666][ T6338] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 889.905301][ T6338] usb 3-1: USB disconnect, device number 57 [ 889.923643][ T6338] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 889.954711][ T4230] kernel write not supported for file /5352/net/rt_acct (pid: 4230 comm: kworker/0:6) [ 890.055272][T32090] netlink: 'syz.4.12672': attribute type 32 has an invalid length. [ 890.287102][T32102] netlink: 'syz.3.12677': attribute type 4 has an invalid length. [ 890.362324][T32104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12679'. [ 890.393951][T32104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12679'. [ 890.432695][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12680'. [ 890.478392][T32110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12680'. [ 890.480580][T32064] loop1: detected capacity change from 0 to 40427 [ 890.560766][T32118] program syz.0.12684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.670641][T32064] F2FS-fs (loop1): Found nat_bits in checkpoint [ 890.770059][T32133] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 890.847137][T32139] usb usb8: usbfs: process 32139 (syz.3.12694) did not claim interface 0 before use [ 890.869786][T32064] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 890.992094][T32153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12699'. [ 891.011157][T32153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12699'. [ 891.030276][ T4188] attempt to access beyond end of device [ 891.030276][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 891.144861][T32162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12705'. [ 891.341149][T32174] netlink: 'syz.0.12712': attribute type 3 has an invalid length. [ 891.355886][T32174] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12712'. [ 892.590801][T32177] loop4: detected capacity change from 0 to 40427 [ 892.678591][T32177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 892.707312][T32249] loop1: detected capacity change from 0 to 164 [ 892.736331][T32253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12748'. [ 892.814582][T32177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 892.882992][T32249] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 892.908808][T32249] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 892.978013][ T4201] attempt to access beyond end of device [ 892.978013][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 893.712374][T32315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12779'. [ 893.928645][T32328] loop3: detected capacity change from 0 to 256 [ 893.949222][T32332] openvswitch: netlink: EtherType 0 is less than min 600 [ 893.953103][T32334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12787'. [ 893.969484][T32334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 894.049982][T32339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12790'. [ 894.078598][T32338] loop1: detected capacity change from 0 to 2048 [ 894.286319][T32338] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 894.358178][T32338] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 895.215006][T32428] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12832'. [ 895.289594][T32421] xt_CT: No such helper "snmp" [ 895.382405][T32434] loop1: detected capacity change from 0 to 4096 [ 895.472494][T32438] loop3: detected capacity change from 0 to 4096 [ 895.568628][T32441] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.593485][T32440] loop2: detected capacity change from 0 to 4096 [ 895.610929][ T7575] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 895.935021][T32447] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12841'. [ 896.152024][T32434] loop1: detected capacity change from 0 to 32768 [ 896.165433][T32455] tmpfs: Bad value for 'mpol' [ 896.182720][T32457] netlink: 'syz.2.12846': attribute type 1 has an invalid length. [ 896.188251][ T7575] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 896.202980][ T7575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.213505][T32459] netlink: 'syz.3.12847': attribute type 21 has an invalid length. [ 896.222961][ T7575] usb 5-1: Product: syz [ 896.227151][ T7575] usb 5-1: Manufacturer: syz [ 896.234019][T32459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12847'. [ 896.243860][ T7575] usb 5-1: SerialNumber: syz [ 896.259321][ T7575] usb 5-1: config 0 descriptor?? [ 896.297849][T32462] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12848'. [ 896.309710][ T7575] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 896.327714][T32462] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 896.330961][T32434] XFS (loop1): Mounting V5 Filesystem [ 896.504197][T32434] XFS (loop1): Ending clean mount [ 896.540981][ T7575] gspca_sunplus: reg_r err -71 [ 896.559029][ T7575] usb 5-1: USB disconnect, device number 81 [ 896.651399][ T4188] XFS (loop1): Unmounting Filesystem [ 896.738200][T32495] netlink: 'syz.3.12862': attribute type 13 has an invalid length. [ 896.923731][T32505] loop3: detected capacity change from 0 to 256 [ 897.177362][T32517] netlink: 'syz.4.12872': attribute type 21 has an invalid length. [ 897.211470][T32517] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12872'. [ 897.565637][T32547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12884'. [ 897.633274][ T4230] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 897.731709][T32557] loop1: detected capacity change from 0 to 256 [ 897.792811][T32557] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 898.048331][ T4230] usb 5-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 898.071879][T32576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12899'. [ 898.187534][ T4230] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 898.205057][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 898.235006][ T4230] usb 5-1: Product: syz [ 898.272915][T32528] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 898.296471][ T4230] usbhid 5-1:15.0: fixing wrong optional hid class descriptors count [ 898.310601][ T4230] usbhid 5-1:15.0: can't add hid device: -22 [ 898.324743][ T4230] usbhid: probe of 5-1:15.0 failed with error -22 [ 898.565015][ T4230] usb 5-1: USB disconnect, device number 82 [ 898.670941][T32598] set_capacity_and_notify: 1 callbacks suppressed [ 898.670956][T32598] loop2: detected capacity change from 0 to 4096 [ 898.750168][T32598] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 898.862110][T32598] ntfs: volume version 3.1. [ 899.395470][T32643] x_tables: unsorted entry at hook 4 [ 899.513387][T32649] x_tables: duplicate entry at hook 1 [ 899.721321][T32661] CIFS: VFS: Malformed UNC in devname [ 900.049509][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12951'. [ 900.058332][T32687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.579751][T32721] loop4: detected capacity change from 0 to 4096 [ 900.902595][ T6338] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 901.019538][T32753] nvme_fabrics: unknown parameter or missing value '­' in ctrl creation request [ 901.226286][T32767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12991'. [ 901.341169][ T6338] usb 3-1: config index 0 descriptor too short (expected 45, got 25) [ 901.361212][ T305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12997'. [ 901.372947][ T6338] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 901.406329][ T6338] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.629819][ T6338] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 901.646176][ T6338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.685017][ T6338] usb 3-1: Product: syz [ 901.695095][ T6338] usb 3-1: Manufacturer: syz [ 901.699745][ T6338] usb 3-1: SerialNumber: syz [ 901.732368][ T331] loop1: detected capacity change from 0 to 256 [ 901.812675][ T6338] rtl8150 3-1:1.0: couldn't find required endpoints [ 901.822625][ T331] exfat: Deprecated parameter 'utf8' [ 901.828659][ T6338] rtl8150: probe of 3-1:1.0 failed with error -5 [ 901.843513][ T331] exfat: Deprecated parameter 'utf8' [ 901.898062][ T331] exfat: Deprecated parameter 'namecase' [ 901.993581][ T331] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 902.030962][ T6342] usb 3-1: USB disconnect, device number 58 [ 902.618812][ T376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13028'. [ 902.727153][ T378] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 902.986591][ T401] xt_TCPMSS: Only works on TCP SYN packets [ 903.476713][ T432] loop4: detected capacity change from 0 to 1024 [ 903.542820][ T436] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13056'. [ 903.564539][ T436] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13056'. [ 903.585930][ T432] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 3: comm syz.4.13054: lblock 3 mapped to illegal pblock 3 (length 1) [ 903.621022][ T432] Quota error (device loop4): write_blk: dquota write failed [ 903.630061][ T436] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13056'. [ 903.639401][ T432] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 903.649246][ T432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 903.660060][ T432] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13054: Failed to acquire dquot type 0 [ 903.690233][ T432] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.13054: lblock 3 mapped to illegal pblock 3 (length 1) [ 903.711341][ T432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 903.726222][ T432] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13054: Failed to acquire dquot type 0 [ 903.728787][ T430] loop1: detected capacity change from 0 to 4096 [ 903.746770][ T432] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.13054: Freeing blocks not in datazone - block = 0, count = 4096 [ 903.765694][ T432] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.13054: lblock 3 mapped to illegal pblock 3 (length 1) [ 903.796253][ T432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 903.815753][ T432] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13054: Failed to acquire dquot type 0 [ 903.831072][ T432] EXT4-fs (loop4): 1 orphan inode deleted [ 903.860462][ T432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 903.959196][ T432] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.13054: lblock 3 mapped to illegal pblock 3 (length 1) [ 904.011633][ T432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 904.012047][ T430] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 904.032230][ T432] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13054: Failed to acquire dquot type 0 [ 904.064624][ T430] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 904.099718][ T430] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 904.150693][ T430] ntfs: volume version 3.1. [ 904.168560][ T430] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 904.589535][ T465] loop2: detected capacity change from 0 to 512 [ 904.626594][ T429] loop3: detected capacity change from 0 to 32768 [ 904.744116][ T476] loop4: detected capacity change from 0 to 64 [ 904.762434][ T465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13067: bg 0: block 393: padding at end of block bitmap is not set [ 904.821477][ T465] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 904.867423][ T465] EXT4-fs (loop2): 2 truncates cleaned up [ 904.911625][ T465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 905.031882][ T429] XFS (loop3): Mounting V5 Filesystem [ 905.355964][ T429] XFS (loop3): Ending clean mount [ 905.407671][ T429] XFS (loop3): Quotacheck needed: Please wait. [ 905.424108][ T505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13083'. [ 905.491402][ T508] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.13084'. [ 905.510375][ T429] XFS (loop3): Quotacheck: Done. [ 905.694104][ T4192] XFS (loop3): Unmounting Filesystem [ 905.863060][ T7960] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 905.927594][ T524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13092'. [ 906.419310][ T7960] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 906.448405][ T7960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.455561][ T546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13103'. [ 906.478315][ T7960] usb 3-1: Product: syz [ 906.483279][ T7960] usb 3-1: Manufacturer: syz [ 906.488161][ T7960] usb 3-1: SerialNumber: syz [ 906.548943][ T7960] usb 3-1: config 0 descriptor?? [ 906.569019][ T4230] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 906.592151][ T7960] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 906.641229][ T554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13107'. [ 906.666715][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 906.673085][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.825698][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 906.953748][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.970221][ T550] loop3: detected capacity change from 0 to 32768 [ 907.060639][ T7960] gspca_sunplus: reg_w_riv err -71 [ 907.065843][ T7960] sunplus: probe of 3-1:0.0 failed with error -71 [ 907.082871][ T7960] usb 3-1: USB disconnect, device number 59 [ 907.132909][ T581] SET target dimension over the limit! [ 907.146307][ T550] JBD2: Ignoring recovery information on journal [ 907.156875][ T4230] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 907.178895][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.196831][ T4230] usb 5-1: Product: syz [ 907.201786][ T4230] usb 5-1: Manufacturer: syz [ 907.209048][ T4230] usb 5-1: SerialNumber: syz [ 907.228320][ T4230] usb 5-1: config 0 descriptor?? [ 907.263689][ T550] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 907.285903][ T4230] cdc_ether 5-1:0.0: skipping garbage [ 907.292206][ T4230] cdc_ether 5-1:0.0: skipping garbage [ 907.298779][ T4230] usb 5-1: bad CDC descriptors [ 907.304127][ T4230] usb 5-1: unsupported MDLM descriptors [ 907.400742][ T550] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 907.418885][ T7575] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 907.426671][ T550] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 907.437697][ T550] OCFS2: Returning error to the calling process. [ 907.444287][ T550] (syz.3.13104,550,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 907.456551][ T550] (syz.3.13104,550,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 907.475338][ T550] (syz.3.13104,550,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 907.493464][ T550] (syz.3.13104,550,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 907.506451][ T4230] usb 5-1: USB disconnect, device number 83 [ 907.510688][ T594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13125'. [ 907.515162][ T550] (syz.3.13104,550,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 907.531620][ T550] (syz.3.13104,550,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 907.539900][ T550] (syz.3.13104,550,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 907.548221][ T550] (syz.3.13104,550,0):ocfs2_mknod:385 ERROR: status = -5 [ 907.555919][ T550] (syz.3.13104,550,0):ocfs2_mknod:502 ERROR: status = -5 [ 907.563855][ T550] (syz.3.13104,550,0):ocfs2_mkdir:659 ERROR: status = -5 [ 907.709827][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 907.710198][ T602] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 907.731936][ T602] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 907.830320][ T7575] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 907.847653][ T7575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.881136][ T7575] usb 2-1: config 0 has no interface number 0 [ 907.894960][ T7575] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 908.108468][ T7575] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 908.117791][ T7575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.168066][ T7575] usb 2-1: Product: syz [ 908.189336][ T7575] usb 2-1: Manufacturer: syz [ 908.194816][ T7575] usb 2-1: SerialNumber: syz [ 908.196648][ T630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13143'. [ 908.231042][ T632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13144'. [ 908.232359][ T7575] usb 2-1: config 0 descriptor?? [ 908.266575][ T632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13144'. [ 908.302648][ T7575] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 908.335351][ T7575] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 908.367906][ T632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13144'. [ 908.431368][ T642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13149'. [ 908.449119][ T642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13149'. [ 908.482895][ T642] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13149'. [ 908.525092][ T7575] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 908.631965][ T6342] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 908.682458][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13158'. [ 908.760385][ T7575] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 908.779326][ T7575] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 908.826113][ T7575] usb 2-1: USB disconnect, device number 76 [ 908.865351][ T7575] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 909.102510][ T6342] usb 3-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 909.220144][ T6342] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 909.249036][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 909.262903][ T695] xt_hashlimit: overflow, try lower: 3/0 [ 909.273322][ T6342] usb 3-1: Product: syz [ 909.305846][ T638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 909.342707][ T6342] usbhid 3-1:15.0: fixing wrong optional hid class descriptors count [ 909.385312][ T6342] usbhid 3-1:15.0: can't add hid device: -22 [ 909.416850][ T6342] usbhid: probe of 3-1:15.0 failed with error -22 [ 909.434891][ T704] netlink: 'syz.3.13179': attribute type 1 has an invalid length. [ 909.606903][ T7960] usb 3-1: USB disconnect, device number 60 [ 909.693811][ T721] loop1: detected capacity change from 0 to 128 [ 910.187456][ T755] netlink: 'syz.3.13204': attribute type 21 has an invalid length. [ 910.246351][ T755] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13204'. [ 910.441723][ T776] comedi comedi2: pcl818: a I/O base address must be specified [ 910.747202][ T796] loop2: detected capacity change from 0 to 1024 [ 910.765726][ T791] loop1: detected capacity change from 0 to 4096 [ 911.529522][ T837] loop1: detected capacity change from 0 to 64 [ 911.770256][ T819] loop4: detected capacity change from 0 to 32768 [ 911.870782][ T819] JBD2: Ignoring recovery information on journal [ 911.945129][ T819] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 911.986212][ T865] loop2: detected capacity change from 0 to 1024 [ 912.003107][ T819] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 912.007604][ T865] EXT4-fs (loop2): Ignoring removed bh option [ 912.032868][ T819] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 912.045013][ T819] OCFS2: Returning error to the calling process. [ 912.051948][ T819] (syz.4.13235,819,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 912.061190][ T819] (syz.4.13235,819,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 912.081634][ T819] (syz.4.13235,819,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 912.095397][ T819] (syz.4.13235,819,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 912.108958][ T819] (syz.4.13235,819,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 912.120581][ T819] (syz.4.13235,819,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 912.129056][ T819] (syz.4.13235,819,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 912.136744][ T819] (syz.4.13235,819,0):ocfs2_mknod:385 ERROR: status = -5 [ 912.142851][ T865] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.13258: lblock 2 mapped to illegal pblock 2 (length 1) [ 912.155969][ T819] (syz.4.13235,819,0):ocfs2_mknod:502 ERROR: status = -5 [ 912.200491][ T819] (syz.4.13235,819,0):ocfs2_mkdir:659 ERROR: status = -5 [ 912.282231][ T865] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 912.309843][ T865] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.13258: lblock 0 mapped to illegal pblock 48 (length 1) [ 912.329367][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 912.355569][ T875] netlink: 'syz.1.13262': attribute type 8 has an invalid length. [ 912.389370][ T865] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 912.428150][ T865] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.13258: Failed to acquire dquot type 0 [ 912.508554][ T865] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 912.544251][ T865] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.13258: mark_inode_dirty error [ 912.563887][ T885] bond0: ARP monitoring cannot be used with MII monitoring [ 912.615711][ T865] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 912.623812][ T1400] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 912.649847][ T865] EXT4-fs (loop2): 1 orphan inode deleted [ 912.666674][ T865] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 912.719260][ T5608] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 912.808417][ T5608] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 912.834947][ T5608] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 912.964575][T18646] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 913.023082][T18646] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 913.035195][T18646] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 913.097968][ T4191] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 913.113435][ T909] libceph: resolve '. [ 913.113435][ T909] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 913.113435][ T909] ' (ret=-3): failed [ 913.159408][ T4191] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 913.193579][ T4191] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 913.558636][ T937] __nla_validate_parse: 8 callbacks suppressed [ 913.558654][ T937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13291'. [ 913.624539][T13218] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 913.634288][ T940] Unsupported ieee802154 address type: 0 [ 913.881104][T13218] usb 5-1: Using ep0 maxpacket: 32 [ 913.951023][ T965] netlink: 'syz.3.13305': attribute type 21 has an invalid length. [ 914.009788][T13218] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 914.018566][T13218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.029072][ T965] netlink: 'syz.3.13305': attribute type 6 has an invalid length. [ 914.069163][ T965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13305'. [ 914.078713][T13218] usb 5-1: config 1 has no interface number 0 [ 914.085955][T13218] usb 5-1: config 1 interface 216 has no altsetting 0 [ 914.234826][ T985] cgroup: Unknown subsys name 'noxattr' [ 914.255567][T13218] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 914.266285][T13218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.274295][T13218] usb 5-1: Product: syz [ 914.341194][T13218] usb 5-1: Manufacturer: syz [ 914.345841][T13218] usb 5-1: SerialNumber: syz [ 914.450419][ T6338] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 914.501441][ T1003] netlink: 'syz.2.13324': attribute type 1 has an invalid length. [ 914.524650][ T1003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13324'. [ 914.736267][ T6338] usb 2-1: Using ep0 maxpacket: 8 [ 914.739358][T13218] usb 5-1: USB disconnect, device number 84 [ 914.824740][ T1017] loop2: detected capacity change from 0 to 4096 [ 914.950350][ T6338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 915.059259][ T6338] usb 2-1: config 4 has an invalid interface number: 112 but max is 0 [ 915.077404][ T1038] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 915.081351][ T6338] usb 2-1: config 4 has no interface number 0 [ 915.137667][ T6338] usb 2-1: config 4 interface 112 has no altsetting 0 [ 915.169440][ T6338] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 3.40 [ 915.199604][ T6338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.267927][ T1044] device bond5 entered promiscuous mode [ 915.275397][ T1044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 915.310102][ T1057] loop3: detected capacity change from 0 to 1024 [ 915.458102][ T1057] hfsplus: request for non-existent node 16777217 in B*Tree [ 915.516898][ T6338] usb 2-1: string descriptor 0 read error: -71 [ 915.521617][ T1057] hfsplus: request for non-existent node 16777217 in B*Tree [ 915.524970][ T6338] pcwd_usb: The device isn't a Human Interface Device [ 915.618087][ T6338] usb 2-1: USB disconnect, device number 77 [ 915.802772][ T1085] loop3: detected capacity change from 0 to 256 [ 915.873634][ T1085] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 915.942314][ T1085] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 915.971882][ T1085] FAT-fs (loop3): Filesystem has been set read-only [ 916.034800][ T1060] loop4: detected capacity change from 0 to 32768 [ 916.184879][ T1060] XFS (loop4): Mounting V5 Filesystem [ 916.328270][ T1060] XFS (loop4): Ending clean mount [ 916.395520][ T4201] XFS (loop4): Unmounting Filesystem [ 916.437132][ T1127] netlink: 268 bytes leftover after parsing attributes in process `syz.3.13372'. [ 916.521830][ T1133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13376'. [ 916.609228][ T1139] 9pnet: Could not find request transport: 0x0000000000000003 [ 916.681377][ T1143] cgroup: name respecified [ 916.772731][ T1151] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 917.409947][ T4230] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 917.569276][ T6338] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 917.615880][ T1226] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 917.629503][ T1231] kAFS: Can only specify source 'none' with -o dyn [ 917.705580][ T1236] loop3: detected capacity change from 0 to 4096 [ 917.866037][ T1240] netlink: 'syz.3.13420': attribute type 21 has an invalid length. [ 917.943561][ T7575] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 917.965104][ T4230] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 917.980157][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.997225][ T4230] usb 2-1: Product: syz [ 918.008313][ T4230] usb 2-1: Manufacturer: syz [ 918.013170][ T4230] usb 2-1: SerialNumber: syz [ 918.020902][ T6338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 918.136216][ T6338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.146345][ T6338] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 918.156298][ T6338] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 918.211859][ T7575] usb 5-1: Using ep0 maxpacket: 32 [ 918.349710][ T7575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.360075][ T7575] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 918.365433][ T6338] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 918.384188][ T6338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.394801][ T6338] usb 3-1: Product: syz [ 918.398970][ T6338] usb 3-1: Manufacturer: syz [ 918.405297][ T6338] usb 3-1: SerialNumber: syz [ 918.411782][ T6338] usb 3-1: config 0 descriptor?? [ 918.435460][ T1205] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 918.442691][ T1205] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 918.477902][ C1] usb 3-1: NFC: Urb failure (status -71) [ 918.499391][ C1] usb 3-1: NFC: Urb failure (status -71) [ 918.505792][ T6338] usb 3-1: NFC: Unable to get FW version [ 918.512379][ T6338] pn533_usb: probe of 3-1:0.0 failed with error -71 [ 918.531791][ T7575] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 918.547453][ T7575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.557254][ T7575] usb 5-1: Product: syz [ 918.561514][ T7575] usb 5-1: Manufacturer: syz [ 918.572238][ T7575] usb 5-1: SerialNumber: syz [ 918.579043][ T7575] usb 5-1: config 0 descriptor?? [ 918.660035][ T4230] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 918.701778][T13218] usb 3-1: USB disconnect, device number 61 [ 918.852266][ T7575] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 918.872245][ T7575] f0 e4 3d a7 d3 60 4f fe [ 918.877396][ T7575] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 919.075430][T13218] usb 5-1: USB disconnect, device number 85 [ 919.104924][ T7575] usb 2-1: USB disconnect, device number 78 [ 919.328931][ T1295] netlink: 'syz.2.13432': attribute type 5 has an invalid length. [ 919.750184][ T4230] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 919.757217][ T4230] ath9k_htc: Failed to initialize the device [ 919.780969][ T7575] usb 2-1: ath9k_htc: USB layer deinitialized [ 919.805450][ T1331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13448'. [ 920.121971][ T1356] kAFS: unable to lookup cell '(/' [ 920.548390][ T1387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13474'. [ 920.731862][ T1403] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 920.918703][ T1420] netlink: 'syz.4.13489': attribute type 29 has an invalid length. [ 920.929893][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13489'. [ 920.942392][ T1420] netlink: 'syz.4.13489': attribute type 29 has an invalid length. [ 920.951008][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13489'. [ 921.250197][ T1446] dlm: dev_write: no op 0 74000000000000 [ 921.598472][ T1476] ip6t_srh: unknown srh invflags 4000 [ 921.661941][ T1480] kAFS: unable to lookup cell 'Þ({^ú@' [ 921.759948][ T7575] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 922.042045][ T7575] usb 3-1: Using ep0 maxpacket: 16 [ 922.169177][ T7575] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 922.214310][ T1521] loop1: detected capacity change from 0 to 512 [ 922.239353][ T1521] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 922.264114][ T1521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 922.294989][ T1521] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.13536: bad orphan inode 131083 [ 922.306939][ T1521] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 922.354953][ T1521] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.13536: Logical block already allocated [ 922.368030][ T7575] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 922.394913][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.427417][ T7575] usb 3-1: Product: syz [ 922.431626][ T7575] usb 3-1: Manufacturer: syz [ 922.465395][ T7575] usb 3-1: SerialNumber: syz [ 922.483362][ T7575] r8152-cfgselector 3-1: config 0 descriptor?? [ 922.662064][ T4230] Bluetooth: hci0: command 0x0c20 tx timeout [ 922.891362][ T1569] xt_l2tp: missing protocol rule (udp|l2tpip) [ 923.021565][ T7575] r8152-cfgselector 3-1: Unknown version 0x0000 [ 923.041532][ T7575] r8152-cfgselector 3-1: USB disconnect, device number 62 [ 923.166771][ T1592] openvswitch: netlink: Actions may not be safe on all matching packets [ 923.255131][ T1597] netlink: 'syz.3.13572': attribute type 1 has an invalid length. [ 923.266028][ T1598] netlink: 'syz.0.13573': attribute type 8 has an invalid length. [ 923.286243][ T1597] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13572'. [ 923.620212][ T6342] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 923.727241][ T1628] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.13588'. [ 923.807747][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13590'. [ 923.907970][ T1637] loop4: detected capacity change from 0 to 512 [ 923.949126][ T1637] EXT4-fs (loop4): inline encryption not supported [ 923.975208][ T6342] usb 2-1: not running at top speed; connect to a high speed hub [ 923.985365][ T1637] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 924.042274][ T1637] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 924.069180][ T1637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13592: bg 0: block 248: padding at end of block bitmap is not set [ 924.095605][ T1637] Quota error (device loop4): write_blk: dquota write failed [ 924.103438][ T1637] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 924.113876][ T1637] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13592: Failed to acquire dquot type 1 [ 924.125527][ T6342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.125574][ T6342] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 924.146936][ T1637] EXT4-fs (loop4): 1 truncate cleaned up [ 924.152607][ T1637] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 924.184770][ T6342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.206061][ T1637] Quota error (device loop4): find_block_dqentry: Quota for id 131074 referenced but not present [ 924.226595][ T1637] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 924.246817][ T1637] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13592: Failed to acquire dquot type 1 [ 924.264038][ T6342] uvcvideo 2-1:1.1: Unknown video format 32595559-0000-0010-8000-000000000000 [ 924.300917][ T6342] usb 2-1: Found UVC 1.00 device (046d:0825) [ 924.379302][ T1636] loop3: detected capacity change from 0 to 32768 [ 924.406761][ T1636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13591 (1636) [ 924.487525][ T1636] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 924.496988][ T6342] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 924.513835][ T1636] BTRFS info (device loop3): use zlib compression, level 3 [ 924.528899][ T6342] usb 2-1: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 924.532661][ T1647] netlink: 'syz.4.13596': attribute type 10 has an invalid length. [ 924.551403][ T1636] BTRFS info (device loop3): using free space tree [ 924.558375][ T1636] BTRFS info (device loop3): has skinny extents [ 924.587222][ T1647] bond0: (slave wlan1): Opening slave failed [ 924.587428][ T6342] uvcvideo 2-1:1.1: No supported video formats found. [ 924.641931][ T6342] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 924.747024][ T6342] usb 2-1: USB disconnect, device number 79 [ 924.841939][ T1681] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 924.876689][ T1636] BTRFS info (device loop3): enabling ssd optimizations [ 924.973873][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13607'. [ 925.140184][ T1643] loop2: detected capacity change from 0 to 32768 [ 925.238441][ T5199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5199) [ 925.362757][ T7575] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 925.448197][ T4230] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 925.619366][ T7575] usb 5-1: Using ep0 maxpacket: 8 [ 925.711829][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13619'. [ 925.747083][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13619'. [ 925.747862][ T7575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.757181][ T1715] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13619'. [ 925.796150][ T7575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 925.836983][ T1721] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13622'. [ 925.843965][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 925.983112][ T7575] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 925.992979][ T7575] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 926.016420][ T7575] usb 5-1: Product: syz [ 926.020635][ T7575] usb 5-1: Manufacturer: syz [ 926.025326][ T7575] usb 5-1: SerialNumber: syz [ 926.030847][ T4230] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 926.049736][ T7575] usb 5-1: config 0 descriptor?? [ 926.054841][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.089757][ T4230] usb 2-1: Product: syz [ 926.100165][ T4230] usb 2-1: Manufacturer: syz [ 926.106676][ T4230] usb 2-1: SerialNumber: syz [ 926.127964][ T7575] imon_raw 5-1:0.0: IR endpoint missing [ 926.176501][ T4230] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 926.234530][ T4230] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input61 [ 926.255578][ T4230] scsi host1: usb-storage 2-1:1.0 [ 926.362200][ T4230] usb 5-1: USB disconnect, device number 86 [ 926.400994][ T7575] usb 2-1: USB disconnect, device number 80 [ 926.410344][ C0] input input61: can't resubmit intr, dummy_hcd.1-1/input0, retval -19 [ 926.456430][ T1758] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.13639'. [ 926.565634][ T1760] nvme_fabrics: missing parameter 'traddr=%s' [ 926.586171][ T1767] loop3: detected capacity change from 0 to 512 [ 926.636179][ T1767] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 926.652994][ T1767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 926.706115][ T1767] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.13643: bad orphan inode 131083 [ 926.731213][ T1767] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 926.747354][ T1777] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13647'. [ 926.756992][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13647'. [ 926.810459][ T1767] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.13643: Logical block already allocated [ 927.161333][ T1809] loop4: detected capacity change from 0 to 512 [ 927.240139][ T1809] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 927.248020][ T1809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 927.272447][ T1809] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.13662: bad orphan inode 131083 [ 927.287025][ T4230] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 927.299911][ T1809] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 927.324110][ T1809] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.13662: Logical block already allocated [ 927.520955][ T1828] netlink: 'syz.4.13672': attribute type 21 has an invalid length. [ 927.529368][ T1828] netlink: 'syz.4.13672': attribute type 6 has an invalid length. [ 927.538647][ T1828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13672'. [ 927.672048][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.694119][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.887223][ T7575] ------------[ cut here ]------------ [ 927.896682][ T4230] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 927.906858][ T7575] WARNING: CPU: 0 PID: 7575 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 927.912727][ T1826] loop2: detected capacity change from 0 to 40427 [ 927.924863][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.945641][ T1826] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 927.946549][ T7575] Modules linked in: [ 927.955859][ T4230] usb 2-1: Product: syz [ 927.956245][ T1826] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 927.959952][ T7575] [ 927.965230][ T1826] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 927.972707][ T4230] usb 2-1: Manufacturer: syz [ 927.987425][ T7575] CPU: 0 PID: 7575 Comm: kworker/0:16 Not tainted syzkaller #0 [ 927.992312][ T1826] F2FS-fs (loop2): invalid crc value [ 927.995137][ T4230] usb 2-1: SerialNumber: syz [ 927.996980][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.014508][ T1826] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 928.016079][ T7575] Workqueue: events nf_tables_trans_destroy_work [ 928.033405][ T7575] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 928.043086][ T7575] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 928.063528][ T7575] RSP: 0018:ffffc900040ffa68 EFLAGS: 00010293 [ 928.069773][ T7575] RAX: ffffffff883c3ef0 RBX: ffff888060f91cf0 RCX: ffff888025500000 [ 928.078136][ T7575] RDX: 0000000000000000 RSI: ffff888060f91c00 RDI: ffff8880609f8c28 [ 928.086242][ T7575] RBP: ffffc900040ffc30 R08: ffff888025500000 R09: 0000000000000008 [ 928.094618][ T7575] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888060f91cc0 [ 928.102773][ T7575] R13: dffffc0000000000 R14: ffff888060f91d10 R15: dffffc0000000000 [ 928.109710][ T1826] F2FS-fs (loop2): Start checkpoint disabled! [ 928.111058][ T7575] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 928.111080][ T7575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.133351][ T7575] CR2: 00007ff3fd77d7c0 CR3: 0000000063a04000 CR4: 00000000003506f0 [ 928.136291][ T1826] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 928.141444][ T7575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 928.154124][ T1826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 928.156735][ T7575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 928.172623][ T7575] Call Trace: [ 928.176056][ T7575] [ 928.179084][ T7575] ? __lock_acquire+0x7b50/0x7b50 [ 928.184402][ T7575] ? do_raw_spin_lock+0x128/0x2f0 [ 928.196322][ T7575] nft_set_destroy+0x488/0xa30 [ 928.203875][ T7575] ? do_raw_spin_unlock+0x11d/0x230 [ 928.210654][ T7575] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 928.216682][ T7575] ? __lock_acquire+0x7b50/0x7b50 [ 928.222402][ T7575] ? nft_object_dump+0x1e0/0x1e0 [ 928.227402][ T7575] ? _raw_spin_unlock_irq+0x1f/0x40 [ 928.232724][ T7575] process_one_work+0x867/0xff0 [ 928.237878][ T7575] ? worker_detach_from_pool+0x240/0x240 [ 928.243544][ T7575] ? lockdep_hardirqs_off+0x70/0x100 [ 928.248959][ T7575] ? _raw_spin_lock_irq+0xb7/0xf0 [ 928.256623][ T7575] ? _raw_spin_lock_irqsave+0x100/0x100 [ 928.263082][ T7575] ? wq_worker_running+0x97/0x170 [ 928.268242][ T7575] worker_thread+0xad7/0x12a0 [ 928.283353][ T7575] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 928.294388][ T7575] kthread+0x42e/0x520 [ 928.298479][ T7575] ? rcu_lock_release+0x20/0x20 [ 928.304295][ T7575] ? kthread_blkcg+0xd0/0xd0 [ 928.308949][ T7575] ret_from_fork+0x1f/0x30 [ 928.313912][ T7575] [ 928.316984][ T7575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 928.324256][ T7575] CPU: 0 PID: 7575 Comm: kworker/0:16 Not tainted syzkaller #0 [ 928.331829][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.341869][ T7575] Workqueue: events nf_tables_trans_destroy_work [ 928.348187][ T7575] Call Trace: [ 928.351454][ T7575] [ 928.354367][ T7575] dump_stack_lvl+0x188/0x250 [ 928.359034][ T7575] ? show_regs_print_info+0x20/0x20 [ 928.364219][ T7575] ? load_image+0x410/0x410 [ 928.368714][ T7575] panic+0x2f8/0x850 [ 928.372597][ T7575] ? bpf_jit_dump+0xd0/0xd0 [ 928.377085][ T7575] ? ret_from_fork+0x1f/0x30 [ 928.381671][ T7575] ? nft_pipapo_destroy+0x8b0/0x960 [ 928.386880][ T7575] __warn+0x248/0x2b0 [ 928.390865][ T7575] ? nft_pipapo_destroy+0x8b0/0x960 [ 928.396048][ T7575] report_bug+0x1b9/0x2e0 [ 928.400381][ T7575] handle_bug+0x3a/0x70 [ 928.404534][ T7575] exc_invalid_op+0x16/0x40 [ 928.409146][ T7575] asm_exc_invalid_op+0x16/0x20 [ 928.414023][ T7575] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 928.419819][ T7575] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 928.439410][ T7575] RSP: 0018:ffffc900040ffa68 EFLAGS: 00010293 [ 928.445484][ T7575] RAX: ffffffff883c3ef0 RBX: ffff888060f91cf0 RCX: ffff888025500000 [ 928.453446][ T7575] RDX: 0000000000000000 RSI: ffff888060f91c00 RDI: ffff8880609f8c28 [ 928.461402][ T7575] RBP: ffffc900040ffc30 R08: ffff888025500000 R09: 0000000000000008 [ 928.469359][ T7575] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888060f91cc0 [ 928.477313][ T7575] R13: dffffc0000000000 R14: ffff888060f91d10 R15: dffffc0000000000 [ 928.485282][ T7575] ? nft_pipapo_destroy+0x8b0/0x960 [ 928.490489][ T7575] ? nft_pipapo_destroy+0x8b0/0x960 [ 928.495676][ T7575] ? __lock_acquire+0x7b50/0x7b50 [ 928.500687][ T7575] ? do_raw_spin_lock+0x128/0x2f0 [ 928.505697][ T7575] nft_set_destroy+0x488/0xa30 [ 928.510450][ T7575] ? do_raw_spin_unlock+0x11d/0x230 [ 928.515648][ T7575] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 928.521530][ T7575] ? __lock_acquire+0x7b50/0x7b50 [ 928.526547][ T7575] ? nft_object_dump+0x1e0/0x1e0 [ 928.531470][ T7575] ? _raw_spin_unlock_irq+0x1f/0x40 [ 928.536680][ T7575] process_one_work+0x867/0xff0 [ 928.541541][ T7575] ? worker_detach_from_pool+0x240/0x240 [ 928.547177][ T7575] ? lockdep_hardirqs_off+0x70/0x100 [ 928.552450][ T7575] ? _raw_spin_lock_irq+0xb7/0xf0 [ 928.557469][ T7575] ? _raw_spin_lock_irqsave+0x100/0x100 [ 928.563010][ T7575] ? wq_worker_running+0x97/0x170 [ 928.568017][ T7575] worker_thread+0xad7/0x12a0 [ 928.572685][ T7575] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 928.578562][ T7575] kthread+0x42e/0x520 [ 928.582611][ T7575] ? rcu_lock_release+0x20/0x20 [ 928.587443][ T7575] ? kthread_blkcg+0xd0/0xd0 [ 928.592022][ T7575] ret_from_fork+0x1f/0x30 [ 928.596456][ T7575] [ 928.599687][ T7575] Kernel Offset: disabled [ 928.604405][ T7575] Rebooting in 86400 seconds..