last executing test programs: 2.487546618s ago: executing program 1 (id=2608): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0xff, 0x0, &(0x7f0000000240)="d91f1332", 0x4) 2.248844925s ago: executing program 1 (id=2613): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000680)={'lo\x00', 0x3, 0x2}) 2.064599529s ago: executing program 4 (id=2616): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000a9f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000056f000/0x2000)=nil) 2.064077439s ago: executing program 1 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)={0x34, 0x13, 0x1, 0x70bd2b, 0x25dddbfb, "", [@nested={0x4, 0xc0}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x16, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @generic='$r\n_oU']}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.867490354s ago: executing program 4 (id=2619): r0 = syz_open_dev$cec(&(0x7f0000000f40), 0x0, 0x40000) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000f80)) 1.828554344s ago: executing program 1 (id=2621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x29, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.783592796s ago: executing program 4 (id=2623): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080)=0xbfe, 0x4) 1.642993119s ago: executing program 4 (id=2626): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000}, 0x1c) 1.579154561s ago: executing program 1 (id=2628): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept(r0, 0x0, 0x0) 1.541726322s ago: executing program 4 (id=2629): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f783835392de75e480bd831152c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=cp866,discard,errors=remount-ro,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x19) 1.410918845s ago: executing program 1 (id=2630): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 1.063505783s ago: executing program 0 (id=2636): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x10f, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x1, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) 1.031151584s ago: executing program 4 (id=2637): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x10018, &(0x7f0000000880)=ANY=[@ANYBLOB="0010bbbe8b821e4cf6d79d4d501be8af339fd4bbd17d928c6d063cce0ce162684c47d7ced43a8371c6dd5466f6250eb5e73903a3df585d270ff705470b03dfd44956cfbf6b2651360ae7880805ab8f419532c02aa5d40d1ed66a2ca647a20a37040700000000000000c701346399b0848c3fac7e886dbfcbcd51015d261738410cf17d0cea70e5d3c6b7478c07b55e59876f1b7d68782c4d64e37a4327377467b94266cde7f65690b41ccf9c1dca7a081990", @ANYRES16, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x6fb, &(0x7f0000000180)="$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") syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) 931.154217ms ago: executing program 3 (id=2639): r0 = msgget(0x3, 0x710) msgctl$IPC_RMID(r0, 0x0) 883.384228ms ago: executing program 0 (id=2640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x2c, 0x16, 0x107, 0x70bd2c, 0x25dfdbff, {0xd, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c011}, 0x20008010) 792.78308ms ago: executing program 2 (id=2641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000180200000a0000010000000000000000180200000a0000010000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000007000000bf61000000000000bfa2000000000000850000004100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 759.953181ms ago: executing program 3 (id=2642): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) 696.467183ms ago: executing program 0 (id=2643): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 671.227363ms ago: executing program 2 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 609.940985ms ago: executing program 3 (id=2645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 564.896426ms ago: executing program 0 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000240), 0x0}, 0x20) 544.216786ms ago: executing program 2 (id=2647): setfsgid(0xee00) setresgid(0x0, 0x0, 0xffffffffffffffff) 514.336657ms ago: executing program 3 (id=2648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) 416.193689ms ago: executing program 0 (id=2649): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) 379.05456ms ago: executing program 2 (id=2650): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040) 340.376391ms ago: executing program 3 (id=2651): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8949, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) 285.573553ms ago: executing program 0 (id=2652): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000000)={[{@chkdsk_no}, {@umask={'umask', 0x3d, 0x10}}, {@case_asis}, {@check_none}]}, 0x1, 0x9e24, &(0x7f000000a040)="$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") write(0xffffffffffffffff, 0x0, 0x0) 149.320976ms ago: executing program 2 (id=2653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000600), 0x2}, 0x20) 124.663526ms ago: executing program 3 (id=2654): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000300)={[{@debug}, {@noacl}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) 0s ago: executing program 2 (id=2655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x29, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tory [ 129.149975][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.166227][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 129.180359][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.227210][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 129.248106][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 129.263100][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.284604][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.620414][ T5069] loop1: detected capacity change from 0 to 32768 [ 129.771651][ T4311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.944022][ T5113] loop3: detected capacity change from 0 to 1024 [ 130.081475][ T4311] usb 3-1: Using ep0 maxpacket: 32 [ 130.121531][ T4312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.211620][ T4311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.243086][ T4311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.275272][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 130.323734][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 130.397707][ T4311] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.417225][ T4311] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 130.431436][ T4312] usb 2-1: Using ep0 maxpacket: 32 [ 130.438811][ T4311] usb 3-1: Product: syz [ 130.457188][ T4311] usb 3-1: Manufacturer: syz [ 130.547396][ T4311] hub 3-1:4.0: USB hub found [ 130.592288][ T4312] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 130.620946][ T4312] usb 2-1: config 2 has no interface number 0 [ 130.627462][ T4312] usb 2-1: config 2 interface 222 has no altsetting 0 [ 130.711244][ T5102] loop4: detected capacity change from 0 to 65536 [ 130.745224][ T5133] loop3: detected capacity change from 0 to 764 [ 130.762435][ T4311] hub 3-1:4.0: 2 ports detected [ 130.787326][ T5102] XFS (loop4): Mounting V5 Filesystem [ 130.815943][ T5133] rock: directory entry would overflow storage [ 130.837616][ T5133] rock: sig=0x4654, size=5, remaining=4 [ 130.843487][ T4312] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 130.857905][ T5133] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 130.867675][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.875923][ T4312] usb 2-1: Product: syz [ 130.880597][ T4312] usb 2-1: Manufacturer: syz [ 130.885621][ T5133] overlayfs: missing 'lowerdir' [ 130.891098][ T4312] usb 2-1: SerialNumber: syz [ 130.923926][ T5102] XFS (loop4): Ending clean mount [ 130.971722][ T4311] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 130.983562][ T4311] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 131.020506][ T4193] XFS (loop4): Unmounting Filesystem [ 131.042231][ T4311] usb 3-1: USB disconnect, device number 3 [ 131.210560][ T5152] netlink: 'syz.0.238': attribute type 11 has an invalid length. [ 131.260845][ T4312] usb 2-1: USB disconnect, device number 4 [ 131.355427][ T5156] netlink: 96 bytes leftover after parsing attributes in process `syz.0.241'. [ 132.382667][ T5201] loop0: detected capacity change from 0 to 256 [ 132.587900][ T5162] loop3: detected capacity change from 0 to 32768 [ 132.653918][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660371][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789465][ T5162] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 132.885715][ T5239] loop4: detected capacity change from 0 to 64 [ 132.924343][ T4187] XFS (loop3): Unmounting Filesystem [ 133.507214][ T5268] autofs4:pid:5268:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 133.540936][ T5270] loop3: detected capacity change from 0 to 256 [ 133.584243][ T5272] loop0: detected capacity change from 0 to 128 [ 133.639282][ T5270] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.108896][ T5296] Cannot find add_set index 0 as target [ 134.942576][ T5349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.328'. [ 135.039706][ T5305] loop2: detected capacity change from 0 to 32768 [ 135.132339][ T5358] capability: warning: `syz.1.333' uses deprecated v2 capabilities in a way that may be insecure [ 135.206919][ T5363] loop3: detected capacity change from 0 to 64 [ 135.252212][ T5364] loop0: detected capacity change from 0 to 256 [ 135.393395][ T5364] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.766449][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 135.845531][ T5395] loop4: detected capacity change from 0 to 1024 [ 136.057828][ T5411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.357'. [ 136.305956][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 136.371661][ T5433] tmpfs: Bad value for 'mpol' [ 136.376652][ T5434] loop2: detected capacity change from 0 to 8 [ 136.401801][ T5430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.367'. [ 136.469474][ T5434] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 136.794670][ T5465] binder: Bad value for 'max' [ 136.862605][ T5471] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 136.890730][ T5471] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 137.051644][ T4312] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 137.491752][ T4312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.541698][ T4312] usb 4-1: not running at top speed; connect to a high speed hub [ 137.566322][ T5470] loop1: detected capacity change from 0 to 32768 [ 137.631759][ T4312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.674402][ T4312] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.712893][ T4312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.911879][ T4312] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 137.929027][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.957471][ T4312] usb 4-1: Product: syz [ 137.974306][ T4312] usb 4-1: Manufacturer: syz [ 137.974330][ T4312] usb 4-1: SerialNumber: syz [ 138.427298][ T4312] usb 4-1: USB disconnect, device number 4 [ 138.502011][ T5596] loop1: detected capacity change from 0 to 512 [ 138.559316][ T5611] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 138.584353][ T5613] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.630805][ T5596] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 138.722938][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.782733][ T5596] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.423: Directory block failed checksum [ 138.941057][ T5639] loop0: detected capacity change from 0 to 512 [ 138.981982][ T5643] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 139.063352][ T5639] ======================================================= [ 139.063352][ T5639] WARNING: The mand mount option has been deprecated and [ 139.063352][ T5639] and is ignored by this kernel. Remove the mand [ 139.063352][ T5639] option from the mount to silence this warning. [ 139.063352][ T5639] ======================================================= [ 139.178956][ T5639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.223890][ T5639] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.262532][ T5639] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.430: corrupted xattr block 33 [ 139.311374][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 139.379504][ T5677] loop4: detected capacity change from 0 to 8 [ 139.498780][ T5677] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 139.568990][ T5702] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 139.689073][ T5719] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.722859][ T4312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.909180][ T5745] loop1: detected capacity change from 0 to 8 [ 139.979001][ T5745] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 140.121734][ T4312] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.148096][ T5774] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.474'. [ 140.160528][ T5774] openvswitch: netlink: Flow key attribute not present in set flow. [ 140.170996][ T4312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.301815][ T4312] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.323777][ T4312] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.347091][ T4312] usb 3-1: Manufacturer: syz [ 140.367284][ T4312] usb 3-1: config 0 descriptor?? [ 140.458991][ T4312] igorplugusb 3-1:0.0: incorrect number of endpoints [ 140.471642][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.567821][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 140.661567][ T4230] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 140.681561][ T4472] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.744160][ T4227] usb 3-1: USB disconnect, device number 4 [ 140.908950][ T5830] loop4: detected capacity change from 0 to 2048 [ 140.926931][ T5830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.962276][ T4472] usb 4-1: Using ep0 maxpacket: 8 [ 140.992109][ T7] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 141.001186][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.010012][ T7] usb 2-1: Product: syz [ 141.014577][ T7] usb 2-1: Manufacturer: syz [ 141.019599][ T7] usb 2-1: SerialNumber: syz [ 141.024516][ T4230] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 141.034419][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.054312][ T4230] usb 1-1: config 0 descriptor?? [ 141.084127][ T7] ums-karma 2-1:1.0: USB Mass Storage device detected [ 141.101228][ T7] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 141.101228][ T7] Please send a copy of this message to and [ 141.133297][ T4230] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 141.149264][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'. [ 141.181546][ T4472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.261729][ T4472] usb 4-1: config 4 has an invalid interface number: 112 but max is 0 [ 141.270045][ T4472] usb 4-1: config 4 has no interface number 0 [ 141.282143][ T4472] usb 4-1: config 4 interface 112 has no altsetting 0 [ 141.288994][ T4472] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 3.40 [ 141.304256][ T4472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.380020][ T7] ums-karma: probe of 2-1:1.0 failed with error -5 [ 141.405217][ T7] usb 2-1: USB disconnect, device number 5 [ 141.451794][ T4443] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.561696][ T4230] gp8psk: usb in 128 operation failed. [ 141.581844][ T4230] gp8psk: usb in 137 operation failed. [ 141.587348][ T4230] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.601074][ T4230] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 141.611913][ T4472] usb 4-1: string descriptor 0 read error: -71 [ 141.631116][ T4472] pcwd_usb: The device isn't a Human Interface Device [ 141.641864][ T4230] usb 1-1: USB disconnect, device number 3 [ 141.661536][ T4472] usb 4-1: USB disconnect, device number 5 [ 141.812410][ T5905] netlink: 'syz.2.503': attribute type 21 has an invalid length. [ 141.820403][ T5905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.503'. [ 141.831738][ T4443] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 141.848499][ T4443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.872426][ T4443] usb 5-1: config 0 descriptor?? [ 142.421596][ T4443] usb 5-1: Cannot read MAC address [ 142.426937][ T4443] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 142.471802][ T4443] usb 5-1: USB disconnect, device number 3 [ 142.530093][ T5917] loop2: detected capacity change from 0 to 32768 [ 142.664886][ T5979] loop1: detected capacity change from 0 to 128 [ 142.678034][ T5982] netlink: 'syz.3.526': attribute type 13 has an invalid length. [ 142.809033][ T5992] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.847283][ T5992] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.905134][ T6000] device geneve2 entered promiscuous mode [ 142.957979][ T6009] tipc: Can't bind to reserved service type 2 [ 143.033513][ T6016] tmpfs: Bad value for 'mpol' [ 143.139079][ T6025] netlink: 'syz.2.537': attribute type 6 has an invalid length. [ 143.200463][ T6025] netlink: 140 bytes leftover after parsing attributes in process `syz.2.537'. [ 143.654012][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 143.955030][ T6108] loop4: detected capacity change from 0 to 256 [ 143.956163][ T6104] misc userio: The device must be registered before sending interrupts [ 143.976528][ T6109] loop0: detected capacity change from 0 to 512 [ 144.133251][ T6109] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 144.184907][ T6109] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.565: Directory block failed checksum [ 144.241604][ T6133] xt_bpf: check failed: parse error [ 144.311294][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'. [ 144.411261][ T6151] xt_hashlimit: size too large, truncated to 1048576 [ 144.757104][ T26] audit: type=1326 audit(1786388126.456:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454293c0d9 code=0x0 [ 144.799791][ T6187] fuse: Invalid rootmode [ 144.905425][ T6200] netlink: 'syz.3.595': attribute type 8 has an invalid length. [ 145.147612][ T6225] netlink: 140 bytes leftover after parsing attributes in process `syz.4.605'. [ 145.197796][ T6225] netlink: 140 bytes leftover after parsing attributes in process `syz.4.605'. [ 145.868488][ T6289] capability: warning: `syz.3.624' uses 32-bit capabilities (legacy support in use) [ 146.070163][ T6244] loop1: detected capacity change from 0 to 32768 [ 146.114650][ T6244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.611 (6244) [ 146.204200][ T6244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.247231][ T6313] loop3: detected capacity change from 0 to 256 [ 146.254997][ T6244] BTRFS info (device loop1): using free space tree [ 146.297065][ T6244] BTRFS info (device loop1): has skinny extents [ 146.423913][ T6313] FAT-fs (loop3): Directory bread(block 64) failed [ 146.435983][ T6325] loop0: detected capacity change from 0 to 64 [ 146.455352][ T6313] FAT-fs (loop3): Directory bread(block 65) failed [ 146.481862][ T6313] FAT-fs (loop3): Directory bread(block 66) failed [ 146.488434][ T6313] FAT-fs (loop3): Directory bread(block 67) failed [ 146.494449][ T6325] Bad inode number on dev loop0: 6 is out of range [ 146.517982][ T6331] loop4: detected capacity change from 0 to 1024 [ 146.538637][ T6313] FAT-fs (loop3): Directory bread(block 68) failed [ 146.575003][ T6313] FAT-fs (loop3): Directory bread(block 69) failed [ 146.641681][ T6313] FAT-fs (loop3): Directory bread(block 70) failed [ 146.648330][ T6313] FAT-fs (loop3): Directory bread(block 71) failed [ 146.720460][ T6331] EXT4-fs (loop4): #clusters per group too big: 24576 [ 146.741855][ T6313] FAT-fs (loop3): Directory bread(block 72) failed [ 146.748569][ T6313] FAT-fs (loop3): Directory bread(block 73) failed [ 146.753375][ T6346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.634'. [ 146.768324][ T6313] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.779115][ T6244] BTRFS info (device loop1): enabling ssd optimizations [ 147.507092][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.642'. [ 147.968689][ T6394] loop4: detected capacity change from 0 to 4096 [ 148.619718][ T6462] loop0: detected capacity change from 0 to 256 [ 148.691544][ T4470] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.702215][ T6462] exfat: Deprecated parameter 'utf8' [ 148.707669][ T6462] exfat: Deprecated parameter 'namecase' [ 148.725184][ T6462] exfat: Deprecated parameter 'namecase' [ 148.766997][ T6462] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 148.870104][ T6483] loop4: detected capacity change from 0 to 64 [ 149.160715][ T6514] cgroup: none used incorrectly [ 149.211808][ T4470] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.213634][ T6517] loop4: detected capacity change from 0 to 128 [ 149.220888][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.220913][ T4470] usb 2-1: Product: syz [ 149.323017][ T4470] usb 2-1: Manufacturer: syz [ 149.323041][ T4470] usb 2-1: SerialNumber: syz [ 149.369463][ T4470] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.448886][ T4193] sysv_free_block: flc_count > flc_size [ 149.469229][ T4193] sysv_free_block: flc_count > flc_size [ 149.489365][ T4193] sysv_free_block: flc_count > flc_size [ 149.505898][ T4193] sysv_free_block: flc_count > flc_size [ 149.514771][ T4193] sysv_free_block: flc_count > flc_size [ 149.521007][ T4193] sysv_free_block: flc_count > flc_size [ 149.567329][ T4193] sysv_free_block: flc_count > flc_size [ 149.599263][ T4193] sysv_free_block: flc_count > flc_size [ 149.630447][ T4193] sysv_free_block: flc_count > flc_size [ 149.649792][ T4193] sysv_free_block: flc_count > flc_size [ 149.662913][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 149.820293][ T6560] xt_TCPMSS: Only works on TCP SYN packets [ 149.831795][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.941494][ T4472] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.968332][ T6568] loop4: detected capacity change from 0 to 4096 [ 150.012596][ T6568] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 150.064229][ T6568] ntfs: volume version 3.1. [ 150.071496][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 150.101735][ T4470] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.211777][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 150.231469][ T4472] usb 4-1: Using ep0 maxpacket: 8 [ 150.238535][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.265576][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.314795][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 150.341495][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 150.352313][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 150.371516][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.372240][ T4472] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.407654][ T7] usb 3-1: config 0 descriptor?? [ 150.479530][ T4189] Bluetooth: hci5: urb ffff88801bd6fa00 submission failed (90) [ 150.538140][ T7] usb 2-1: USB disconnect, device number 6 [ 150.602165][ T4472] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 150.611258][ T4472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.636627][ T4472] usb 4-1: Product: syz [ 150.640967][ T4472] usb 4-1: Manufacturer: syz [ 150.651817][ T4472] usb 4-1: SerialNumber: syz [ 150.668498][ T4472] usb 4-1: config 0 descriptor?? [ 150.712323][ T4481] usb 3-1: USB disconnect, device number 5 [ 150.734019][ T4472] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 150.740029][ T6626] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 150.755428][ T4472] usb 4-1: selecting invalid altsetting 1 [ 150.766333][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.800852][ T6626] CIFS mount error: No usable UNC path provided in device string! [ 150.800852][ T6626] [ 150.826838][ T6626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 150.955061][ T4472] gspca_stk014: init reg: 0x00 [ 150.961730][ T4472] stk014: probe of 4-1:0.0 failed with error -5 [ 150.996214][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.722'. [ 151.009379][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 151.131550][ T4470] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 151.150492][ T4470] ath9k_htc: Failed to initialize the device [ 151.182797][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 151.194178][ T4472] usb 4-1: USB disconnect, device number 6 [ 151.389377][ T6690] program syz.1.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.478305][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 151.855764][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 151.934136][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 151.981716][ T6727] loop0: detected capacity change from 0 to 4096 [ 152.007773][ T6750] xt_l2tp: invalid flags combination: 0 [ 152.017023][ T6727] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 152.085898][ T6727] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 152.097072][ T6755] usb usb8: usbfs: process 6755 (syz.1.754) did not claim interface 0 before use [ 152.117576][ T6727] ntfs3: loop0: Failed to load root. [ 152.184665][ T4227] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 152.220437][ T6765] syz.1.758 uses old SIOCAX25GETINFO [ 152.561909][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.590181][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.673031][ T6807] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 152.771656][ T4227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.787940][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.798410][ T4227] usb 3-1: Product: syz [ 152.803573][ T4227] usb 3-1: Manufacturer: syz [ 152.808312][ T4227] usb 3-1: SerialNumber: syz [ 152.881655][ T4470] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 153.241602][ T4470] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.252383][ T4470] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 153.311755][ T4227] usb 3-1: cannot find UAC_HEADER [ 153.327760][ T4227] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 153.336278][ T4227] usb 3-1: USB disconnect, device number 6 [ 153.421720][ T4470] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 153.430876][ T4470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.439044][ T4470] usb 1-1: Product: syz [ 153.443475][ T4470] usb 1-1: Manufacturer: syz [ 153.448108][ T4470] usb 1-1: SerialNumber: syz [ 153.543184][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.931488][ C0] usb 1-1: received EP1 urb->status = -71 [ 153.937751][ T4470] usb 1-1: unable to init card! (ret=-110) [ 153.944587][ T4470] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 153.958015][ T4470] usb 1-1: USB disconnect, device number 4 [ 154.079887][ T6859] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 154.139403][ T6862] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 154.276544][ T6873] loop4: detected capacity change from 0 to 512 [ 154.363203][ T6882] overlayfs: workdir and upperdir must reside under the same mount [ 154.420298][ T6873] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.785: invalid indirect mapped block 256 (level 2) [ 154.445561][ T6873] EXT4-fs (loop4): Remounting filesystem read-only [ 154.453085][ T6873] EXT4-fs (loop4): 2 truncates cleaned up [ 154.459036][ T6873] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 154.591629][ T4472] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.601747][ T6896] loop2: detected capacity change from 0 to 256 [ 154.620188][ T6896] exfat: Deprecated parameter 'utf8' [ 154.620234][ T6896] exfat: Deprecated parameter 'namecase' [ 154.620307][ T6896] exfat: Deprecated parameter 'namecase' [ 154.674498][ T6896] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 154.781663][ T4481] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.788551][ T26] audit: type=1107 audit(1786388136.486:3): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 154.788551][ T26] ,”' [ 154.854556][ T6837] loop3: detected capacity change from 0 to 40427 [ 154.891621][ T4472] usb 2-1: Using ep0 maxpacket: 16 [ 154.968163][ T6837] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 155.003806][ T6837] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.021785][ T4472] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 155.029993][ T4472] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.072463][ T6837] F2FS-fs (loop3): invalid crc value [ 155.078454][ T4472] usb 2-1: config 1 has no interface number 0 [ 155.092758][ T4472] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.125293][ T4472] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.147085][ T6837] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 155.161718][ T6928] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.185467][ T4472] usb 2-1: config 1 interface 105 has no altsetting 0 [ 155.192734][ T4481] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 155.201200][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 65, changing to 4 [ 155.220530][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 11113, setting to 1023 [ 155.387861][ T6940] device geneve2 entered promiscuous mode [ 155.403813][ T6837] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.412091][ T4472] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 155.432171][ T4481] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 155.441319][ T4481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.442088][ T6837] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.468913][ T4472] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 155.485726][ T4481] usb 5-1: Product: syz [ 155.490691][ T4472] usb 2-1: Product: syz [ 155.515812][ T4481] usb 5-1: Manufacturer: syz [ 155.520670][ T4481] usb 5-1: SerialNumber: syz [ 155.526261][ T4472] usb 2-1: Manufacturer: syz [ 155.530888][ T4472] usb 2-1: SerialNumber: syz [ 155.548038][ T6837] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 155.557243][ T4481] usb 5-1: config 0 descriptor?? [ 155.581835][ T6877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.611925][ T6885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 155.625554][ T4481] hub 5-1:0.0: bad descriptor, ignoring hub [ 155.636373][ T4481] hub: probe of 5-1:0.0 failed with error -5 [ 155.662642][ T6960] CIFS mount error: No usable UNC path provided in device string! [ 155.662642][ T6960] [ 155.679458][ T4481] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 155.697837][ T6885] EXT4-fs (loop4): Remounting filesystem read-only [ 155.707120][ T6960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.744497][ T4481] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 155.826536][ T4472] aqc111: probe of 2-1:1.105 failed with error -22 [ 155.874240][ T4481] usbtouchscreen: probe of 5-1:0.0 failed with error -22 [ 155.954244][ T4481] usb 5-1: USB disconnect, device number 4 [ 156.037643][ T4470] usb 2-1: USB disconnect, device number 7 [ 156.201614][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.310829][ T7013] loop2: detected capacity change from 0 to 256 [ 156.324264][ T7017] netlink: 'syz.3.818': attribute type 4 has an invalid length. [ 156.333467][ T7017] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 156.341346][ T7017] netlink: 152 bytes leftover after parsing attributes in process `syz.3.818'. [ 156.383985][ T7017] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.461500][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 156.537392][ T7027] loop4: detected capacity change from 0 to 128 [ 156.580480][ T7027] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 156.635148][ T7027] FAT-fs (loop4): Filesystem has been set read-only [ 156.745130][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 156.765328][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.793787][ T7047] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 156.806514][ T7] usb 1-1: Product: syz [ 156.819668][ T7] usb 1-1: Manufacturer: syz [ 156.834133][ T7] usb 1-1: SerialNumber: syz [ 156.841718][ T7047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.828'. [ 156.872114][ T7] usb 1-1: config 0 descriptor?? [ 157.063413][ T7071] device ipip0 entered promiscuous mode [ 157.288401][ T7100] netlink: 92 bytes leftover after parsing attributes in process `syz.4.842'. [ 157.340569][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 157.350052][ T7] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 157.368598][ T7] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 157.389444][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 157.438547][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 157.551804][ T7] peak_usb: probe of 1-1:0.0 failed with error -71 [ 157.585469][ T7] usb 1-1: USB disconnect, device number 5 [ 157.672860][ T7125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.849'. [ 157.887810][ T7156] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.857' sets config #-1 [ 158.132528][ T7178] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 158.156221][ T7179] loop2: detected capacity change from 0 to 2048 [ 158.168504][ T7178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.865'. [ 158.181486][ T7182] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 158.189143][ T7182] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 158.207468][ T7179] loop2: p1 < > p4 < > [ 158.214770][ T7179] loop2: partition table partially beyond EOD, truncated [ 158.243949][ T7189] loop3: detected capacity change from 0 to 64 [ 158.252662][ T7179] loop2: p4 start 42180 is beyond EOD, truncated [ 158.285777][ T7182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.866'. [ 158.736350][ T7237] loop2: detected capacity change from 0 to 256 [ 158.772085][ T7240] xt_limit: Overflow, try lower: 2147483649/3300 [ 158.957293][ T7255] netlink: 'syz.2.887': attribute type 30 has an invalid length. [ 159.128664][ T7274] loop3: detected capacity change from 0 to 16 [ 159.195358][ T7274] erofs: (device loop3): mounted with root inode @ nid 36. [ 159.284684][ T7212] loop4: detected capacity change from 0 to 32768 [ 159.551529][ T4230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.791635][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 159.911717][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 159.943224][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.981505][ T4230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.012247][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 160.049184][ T4230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 160.079549][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 160.106342][ T7344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.131643][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.154612][ T4230] usb 2-1: config 0 descriptor?? [ 160.197047][ T4189] Bluetooth: hci5: urb ffff888024637e00 submission failed (90) [ 160.241096][ T7358] netlink: 'syz.2.915': attribute type 46 has an invalid length. [ 160.249324][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.915'. [ 160.290716][ T7361] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 160.389426][ T7369] loop2: detected capacity change from 0 to 64 [ 160.407073][ T4230] usb 2-1: USB disconnect, device number 8 [ 160.435471][ T7368] syz.3.919 uses obsolete (PF_INET,SOCK_PACKET) [ 160.600315][ T7388] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.921'. [ 160.636858][ T7388] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 160.652458][ T7388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.682370][ T7327] loop0: detected capacity change from 0 to 32768 [ 160.712755][ T7396] AppArmor: change_hat: Invalid input 'hj2wFÛ' [ 160.815391][ T7327] XFS (loop0): Mounting V5 Filesystem [ 161.038999][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.932'. [ 161.096552][ T7327] XFS (loop0): Ending clean mount [ 161.141061][ T7434] loop3: detected capacity change from 0 to 8 [ 161.233457][ T4197] XFS (loop0): Unmounting Filesystem [ 161.321790][ T7450] loop4: detected capacity change from 0 to 1024 [ 161.621563][ T7478] netlink: 'syz.0.948': attribute type 4 has an invalid length. [ 161.679572][ T7478] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 161.758881][ T7478] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.891646][ T1107] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.151478][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 162.328373][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.431805][ T1107] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.661949][ T1107] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 162.671326][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.688067][ T7574] loop3: detected capacity change from 0 to 1024 [ 162.712009][ T1107] usb 2-1: Product: syz [ 162.716322][ T1107] usb 2-1: Manufacturer: syz [ 162.720982][ T1107] usb 2-1: SerialNumber: syz [ 162.771895][ T7482] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.828100][ T7589] loop0: detected capacity change from 0 to 128 [ 162.851965][ T7591] __nla_validate_parse: 1 callbacks suppressed [ 162.851979][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 162.881692][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.980'. [ 162.944628][ T7589] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 162.964085][ T7589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.071678][ T4314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.191659][ T1107] usb 2-1: MIDIStreaming interface descriptor not found [ 163.274457][ T1107] usb 2-1: USB disconnect, device number 9 [ 163.314578][ T7627] Cannot find add_set index 1 as target [ 163.551717][ T4314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.618948][ T7663] usb usb8: usbfs: process 7663 (syz.0.995) did not claim interface 0 before use [ 163.642519][ T4584] udevd[4584]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.661915][ T4314] usb 4-1: config 3 has an invalid interface number: 73 but max is 1 [ 163.679932][ T4314] usb 4-1: config 3 has no interface number 1 [ 163.721728][ T4314] usb 4-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 163.761587][ T4314] usb 4-1: config 3 interface 0 has no altsetting 0 [ 163.768319][ T4314] usb 4-1: config 3 interface 73 has no altsetting 0 [ 163.807622][ T7674] netlink: 'syz.4.1001': attribute type 32 has an invalid length. [ 163.825833][ T7675] loop1: detected capacity change from 0 to 1024 [ 163.952061][ T7675] hfsplus: cannot replace xattr [ 164.091963][ T4314] usb 4-1: string descriptor 0 read error: -22 [ 164.098242][ T4314] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 164.125392][ T7691] loop2: detected capacity change from 0 to 2048 [ 164.147983][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.212287][ T7691] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 164.225379][ T4314] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.243622][ T4314] dvb_usb_af9035: probe of 4-1:3.0 failed with error -22 [ 164.352470][ T7691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.427639][ T7] usb 4-1: USB disconnect, device number 7 [ 164.495996][ T7724] loop0: detected capacity change from 0 to 764 [ 164.579685][ T7739] Cannot find set identified by id 0 to match [ 165.607044][ T7814] xt_CT: No such helper "snmp_trap" [ 165.806681][ T7837] loop1: detected capacity change from 0 to 4096 [ 165.813395][ T4314] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 166.211771][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.233732][ T4314] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 166.439950][ T7880] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 166.451544][ T7880] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1060'. [ 166.521680][ T4314] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 166.550672][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.599112][ T4314] usb 5-1: Product: syz [ 166.613403][ T4314] usb 5-1: Manufacturer: syz [ 166.618474][ T4314] usb 5-1: SerialNumber: syz [ 166.688041][ T7897] syz.0.1064 (7897) used greatest stack depth: 21088 bytes left [ 166.752272][ T7825] loop2: detected capacity change from 0 to 32768 [ 166.871507][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.121472][ C1] usb 5-1: received EP1 urb->status = -71 [ 167.128983][ T7922] loop3: detected capacity change from 0 to 24 [ 167.136067][ T4314] usb 5-1: unable to init card! (ret=-71) [ 167.142459][ T4314] snd-usb-caiaq: probe of 5-1:1.0 failed with error -71 [ 167.162772][ T7922] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 167.180568][ T4314] usb 5-1: USB disconnect, device number 5 [ 167.232101][ T7922] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 167.232263][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 167.275451][ T7922] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 167.293725][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 167.340620][ T7930] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7930 comm: syz.2.1069) [ 167.362741][ T26] audit: type=1800 audit(1786388149.066:4): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1069" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=40173 res=0 errno=0 [ 167.394262][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.481746][ T7] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 167.490831][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.534991][ T7] usb 2-1: Product: syz [ 167.539654][ T7] usb 2-1: Manufacturer: syz [ 167.552639][ T7] usb 2-1: SerialNumber: syz [ 167.736084][ T7984] loop2: detected capacity change from 0 to 2048 [ 167.745542][ T7947] device bond1 entered promiscuous mode [ 167.775106][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.944868][ T7984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.971628][ T7] usb 2-1: Can't get UAC3 power state for id 10 [ 168.061884][ T7] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 168.061940][ T7] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 168.182047][ T8018] process 'syz.3.1086' launched './file0' with NULL argv: empty string added [ 168.193702][ T7] usb 2-1: USB disconnect, device number 10 [ 168.765906][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 168.937871][ T8110] netlink: 'syz.0.1112': attribute type 5 has an invalid length. [ 169.121121][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 169.143744][ T8129] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1118'. [ 169.216485][ T8130] loop1: detected capacity change from 0 to 2048 [ 169.324986][ T8130] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 169.355833][ T8149] device bond1 entered promiscuous mode [ 169.425482][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.460169][ T8130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.477849][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.581221][ T8198] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1130'. [ 169.709776][ T8211] usb usb8: usbfs: process 8211 (syz.3.1132) did not claim interface 32 before use [ 169.734726][ T8213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.441826][ T8254] cgroup: subsys name conflicts with all [ 170.454710][ T8257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.470195][ T4314] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 170.532969][ T8261] netlink: 'syz.1.1149': attribute type 13 has an invalid length. [ 170.671569][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.911521][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 170.922571][ T4314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.933001][ T4314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.031625][ T7] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.042650][ T7] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.052853][ T7] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.065807][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.072497][ T7] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 171.081673][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.095054][ T7] usb 4-1: config 0 descriptor?? [ 171.121568][ T4314] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.131896][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.139257][ T7] usbhid 4-1:0.0: can't add hid device: -22 [ 171.140992][ T4314] usb 1-1: Product: syz [ 171.151657][ T4314] usb 1-1: Manufacturer: syz [ 171.156393][ T4314] usb 1-1: SerialNumber: syz [ 171.156395][ T7] usbhid: probe of 4-1:0.0 failed with error -22 [ 171.223268][ T4314] usb 1-1: bad CDC descriptors [ 171.340930][ T7] usb 4-1: USB disconnect, device number 8 [ 171.434380][ T4314] usb 1-1: USB disconnect, device number 6 [ 171.980195][ T8302] [U] .ާhòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 172.008128][ T8302] [U] …¥` w*ÌÀBØBOLhUÇ [ 172.012761][ T8302] [U] w$·nÓ|ÝÅ#‘±%o.z\ï̧mРûàw [ 172.051462][ T8302] [U] ÁóàR{ê«¢þ S„ðì [ 172.069763][ T8301] [U] [ 172.215802][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1165'. [ 172.584558][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1183'. [ 172.883314][ T8405] CIFS: Attempting to mount \\::1\share [ 172.912636][ T8405] CIFS: VFS: No username specified [ 172.964967][ T8413] loop1: detected capacity change from 0 to 64 [ 173.329138][ T8453] ip6t_REJECT: ECHOREPLY is not supported [ 173.359686][ T8452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.588402][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 173.947209][ T8498] xt_TCPMSS: Only works on TCP SYN packets [ 174.634363][ T8572] bond0: Error: CAN devices cannot be enslaved [ 174.851536][ T4472] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.131726][ T4472] usb 2-1: Using ep0 maxpacket: 8 [ 175.290286][ T8621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1267'. [ 175.331676][ T4472] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.452567][ T8592] loop2: detected capacity change from 0 to 32768 [ 175.471707][ T4472] usb 2-1: config 127 has an invalid interface number: 1 but max is 0 [ 175.496635][ T4472] usb 2-1: config 127 has no interface number 0 [ 175.529860][ T4472] usb 2-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 175.540702][ T8592] XFS: ikeep mount option is deprecated. [ 175.606602][ T4472] usb 2-1: config 127 interface 1 has no altsetting 0 [ 175.635491][ T8601] loop3: detected capacity change from 0 to 40427 [ 175.663279][ T8592] XFS (loop2): Mounting V5 Filesystem [ 175.687418][ T8601] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 175.736196][ T8601] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.782685][ T8592] XFS (loop2): Ending clean mount [ 175.809031][ T8592] XFS (loop2): Quotacheck needed: Please wait. [ 175.838065][ T8655] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 175.848681][ T4472] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 175.857905][ T8655] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 175.867802][ T4472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.872890][ T8601] F2FS-fs (loop3): invalid crc value [ 175.880665][ T4472] usb 2-1: Product: syz [ 175.885971][ T4472] usb 2-1: Manufacturer: syz [ 175.891116][ T4472] usb 2-1: SerialNumber: syz [ 175.910764][ T8601] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 175.941769][ T8563] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.982298][ T8592] XFS (loop2): Quotacheck: Done. [ 176.085180][ T4198] XFS (loop2): Unmounting Filesystem [ 176.192930][ T8601] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 176.200190][ T8601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.253138][ T4472] redrat3 2-1:127.1: Couldn't find all endpoints [ 176.280737][ T8601] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 176.309195][ T4472] usb 2-1: USB disconnect, device number 11 [ 176.705840][ T8670] loop0: detected capacity change from 0 to 32768 [ 176.841149][ T8671] loop4: detected capacity change from 0 to 32768 [ 176.850316][ T8670] JBD2: Ignoring recovery information on journal [ 176.923671][ T8671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1279 (8671) [ 177.024752][ T8671] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.051651][ T8671] BTRFS info (device loop4): using free space tree [ 177.058199][ T8671] BTRFS info (device loop4): has skinny extents [ 177.117830][ T8670] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 177.195477][ T8720] loop2: detected capacity change from 0 to 4096 [ 177.251489][ T8720] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 177.358276][ T4197] ocfs2: Unmounting device (7,0) on (node local) [ 177.511442][ T4472] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 177.550873][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 177.621699][ T8671] BTRFS info (device loop4): enabling ssd optimizations [ 177.731115][ T8771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 177.922364][ T4472] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 177.931153][ T4472] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 178.008221][ T4472] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 178.058300][ T4472] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 178.076757][ T4327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4327) [ 178.093811][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 178.171784][ T4472] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.191063][ T4472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.241955][ T4472] usb 4-1: SerialNumber: syz [ 178.314662][ T4472] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 178.340335][ T4472] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 178.371448][ T4472] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 178.398920][ T4472] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 178.534695][ T4472] usb 4-1: USB disconnect, device number 9 [ 179.142906][ T8877] loop4: detected capacity change from 0 to 256 [ 179.173922][ T8878] netlink: 'syz.1.1322': attribute type 21 has an invalid length. [ 179.201903][ T8878] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1322'. [ 179.233497][ T8878] netlink: 'syz.1.1322': attribute type 5 has an invalid length. [ 179.273715][ T8877] FAT-fs (loop4): Directory bread(block 64) failed [ 179.300761][ T8877] FAT-fs (loop4): Directory bread(block 65) failed [ 179.310094][ T8878] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1322'. [ 179.338504][ T8877] FAT-fs (loop4): Directory bread(block 66) failed [ 179.411615][ T8877] FAT-fs (loop4): Directory bread(block 67) failed [ 179.418782][ T8877] FAT-fs (loop4): Directory bread(block 68) failed [ 179.480129][ T8877] FAT-fs (loop4): Directory bread(block 69) failed [ 179.525639][ T8877] FAT-fs (loop4): Directory bread(block 70) failed [ 179.551969][ T8877] FAT-fs (loop4): Directory bread(block 71) failed [ 179.558698][ T8877] FAT-fs (loop4): Directory bread(block 72) failed [ 179.606891][ T8912] loop3: detected capacity change from 0 to 256 [ 179.621438][ T8877] FAT-fs (loop4): Directory bread(block 73) failed [ 179.692207][ T8912] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 179.836067][ T8926] loop2: detected capacity change from 0 to 1764 [ 179.863443][ T8930] loop0: detected capacity change from 0 to 256 [ 179.959519][ T8930] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x901ac400) [ 180.010457][ T8930] exFAT-fs (loop0): invalid boot region [ 180.025356][ T8930] exFAT-fs (loop0): failed to recognize exfat type [ 180.474204][ T8978] loop2: detected capacity change from 0 to 1024 [ 180.536237][ T8978] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 180.636897][ T8978] fuse: Bad value for 'fd' [ 180.705168][ T8925] loop1: detected capacity change from 0 to 32768 [ 180.802831][ T8925] [ 180.802831][ T8925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.802831][ T8925] [ 180.879286][ T9008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1356'. [ 180.896568][ T8925] jfs_lookup: dtSearch returned -5 [ 180.982555][ T4188] [ 180.982555][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.982555][ T4188] [ 181.003383][ T4188] [ 181.003383][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.003383][ T4188] [ 181.742221][ T9093] loop3: detected capacity change from 0 to 256 [ 181.761631][ T9098] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 181.825813][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'. [ 181.902557][ T9110] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 181.914709][ T9110] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1391'. [ 182.294912][ T9153] loop4: detected capacity change from 0 to 1024 [ 182.351293][ T9143] loop3: detected capacity change from 0 to 4096 [ 182.406385][ T9153] hfsplus: invalid length 32517 has been corrected to 255 [ 182.435454][ T9143] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 182.465112][ T9143] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10. [ 182.486825][ T9153] hfsplus: xattr searching failed [ 182.520646][ T9143] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 182.571548][ T9143] ntfs: (device loop3): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 182.592582][ T9143] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 182.670926][ T9143] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 182.730722][ T9143] ntfs: volume version 3.1. [ 182.758196][ T9143] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 182.858131][ T9143] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 182.889196][ T9143] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota. [ 182.952130][ T9143] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 183.215445][ T9225] netlink: 'syz.2.1428': attribute type 21 has an invalid length. [ 183.239783][ T9228] loop1: detected capacity change from 0 to 164 [ 183.262791][ T9225] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1428'. [ 183.334117][ T9228] ISOFS: unable to read i-node block [ 183.353558][ T9225] netlink: 'syz.2.1428': attribute type 4 has an invalid length. [ 183.367887][ T9228] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 183.411573][ T9225] netlink: 'syz.2.1428': attribute type 5 has an invalid length. [ 183.449838][ T9225] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1428'. [ 183.857457][ T9274] program syz.1.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.886253][ T9277] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1446'. [ 184.008111][ T9294] Cannot find del_set index 1 as target [ 184.045742][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 184.155987][ T9307] loop3: detected capacity change from 0 to 256 [ 184.251826][ T1107] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 184.269645][ T4229] kernel write not supported for file /input/mice (pid: 4229 comm: kworker/0:6) [ 184.284993][ T9307] FAT-fs (loop3): Directory bread(block 64) failed [ 184.302777][ T9307] FAT-fs (loop3): Directory bread(block 65) failed [ 184.331588][ T9307] FAT-fs (loop3): Directory bread(block 66) failed [ 184.341179][ T9327] Unknown options in mask b7f2 [ 184.356201][ T9307] FAT-fs (loop3): Directory bread(block 67) failed [ 184.373728][ T9307] FAT-fs (loop3): Directory bread(block 68) failed [ 184.390831][ T9307] FAT-fs (loop3): Directory bread(block 69) failed [ 184.426589][ T9307] FAT-fs (loop3): Directory bread(block 70) failed [ 184.438118][ T9307] FAT-fs (loop3): Directory bread(block 71) failed [ 184.483251][ T9307] FAT-fs (loop3): Directory bread(block 72) failed [ 184.489816][ T9307] FAT-fs (loop3): Directory bread(block 73) failed [ 184.530880][ T9336] loop4: detected capacity change from 0 to 1764 [ 184.603981][ T9336] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 184.642156][ T9346] loop0: detected capacity change from 0 to 256 [ 184.695776][ T9346] exfat: Deprecated parameter 'namecase' [ 184.704242][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 184.721509][ T9346] exfat: Deprecated parameter 'namecase' [ 184.756168][ T9346] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 184.928058][ T1107] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 184.943908][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 184.971973][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.013309][ T1107] usb 3-1: Product: syz [ 185.038365][ T1107] usb 3-1: Manufacturer: syz [ 185.079924][ T9394] loop4: detected capacity change from 0 to 64 [ 185.091900][ T1107] usb 3-1: SerialNumber: syz [ 185.123351][ T1107] usb 3-1: config 0 descriptor?? [ 185.169299][ T9394] attempt to access beyond end of device [ 185.169299][ T9394] loop4: rw=0, want=3586, limit=64 [ 185.172847][ T9288] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.220182][ T9394] Buffer I/O error on dev loop4, logical block 1792, async page read [ 185.242670][ T1107] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 185.250701][ T9394] attempt to access beyond end of device [ 185.250701][ T9394] loop4: rw=0, want=113154, limit=64 [ 185.315285][ T9394] Buffer I/O error on dev loop4, logical block 56576, async page read [ 185.447195][ T4229] usb 3-1: USB disconnect, device number 7 [ 185.509458][ T9420] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 185.700143][ T9431] x_tables: unsorted entry at hook 2 [ 185.937791][ T9457] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1502'. [ 186.369044][ T9509] loop2: detected capacity change from 0 to 2048 [ 186.465707][ T9509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.880833][ T9569] comedi comedi4: bad chanlist[0]=0x04004003 chan=16387 range length=2 [ 186.960607][ T9582] loop0: detected capacity change from 0 to 256 [ 187.019559][ T9588] loop4: detected capacity change from 0 to 512 [ 187.116719][ T9588] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.152986][ T9588] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1545: inode has both inline data and extents flags [ 187.167669][ T9588] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1545: couldn't read orphan inode 15 (err -117) [ 187.180297][ T9588] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 187.341487][ T4314] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 187.761637][ T4314] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.779995][ T4314] usb 4-1: config 0 has no interface number 0 [ 187.807492][ T4314] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.935126][ T9573] loop2: detected capacity change from 0 to 40427 [ 187.981885][ T4314] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.990973][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 188.029477][ T9573] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 188.046960][ T9573] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 188.053803][ T4314] usb 4-1: Product: syz [ 188.066635][ T4314] usb 4-1: SerialNumber: syz [ 188.105948][ T9573] F2FS-fs (loop2): invalid crc value [ 188.106182][ T4314] usb 4-1: config 0 descriptor?? [ 188.188905][ T9573] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 188.204011][ T4314] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 188.220833][ T26] audit: type=1326 audit(1786388169.916:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9650 comm="syz.1.1562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454293c0d9 code=0x0 [ 188.432093][ T9610] loop0: detected capacity change from 0 to 32768 [ 188.455715][ T4481] usb 4-1: USB disconnect, device number 10 [ 188.494412][ T9573] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 188.512139][ T9573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 188.586217][ T9610] XFS (loop0): Mounting V5 Filesystem [ 188.618985][ T9687] loop1: detected capacity change from 0 to 256 [ 188.669322][ T9573] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 188.776193][ T9610] XFS (loop0): Ending clean mount [ 188.886977][ T4197] XFS (loop0): Unmounting Filesystem [ 189.261488][ T9721] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.1579'. [ 189.422147][ T9731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1582'. [ 189.891548][ T9782] netlink: 'syz.1.1598': attribute type 10 has an invalid length. [ 189.946777][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'. [ 189.975737][ T9782] team0: Device hsr_slave_0 failed to register rx_handler [ 190.160009][ T9800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.161562][ T9782] syz.1.1598 (9782) used greatest stack depth: 20144 bytes left [ 190.191805][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.583748][ T9837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 190.631494][ T9837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 191.051785][ T4470] Bluetooth: hci3: command 0x0406 tx timeout [ 191.057867][ T4470] Bluetooth: hci4: command 0x0406 tx timeout [ 191.061790][ T4314] Bluetooth: hci2: command 0x0406 tx timeout [ 191.082590][ T4470] Bluetooth: hci1: command 0x0406 tx timeout [ 191.116372][ T4470] Bluetooth: hci0: command 0x0406 tx timeout [ 191.219619][ T9889] netlink: 'syz.0.1635': attribute type 1 has an invalid length. [ 191.265091][ T9889] netlink: 'syz.0.1635': attribute type 3 has an invalid length. [ 191.292091][ T9889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1635'. [ 191.311469][ T4481] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.332376][ T9889] NCSI netlink: No device for ifindex 55159 [ 191.601710][ T4481] usb 2-1: Using ep0 maxpacket: 16 [ 191.667342][ T9927] set_capacity_and_notify: 1 callbacks suppressed [ 191.667357][ T9927] loop0: detected capacity change from 0 to 128 [ 191.709288][ T9867] loop3: detected capacity change from 0 to 32768 [ 191.752224][ T9867] XFS: ikeep mount option is deprecated. [ 191.791609][ T4481] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.811533][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.854058][ T4301] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.871615][ T4481] usb 2-1: config 1 has an invalid interface number: 153 but max is 0 [ 191.879845][ T4481] usb 2-1: config 1 has no interface number 0 [ 191.891717][ T4481] usb 2-1: config 1 interface 153 has no altsetting 0 [ 191.926036][ T9867] XFS (loop3): Mounting V5 Filesystem [ 192.031804][ T9867] XFS (loop3): Ending clean mount [ 192.045308][ T9867] XFS (loop3): Quotacheck needed: Please wait. [ 192.071617][ T4481] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=cc.c5 [ 192.087762][ T4481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.097552][ T4481] usb 2-1: Product: syz [ 192.106353][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 192.123627][ T4481] usb 2-1: Manufacturer: syz [ 192.128257][ T4481] usb 2-1: SerialNumber: syz [ 192.146583][ T9867] XFS (loop3): Quotacheck: Done. [ 192.151888][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 192.242731][ T4187] XFS (loop3): Unmounting Filesystem [ 192.271679][ T4314] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 192.285907][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.301966][ T4314] usb 5-1: config 0 descriptor?? [ 192.327306][ T4301] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 192.378969][ T9873] udc-core: couldn't find an available UDC or it's busy [ 192.394770][ T9873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.521981][ T4481] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 192.530634][ T4301] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 192.540282][ T4481] visor 2-1:1.153: missing endpoints [ 192.556837][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.580098][ T4481] usb 2-1: USB disconnect, device number 12 [ 192.586899][ T4314] usb 5-1: string descriptor 0 read error: -71 [ 192.593296][ T4301] usb 3-1: Product: syz [ 192.597558][ T4314] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 192.604997][ T4301] usb 3-1: Manufacturer: syz [ 192.611916][ T4314] usb 5-1: Found UVC 0.00 device (2833:0201) [ 192.624796][ T9977] loop0: detected capacity change from 0 to 764 [ 192.641496][ T4301] usb 3-1: SerialNumber: syz [ 192.657618][ T4314] usb 5-1: No valid video chain found. [ 192.665406][ T4301] usb 3-1: config 0 descriptor?? [ 192.672352][ T4314] usb 5-1: USB disconnect, device number 6 [ 192.713998][ T4301] gspca_main: sq930x-2.14.0 probing 2770:930c [ 193.006548][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1659'. [ 193.017443][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1659'. [ 193.135028][ T4301] gspca_sq930x: ucbus_write failed -71 [ 193.161199][T10011] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 193.286495][T10021] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 193.326027][T10023] loop1: detected capacity change from 0 to 16 [ 193.368884][ T9994] loop3: detected capacity change from 0 to 40427 [ 193.380811][T10023] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.401452][ T4301] gspca_sq930x: Sensor ov9630 not yet treated [ 193.407608][ T4301] sq930x: probe of 3-1:0.0 failed with error -22 [ 193.426067][T10023] attempt to access beyond end of device [ 193.426067][T10023] loop1: rw=0, want=15300821032, limit=16 [ 193.444265][ T9994] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 193.457109][ T4301] usb 3-1: USB disconnect, device number 8 [ 193.461654][ T9994] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 193.472936][T10023] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 193.496490][ T9994] F2FS-fs (loop3): invalid crc value [ 193.550180][ T9994] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.661575][ T4229] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.690049][ T9994] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.709456][ T9994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.781806][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 193.857797][T10060] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 193.901611][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 194.061578][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1678'. [ 194.097225][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.103694][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.104744][T10079] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1678'. [ 194.191736][ T4229] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 194.200870][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.223143][ T4229] usb 1-1: Product: syz [ 194.227348][ T4229] usb 1-1: Manufacturer: syz [ 194.246157][ T4229] usb 1-1: SerialNumber: syz [ 194.467720][T10106] loop1: detected capacity change from 0 to 1024 [ 194.621681][ T4229] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 194.658757][ T4229] usb 1-1: 2:1 : unknown format tag 0x804 is detected. processed as MPEG. [ 194.696125][T10126] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 194.707025][ T4229] usb 1-1: found format II with max.bitrate = 32769, frame size=255 [ 194.730881][ T4229] usb 1-1: 2:1: All rates were zero [ 194.816450][ T4229] usb 1-1: USB disconnect, device number 7 [ 194.993559][T10167] loop1: detected capacity change from 0 to 164 [ 195.000470][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 195.103365][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.312599][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1711'. [ 195.339959][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 195.464555][T10217] loop4: detected capacity change from 0 to 1024 [ 195.502639][T10225] loop2: detected capacity change from 0 to 64 [ 195.582498][T10225] Trying to free block not in datazone [ 195.591348][T10217] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 195.652492][T10241] loop1: detected capacity change from 0 to 2048 [ 195.689637][T10241] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.744366][T10248] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.802941][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.803118][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.807577][T10241] Remounting filesystem read-only [ 195.808258][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.808357][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.811035][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.811082][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.814816][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.814861][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.815099][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.815139][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.815362][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.815399][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.815849][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.815892][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.816108][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.816146][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.816688][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.816729][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.817671][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.817714][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.818004][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.818042][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.818311][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.818350][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.819862][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.819910][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.822274][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.822666][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.828960][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.829003][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.839896][T10241] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 195.839939][T10241] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 195.840317][ T26] audit: type=1800 audit(1786388177.546:6): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1723" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 195.910186][T10241] syz.1.1723 (10241) used greatest stack depth: 19968 bytes left [ 195.915616][T10268] netlink: 'syz.3.1729': attribute type 3 has an invalid length. [ 196.107920][T10280] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.188788][T10280] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 196.210761][T10280] Quota error (device loop1): write_blk: dquota write failed [ 196.212800][T10280] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 196.212896][T10280] Quota error (device loop1): write_blk: dquota write failed [ 196.213064][T10280] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 196.213108][T10280] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1730: Failed to acquire dquot type 1 [ 196.213764][T10280] EXT4-fs (loop1): 1 truncate cleaned up [ 196.213784][T10280] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 196.216534][T10290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.232391][T10280] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.1730: Abort forced by user [ 196.232966][T10280] EXT4-fs (loop1): Remounting filesystem read-only [ 196.232986][T10280] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 196.444316][T10313] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1741'. [ 196.624186][T10333] delete_channel: no stack [ 196.851795][ T1107] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 196.855045][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 196.922157][ T4481] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.371576][ T4481] usb 4-1: Using ep0 maxpacket: 32 [ 197.403101][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.501670][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.517781][ T4481] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 197.544074][ T4481] usb 4-1: config 0 has no interface number 0 [ 197.555159][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.581103][ T4481] usb 4-1: config 0 interface 132 has no altsetting 0 [ 197.718977][T10365] set_capacity_and_notify: 2 callbacks suppressed [ 197.718993][T10365] loop2: detected capacity change from 0 to 32768 [ 197.782062][ T4481] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 197.799315][ T4481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.859009][T10365] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 197.859009][T10365] [ 197.869544][ T1107] usb 2-1: string descriptor 0 read error: -22 [ 197.880238][ T1107] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 197.896346][ T4481] usb 4-1: Product: syz [ 197.912559][ T4481] usb 4-1: Manufacturer: syz [ 197.917200][ T4481] usb 4-1: SerialNumber: syz [ 197.941833][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.972463][ T4481] usb 4-1: config 0 descriptor?? [ 198.241858][ T4481] cdc_subset: probe of 4-1:0.132 failed with error -71 [ 198.291329][ T4481] usb 4-1: USB disconnect, device number 11 [ 198.397074][T10461] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 198.445214][T10461] team0: Device hsr_slave_0 failed to register rx_handler [ 198.547240][ T4314] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 198.563052][ T4470] usb 2-1: USB disconnect, device number 13 [ 198.828214][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 198.919011][ T4314] usb 5-1: not running at top speed; connect to a high speed hub [ 198.927463][T10504] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 198.945463][T10504] overlayfs: bad mount option "redirect_dir=nofollow\" [ 199.013582][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.031883][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.051681][ T4314] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 199.060834][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.173920][ T4314] usb 5-1: Found UVC 1.00 device (046d:0825) [ 199.192324][ T4314] usb 5-1: No streaming interface found for terminal 2. [ 199.399310][ T4314] usb 5-1: USB disconnect, device number 7 [ 199.491701][T10561] loop1: detected capacity change from 0 to 512 [ 199.539508][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 199.556982][T10561] EXT4-fs (loop1): inline encryption not supported [ 199.582090][T10561] EXT4-fs (loop1): Ignoring removed bh option [ 199.603211][T10561] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.645524][T10561] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 199.675320][T10561] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1797: bg 0: block 248: padding at end of block bitmap is not set [ 199.700708][T10561] Quota error (device loop1): write_blk: dquota write failed [ 199.709825][T10561] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 199.725726][T10561] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1797: Failed to acquire dquot type 1 [ 199.727330][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1803'. [ 199.756691][T10561] EXT4-fs (loop1): 1 truncate cleaned up [ 199.762646][T10561] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,nombcache,bh,,errors=continue. Quota mode: writeback. [ 199.828827][T10594] loop3: detected capacity change from 0 to 64 [ 200.279905][T10650] loop2: detected capacity change from 0 to 512 [ 200.335152][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1825'. [ 200.351666][T10650] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 200.378836][T10650] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 200.415234][T10650] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 200.423942][T10650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 200.434275][T10650] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,mblk_io_submit,. Quota mode: none. [ 200.456504][T10650] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 200.515128][T10672] netlink: 'syz.3.1831': attribute type 3 has an invalid length. [ 200.531674][T10670] bond0: ARP monitoring cannot be used with MII monitoring [ 200.781533][ T4470] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 201.060567][T10741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1849'. [ 201.076941][T10741] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1849'. [ 201.087458][T10741] tc_dump_action: action bad kind [ 201.116469][ T4229] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 201.161769][ T4470] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 201.175234][ T4470] usb 2-1: config 0 has no interface number 0 [ 201.211954][ T4470] usb 2-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 201.245077][ T4470] usb 2-1: config 0 interface 70 altsetting 5 has an invalid endpoint with address 0xE3, skipping [ 201.279904][ T4470] usb 2-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.308462][ T4470] usb 2-1: config 0 interface 70 has no altsetting 0 [ 201.371922][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 201.491888][ T4470] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 201.501215][ T4229] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.510598][ T4229] usb 4-1: config 0 has no interface number 0 [ 201.517463][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.527383][ T4229] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.531617][ T4314] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.539972][ T4470] usb 2-1: Product: syz [ 201.549612][ T4229] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.559917][ T4470] usb 2-1: Manufacturer: syz [ 201.565160][ T4470] usb 2-1: SerialNumber: syz [ 201.585011][ T4470] usb 2-1: config 0 descriptor?? [ 201.602434][T10668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.661504][ T4481] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.675149][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 201.742300][ T4229] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.762360][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.788626][ T4229] usb 4-1: Product: syz [ 201.811643][ T4229] usb 4-1: Manufacturer: syz [ 201.818503][ T4229] usb 4-1: SerialNumber: syz [ 201.831645][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 201.864375][ T4229] usb 4-1: config 0 descriptor?? [ 201.902893][ T4470] ti_usb_3410_5052 2-1:0.70: TI USB 3410 1 port adapter converter detected [ 201.913676][ T4229] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 201.936725][ T4470] ti_usb_3410_5052 2-1:0.70: missing endpoints [ 201.947711][ T4470] usb 2-1: USB disconnect, device number 14 [ 202.008127][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.020763][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 202.042276][ T4481] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 202.051272][ T4481] usb 5-1: config 0 has no interface number 0 [ 202.058124][ T4481] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.121539][ T4229] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 202.128502][ T4229] quatech2: probe of 4-1:0.51 failed with error -90 [ 202.247286][ T4314] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 202.271734][ T4481] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 202.281142][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.292009][ T4481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.300019][ T4481] usb 5-1: Product: syz [ 202.304866][ T4314] usb 1-1: Product: syz [ 202.309060][ T4314] usb 1-1: Manufacturer: syz [ 202.315079][ T4481] usb 5-1: Manufacturer: syz [ 202.319922][ T4481] usb 5-1: SerialNumber: syz [ 202.324797][ T4314] usb 1-1: SerialNumber: syz [ 202.341571][ T4314] usb 1-1: config 0 descriptor?? [ 202.348423][ T4481] usb 5-1: config 0 descriptor?? [ 202.357659][ T4229] usb 4-1: USB disconnect, device number 12 [ 202.428365][ T4481] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 202.708573][T10845] rdma_rxe: rxe creation allowed on top of a real device only [ 202.816447][T10854] loop1: detected capacity change from 0 to 256 [ 202.831267][ T4470] usb 1-1: USB disconnect, device number 8 [ 202.845104][ T4314] usb 5-1: USB disconnect, device number 8 [ 202.867850][ T4314] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 202.993629][T10870] delete_channel: no stack [ 203.070316][ T26] audit: type=1107 audit(1786388184.766:7): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 203.282108][ T4481] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.369085][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.699288][T10917] loop0: detected capacity change from 0 to 4096 [ 203.811445][ T4481] usb 3-1: Using ep0 maxpacket: 16 [ 203.841203][T10932] loop1: detected capacity change from 0 to 4096 [ 203.861905][T10934] loop4: detected capacity change from 0 to 1764 [ 203.961573][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 203.981420][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.110492][T10934] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 204.183635][ T4481] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 204.193803][T10932] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 204.202367][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.247434][ T4481] usb 3-1: Product: syz [ 204.270951][ T4481] usb 3-1: Manufacturer: syz [ 204.285683][ T4481] usb 3-1: SerialNumber: syz [ 204.317210][ T4481] usb 3-1: config 0 descriptor?? [ 204.403652][ T4481] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 204.435484][ T4481] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 204.624034][T10972] ipt_REJECT: TCP_RESET invalid for non-tcp [ 204.670794][ T4301] usb 3-1: USB disconnect, device number 9 [ 204.700631][ T4301] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 204.739366][ T4301] kobil_sct 3-1:0.0: device disconnected [ 204.901627][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.141512][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 205.261857][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.288880][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.330617][T11025] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 205.348906][ T4229] usb 1-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 205.389874][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.442808][ T4229] usb 1-1: config 0 descriptor?? [ 205.482878][ T4229] hub 1-1:0.0: USB hub found [ 205.652696][T10979] loop4: detected capacity change from 0 to 32768 [ 205.688928][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 205.692182][ T4229] hub 1-1:0.0: 1 port detected [ 205.749904][T10979] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 205.749904][T10979] [ 205.901563][ T4229] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 205.915264][ T4229] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 205.982498][ T4229] usb 1-1: USB disconnect, device number 9 [ 206.632037][T11116] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1948'. [ 206.719241][T11124] loop0: detected capacity change from 0 to 736 [ 207.153493][T11150] loop4: detected capacity change from 0 to 4096 [ 207.213893][T11150] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 207.468914][T11175] loop2: detected capacity change from 0 to 4096 [ 207.655800][T11175] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 207.699587][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 208.370695][T11256] loop3: detected capacity change from 0 to 4096 [ 208.481667][T11277] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.510258][T11283] loop1: detected capacity change from 0 to 8 [ 208.537653][T11256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 208.839508][T11314] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 208.847982][T11314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2009'. [ 208.902336][T11301] loop1: detected capacity change from 0 to 4096 [ 209.105209][T11332] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 209.286606][T11301] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.327158][T11301] ntfs3: loop1: Failed to load $MFT. [ 209.584693][T11341] loop4: detected capacity change from 0 to 4096 [ 209.752038][T11341] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 209.811111][T11371] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 209.970981][T11373] loop2: detected capacity change from 0 to 4096 [ 210.269029][T11301] loop1: detected capacity change from 0 to 32768 [ 210.336773][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 210.376791][T11408] x_tables: unsorted underflow at hook 4 [ 210.668877][T11425] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2043'. [ 211.029353][T11444] loop2: detected capacity change from 0 to 128 [ 211.048301][T11444] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.086275][T11444] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.324710][T11391] loop0: detected capacity change from 0 to 40427 [ 211.400393][T11391] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 211.430267][T11391] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 211.486603][T11391] F2FS-fs (loop0): invalid crc value [ 211.531774][ T4228] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 211.594417][T11391] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.759464][T11502] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2063'. [ 211.829507][T11391] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 211.849473][T11512] x_tables: duplicate entry at hook 1 [ 211.855486][T11391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.931640][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.972122][ T4228] usb 5-1: not running at top speed; connect to a high speed hub [ 212.051635][ T4228] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 212.075470][ T4228] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 212.102868][T11528] nfs: Deprecated parameter 'nointr' [ 212.361897][T11538] netlink: 'syz.2.2075': attribute type 4 has an invalid length. [ 212.380257][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2074'. [ 212.521658][ T4228] usb 5-1: string descriptor 0 read error: -22 [ 212.528056][ T4228] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 212.557347][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.586758][T11553] loop2: detected capacity change from 0 to 1024 [ 212.634487][T11560] usb usb8: usbfs: process 11560 (syz.1.2079) did not claim interface 0 before use [ 212.707648][T11553] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 212.746806][T11553] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 212.872675][ T3076] hfsplus: b-tree write err: -5, ino 25 [ 212.896452][ T3076] hfsplus: b-tree write err: -5, ino 4 [ 212.919622][ T3076] hfsplus: b-tree write err: -5, ino 2 [ 213.086602][ T4481] usb 5-1: USB disconnect, device number 9 [ 213.478641][T11646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2099'. [ 213.533957][T11650] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2100'. [ 213.805699][T11673] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2108'. [ 213.872133][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2108'. [ 214.056797][T11697] ipt_CLUSTERIP: Please specify destination IP [ 214.272596][T11719] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 214.312061][T11719] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 214.349420][T11727] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 214.555809][T11752] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2134'. [ 214.758760][T11766] block device autoloading is deprecated and will be removed. [ 214.992144][T11799] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2150'. [ 215.161705][ T4481] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.203771][T11827] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2158'. [ 215.223896][T11827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2158'. [ 215.361578][ T4301] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 215.411529][ T4481] usb 2-1: Using ep0 maxpacket: 8 [ 215.542354][ T4481] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 215.762958][ T4481] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 215.772313][ T4301] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 215.781041][ T4301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 215.805731][ T4481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.827964][ T4481] usb 2-1: Product: syz [ 215.832451][ T4481] usb 2-1: Manufacturer: syz [ 215.837260][ T4301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.866595][ T4481] usb 2-1: SerialNumber: syz [ 215.911792][T11788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 216.048622][T11886] loop0: detected capacity change from 0 to 164 [ 216.061883][ T4301] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 216.075693][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.102479][ T4301] usb 5-1: Product: syz [ 216.106905][ T4301] usb 5-1: Manufacturer: syz [ 216.118220][ T4301] usb 5-1: SerialNumber: syz [ 216.143871][ T4301] usb 5-1: config 0 descriptor?? [ 216.152739][T11886] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 216.218309][T11809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.249064][ T4301] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 216.257316][ T4481] usb 2-1: MIDIStreaming interface descriptor not found [ 216.334951][ T4481] usb 2-1: USB disconnect, device number 15 [ 216.488344][ T4301] usb 5-1: USB disconnect, device number 10 [ 216.534784][T11867] loop2: detected capacity change from 0 to 32768 [ 216.642211][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.177225][T11980] mmap: syz.1.2193 (11980) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 217.221751][ T4301] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 217.335713][T11990] loop2: detected capacity change from 0 to 2048 [ 217.423639][T12005] loop1: detected capacity change from 0 to 128 [ 217.450048][T11990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.491534][ T4301] usb 1-1: Using ep0 maxpacket: 16 [ 217.501560][T12005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.512914][T12005] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.625850][T12017] ipt_rpfilter: unknown options [ 217.643622][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 217.654952][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.931654][ T4301] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 217.971755][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.999442][ T4301] usb 1-1: Product: syz [ 218.027562][T12051] loop2: detected capacity change from 0 to 24 [ 218.034875][ T4301] usb 1-1: Manufacturer: syz [ 218.034897][ T4301] usb 1-1: SerialNumber: syz [ 218.048927][ T4301] usb 1-1: config 0 descriptor?? [ 218.075685][T12055] loop3: detected capacity change from 0 to 2048 [ 218.092914][ T4301] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 218.133093][ T4301] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 218.153633][T12055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.310981][ T4470] usb 1-1: USB disconnect, device number 10 [ 218.369184][ T4470] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 218.411121][ T4470] kobil_sct 1-1:0.0: device disconnected [ 218.792713][T12128] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 218.828047][T12128] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.2232'. [ 218.995603][T12147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.034247][T12147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.077615][T12147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.103338][T12147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.131633][ T4228] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 219.170129][T12165] netlink: 'syz.1.2244': attribute type 1 has an invalid length. [ 219.363957][T12182] ceph: No path or : separator in source [ 219.381535][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 219.434329][T12186] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.541804][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.551466][ T4470] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.592399][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2252'. [ 219.666902][ T4228] usb 5-1: config index 0 descriptor too short (expected 321, got 65) [ 219.692054][ T4228] usb 5-1: config 48 has an invalid interface descriptor of length 2, skipping [ 219.709526][ T4228] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 219.736350][ T4228] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 3 [ 219.812536][ T4470] usb 2-1: Using ep0 maxpacket: 16 [ 219.914885][ T4228] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 219.914915][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.914937][ T4228] usb 5-1: Product: syz [ 219.914952][ T4228] usb 5-1: Manufacturer: syz [ 219.914967][ T4228] usb 5-1: SerialNumber: syz [ 219.931983][ T4470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 219.932014][ T4470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.091845][ T4470] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 220.111151][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.120735][ T4470] usb 2-1: Product: syz [ 220.125264][ T4470] usb 2-1: Manufacturer: syz [ 220.129881][ T4470] usb 2-1: SerialNumber: syz [ 220.140616][ T4470] usb 2-1: config 0 descriptor?? [ 220.185533][ T4470] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 220.201620][ T4228] usb 5-1: USB disconnect, device number 11 [ 220.228668][ T4470] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 220.291699][ T4481] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.392287][ T4465] usb 2-1: USB disconnect, device number 16 [ 220.403710][ T4465] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 220.413854][ T4465] kobil_sct 2-1:0.0: device disconnected [ 220.491664][ T4301] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 220.854433][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 220.881750][ T4481] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 220.901646][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.921583][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.929685][ T4481] usb 3-1: Product: syz [ 220.935230][ T4481] usb 3-1: Manufacturer: syz [ 220.939899][ T4481] usb 3-1: SerialNumber: syz [ 220.980867][ T4481] usb 3-1: config 0 descriptor?? [ 221.053070][ T4481] ch341 3-1:0.0: ch341-uart converter detected [ 221.110882][ T4301] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 221.130506][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.165961][ T4301] usb 1-1: Product: syz [ 221.188729][ T4301] usb 1-1: Manufacturer: syz [ 221.194231][ T4301] usb 1-1: SerialNumber: syz [ 221.208439][ T4301] usb 1-1: config 0 descriptor?? [ 221.238555][T12309] loop1: detected capacity change from 0 to 1024 [ 221.263545][ T4301] powermate: probe of 1-1:0.0 failed with error -5 [ 221.475514][ T4228] usb 1-1: USB disconnect, device number 11 [ 221.491787][ T4481] usb 3-1: failed to send control message: -71 [ 221.507396][ T4481] ch341-uart: probe of ttyUSB0 failed with error -71 [ 221.555477][ T4481] usb 3-1: USB disconnect, device number 10 [ 221.564948][T12309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 221.589772][T12309] System zones: 0-1, 3-12 [ 221.600349][ T4481] ch341 3-1:0.0: device disconnected [ 221.636916][T12309] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 222.088100][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.126288][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.165549][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.199335][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.619627][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'. [ 222.651071][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.696924][T12429] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 222.742921][T12431] loop3: detected capacity change from 0 to 1024 [ 222.862134][T12431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 222.881565][T12431] System zones: 0-1, 3-12 [ 222.886556][T12431] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 223.154508][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2324'. [ 223.281450][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2324'. [ 223.339267][T12476] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2324'. [ 223.401908][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 223.508789][T12507] MTD: Couldn't look up 'mtd0/file0': -2 [ 223.546926][T12502] loop3: detected capacity change from 0 to 2048 [ 223.625831][T12520] loop0: detected capacity change from 0 to 256 [ 223.635493][T12502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.714672][T12520] FAT-fs (loop0): Directory bread(block 64) failed [ 223.746580][T12520] FAT-fs (loop0): Directory bread(block 65) failed [ 223.789741][T12520] FAT-fs (loop0): Directory bread(block 66) failed [ 223.817686][T12520] FAT-fs (loop0): Directory bread(block 67) failed [ 223.856062][T12520] FAT-fs (loop0): Directory bread(block 68) failed [ 223.864491][T12520] FAT-fs (loop0): Directory bread(block 69) failed [ 223.871163][T12520] FAT-fs (loop0): Directory bread(block 70) failed [ 223.878672][T12520] FAT-fs (loop0): Directory bread(block 71) failed [ 223.903378][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.910853][T12540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.912424][T12520] FAT-fs (loop0): Directory bread(block 72) failed [ 223.965327][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.974287][T12520] FAT-fs (loop0): Directory bread(block 73) failed [ 224.017458][T12540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.046800][T12548] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2345'. [ 224.075513][T12548] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 224.396925][T12580] netlink: 'syz.3.2355': attribute type 1 has an invalid length. [ 224.550908][T12592] loop3: detected capacity change from 0 to 2048 [ 224.605666][T12592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.651617][ T4301] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.681866][T12601] netlink: 'syz.4.2362': attribute type 1 has an invalid length. [ 225.081044][T12585] loop2: detected capacity change from 0 to 32768 [ 225.121684][ T4301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.138605][T12634] loop3: detected capacity change from 0 to 1024 [ 225.151310][ T4301] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.184515][T12585] __jfs_setxattr: xattr_size = 2175, new_size = 15199 [ 225.256456][T12634] hfsplus: bad catalog entry used to create inode [ 225.270138][T12634] hfsplus: failed to load root directory [ 225.361773][ T4301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.398322][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.424593][ T4301] usb 1-1: Product: syz [ 225.428797][ T4301] usb 1-1: Manufacturer: syz [ 225.471064][ T4301] usb 1-1: SerialNumber: syz [ 225.572861][ T4301] cdc_ncm 1-1:1.0: skipping garbage [ 225.578152][ T4301] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 225.621481][ T4301] cdc_ncm 1-1:1.0: bind() failure [ 225.630245][ T4301] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 225.675553][ T4301] cdc_ncm 1-1:1.1: bind() failure [ 225.810598][ T4301] usb 1-1: USB disconnect, device number 12 [ 226.289005][T12674] loop4: detected capacity change from 0 to 32768 [ 226.350305][T12678] loop2: detected capacity change from 0 to 32768 [ 226.353456][T12674] XFS: ikeep mount option is deprecated. [ 226.391470][ T4470] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.444117][T12678] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 226.468332][T12674] XFS (loop4): Mounting V5 Filesystem [ 226.493993][T12678] JBD2: Ignoring recovery information on journal [ 226.526280][T12674] XFS (loop4): Ending clean mount [ 226.534120][T12674] XFS (loop4): Quotacheck needed: Please wait. [ 226.575791][T12674] XFS (loop4): Quotacheck: Done. [ 226.666386][T12678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.689069][ T4193] XFS (loop4): Unmounting Filesystem [ 226.751751][ T4470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.764739][T12744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.772786][T12746] ipt_CLUSTERIP: Please specify destination IP [ 226.780156][ T4470] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.783533][T12744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.859649][T12744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.886055][T12744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.924395][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 226.971674][ T4470] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 226.980802][ T4470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.031492][ T4470] usb 4-1: Product: syz [ 227.042209][ T4470] usb 4-1: Manufacturer: syz [ 227.051666][ T4470] usb 4-1: SerialNumber: syz [ 227.081960][T12756] loop1: detected capacity change from 0 to 512 [ 227.169294][T12756] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 227.224927][T12763] loop0: detected capacity change from 0 to 2048 [ 227.253166][T12756] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,grpid,discard,,errors=continue. Quota mode: writeback. [ 227.272620][T12756] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.362792][T12763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.403655][ T4470] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 227.435701][ T4470] usb 4-1: USB disconnect, device number 13 [ 228.058943][T12826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.807029][T12878] loop2: detected capacity change from 0 to 2048 [ 228.892553][T12878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.933878][T12889] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 229.012489][ T4481] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 229.347979][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.387502][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.419393][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.459786][ T4481] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 229.500440][T12915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.661697][ T4481] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 229.670821][ T4481] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 229.696546][ T4481] usb 1-1: Manufacturer: syz [ 229.741399][ T4481] usb 1-1: SerialNumber: syz [ 229.899444][T12948] loop3: detected capacity change from 0 to 8 [ 229.941160][T12951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2458'. [ 230.028998][T12951] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.106725][ T4481] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 230.117043][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 230.150273][ T4481] usb 1-1: USB disconnect, device number 13 [ 230.396040][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.466234][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.506032][T12981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.527233][T12934] loop2: detected capacity change from 0 to 32768 [ 230.650298][T12934] XFS (loop2): Mounting V5 Filesystem [ 230.904869][T12934] XFS (loop2): Ending clean mount [ 230.944208][T12934] XFS (loop2): Quotacheck needed: Please wait. [ 231.074222][T12934] XFS (loop2): Quotacheck: Done. [ 231.172080][ T4198] XFS (loop2): Unmounting Filesystem [ 231.515094][T13061] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 231.582391][ T4481] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.861807][ T4481] usb 5-1: Using ep0 maxpacket: 8 [ 231.926719][T13087] loop3: detected capacity change from 0 to 8 [ 232.023095][ T4481] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 232.062988][ T4481] usb 5-1: config 179 has no interface number 0 [ 232.069351][ T4481] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 232.082625][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2496'. [ 232.125353][ T4481] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 232.164797][ T4481] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.221396][ T4481] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 232.273453][ T4481] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.327291][ T4481] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 232.367622][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.429259][T13042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 232.771537][ T4301] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 232.940878][ T4481] usb 5-1: USB disconnect, device number 12 [ 232.966274][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 232.987637][T13158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.021811][T13158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.058293][T13172] loop2: detected capacity change from 0 to 1024 [ 233.065494][ T4301] usb 4-1: Using ep0 maxpacket: 32 [ 233.076518][T13158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.196337][ T4301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.221408][ T4301] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.265896][T13158] syz.1.2511 (13158) used greatest stack depth: 19664 bytes left [ 233.457710][ T4301] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 233.478160][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.510756][ T4301] usb 4-1: Product: syz [ 233.529324][ T4301] usb 4-1: Manufacturer: syz [ 233.540688][T13202] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2524'. [ 233.560464][ T4301] usb 4-1: SerialNumber: syz [ 233.575371][ T4301] usb 4-1: config 0 descriptor?? [ 233.601029][T13202] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 233.644731][ T4301] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 233.775945][T13219] loop4: detected capacity change from 0 to 8 [ 233.861277][ T4481] usb 4-1: USB disconnect, device number 14 [ 234.025309][T13240] netlink: 'syz.0.2536': attribute type 21 has an invalid length. [ 234.052569][T13240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2536'. [ 234.184869][T13253] loop1: detected capacity change from 0 to 64 [ 234.200781][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 234.259025][T13255] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 234.265944][T13255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 234.394096][T13255] vhci_hcd vhci_hcd.0: Device attached [ 234.447448][T13271] netlink: 'syz.2.2544': attribute type 3 has an invalid length. [ 234.585697][ T4481] vhci_hcd: vhci_device speed not set [ 234.655228][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2551'. [ 234.681530][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 234.682821][ T4481] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 234.916667][ T1107] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.948859][T13257] vhci_hcd: connection reset by peer [ 234.972826][ T9] vhci_hcd: stop threads [ 234.977743][ T9] vhci_hcd: release socket [ 235.053121][ T9] vhci_hcd: disconnect device [ 235.222373][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 235.339791][T13340] Invalid ELF header magic: != ELF [ 235.371728][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.402660][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.443051][ T1107] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.487896][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.523556][ T1107] usb 2-1: config 0 descriptor?? [ 235.582937][ T1107] hub 2-1:0.0: USB hub found [ 235.791448][ T1107] hub 2-1:0.0: 3 ports detected [ 235.803290][T13376] netlink: set zone limit has 8 unknown bytes [ 235.864778][T13382] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.012975][ T1107] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 236.021700][ T1107] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 236.192213][ T1107] usbhid 2-1:0.0: can't add hid device: -71 [ 236.209809][ T1107] usbhid: probe of 2-1:0.0 failed with error -71 [ 236.292151][ T1107] usb 2-1: USB disconnect, device number 17 [ 236.507432][T13436] xt_l2tp: v2 doesn't support IP mode [ 236.609035][T13445] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.690362][T13452] loop4: detected capacity change from 0 to 512 [ 236.831324][T13465] loop2: detected capacity change from 0 to 512 [ 236.865006][T13452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.990608][T13465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.044124][T13484] x_tables: unsorted entry at hook 3 [ 237.069463][T13465] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.133916][T13493] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 237.323322][T13505] netlink: 'syz.1.2624': attribute type 46 has an invalid length. [ 237.331190][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 237.727446][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.750504][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.819959][T13513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.877072][T13547] loop4: detected capacity change from 0 to 256 [ 237.996479][T13547] exfat: Deprecated parameter 'utf8' [ 238.041970][T13547] exfat: Deprecated parameter 'utf8' [ 238.047405][T13547] exfat: Deprecated parameter 'namecase' [ 238.107128][T13547] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 238.411237][T13577] loop4: detected capacity change from 0 to 1024 [ 238.474650][T13577] hfsplus: invalid file type 0177777 for inode 2 [ 238.501616][T13577] hfsplus: failed to load root directory [ 238.553129][T13585] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 238.843495][ T4301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 238.866088][T13614] netlink: 'syz.3.2648': attribute type 11 has an invalid length. [ 238.896325][T13614] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2648'. [ 239.031931][T13552] loop1: detected capacity change from 0 to 40427 [ 239.101760][ T4301] usb 5-1: Using ep0 maxpacket: 16 [ 239.124690][T13552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.135328][T13631] loop0: detected capacity change from 0 to 128 [ 239.230560][T13631] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 239.243341][ T4301] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 239.277435][ T4301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 239.292069][T13552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.319234][T13631] hpfs: filesystem error: improperly stopped [ 239.335511][ T4301] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 239.365929][T13631] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.386160][ T4301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.429492][T13631] hpfs: You really don't want any checks? You are crazy... [ 239.446859][T13638] loop3: detected capacity change from 0 to 4096 [ 239.450849][T13631] hpfs: Code page index out of array [ 239.479741][T13631] hpfs: code page support is disabled [ 239.498895][T13631] ================================================================== [ 239.507436][T13631] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 239.513812][T13631] Read of size 1 at addr ffff8880692978a6 by task syz.0.2652/13631 [ 239.521729][T13631] [ 239.524105][T13631] CPU: 1 PID: 13631 Comm: syz.0.2652 Not tainted syzkaller #0 [ 239.531571][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.541644][T13631] Call Trace: [ 239.544928][T13631] [ 239.547864][T13631] dump_stack_lvl+0x188/0x250 [ 239.552562][T13631] ? show_regs_print_info+0x20/0x20 [ 239.557777][T13631] ? _printk+0xda/0x130 [ 239.561950][T13631] ? strcmp+0x67/0xb0 [ 239.565944][T13631] ? load_image+0x410/0x410 [ 239.570450][T13631] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 239.575919][T13631] print_address_description+0x60/0x2d0 [ 239.581477][T13631] ? strcmp+0x67/0xb0 [ 239.585585][T13631] kasan_report+0xdf/0x130 [ 239.590034][T13631] ? strcmp+0x67/0xb0 [ 239.594037][T13631] strcmp+0x67/0xb0 [ 239.597871][T13631] hpfs_get_ea+0x134/0xda0 [ 239.602423][T13631] ? hpfs_read_ea+0xc20/0xc20 [ 239.607139][T13631] ? __getblk_gfp+0x51/0xb20 [ 239.611743][T13631] ? __might_sleep+0xf0/0xf0 [ 239.616349][T13631] ? __bread_gfp+0x132/0x380 [ 239.620968][T13631] ? hpfs_map_sector+0x146/0x2e0 [ 239.625940][T13631] hpfs_read_inode+0x1a6/0x1050 [ 239.630800][T13631] ? __lock_acquire+0x7b50/0x7b50 [ 239.635838][T13631] ? hpfs_init_inode+0x2c0/0x2c0 [ 239.640811][T13631] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 239.646633][T13631] ? do_raw_spin_unlock+0x11d/0x230 [ 239.651852][T13631] ? hpfs_init_inode+0x1cc/0x2c0 [ 239.656805][T13631] hpfs_fill_super+0x12ee/0x1f30 [ 239.661768][T13631] ? hpfs_mount+0x40/0x40 [ 239.666116][T13631] ? snprintf+0xe5/0x140 [ 239.670375][T13631] ? set_blocksize+0x1f1/0x360 [ 239.675150][T13631] ? sb_set_blocksize+0xa5/0xe0 [ 239.680011][T13631] mount_bdev+0x28a/0x3c0 [ 239.684355][T13631] ? hpfs_mount+0x40/0x40 [ 239.688696][T13631] legacy_get_tree+0xe6/0x180 [ 239.693402][T13631] ? hpfs_ioctl+0x260/0x260 [ 239.697954][T13631] vfs_get_tree+0x88/0x270 [ 239.702388][T13631] do_new_mount+0x247/0xa40 [ 239.706933][T13631] __se_sys_mount+0x2e3/0x3d0 [ 239.711623][T13631] ? __x64_sys_mount+0xc0/0xc0 [ 239.716396][T13631] ? lockdep_hardirqs_on+0x94/0x140 [ 239.721598][T13631] ? __x64_sys_mount+0x1c/0xc0 [ 239.726376][T13631] do_syscall_64+0x4c/0xa0 [ 239.730807][T13631] ? clear_bhb_loop+0x30/0x80 [ 239.735485][T13631] ? clear_bhb_loop+0x30/0x80 [ 239.740165][T13631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.746069][T13631] RIP: 0033:0x7f439ec7334a [ 239.750498][T13631] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.770112][T13631] RSP: 002b:00007f439cec9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.778537][T13631] RAX: ffffffffffffffda RBX: 00007f439cec9ee0 RCX: 00007f439ec7334a [ 239.786527][T13631] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f439cec9ea0 [ 239.794504][T13631] RBP: 000020000000a000 R08: 00007f439cec9ee0 R09: 0000000003a00041 [ 239.802509][T13631] R10: 0000000003a00041 R11: 0000000000000246 R12: 0000200000009ec0 [ 239.810489][T13631] R13: 00007f439cec9ea0 R14: 0000000000009e24 R15: 0000200000000000 [ 239.818512][T13631] [ 239.821542][T13631] [ 239.823868][T13631] The buggy address belongs to the page: [ 239.829509][T13631] page:ffffea0001a4a5c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x69297 [ 239.839836][T13631] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 239.846965][T13631] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 239.855561][T13631] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 239.864137][T13631] page dumped because: kasan: bad access detected [ 239.870557][T13631] page_owner tracks the page as freed [ 239.875926][T13631] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 12527, ts 225931107686, free_ts 231114846802 [ 239.890769][T13631] get_page_from_freelist+0x24f6/0x2670 [ 239.896322][T13631] __alloc_pages+0x1ee/0x480 [ 239.900917][T13631] alloc_pages_vma+0x2bc/0x790 [ 239.905685][T13631] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 239.911323][T13631] shmem_getpage_gfp+0x14be/0x2c10 [ 239.916551][T13631] shmem_write_begin+0xcd/0x1a0 [ 239.921419][T13631] generic_perform_write+0x2b6/0x550 [ 239.926706][T13631] __generic_file_write_iter+0x261/0x4e0 [ 239.932350][T13631] generic_file_write_iter+0xa6/0x1b0 [ 239.937821][T13631] __kernel_write+0x522/0x980 [ 239.942576][T13631] __dump_emit+0x258/0x380 [ 239.947002][T13631] dump_user_range+0x84/0x340 [ 239.951681][T13631] elf_core_dump+0x2fe0/0x3530 [ 239.956463][T13631] do_coredump+0x14e8/0x2a40 [ 239.961065][T13631] get_signal+0x531/0x12e0 [ 239.965514][T13631] arch_do_signal_or_restart+0xe6/0x12a0 [ 239.971150][T13631] page last free stack trace: [ 239.975820][T13631] free_unref_page_prepare+0x637/0x6c0 [ 239.981298][T13631] free_unref_page_list+0x119/0x830 [ 239.986531][T13631] release_pages+0x185f/0x1bd0 [ 239.991302][T13631] __pagevec_release+0x6d/0xe0 [ 239.996078][T13631] shmem_undo_range+0x5cd/0x19a0 [ 240.001022][T13631] shmem_evict_inode+0x1e2/0x9a0 [ 240.005973][T13631] evict+0x4b6/0x8b0 [ 240.009902][T13631] __dentry_kill+0x412/0x630 [ 240.014505][T13631] dentry_kill+0xb8/0x290 [ 240.018850][T13631] dput+0xd8/0x1a0 [ 240.022587][T13631] __fput+0x5a5/0x8c0 [ 240.026580][T13631] task_work_run+0x125/0x1a0 [ 240.031182][T13631] do_exit+0x635/0x2110 [ 240.035348][T13631] do_group_exit+0x12c/0x2f0 [ 240.039938][T13631] get_signal+0x7eb/0x12e0 [ 240.044358][T13631] arch_do_signal_or_restart+0xe6/0x12a0 [ 240.050131][T13631] [ 240.052498][T13631] Memory state around the buggy address: [ 240.058149][T13631] ffff888069297780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 240.066224][T13631] ffff888069297800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 240.074291][T13631] >ffff888069297880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 240.082354][T13631] ^ [ 240.087458][T13631] ffff888069297900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 240.095517][T13631] ffff888069297980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 240.103577][T13631] ================================================================== [ 240.111652][T13631] Disabling lock debugging due to kernel taint [ 240.127965][T13631] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.135192][T13631] CPU: 0 PID: 13631 Comm: syz.0.2652 Tainted: G B syzkaller #0 [ 240.144055][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.149283][T13638] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 240.149283][T13638] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 240.149283][T13638] [ 240.154126][T13631] Call Trace: [ 240.154134][T13631] [ 240.154141][T13631] dump_stack_lvl+0x188/0x250 [ 240.182660][T13631] ? show_regs_print_info+0x20/0x20 [ 240.187886][T13631] ? load_image+0x410/0x410 [ 240.192411][T13631] panic+0x2f8/0x850 [ 240.196341][T13631] ? asm_common_interrupt+0x22/0x40 [ 240.201585][T13631] ? bpf_jit_dump+0xd0/0xd0 [ 240.206154][T13631] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 240.212160][T13631] ? _raw_spin_unlock+0x40/0x40 [ 240.217031][T13631] ? strcmp+0x67/0xb0 [ 240.219708][T13638] EXT4-fs (loop3): inline encryption not supported [ 240.221038][T13631] check_panic_on_warn+0x80/0xa0 [ 240.232522][T13631] ? strcmp+0x67/0xb0 [ 240.236534][T13631] end_report+0x6d/0xf0 [ 240.240715][T13631] kasan_report+0x102/0x130 [ 240.242280][ T4481] vhci_hcd: vhci_device speed not set [ 240.245262][T13631] ? strcmp+0x67/0xb0 [ 240.251258][ T4301] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.254624][T13631] strcmp+0x67/0xb0 [ 240.254647][T13631] hpfs_get_ea+0x134/0xda0 [ 240.266308][ T4188] attempt to access beyond end of device [ 240.266308][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 240.267498][T13631] ? hpfs_read_ea+0xc20/0xc20 [ 240.287766][T13631] ? __getblk_gfp+0x51/0xb20 [ 240.292376][T13631] ? __might_sleep+0xf0/0xf0 [ 240.297042][T13631] ? __bread_gfp+0x132/0x380 [ 240.300225][T13638] EXT4-fs (loop3): Test dummy encryption mode enabled [ 240.301679][T13631] ? hpfs_map_sector+0x146/0x2e0 [ 240.301709][T13631] hpfs_read_inode+0x1a6/0x1050 [ 240.316595][ T4301] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.318262][T13631] ? __lock_acquire+0x7b50/0x7b50 [ 240.331289][T13631] ? hpfs_init_inode+0x2c0/0x2c0 [ 240.336249][T13631] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 240.342071][T13631] ? do_raw_spin_unlock+0x11d/0x230 [ 240.347288][T13631] ? hpfs_init_inode+0x1cc/0x2c0 [ 240.352247][T13631] hpfs_fill_super+0x12ee/0x1f30 [ 240.357222][T13631] ? hpfs_mount+0x40/0x40 [ 240.361579][T13631] ? snprintf+0xe5/0x140 [ 240.365871][T13631] ? set_blocksize+0x1f1/0x360 [ 240.370657][T13631] ? sb_set_blocksize+0xa5/0xe0 [ 240.375358][ T4301] usb 5-1: Manufacturer: syz [ 240.375525][T13631] mount_bdev+0x28a/0x3c0 [ 240.384527][T13631] ? hpfs_mount+0x40/0x40 [ 240.388899][T13631] legacy_get_tree+0xe6/0x180 [ 240.393600][T13631] ? hpfs_ioctl+0x260/0x260 [ 240.398146][T13631] vfs_get_tree+0x88/0x270 [ 240.402598][T13631] do_new_mount+0x247/0xa40 [ 240.407138][T13631] __se_sys_mount+0x2e3/0x3d0 [ 240.408644][T13638] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a8424198, mo2=0003] [ 240.411864][T13631] ? __x64_sys_mount+0xc0/0xc0 [ 240.411889][T13631] ? lockdep_hardirqs_on+0x94/0x140 [ 240.421946][T13638] System zones: [ 240.424711][T13631] ? __x64_sys_mount+0x1c/0xc0 [ 240.438368][T13631] do_syscall_64+0x4c/0xa0 [ 240.442819][T13631] ? clear_bhb_loop+0x30/0x80 [ 240.447541][T13631] ? clear_bhb_loop+0x30/0x80 [ 240.450853][T13638] 0-5 [ 240.452237][T13631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.452260][T13631] RIP: 0033:0x7f439ec7334a [ 240.457427][T13638] [ 240.460735][T13631] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.460754][T13631] RSP: 002b:00007f439cec9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 240.495509][T13631] RAX: ffffffffffffffda RBX: 00007f439cec9ee0 RCX: 00007f439ec7334a [ 240.503592][T13631] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f439cec9ea0 [ 240.511614][T13631] RBP: 000020000000a000 R08: 00007f439cec9ee0 R09: 0000000003a00041 [ 240.512238][T13638] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,noacl,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 240.519592][T13631] R10: 0000000003a00041 R11: 0000000000000246 R12: 0000200000009ec0 [ 240.519608][T13631] R13: 00007f439cec9ea0 R14: 0000000000009e24 R15: 0000200000000000 [ 240.519638][T13631] [ 240.557790][T13631] Kernel Offset: disabled [ 240.562134][T13631] Rebooting in 86400 seconds..