last executing test programs: 21m1.662363757s ago: executing program 2 (id=4220): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x4, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000240)={0x2, &(0x7f0000000200)}) 21m1.325926345s ago: executing program 2 (id=4223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) 21m1.056956151s ago: executing program 2 (id=4227): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d09d6bc2f"]) 21m0.559251513s ago: executing program 2 (id=4233): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000840)=ANY=[@ANYBLOB='keep_last_dots,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp864,utf8,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c64656e636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c736d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c636f6e746578743d73746166665f752c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 21m0.033873896s ago: executing program 2 (id=4240): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49323159}}) 20m59.397907441s ago: executing program 2 (id=4250): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7d, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m58.983311931s ago: executing program 32 (id=4250): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7d, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m20.349777772s ago: executing program 4 (id=5440): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000002c0)=0x9, 0x4) 19m20.096593798s ago: executing program 4 (id=5445): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) lseek(r0, 0xff, 0x0) 19m19.950405511s ago: executing program 4 (id=5446): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 19m19.471739933s ago: executing program 4 (id=5453): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 19m18.842113068s ago: executing program 4 (id=5458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0xc003, {{0x3, 0x9, 0x4, 0x7, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 19m18.286753482s ago: executing program 4 (id=5464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 19m17.719253425s ago: executing program 33 (id=5464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 15m59.051572936s ago: executing program 5 (id=8269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b000000000058001a8054000a"], 0x80}}, 0x0) 15m58.816238212s ago: executing program 5 (id=8273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15m58.526237119s ago: executing program 5 (id=8278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xf, 0x32314147, 0x3, 0x9, 0x9, 0x3, 0x3, 0x1, 0x8, 0x0, 0x2}}) 15m58.248033976s ago: executing program 5 (id=8283): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$eJzs3c1vHGcdB/Df7K7XL6Wp1UNVIoTcNryU0ryWECjQ9AAHLhxQriiR61YRKaAkoLSKiCtfOPBHgJA4IsSRE39AD1y58QcQKQGBeuqg8T6PM56uvXbd3Vl7Ph/JmfntM+N9Jt+dffHM7BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPzwBz++UETE9V+lG1YjPhf9iF7EclWvRcTy2mpefhARz8d2czwXEQuLEdX62/88E/FaRHx4KuLR4/vr1c0XD9iP7//5H3/4yVM/+vufFs797y93+6/vtdy9e7/9718fHG2bAQAAoGvKsiyL9DH/dPp832u7UwDATOTX/zLJt6vnrt6cs/6o1Wq1+hjWdeV4D+pFRGzW16neMzgcDwDHzGZ81HYXaJH8O20QEU+13QlgrhVtd4CpePT4/nqR8i3qrwdro/Z8Lsiu/DeLnes79ppO0jzHZFaPr63ox7N79Gd5Rn2YJzn/XjP/66P2YVpu2vnPyl75D0eXPnVOzr/fzL/h5OTfG5t/V+X8B4fKvy9/AAAAAACYY/nv/6stH/9dPPqmHMh+x3/XZtQHAAAAAAAAAPisHXX8vx3G/wMAAIC5VX1Wr/zu1JPb9voutur2a0XE043lgY5JF8ustN0PAAAAAAAAAAAAAOiSwegc3mtFxEJEPL2yUpZl9VPXrA/rqOsfd13ffuiytp/kAQBg5MNTjWv5i4iliLiWvutvYWVlpSyXllfKlXJ5Mb+fHS4ulcu1z7V5Wt22ODzAG+LBsKx+2VJtvbpJn5cntTd/X3Vfw7J/gI7NRouBA0BEjF6NHnlFOmHK8plo+10Ox4P9/+Sx/3MQbT9OAQAAgOkry7Is0td5n07H/HttdwoAmIn8+t88LqBWq9Vqtfrk1XXleA/qRURs1tep3jMYjh8AjpnN+KjtLtAi+XfaICKeb7sTwFwr2u4AU/Ho8f31IuVb1F8P0vju+VyQXflvFtvr5fXHTSdpnmMyq8fXVvTj2T3689yM+jBPcv69Zv7XR+3DtNy085+VvfKvtnO1hf60Leffb+bfcHLy743Nv6ty/oND5d+XPwAAAAAAzLH89//VuTr+O/y0mzPRfsd/16Z2rwAAAAAAAAAwXY8e31/P173m4/9fGLOc6z9Pppx/If9Oyvn3Gvl/tbFcvzb/8M0n+f/78f31P9791+fz9KD5L+aZIj2yivSIKNI9FYM0PcrWfdLWQn9Y3dNC0esP0jk/5cLbcTNuxUac37VsL/1/PGm/sKu96unCdnvZH7Vf3NU+SO3Vz6j90q72hXSmU7mcf//ZWI+fx614a7u9alucsP1LE9rLCe05/378Z6fP9v/uyPkPaj9V/iupvWhMKw8/6H1iv69Px93P1Ztf/M356W/ORFvR39m2umr7XmyhP9v/J08N45d3Nm6fvXfj7t3bFyJNdt16MdLkM5bzz89TO8//L43a8/N+fX99+MHw0PnPi60Y7Jn/S7X5antfnnHf2pDzH6afnP9bqX38/n8s868e3vvu/6/Mvk8AAAAAAAAAAAAAAACwr7Isty8RvRoRl9P1P21dmwkAzNbV9JUbZZJvn1Xdn/H9qdXHvC7mrD8zrT8u56s/avVxrOvK8d6oFxHxt/o6lyPi1+N+GQAwzz6OiH+23QlaI/8Oy9/3V03PtN0ZYKbuvPf+T2/curVx+07bPQEAAAAAAAAAPq08/udabfzvM2VZPmgst2v81zdj7ajjfw7yzM4Ao3sMVN0//DbtZ6s37Pdqw42/EHuN/72wM7ff+N+DCfe3MKF9OKF9cUL70oT2sRd61OT8X6iNd34mIk43hl8/AeO/bttv/NfmmPddkPN/sfZ4rvL/SmO5ev7l749z/r1d+Z+7++4vzt157/1Xb757452NdzZ+dunChfOXLl++cuXKubdv3to4P/q3xR5PV84/j33tPNBuyfnnzOXfLTn/L6Va/t2S8/9yquXfLTn//H5P/t2S88+ffeTfLTn/l1Mt/27J+X8t1fLvlpz/K6mWf7fk/L+eavl3S87/1VTLv1ty/mdTLf9uyfmfS/UB81+edr+YjZx/PsJl/++WnH8+s0H+3ZLzv5hq+XdLzv9SquXfLTn/11It/27J+X8j1fLvlpz/5VTLv1ty/t9Mtfy7Jed/JdXy75ac/7dSLf9uyfl/O9WHyn91ev1iNnL+r6fa/t8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfyPV8u+WJ9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq6zvh/42VevnTcDIX8nfwNrxxjjbLLrl/iF1sWE14a3EgiFlmK73rVZ8BteuyQ0kh0FSiSMGlW0DRdtAUVtbiqsKhe0CigXqFWlSqS9oDeICpWLqAooIFWiVchWc+Z5np05Ozuz6x3bM+d8PlL8886cmXPmzJmz+13nOwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKNNb5/50kCWZbX/8j/WZ9mNtb+vHV+fX/aW672FAAAAwGr9Kv/zpVvSBQeXcaOGZf7p9d9/Zn5+fj772NCfjnx1fj5dMZ5lI2uyLL8uuvzjjw80LhM8lo0NDDZ8Pdhh9UMdrh/ucP1Ih+tHO1y/psP1Yx2uX7QDFllb/31Mfmdb8r+ur+/S7NZsJL9uS4tbPTawZnAw/i4nN5DfZn7kWDabnchmsqmm5evLDuTLP7uptq73ZHFdgw3r2lg7Qn7+yNG4DQNhH29pWtfCfUY/fVs2/oufP3L0r8+9eHur2XE3NN1ffTu3ba5t5xfCJfVtHcjWpH0St3OwYTs3tnhOhpq2cyC/Xe3vxe18aZnbObSwmddU8Tkfywbzvz+f76fhxl/rpf20MVz2yzuzLLu4sNnFZRatKxvM1jVdMrjw/IzVj8jafdQOpVdnwys6Tjct4zitzektzcdp8TURn/9N4XbDS2xD49P000dHG573l+ev5DiNao96qddK8Rjs9mulV47BeFw8nz/ox1seg1vC439k69LHYMtjp8UxmB53wzG4udMxODg6lG9zehIG8tssHIM7mpYfytc0kM8XtrY/BifPnTwzOffw5++ePXnk+MzxmVO7duyY2rVnz759+yaPzZ6Ymar/eYV7u/etywbTa2Bz2HfxNfCmwrKNh+r8N0YXnX+v9HU41uZ1uL6wbLdfh8PFBzdwbV6Qi4/p+mvjI7WdPnZpMFviNZY/P9tX/zpMj7vhdTjc8Dps+T2lxetweBmvw9oyZ7Yv72eW4Yb/Wm3D0t8LVncMrm84Bos/jxSPwW7/PNIrx+BYOC5+uH3p7wUbw/Y+PrHSn0eGFh2D6eGGc0/tkvTz/ti+fLQ6Lu+oXXHDaHZ+bubsPQ8dOXfu7I4sjGviNQ3HSvF4XdfwmLJFx+vgio/Xg7Ovf/yOFpevD/tq7O7aH2NLPle1ZXbf0/65yr+7td6fTZfuzMLosmu9P1t9N6/tz9Es+9r3Hn3gO4987e1L7s9a3vzC5Op/Fk+5tOH8O7LE+Tfm/lfq60t39djQyHD99TuU9s5I0/m4+akazs9dA/m6X5pc3vl4JPx3rc/Ht7Y5H28oLNvt8/FI8cHF8/FAp992rE7x+RwLx8mJqfbn49oyG3au9Jgcbns+vjPMgbD/3xySQspFDcfOUsdtWtfw8Eh4XMNxDc3H6a6m5UdCNqut6+mdV3acbruzfl9D6dEtuFbH6Xhh2W4fp+l3X0sdpwOdfvt2ZYrP51g4Lm7d1f44rS3z3O7VnzvXxr82nDtHOx2DI0OjtW0eSQdhfr7P5tfGY/Ce7Gh2OjuRTefXjubH00C+rol7l3cMjhae/6Krda7c0OYY3FZYttvHYPo+ttSxNzC8+MF3QfH5HAvHxZP3tj8Ga8u8Y293f3bdFi5JyzT87Fr8/dpSv/O6o7CbrtaxMhy283t72/9utrbMiX0rzZnt99Nd4ZIbWuyn4uu38TU12nA8T2fXZj9tCNv54r6l91Nte2rLfHX/Mo+ng1mWXfjsffnve8O/r/zd+R880/TvLq3+TefCZ+/72U3H/nEl2w9A/3ulPtbVv9c1/MvUcv79HwAAAOgLMfcPhpnI/wAAAFAaMffH/ys8kf8BAACgNGLuHw4zqUj+3/COF2dfuZClZv58EK9Pu+H++nKx4zoVvh6fX1C7/L6nZv77Hy4sb92DWZa9fP8ftlx+w/1xu+rGw3Zefmfz5Ys8c/ey1n34wQtpvY399a+H+4+PZ7mHQasK7lSWZc/e8pV8PeMfv5TP5+4/nM8HLj7+WG2Zl/bXv463f+E19eX/IpR/Dx470nT7F8J++EmYU+9tvT/i7b516c0b9350YX3xdgObb84f9pOfrN9vfJ+cJx6rLx/381Lb/50vP/2t2vIPvbH19l8YbL39T4f7fSrM/3ldffnG56D2dbzdF8P2x/XF293zze+23P7LX6ovf+Zd9eUOhxnXvy18veVdL8427q+HBo40Pa7s3fXl4vqnfvDH+fXx/uL9F7d/7NClpv1RPD6e+7f6/UwWlo+Xx/VEf19Yf+1+Go/PuP6n/+hw037utP7LD7zwutr9Ftd/V2G5M5/dnq9/4f6a37HpL7/4lZbri9tz8G/PND2egx8Kr+Ow/ic/GY7HcP3/Xq7fX/HdFQ5/qPn8E5f/+voLTY8nes8v6uu//Nbj+VwztnbdDTfedPPFN9T2XZY9v6Z+f53Wf/yvTjdt/zduq++PeH3s6BfXv5S4/rOfmzh1eu787HTaq4/ckr93zvvq2xO395Zwbi1+fej0uU/NnB2fGp/KsvHyvoXeFftmmD+rj4vtl55fdAbd/mB4Pu/482fXbf3XL8fL//0j9csvvbf+fetNYbknwuXrw/O3svUv9uSm2/LX98BzYQvnF79f8Gps3PJf+5a1YHj8xZ8L4vF+5rWfyvdD7br8+0Z8Xa9y+380Xb+fb4f9Oh/emXnzbQvra1w+vjfCpQ/XX++r3n/hNBef178Jz/f7f1K//7hd8fH+KPwc890Nzee7eHx8+8Jg8f7zd/G4GM4n2cX69XGpuL8vvXRby82L70OSXbw9//pP0v3cvqKHuZS5h+cmT8yeOv/Q5LmZuXOTcw9//tDJ0+dPnTuUv5fnoU93uv3C+Wldfn6antmzO8vPVqfr4yq73tt/5sGj03untk7PHDty/ti5B8/MnD1+dG7u6Mz03NYjx47NfK7T7WenD+zYuX/X3p0Tx2enD+zbv3/X/onZU6drm1HfqA72TH1m4tTZQ/lN5g7s3r/j3nt3T02cPD09c2Dv1NTE+U63z783TdRu/QcTZ2dOHDk3e3JmYm728zMHduzfs2dnx3cDPHnm2Nz45NnzpybPz82cnaw/lvFz+cW1732dbk85zf1H/efZooH6G/FlH7xrT3p/1pqnHl3yruqLFN5A9MXwXjT//Koz+5bzdcz9I2EmFcn/AAAAUAUx94+Gmcj/AAAAUBox968JM5H/AQAAoDRi7h8LM6lI/i9d/3/DhWWtX/9f/79xf+n/V6z//+Fe6//Xzxf6/92x2v69/n+g/6//r/+v/6//Txf0Wv8/5v61WVbJ/A8AAABVEHP/ujAT+R8AAABKI+b+G8JM5H8AAAAojZj7bwwzqUj+1//X/9f/1//X/2+9fv3//qT/357+fwf6/5NZtfr/F7u5/fr/+v8s1mv9/5j7bwozqUj+BwAAgCqIuf/mMBP5HwAAAEoj5v5bwkzkfwAAAOhPaxdfFHP/+jCTiuR//X/9f/1//X/9/9br1//vT/r/7en/d6D/7/P/9f/1/+mqXuv/x9z/qjCTiuR/AAAAqIKY+18dZvoFrPwPAAAAvWf4ym4Wc/9rwkwW5f8rXAEAAABw3cXcf2tWKIJX5N//9f/1//X/9f/1/1uvf/n9/6FM/7936P+3p//fgf6//r/+v/4/XdVr/f8892dj2WvDTCqS/wEAAKAKYu6/LcxE/gcAAIDeNrb8RWPu/3/FG8r/AAAAUBox928IM6lI/tf/1//X/9f/1/9vvX6f/9+f9P/b0//voNf6/4UjSP+/t7df/1//n8V6rf8fc//tYSYVyf8AAABQBTH33xFmIv8DAABAacTc///DTOR/AAAAKI2Y+zeGmVQk/+v/93j/P/b+9P/1//X/9f/1/5dF/789/f8Oeq3/X6D/39vbr/+v/89ivdb/j7n/dWEmFcn/AAAAUAUx978+zET+BwAAgNKIuf8NYSbyPwAAAJRGzP3jYSYVyf/6/z3e//f5//r/+v/6//r/K6L/357+fwf6//r/+v/6/3RVr/X/Y+7fFGZSkfwPAAAAVRBz/+YwE/kfAAAASiPm/jvDTOR/AAAAKI2Y+7eEmVQk/+v/6//r/+v/6/+3Xr/+f3/S/29vOf3//Jym/6//r/+v/6//Txf0Wv8/5v43hplUJP8DAABAFcTcvzXMRP4HAACA0oi5/01hJvI/AAAAlEbM/dvCTCqS//X/+6X/P6z/r/+v/194PPr/+v+t6P+35/P/O9D/1//X/9f/p6t6rf8fc/+bw0wqkv8BAACgCmLu3x5mIv8DAABAacTcf1eYifwPAAAApRFz/0SYSUXyv/5/v/T/ff5/pv/flf7/w7/U/9f/L7cq9P8/sdI7baD/34H+v/6//r/+P13Va/3/mPvvDjOpSP4HAACAKoi5/54wE/kfAAAASiPm/skwE/kfAAAASiPm/qkwk4rkf/1//X/9/2r1/1f9+f9vWLhf/f86/f/eUoX+/2ro/3eg/6//f937/yP6/5RKr/X/Y+7fEWZSkfwPAAAAVRBz/84wE/kfAAAASiPm/l1hJvI/AAAAlEbM/bvDTCqS//X/9f/1//X/ff5/6/Xr//cn/f/2ut//jw9R/1//X//f5//r/7NYr/X/Y+6/N8ykIvkfAAAAqiDm/j1hJvI/AAAAlEbM/XvDTOR/AAAAKI2Y+/eFmVQk/+v/6//r/+v/6/+3Xr/+f3/S/2/P5/93oP+v/6//r/9PV/Va/z/m/v1hJhXJ/wAAAFAFMfe/JcxE/gcAAIDSiLn/18JM5H8AAAAojZj7fz3MpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/QJhJRfI/AAAAVEHM/b8RZiL/AwAAQGnE3P/WMBP5HwAAAEoj5v6DYSYVyf/6//r/+v/6//r/rdev/9+f9P/b0//vQP9f/1//X/+fruq1/n/M/W8LM6lI/gcAAIAqiLn/vjAT+R8AAABKI+b+t4eZyP8AAABQGjH3vyPMpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmFcn/AAAAUAUx978rzET+BwAAgNKIuf/dYSbyPwAAAJRGzP3vCTOpSP7X/9f/1//X/9f/b71+/f/+pP/fnv5/B/r/Jev/j9+k/6//z9XSKgEtdmX9/xtfXnKFq+z/x9z/m2EmFcn/AAAAUAUx998fZiL/AwAAQGnE3P/eMBP5HwAAAEoj5v73hZlUJP/r/+v/6//r/+v/t16//n9/0v9vr8/6/7+6OVyu/1+n/9/b29+T/f8fL9X/n19TvL3+P1fDlfX/W+pK/z/m/veHmVQk/wMAAEAVxNz/gTAT+R8AAABKI+b+D4aZyP8AAABQGjH3/1aYSUXyv/5/bTsW2sv6//r/+QX6//r/+v99S/+/vT7r//v8/wL9/97e/p7s//v8f66zXuv/x9z/oTCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7v9wmIn8DwAAAKURc/9Hwkwqkv/1/33+v/6//r/+f+v16//3J/3/9vT/O9D/1//vtf7/f+r/0996rf8fc/+DYSYVyf8AAABQBTH3fzTMRP4HAACA0oi5/7fDTOR/AAAAKI2Y+z8WZlKR/K//3y/9/3H9f/1//f/C49H/1/9vRf+/Pf3/DvT/9f97rf/v8//pc73W/4+5/+NhJsvP/2PLXhIAAAC4LmLu/50wk4r8+z8AAABUQcz9vxtmIv8DAABAacTc/4kwk4rkf/3/fun/+/z/TP9f/7/wePT/9f9buXb9/3jm0f/X/9f/j/T/9f/1/ynqtf5/zP2/F2ZSkfwPAAAAVRBz/yfDTOR/AAAA6Aut/p/sopj7D4WZyP8AAABQGjH3Hw4zqUj+1//X/9f/79H+/59t/pcffv8Dh3fo/+v/6/+vyFXt/8eTTfz8/9qL3+f/6//r/yf6//r/+v8U9Vr/P+b+I2EmFcn/AAAAUAUx9/9+mIn8DwAAAKURc//RMBP5HwAAAEoj5v7pMJOK5H/9f/1//f8e7f/38ef/x/2h/9+sa/3/eNLV/2/p2n3+f/3rJ/T/r7D/P9ryUv1//f9+3n79f/1/Frsq/f/5NenClfb/Y+6fCTOpSP4HAACAKgi5f/BYfS5cIf8DAABAacTcfzzMRP4HAACA0oi5/1NhJhXJ//r/+v/6//r/Pv+/9fp7tv/v8//b0v9v72r1/9d3afv1//X/+3n79f/1/1ms1z7/P+b+2TCTiuR/AAAAqIKY+z8dZiL/AwAAQGnE3P+ZMBP5HwAAAEoj5v4TYSYVyf/6//r/+v/6//r/rdev/9+f9P/b653P/29N/1//v5+3X/9f/5/Feq3/H3P/yTCTiuR/AAAAqIKY+0+Fmcj/AP/H3n00W16VexzfB7vL7uIFOHBClUNfAgMd6wtw4MSBVlkORMWcaMwRcw6YMwZQbBMqigFMKGYxZ8WAGbXa0vM8T5+wz3+fbvc5Z/3X+nwmz73tbfa+Xkr40f29CwAAupG7/5K4xf4HAACAbuTuf0jcMsj+1//r/7vt/++h/9/r8/X/+v+e6f+nHW3/v3fUmfT/+v85f3/9v/6f3Vrr/3P3PzRuGWT/AwAAwAhy9z8sbrH/AQAAoBu5+y+NW+x/AAAA6Ebu/ofHLYPs/x39/8ZizP4/M179/0H2/xd4/1//r//X/x+8w+3/L//vf/Lp/73/r/8P+n/9v/6fnVrr/3P3PyJuGWT/AwAAwAhy9z8ybrH/AQAAoBu5+x8Vt9j/AAAA0I3c/Y+OWwbZ/97/9/5/t+//6//3/Hz9v/6/Z97/nzZS/3/pLRc++PZr73r6XD5f/z9C/3/DgX1//b/+n91a6/9z9z8mbhlk/wMAAMAIcvc/Nm6x/wEAAKAbufsfF7fY/wAAANCN3P2Pj1sG2f/6f/2//l//r/9f/vn6/3nS/08bqf8/n8/X/4/Q/x/c99f/6//ZrbX+P3f/E+KWQfY/AAAAjCB3/xPjFvsfAAAAupG7/7K4xf4HAACAbuTuPxW3DLL/9f8H3///W/+v/4+r/9f/6/8Pnv5/mv5/Bf2//l//r/9nrVrr/3P3Xx63DLL/AQAAYAS5+58Ut9j/AAAA0I3c/U+OW+x/AAAA6Ebu/qfELYPsf/2/9//1//p//f/yz9f/z5P+f9rh9//L/gq5N/3/7Pv/4/p//b/+n63Osf+/Y+I/ttfS/+fuf2rcMsj+BwAAgBHk7n9a3GL/AwAAQDdy9z89brH/AQAAoBu5+58Rtwyy//X/+v999f/xf+PL9P/6/y30/5v0/23R/09r5v3/jWNLf1j/P/v+3/v/+n/9P9u09v5/7v5nxi2D7H8AAAAYQe7+Z8Ut9j8AAAB0I3f/s+MW+x8AAAC6kbv/OXHLIPtf/6//9/6//l//v/zzp/r/01u+n/6/Lfr/ac30/3vQ/+v/5/z99f/6f3Zrrf/P3f/cuGWQ/Q8AAAAjyN1/Rdxi/wMAAEA3cvc/L26x/wEAAKAbufufH7cMsv+X9/9n/3X9//7o/7d/f/3/8j8/1tX/5x9R/z/Z/9/T+/9j0v9P0/+voP/X/+v/9+r/T676+fp/lmmt/8/d/4K4ZZD9DwAAACPI3f/CuMX+BwAAgG7k7n9R3GL/AwAAQDdy9784bhlk/3v/X/+v/59f/+/9/01H+f7/4tD7/2P6/33S/0/T/6+g/9f/6/+9/89atdb/5+5/SdwyyP4HAACAEeTuf2ncYv8DAADAPGz9vQM7f0NpyN3/srjF/gcAAIBu5O5/edwyyP7X/+v/9f/6/7H7/xMz6f+9/79f+v9p+v8Vjrb/3+i0/z/WWf9/5V4/v4X+/zL9P43Z1v9fd/bHj6r/z93/irhlkP0PAAAAI8jd/8q4xf4HAACAbuTuf1XcYv8DAABAN3L3vzpuGWT/H3j/f3Lvz9b/6//1//r/o+//5/L+v/5/v/T/0/T/K3j/3/v/3v/X/7NW2/r/LY6q/8/d/5q49Y8ABtn/AAAAMILc/a+NW+x/AAAA6Ebu/ivjFvsfAAAAupG7/3VxyyD73/v/+n/9v/5f/7/88/X/86T/n6b/X0H/r//X/+v/WavW+v/c/a+PWwbZ/wAAADCC3P1viFvsfwAAAOhG7v43xi32PwAAAHQjd/+b4pZB9r/+/2D7//zxGff/x5d9f/2//n+h/9f/N2rY/n9j2V+Jdtuj/7/pgafuvf1H9P/6f/2//l//zxo00f+fOft3l7n73xy3DLL/AQAAYAS5+98St9j/AAAA0I3c/W+NW+x/AAAA6Ebu/rfFLf/b/zsr1Pk5seJf1/83/f7/yfxjef9f/6//1//r//dn2P5/n7z/v4L+X/+v/9f/s1ZN9P9b/vvc/W+PW/z6PwAAAHQjd/874hb7HwAAALqRu/+dcYv9DwAAAN3I3f+uuGWQ/a//b7r/b+H9f/2//l//H/T/86D/n6b/X0H/r//X/+v/WavW+v/c/VfFLYPsfwAAABhB7v53xy32PwAAAHQjd/974hb7HwAAALqRu/+9ccsg+1//r//X/+v/9f/LP1//P0/6/2n6/8VicfXEF1jW/5+5s/5f/6//1/9znlrr/3P3vy9uGWT/AwAAwAhy918dt9j/AAAA0I3c/dfELfY/AAAAdCN3//vjlkH2v/5f/6//1/8P1P9v6P/7p/+fpv9fwfv/+n/9v/6ftWqt/8/d/4G4ZZD9DwAAACPI3X9t3GL/AwAAQDdy938wbrH/AQAAoBu5+0/HLXvu/wsO4VsdHv2//l//r/8fqP/v8P3/E6s/eDAH1/8v9P/6f/3/Cvp//b/+n51a6/9z938obvHr/wAAANCN3P0fjlvsfwAAAOhG7v6PxC32PwAAAHQjd/9H45ZB9r/+X/+v/9f/6/+Xf/48+v/Vnzsa7/9P0/+voP/X/+v/9f+sVWv9f+7+j8Utg+x/AAAAGEHu/uviFvsfAAAAupG7/+Nxi/0PAAAA3cjd/4m4ZZD9r//X/2/v/xcL/b/+X/+/6RD6/xML/f/a6f+n6f9X0P/32f9fsOio/z+558/X/9Oi1vr/3P2fjFsG2f8AAAAwgtz918ct9j8AAAB0I3f/p+IW+x8AAAC6kbv/03HLIPtf/6//n+37/8fjJ+j/9f/z7f/r31X9//ro/6fp/1fQ//fZ/3v/X//PkWmt/8/df0PcMsj+BwAAgBHk7v9M3GL/AwAAQDdy9382brH/AQAAoBu5+z8Xtwyy//X/+v/Z9v/e/9f/6//1/0vo/6fp/1fQ/+v/9f/6f9aqtf4/d//n45ZB9j8AAACMIHf/jXGL/Q8AAADdyN1/U9xi/wMAAEA3cvd/IW4ZZP/r//X/+v959v8n9P/6f/3/Uq30/xdffK+b9f/6f/2//l//r/8fXWv9f+7+L8Ytg+x/AAAAGEHu/i/FLfY/AAAAdCN3/5fjFvsfAAAAupG7/ytxyyD7f3f/f3yxWahuWtb/R6Om/99C/7/9++v/l//54f1//b/+/+C10v97///8vr/+X/8/5+9/Tv3/Rbt/vv6fHrXW/+fuvzluGWT/AwAAwAhy9381brH/AQAAoBu5+78Wt9j/AAAA0I3c/bfELYPsf+//6//1//p//f/yz9f/z5P+f5r+fwX9v/7f+/+X3P9O+n/Wp7X+P3f/1+OWQfY/AAAAjCB3/zfiFvsfAAAAupG7/5txi/0PAAAA3cjd/624ZZD9r//X/+v/9f/6/+Wfr/+fJ/3/NP3/Co32//l3qPr/tr9/N/2/9/9Zo9b6/9z9345bBtn/AAAAMILc/d+JW+x/AAAA6Ebu/u/GLfY/AAAAdCN3//filkH2//r7/4v0/0H/30r/fz/9/47P1//r/3um/8+/oi+n/1+h0f4/6f/b/v76f/0/u7XW/+fuvzVuGWT/AwAAwAhy938/brH/AQAAoBu5+38Qt9j/AAAA0I3c/T+MWwbZ/97/H6v/31iM2P97/1//r/8fif5/mv5/Bf2//l//r/9nPeL/GU1r/X/u/h/FLYPsfwAAAJir+9z9Qbfu9382d/+P4xb7HwAAALqRu/8ncYv9DwAAAN3I3f/TuGWQ/a//H6v/H/P9f/2//l//PxL9/zT9/wr6f/2//l//z1q11v/n7v9Z3LJl+B075/8tAQAAgJbk7v953DLIr/8DAADACHL3/yJu2bX/z+zzd7UDAAAArcnd/8u4ZR+//n+3A/tWh0f/33j/v+i//79tof/X/2/S/+v/10H/P+3/7P/PbOj/9f8T9P/6f/0/O7XW/+fu/1Xc4vf/AwAAwJxt+ycKuft/HbfY/wAAANCN3P2/iVvsfwAAAOhG7v7fxi2D7H/9f+P9/3m9/3+y/qs59P/e/z/A/v+KE0s/X/+v/++Z/n+a9/9X0P/r//X/+n/WqrX+P3f/bXHLIPsfAAAARpC7/3dxi/0PAAAA3cjd//u4xf4HAACAbuTu/0PcMsj+1//32P/P6/1//b/3/8+//7/LhaduvO8DrrlK/89Zh9n/558L+v9D6f+vX/bH0//r/1v6/vp//T+7tdb/5+7/Y9wyyP4HAACAEeTuvz1usf8BAACgG7n7/xS32P8AAADQjdz9f45bBtn/+n/9fyv9f/57fQT9/6n59f/ZFO+r/z+52PH5/fT/3v/X/+/m/f9pM+7/vf+v/2/+++v/9f/s1lr/n7v/L3HLIPsfAAAARpC7/69xi/0PAAAA3cjd/7e4xf4HAACAbuTu/3vcMsj+1//r/1vp/5P3/8/+PO//b9L/6//Phf5/mv5/Bf2//l//r/9nrVrr/3P3/yNuGWT/AwAAwAhy998Rt9j/AAAA0I3c/f+MW+x/AAAA6Ebu/n/FLYPsf/2//l//r//X/y//fP3/POn/p+n/V9D/6//1//p/1qq1/j93/38CAAD//6cxal0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15m57.168427222s ago: executing program 5 (id=8295): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x2015, 0x0, 0x0, 0x0, 0x0, 0x1}) 15m56.072030178s ago: executing program 5 (id=8308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 15m55.645296228s ago: executing program 34 (id=8308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 3.342181911s ago: executing program 7 (id=21714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="34868893ac1aa87b3776ed8b1a00", 0x0, 0x10000, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.864393212s ago: executing program 7 (id=21711): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) 2.631722888s ago: executing program 7 (id=21716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) 2.347310895s ago: executing program 0 (id=21721): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x23041, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.233033627s ago: executing program 7 (id=21722): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@t={0x94, 0x0, 0x0, 0x0, @generic=0x60ff}], 0x8) 2.077662951s ago: executing program 0 (id=21725): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x80}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.049312682s ago: executing program 7 (id=21727): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0}) 1.73967497s ago: executing program 0 (id=21732): syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0023e555b9c3fa6eb33ac47b8ff4af91652bcdadba6016b4febaefbf7ab1de9f9fc4b85dd11eb3d1d8f02b8edbb8d57cae0b642b13f86ad961208d93d147b403510e2bb85973c96a68a34335934125f954a59319e300306af03272e8040cbe7d49670be69710ee3b2abd38392a1b548c10073c15bb0e88fd0885977f8a07d1334f2abd76c074e6a8e645961aefc9"], 0x1, 0x267d, &(0x7f0000002740)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401}) 1.652443151s ago: executing program 3 (id=21735): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") symlinkat(&(0x7f0000000e00)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) 1.389728948s ago: executing program 3 (id=21737): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 1.355354139s ago: executing program 6 (id=21738): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000080801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.120997594s ago: executing program 3 (id=21739): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xc0) 1.119014084s ago: executing program 1 (id=21740): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) 1.036150746s ago: executing program 1 (id=21741): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) 959.284398ms ago: executing program 6 (id=21742): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 909.330949ms ago: executing program 1 (id=21743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x80}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 814.439781ms ago: executing program 3 (id=21744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080040001802c0007800b00010074617267657400001c000280080002400000000a040003000900010053"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 727.096794ms ago: executing program 6 (id=21745): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000180)=[{0x0, 0x9, 0x800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 704.239174ms ago: executing program 0 (id=21746): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 583.862717ms ago: executing program 1 (id=21747): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@part={'part', 0x3d, 0xa0}}, {@dir_umask={'dir_umask', 0x3d, 0x5b}}, {@gid}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}]}, 0x9, 0x347, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x108) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 580.032427ms ago: executing program 0 (id=21748): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 545.816327ms ago: executing program 6 (id=21749): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, "6400030000000000"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) 350.539002ms ago: executing program 6 (id=21750): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000020002000000200000", 0x17) 341.276332ms ago: executing program 3 (id=21751): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xe) ioctl$TCXONC(r0, 0x5435, 0x0) 318.518133ms ago: executing program 0 (id=21752): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x2, 0x9, 0xd5, @random="0d0728c880c3"}, 0x10) 232.878185ms ago: executing program 1 (id=21753): r0 = socket(0x2c, 0x3, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) 144.552427ms ago: executing program 3 (id=21754): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330005006d04000012b0000000000000000000000600ff0901a10185100901151a26ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b) write$UHID_INPUT2(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c000000140011ff04200000000000000000000044a40cf5ffc42977ba724842097f25f6ca11e48d"], 0x1a) 70.568719ms ago: executing program 7 (id=21755): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}}) 65.386119ms ago: executing program 6 (id=21756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 0s ago: executing program 1 (id=21757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4440}, 0x80) kernel console output (not intermixed with test programs): comm syz.7.19613: lblock 2 mapped to illegal pblock 2 (length 1) [ 1643.066939][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1643.103159][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1643.136683][T16041] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.168923][T16041] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1643.184872][T16057] loop3: detected capacity change from 0 to 512 [ 1643.192331][T16041] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.19613: lblock 0 mapped to illegal pblock 48 (length 1) [ 1643.218114][T16057] /dev/loop3: Can't open blockdev [ 1643.259485][T16041] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.278443][T16041] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1643.305363][T16041] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.19613: Failed to acquire dquot type 0 [ 1643.343550][T16041] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.356852][T16041] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1643.416195][T16041] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.422795][T16041] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.19613: mark_inode_dirty error [ 1643.462570][T16041] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.520528][T16041] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1643.540844][T16041] EXT4-fs (loop7): 1 orphan inode deleted [ 1643.558410][ T4337] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1643.574132][T16041] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1643.606744][ T4337] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.613515][ T4337] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1643.627005][T16068] CIFS mount error: No usable UNC path provided in device string! [ 1643.627005][T16068] [ 1643.643996][ T4337] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 1643.668370][T16068] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1643.713157][ T4337] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.804276][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1643.825369][T11987] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1643.861109][T11987] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.876034][T11987] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1643.906517][T11987] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 1643.942404][T11987] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.980639][T16075] device ipip0 entered promiscuous mode [ 1643.990471][T23537] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1644.056223][T23537] EXT4-fs (loop7): Remounting filesystem read-only [ 1644.111288][T23537] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1644.149222][T23537] EXT4-fs (loop7): Remounting filesystem read-only [ 1644.155894][T23537] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1644.203534][ T27] audit: type=1400 audit(1715.977:1019): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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fs (loop7): Remounting filesystem read-only [ 1645.173993][T16126] Non-string source [ 1645.349146][ T8692] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1645.552946][ T8692] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1645.586060][ T8692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.624827][ T8692] usb 8-1: Product: syz [ 1645.644374][ T8692] usb 8-1: Manufacturer: syz [ 1645.649060][ T8692] usb 8-1: SerialNumber: syz [ 1645.716531][ T8692] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1646.126514][ T8424] usb 8-1: USB disconnect, device number 54 [ 1646.712045][ T27] audit: type=1107 audit(1718.612:1020): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1646.777961][ T8692] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1646.785017][ T8692] ath9k_htc: Failed to initialize the device [ 1646.821121][ T8424] usb 8-1: ath9k_htc: USB layer deinitialized [ 1646.876067][T16197] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1646.903627][T16197] overlayfs: missing 'lowerdir' [ 1647.345604][ T27] audit: type=1326 audit(1719.274:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.0.19691" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1647.421143][ T27] audit: type=1326 audit(1719.305:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.0.19691" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1647.484259][T16220] loop1: detected capacity change from 0 to 128 [ 1647.492449][ T27] audit: type=1326 audit(1719.316:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.0.19691" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1647.516641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.541023][T16220] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1647.572810][T16220] hpfs: filesystem error: improperly stopped [ 1647.588518][T16220] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1647.596525][T16220] hpfs: You really don't want any checks? You are crazy... [ 1647.604847][ T27] audit: type=1326 audit(1719.316:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.0.19691" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1647.651964][T16220] hpfs: Code page index out of array [ 1647.692921][T16220] hpfs: code page support is disabled [ 1647.698521][T16220] hpfs: hpfs_map_4sectors(): unaligned read [ 1647.725795][T16220] hpfs: hpfs_map_4sectors(): unaligned read [ 1647.747613][T16220] hpfs: filesystem error: unable to find root dir [ 1648.005559][T16232] device bridge_slave_1 entered promiscuous mode [ 1648.030885][T16232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1648.045766][T16232] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1648.307699][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1648.307715][ T27] audit: type=1326 audit(1720.282:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1648.405635][ T27] audit: type=1326 audit(1720.282:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1648.512086][ T27] audit: type=1326 audit(1720.282:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1648.597680][ T27] audit: type=1326 audit(1720.282:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1648.621496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.692608][ T27] audit: type=1326 audit(1720.292:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1648.716414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.836782][ T27] audit: type=1326 audit(1720.345:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0ffd5e90e code=0x7ffc0000 [ 1648.860569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.951044][ T27] audit: type=1326 audit(1720.345:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0ffd5e90e code=0x7ffc0000 [ 1648.974836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.056962][ T27] audit: type=1326 audit(1720.345:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0ffd5e90e code=0x7ffc0000 [ 1649.080808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.095704][T16269] netlink: 'syz.6.19720': attribute type 24 has an invalid length. [ 1649.185470][ T27] audit: type=1326 audit(1720.345:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0ffd5e90e code=0x7ffc0000 [ 1649.209304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.283549][ T27] audit: type=1326 audit(1720.355:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.6.19709" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0ffd5e90e code=0x7ffc0000 [ 1649.307363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.318615][T16244] loop1: detected capacity change from 0 to 32768 [ 1649.394807][T16244] add_index: next_index = 0. Resetting! [ 1649.403869][T16277] loop3: detected capacity change from 0 to 512 [ 1649.417654][T16277] /dev/loop3: Can't open blockdev [ 1650.603386][T16316] loop1: detected capacity change from 0 to 256 [ 1650.666992][T16316] exfat: Deprecated parameter 'namecase' [ 1650.710817][T16316] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1650.815455][T16321] netlink: 'syz.6.19744': attribute type 21 has an invalid length. [ 1650.873568][T16321] netlink: 128 bytes leftover after parsing attributes in process `syz.6.19744'. [ 1650.902310][T16321] netlink: 'syz.6.19744': attribute type 4 has an invalid length. [ 1650.924226][T16321] netlink: 'syz.6.19744': attribute type 3 has an invalid length. [ 1650.964683][T16321] netlink: 3 bytes leftover after parsing attributes in process `syz.6.19744'. [ 1650.979084][T16326] loop3: detected capacity change from 0 to 1024 [ 1651.357103][T16340] overlayfs: missing 'workdir' [ 1651.872118][T16362] netlink: 40 bytes leftover after parsing attributes in process `syz.6.19764'. [ 1651.894816][T16364] ieee802154 phy1 wpan1: encryption failed: -22 [ 1652.532157][T16390] netlink: 23 bytes leftover after parsing attributes in process `syz.3.19778'. [ 1653.589384][ T5500] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1653.626451][ T8692] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1653.668138][T16432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19796'. [ 1653.801114][ T8692] usb 4-1: Using ep0 maxpacket: 8 [ 1653.805167][ T5500] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1653.815712][ T8692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.825930][ T5500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.825958][ T5500] usb 2-1: Product: syz [ 1653.825976][ T5500] usb 2-1: Manufacturer: syz [ 1653.825993][ T5500] usb 2-1: SerialNumber: syz [ 1653.849597][ T5500] usb 2-1: config 0 descriptor?? [ 1653.866297][ T5500] hub 2-1:0.0: bad descriptor, ignoring hub [ 1653.872288][ T5500] hub: probe of 2-1:0.0 failed with error -5 [ 1653.902870][ T8692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1653.934687][ T8692] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1653.976953][ T8692] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1654.001550][ T8692] usb 4-1: Product: syz [ 1654.005805][ T8692] usb 4-1: Manufacturer: syz [ 1654.032361][ T8692] usb 4-1: SerialNumber: syz [ 1654.053515][ T8692] usb 4-1: config 0 descriptor?? [ 1654.070733][ T5500] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1654.099045][ T8692] imon_raw 4-1:0.0: IR endpoint missing [ 1654.156701][ T5500] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1654.184313][ T5500] dib0700: firmware download failed at 7 with -22 [ 1654.246343][ T5500] usb 2-1: USB disconnect, device number 32 [ 1654.319185][ T8692] usb 4-1: USB disconnect, device number 36 [ 1654.840240][T16474] netlink: 'syz.7.19820': attribute type 21 has an invalid length. [ 1654.860412][T16474] netlink: 128 bytes leftover after parsing attributes in process `syz.7.19820'. [ 1654.884865][T16474] netlink: 'syz.7.19820': attribute type 4 has an invalid length. [ 1654.919005][T16474] netlink: 'syz.7.19820': attribute type 5 has an invalid length. [ 1654.938102][T16474] netlink: 3 bytes leftover after parsing attributes in process `syz.7.19820'. [ 1655.130515][T16483] loop7: detected capacity change from 0 to 256 [ 1655.166134][T16486] Lens A: ================= START STATUS ================= [ 1655.173818][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19834'. [ 1655.184380][T16483] exfat: Deprecated parameter 'namecase' [ 1655.199263][T16486] Lens A: Focus, Absolute: 1023 [ 1655.211392][T16486] Lens A: ================== END STATUS ================== [ 1655.221470][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19834'. [ 1655.251094][T16483] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1655.561224][T16497] netlink: 224 bytes leftover after parsing attributes in process `syz.7.19830'. [ 1655.647548][ T5500] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1655.846276][ T5500] usb 4-1: Using ep0 maxpacket: 16 [ 1655.853386][ T5500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1655.868007][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19837'. [ 1655.903723][ T5500] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1655.918309][ T5500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.937079][ T5500] usb 4-1: Product: syz [ 1655.946990][ T5500] usb 4-1: Manufacturer: syz [ 1655.953747][ T5500] usb 4-1: SerialNumber: syz [ 1655.978433][ T5500] usb 4-1: config 0 descriptor?? [ 1656.142086][T16518] loop6: detected capacity change from 0 to 17 [ 1656.167398][T16518] FAT-fs (loop6): bogus logical sector size 65280 [ 1656.197411][T16518] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1656.214968][ T5500] usb 4-1: USB disconnect, device number 37 [ 1656.358823][T16521] loop1: detected capacity change from 0 to 4096 [ 1656.441592][T16521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1656.581078][T16521] EXT4-fs: Cannot change quota options when quota turned on [ 1656.706444][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1656.918804][T16543] xt_HMARK: spi-set and port-set can't be combined [ 1657.166983][T16547] loop3: detected capacity change from 0 to 4096 [ 1657.209277][T16547] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1657.346895][T16547] ntfs3: loop3: failed to convert "c46c" to cp1250 [ 1657.465321][T16563] netlink: 'syz.7.19862': attribute type 1 has an invalid length. [ 1657.728071][T16569] loop7: detected capacity change from 0 to 512 [ 1657.754302][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1657.763377][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1657.856530][T16569] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1657.900529][T16569] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1657.935353][T16569] EXT4-fs (loop7): 1 truncate cleaned up [ 1657.941131][T16569] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1658.035538][T16569] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 1658.155687][T16553] loop1: detected capacity change from 0 to 32768 [ 1658.236092][T16553] [ 1658.236092][T16553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1658.236092][T16553] [ 1658.292930][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1658.458777][ T4273] [ 1658.458777][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1658.458777][ T4273] [ 1658.503609][ T4273] [ 1658.503609][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1658.503609][ T4273] [ 1658.823490][T16589] loop6: detected capacity change from 0 to 4096 [ 1658.868175][T16589] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1658.980142][T16589] ntfs3: loop6: failed to convert "c46c" to cp1250 [ 1659.149745][T16581] loop3: detected capacity change from 0 to 32768 [ 1659.263749][T16599] netlink: 'syz.1.19876': attribute type 1 has an invalid length. [ 1659.593836][ T5213] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1660.303864][T16629] netlink: 'syz.6.19892': attribute type 2 has an invalid length. [ 1660.351804][T16629] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19892'. [ 1661.046200][T16661] cgroup: Name too long [ 1661.593835][T16688] IPv6: NLM_F_CREATE should be specified when creating new route [ 1661.701680][T16691] x_tables: unsorted entry at hook 3 [ 1661.842645][T16697] loop7: detected capacity change from 0 to 1024 [ 1661.921719][T16697] syz.7.19926: attempt to access beyond end of device [ 1661.921719][T16697] loop7: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1661.980784][T16697] Buffer I/O error on dev loop7, logical block 458752, async page read [ 1662.047564][T16697] syz.7.19926: attempt to access beyond end of device [ 1662.047564][T16697] loop7: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1662.122938][T16697] Buffer I/O error on dev loop7, logical block 458752, async page read [ 1662.464965][T16721] netlink: 'syz.0.19937': attribute type 3 has an invalid length. [ 1662.494606][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19937'. [ 1662.685477][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 1662.685494][ T27] audit: type=1326 audit(1735.379:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.19942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1662.828957][ T27] audit: type=1326 audit(1735.421:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.19942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1662.923209][ T27] audit: type=1326 audit(1735.421:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.19942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1663.023922][ T27] audit: type=1326 audit(1735.421:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.19942" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1663.095195][T16742] device geneve5 entered promiscuous mode [ 1663.403974][ T8686] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1663.587359][ T8686] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1663.609648][ T8686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.648111][ T8686] usb 1-1: Product: syz [ 1663.660952][ T8686] usb 1-1: Manufacturer: syz [ 1663.681395][ T8686] usb 1-1: SerialNumber: syz [ 1663.748844][ T8686] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1664.191169][ T8693] usb 1-1: USB disconnect, device number 8 [ 1664.570657][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19971'. [ 1664.761635][ T8686] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1664.768811][ T8686] ath9k_htc: Failed to initialize the device [ 1664.815212][ T8693] usb 1-1: ath9k_htc: USB layer deinitialized [ 1665.317148][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19986'. [ 1665.891524][T16843] loop3: detected capacity change from 0 to 64 [ 1665.914308][ T8424] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1666.137154][ T8424] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1666.147660][ T27] audit: type=1400 audit(1739.011:1068): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16850 comm="syz.3.20001" [ 1666.173645][ T8424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.202823][ T8424] usb 2-1: Product: syz [ 1666.207076][ T8424] usb 2-1: Manufacturer: syz [ 1666.232257][ T8424] usb 2-1: SerialNumber: syz [ 1666.272216][ T8424] usb 2-1: config 0 descriptor?? [ 1666.296340][ T8424] ch341 2-1:0.0: ch341-uart converter detected [ 1666.683855][ T8424] usb 2-1: failed to send control message: -71 [ 1666.699407][ T8424] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1666.704138][ T8692] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1666.734054][ T8424] usb 2-1: USB disconnect, device number 33 [ 1666.774033][ T8424] ch341 2-1:0.0: device disconnected [ 1666.915848][ T8692] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 1666.934490][ T8692] usb 7-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1666.962092][ T8692] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1666.978512][ T8692] usb 7-1: config 1 has no interface number 3 [ 1666.985197][ T8692] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1667.006440][ T8692] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1667.044148][ T8692] usb 7-1: config 1 interface 2 has no altsetting 0 [ 1667.067991][ T8692] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1667.086364][ T8692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.094575][ T8692] usb 7-1: Product: syz [ 1667.105573][ T8692] usb 7-1: Manufacturer: syz [ 1667.110250][ T8692] usb 7-1: SerialNumber: syz [ 1667.215036][ T8693] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1667.233433][T16892] loop7: detected capacity change from 0 to 4096 [ 1667.274948][T16893] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1667.307378][T16892] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=104, inode=8796093022224, rec_len=0, name_len=5 [ 1667.343979][ T8692] usb 7-1: Can't get UAC3 power state for id 10 [ 1667.357728][ T8692] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 1667.375747][T16892] Remounting filesystem read-only [ 1667.400137][ T8693] usb 1-1: Using ep0 maxpacket: 32 [ 1667.407840][ T8692] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1667.430419][ T8693] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1667.466581][ T8693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.495211][ T8693] usb 1-1: Product: syz [ 1667.499466][ T8693] usb 1-1: Manufacturer: syz [ 1667.504110][ T8693] usb 1-1: SerialNumber: syz [ 1667.542620][ T8693] usb 1-1: config 0 descriptor?? [ 1667.593093][ T8692] usb 7-1: USB disconnect, device number 59 [ 1667.940988][ T8693] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1667.960038][ T8693] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1668.046797][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.083403][ T8693] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1668.111597][ T8693] usb 1-1: USB disconnect, device number 9 [ 1669.335968][T16958] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20051'. [ 1669.612446][T16966] lo speed is unknown, defaulting to 1000 [ 1669.815419][T16974] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20062'. [ 1669.851977][T16974] netlink: 32 bytes leftover after parsing attributes in process `syz.7.20062'. [ 1670.017266][T16966] bond0 speed is unknown, defaulting to 1000 [ 1670.050313][T16966] bond0 speed is unknown, defaulting to 1000 [ 1670.448345][ T27] audit: type=1326 audit(1743.536:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16995 comm="syz.3.20073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1670.545801][ T27] audit: type=1326 audit(1743.557:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16995 comm="syz.3.20073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1670.668238][ T27] audit: type=1326 audit(1743.578:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16995 comm="syz.3.20073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1670.752882][ T27] audit: type=1326 audit(1743.578:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16995 comm="syz.3.20073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1670.848064][ T27] audit: type=1326 audit(1743.578:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16995 comm="syz.3.20073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1671.095770][T17017] netlink: 72 bytes leftover after parsing attributes in process `syz.7.20083'. [ 1671.104901][T17017] netlink: 72 bytes leftover after parsing attributes in process `syz.7.20083'. [ 1671.737816][T17045] xt_bpf: check failed: parse error [ 1672.333261][T17066] loop6: detected capacity change from 0 to 128 [ 1672.390133][T17066] FAT-fs (loop6): FAT read failed (blocknr 2080) [ 1674.304652][T17137] loop7: detected capacity change from 0 to 64 [ 1674.316375][T17138] xt_hashlimit: max too large, truncated to 1048576 [ 1675.993936][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20177'. [ 1676.020048][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20177'. [ 1676.597334][T17228] netlink: 'syz.1.20185': attribute type 1 has an invalid length. [ 1676.780397][T17235] loop6: detected capacity change from 0 to 1024 [ 1677.124512][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20194'. [ 1677.417807][T17261] loop6: detected capacity change from 0 to 1764 [ 1677.935877][T17283] netlink: 'syz.3.20209': attribute type 1 has an invalid length. [ 1678.341157][ T27] audit: type=1326 audit(1751.809:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.441220][ T27] audit: type=1326 audit(1751.840:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.516138][ T3727] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1678.553975][ T27] audit: type=1326 audit(1751.840:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.597186][T17310] loop7: detected capacity change from 0 to 512 [ 1678.615683][T17310] EXT4-fs: Ignoring removed orlov option [ 1678.644921][ T27] audit: type=1326 audit(1751.840:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.706391][ T3727] usb 7-1: Using ep0 maxpacket: 32 [ 1678.713544][T17310] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1678.713990][ T3727] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1678.749814][ T3727] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.763922][ T3727] usb 7-1: config 0 has no interface number 0 [ 1678.770702][ T3727] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1678.784332][ T27] audit: type=1326 audit(1751.840:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.809653][ T27] audit: type=1326 audit(1751.840:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.834460][ T27] audit: type=1326 audit(1751.851:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.859725][ T3727] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1678.887507][ T27] audit: type=1326 audit(1751.851:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.3.20219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1678.915548][ T3727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.948275][ T3727] usb 7-1: Product: syz [ 1678.952560][ T3727] usb 7-1: Manufacturer: syz [ 1678.967437][ T3727] usb 7-1: SerialNumber: syz [ 1678.988384][ T3727] usb 7-1: config 0 descriptor?? [ 1679.000788][ T3727] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1679.018813][ T3727] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 1679.078405][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1679.093238][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20228'. [ 1679.191838][ T3727] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1679.207742][ T3727] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 1679.423429][ T3727] usb 7-1: USB disconnect, device number 60 [ 1679.539207][T17337] IPv6: sit4: Disabled Multicast RS [ 1679.890036][T17349] netlink: 'syz.0.20239': attribute type 21 has an invalid length. [ 1679.903654][T17349] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1679.921983][T17349] netlink: 'syz.0.20239': attribute type 5 has an invalid length. [ 1679.970812][T17347] loop3: detected capacity change from 0 to 4096 [ 1679.972119][T17349] netlink: 'syz.0.20239': attribute type 6 has an invalid length. [ 1680.008187][T17349] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1680.050227][T17347] /dev/loop3: Can't open blockdev [ 1680.125627][ T5213] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1680.306336][ T8424] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1680.371732][T17361] loop6: detected capacity change from 0 to 64 [ 1680.506577][ T8424] usb 8-1: Using ep0 maxpacket: 8 [ 1680.514488][ T8424] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1680.561937][ T8424] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1680.610678][ T8424] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1680.640195][ T8424] usb 8-1: config 8 interface 0 has no altsetting 0 [ 1680.670205][ T8424] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1680.697036][ T8424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.748098][ T8424] usb 8-1: Product: syz [ 1680.752378][ T8424] usb 8-1: Manufacturer: syz [ 1680.767968][ T8424] usb 8-1: SerialNumber: syz [ 1680.944568][ T8692] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1680.990548][ T8424] usb 8-1: selecting invalid altsetting 0 [ 1681.070192][ T8424] snd-usb-audio: probe of 8-1:8.0 failed with error -12 [ 1681.127870][ T8692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.138634][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1681.154466][ T8692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1681.163839][ T8424] usb 8-1: USB disconnect, device number 55 [ 1681.167023][ T8692] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1681.218330][ T8692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.256669][ T8692] usb 2-1: Product: syz [ 1681.276579][ T8692] usb 2-1: Manufacturer: syz [ 1681.291142][ T8692] usb 2-1: SerialNumber: syz [ 1681.523141][ T8692] usb 2-1: 0:2 : does not exist [ 1681.534465][ T8692] usb 2-1: unit 9 not found! [ 1681.560820][ T8692] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1681.592896][ T8692] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1681.639353][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20265'. [ 1681.676756][ T8692] usb 2-1: USB disconnect, device number 34 [ 1681.888786][T17409] netlink: 'syz.6.20270': attribute type 2 has an invalid length. [ 1681.917801][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1681.935335][T17409] netlink: 'syz.6.20270': attribute type 8 has an invalid length. [ 1681.964308][T17409] netlink: 132 bytes leftover after parsing attributes in process `syz.6.20270'. [ 1682.685230][T17440] loop1: detected capacity change from 0 to 64 [ 1682.756042][T17445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1682.954530][ T8692] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1683.158850][ T8692] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1683.178181][ T8692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.202204][ T8692] usb 1-1: Product: syz [ 1683.206456][ T8692] usb 1-1: Manufacturer: syz [ 1683.249793][ T8692] usb 1-1: SerialNumber: syz [ 1683.266329][ T8692] usb 1-1: config 0 descriptor?? [ 1683.299359][ T8692] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1683.354987][T17466] netlink: 'syz.3.20297': attribute type 10 has an invalid length. [ 1683.382885][T17466] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20297'. [ 1683.430849][T17466] openvswitch: netlink: Flow key attr not present in new flow. [ 1683.638911][T17477] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1683.638911][T17477] SÃȘØÈžZ§6ŸÂ' [ 1683.723455][ T8692] usb 1-1: USB disconnect, device number 10 [ 1683.909652][T17482] loop3: detected capacity change from 0 to 2048 [ 1684.153720][T17488] loop6: detected capacity change from 0 to 2048 [ 1684.237139][T17488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1684.343481][T17492] loop7: detected capacity change from 0 to 4096 [ 1684.448471][T17492] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1684.511347][T17492] ntfs3: loop7: Failed to load $Extend. [ 1684.519549][T17497] netlink: 'syz.0.20313': attribute type 21 has an invalid length. [ 1684.686359][T17503] loop3: detected capacity change from 0 to 256 [ 1684.749083][T17503] exfat: Deprecated parameter 'utf8' [ 1684.802659][T17503] exfat: Deprecated parameter 'namecase' [ 1684.808406][T17503] exfat: Deprecated parameter 'namecase' [ 1684.876773][T17503] /dev/loop3: Can't open blockdev [ 1685.431333][T17528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20328'. [ 1685.449991][T17528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20328'. [ 1685.459139][T17528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20328'. [ 1685.855731][T17501] loop6: detected capacity change from 0 to 40427 [ 1685.869657][ T3727] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1685.888980][T17501] F2FS-fs (loop6): invalid crc value [ 1685.919940][T17501] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1686.095772][ T3727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.108904][T17501] F2FS-fs (loop6): Start checkpoint disabled! [ 1686.145497][ T3727] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1686.184201][ T3727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.212541][T17501] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1686.250987][ T3727] usb 2-1: config 0 descriptor?? [ 1686.291655][ T3727] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 1686.326140][ T3727] rndis_host: probe of 2-1:0.0 failed with error -22 [ 1686.412974][T17557] loop7: detected capacity change from 0 to 1024 [ 1686.457929][ T27] audit: type=1800 audit(1760.334:1082): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.20314" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 1686.518425][ T3727] usb 2-1: USB disconnect, device number 35 [ 1686.566660][T17557] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1686.632688][T17566] sctp: [Deprecated]: syz.3.20343 (pid 17566) Use of int in maxseg socket option. [ 1686.632688][T17566] Use struct sctp_assoc_value instead [ 1686.707830][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1686.838390][T14236] kworker/u4:9: attempt to access beyond end of device [ 1686.838390][T14236] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1687.074649][ T27] audit: type=1326 audit(1760.985:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.7.20350" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1687.163401][ T27] audit: type=1326 audit(1760.985:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.7.20350" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1687.269491][ T27] audit: type=1326 audit(1761.016:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.7.20350" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1687.370944][ T27] audit: type=1326 audit(1761.016:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.7.20350" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1687.456299][ T27] audit: type=1326 audit(1761.016:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.7.20350" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1687.659896][ T8424] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1687.823836][T17596] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.863841][ T8424] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1687.882354][ T8424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.912700][ T8424] usb 8-1: Product: syz [ 1687.939661][ T8424] usb 8-1: Manufacturer: syz [ 1687.944347][ T8424] usb 8-1: SerialNumber: syz [ 1687.980771][ T8424] usb 8-1: config 0 descriptor?? [ 1688.197911][ T8424] mos7840 8-1:0.0: required endpoints missing [ 1688.351210][T17618] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1688.402176][ T8424] usb 8-1: USB disconnect, device number 56 [ 1689.175056][T17653] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 1689.342657][T17662] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 1689.421968][T17662] overlayfs: missing 'lowerdir' [ 1689.956515][T17689] loop6: detected capacity change from 0 to 64 [ 1689.980129][T17689] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1690.022087][ T5500] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1690.241339][ T5500] usb 2-1: Using ep0 maxpacket: 8 [ 1690.248715][ T5500] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1690.267935][ T5500] usb 2-1: config 6 has an invalid interface number: 212 but max is 1 [ 1690.298023][ T5500] usb 2-1: config 6 has an invalid interface number: 188 but max is 1 [ 1690.318461][ T5500] usb 2-1: config 6 has no interface number 0 [ 1690.324603][ T5500] usb 2-1: config 6 has no interface number 1 [ 1690.360935][ T5500] usb 2-1: config 6 interface 212 has no altsetting 0 [ 1690.410593][ T5500] usb 2-1: config 6 interface 188 has no altsetting 0 [ 1690.458038][ T5500] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51 [ 1690.476898][ T5500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.486535][ T5500] usb 2-1: Product: syz [ 1690.501983][ T5500] usb 2-1: Manufacturer: syz [ 1690.506815][ T5500] usb 2-1: SerialNumber: syz [ 1690.772711][T17711] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 1690.803546][ T5500] usb 2-1: USB disconnect, device number 36 [ 1691.301865][ T27] audit: type=1326 audit(1765.426:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.7.20416" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1691.457493][ T27] audit: type=1326 audit(1765.426:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.7.20416" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1691.622491][ T27] audit: type=1326 audit(1765.447:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.7.20416" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1691.721567][ T27] audit: type=1326 audit(1765.447:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.7.20416" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1691.769582][T17747] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1691.868175][ T27] audit: type=1326 audit(1765.447:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17732 comm="syz.7.20416" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f19e0d9 code=0x7ffc0000 [ 1692.061693][T17750] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 1692.414678][ T27] audit: type=1326 audit(1766.591:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.6.20432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1692.536769][ T27] audit: type=1326 audit(1766.591:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.6.20432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1692.651711][ T27] audit: type=1326 audit(1766.622:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.6.20432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1692.749057][ T27] audit: type=1326 audit(1766.622:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.6.20432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1692.875605][ T27] audit: type=1326 audit(1766.622:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.6.20432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1693.421215][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20450'. [ 1693.474634][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20450'. [ 1693.593772][ T3727] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1693.755070][T17822] loop7: detected capacity change from 0 to 128 [ 1693.798125][ T3727] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1693.817382][ T3727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.861322][ T3727] usb 4-1: config 0 descriptor?? [ 1693.907018][ T3727] cp210x 4-1:0.0: cp210x converter detected [ 1694.303225][ T3727] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1694.332403][ T3727] usb 4-1: USB disconnect, device number 38 [ 1694.359564][ T3727] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1694.402420][ T3727] cp210x 4-1:0.0: device disconnected [ 1695.124052][T17853] loop6: detected capacity change from 0 to 4096 [ 1695.164271][T17853] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1695.250432][T17853] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1695.290114][T17853] ntfs3: loop6: mft corrupted [ 1695.299511][T17853] ntfs3: loop6: Failed to load $Extend. [ 1695.474482][T17841] loop1: detected capacity change from 0 to 40427 [ 1695.584806][T17841] F2FS-fs (loop1): invalid crc value [ 1695.617240][T17841] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1695.863150][T17841] F2FS-fs (loop1): Start checkpoint disabled! [ 1695.995217][T17841] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1696.082178][T17883] loop3: detected capacity change from 0 to 256 [ 1696.089727][T17883] exfat: Deprecated parameter 'utf8' [ 1696.095204][T17883] exfat: Deprecated parameter 'utf8' [ 1696.115525][T17883] exfat: Deprecated parameter 'namecase' [ 1696.133183][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1696.133201][ T27] audit: type=1800 audit(1770.496:1101): pid=17841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20463" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1696.140263][T17883] exfat: Deprecated parameter 'utf8' [ 1696.204265][T17883] /dev/loop3: Can't open blockdev [ 1696.356989][ T4337] kworker/u4:6: attempt to access beyond end of device [ 1696.356989][ T4337] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1696.678085][T17899] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1696.857698][T17904] loop7: detected capacity change from 0 to 4096 [ 1696.967169][T17909] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1697.005646][T17904] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1697.054229][T17904] NILFS (loop7): mounting fs with errors [ 1697.517691][T17926] loop1: detected capacity change from 0 to 764 [ 1697.595187][T17926] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1697.702764][T17933] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1698.007250][ T27] audit: type=1326 audit(1772.460:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.1.20512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x0 [ 1698.026003][T17940] loop3: detected capacity change from 0 to 1024 [ 1698.598138][T17959] cgroup: none used incorrectly [ 1698.843889][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20525'. [ 1698.880663][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20525'. [ 1698.940421][T17947] loop7: detected capacity change from 0 to 32768 [ 1698.977690][T17947] XFS: noikeep mount option is deprecated. [ 1699.054782][T17942] loop6: detected capacity change from 0 to 32768 [ 1699.104774][T17947] XFS (loop7): Mounting V5 Filesystem [ 1699.163070][T17942] XFS (loop6): Mounting V5 Filesystem [ 1699.251786][ T8692] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1699.378203][T17947] XFS (loop7): Ending clean mount [ 1699.400213][T17947] XFS (loop7): Quotacheck needed: Please wait. [ 1699.418454][T17942] XFS (loop6): Ending clean mount [ 1699.452276][ T8692] usb 4-1: Using ep0 maxpacket: 8 [ 1699.461969][ T8692] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1699.484064][ T8692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.538738][ T8692] usb 4-1: config 0 has no interface number 0 [ 1699.565893][T17947] XFS (loop7): Quotacheck: Done. [ 1699.589317][ T8692] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1699.619158][ T8692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.632409][T17947] XFS: noikeep mount option is deprecated. [ 1699.648562][ T8692] usb 4-1: Product: syz [ 1699.668487][ T8692] usb 4-1: Manufacturer: syz [ 1699.699468][ T8692] usb 4-1: SerialNumber: syz [ 1699.735330][ T8692] usb 4-1: config 0 descriptor?? [ 1699.764235][T17175] XFS (loop6): Unmounting Filesystem [ 1699.881121][T23537] XFS (loop7): Unmounting Filesystem [ 1699.964505][ T8692] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1699.975610][ T8692] usb 4-1: No valid video chain found. [ 1700.057407][T18010] loop1: detected capacity change from 0 to 22 [ 1700.104527][T18010] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1700.134342][T18010] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1700.205289][ T8692] usb 4-1: USB disconnect, device number 39 [ 1700.862175][T18029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1700.869494][T18029] IPv6: NLM_F_CREATE should be set when creating new route [ 1701.090334][ T8692] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1701.274662][ T8692] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1701.297389][ T8692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.325326][ T8692] usb 1-1: Product: syz [ 1701.352819][ T8692] usb 1-1: Manufacturer: syz [ 1701.370036][ T8692] usb 1-1: SerialNumber: syz [ 1701.438166][ T8692] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1701.758822][T18064] loop7: detected capacity change from 0 to 1024 [ 1701.836797][T18064] hfsplus: invalid length 32517 has been corrected to 255 [ 1701.910627][ T8686] usb 1-1: USB disconnect, device number 11 [ 1702.404739][ T8683] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1702.480879][ T8692] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1702.498072][ T8692] ath9k_htc: Failed to initialize the device [ 1702.535578][ T8686] usb 1-1: ath9k_htc: USB layer deinitialized [ 1702.587851][ T8683] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1702.605834][ T8683] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1702.634868][ T8683] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1702.669941][ T8683] usb 7-1: config 1 interface 0 has no altsetting 1 [ 1702.699934][ T8683] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1702.728306][ T8683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.753387][ T8683] usb 7-1: Product: syz [ 1702.777269][ T8683] usb 7-1: Manufacturer: syz [ 1702.781980][ T8683] usb 7-1: SerialNumber: syz [ 1702.830438][ T8683] smsusb:smsusb_probe: board id=8, interface number 0 [ 1702.862299][T18096] xt_l2tp: v2 tid > 0xffff: 117440512 [ 1702.955188][T18083] loop7: detected capacity change from 0 to 32768 [ 1703.027961][ T8683] smsusb:smsusb_probe: Device initialized with return code -19 [ 1703.051165][T18083] XFS (loop7): Mounting V5 Filesystem [ 1703.165481][T18083] XFS (loop7): Ending clean mount [ 1703.245473][ T8692] usb 7-1: USB disconnect, device number 61 [ 1703.384407][T23537] XFS (loop7): Unmounting Filesystem [ 1704.490978][T18156] 0xfffffffffffffffd-0x000000020000 : "" [ 1704.544340][T18156] mtd: partition "" is out of reach -- disabled [ 1704.591319][T18156] ftl_cs: FTL header not found. [ 1704.853094][T18168] device bond3 entered promiscuous mode [ 1704.929074][T18168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1705.266430][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20606'. [ 1705.514747][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20611'. [ 1705.557249][T18197] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20611'. [ 1705.603018][T18197] netlink: 'syz.6.20611': attribute type 1 has an invalid length. [ 1705.624816][ T27] audit: type=1326 audit(1780.459:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.0.20612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1705.632767][T18205] nvme_fabrics: missing parameter 'nqn=%s' [ 1705.710058][ T27] audit: type=1326 audit(1780.501:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.0.20612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1705.829571][ T27] audit: type=1326 audit(1780.501:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.0.20612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1705.946966][ T27] audit: type=1326 audit(1780.501:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.0.20612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1706.012700][T18220] netlink: 64 bytes leftover after parsing attributes in process `syz.7.20620'. [ 1706.036777][T18221] loop3: detected capacity change from 0 to 128 [ 1707.245280][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20643'. [ 1707.541896][T18286] netlink: 'syz.7.20650': attribute type 30 has an invalid length. [ 1708.427904][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20669'. [ 1708.977189][T18349] netlink: 'syz.0.20681': attribute type 12 has an invalid length. [ 1708.985215][T18349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20681'. [ 1710.266061][T18404] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1711.376746][T18440] loop1: detected capacity change from 0 to 4096 [ 1711.453974][T18440] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1712.376053][T18479] loop1: detected capacity change from 0 to 2048 [ 1712.426917][T18479] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1712.474711][T18479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1712.664545][T18489] netlink: 'syz.0.20750': attribute type 30 has an invalid length. [ 1713.053873][T18505] netlink: 'syz.6.20757': attribute type 3 has an invalid length. [ 1713.095200][T18508] CIFS: bad ip= option (::.) [ 1713.453167][T18483] loop3: detected capacity change from 0 to 32768 [ 1713.509841][T18483] /dev/loop3: Can't open blockdev [ 1714.003156][T18527] loop3: detected capacity change from 0 to 4096 [ 1714.047239][T18527] /dev/loop3: Can't open blockdev [ 1714.352992][T18546] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1714.471122][T18550] netlink: 'syz.3.20777': attribute type 4 has an invalid length. [ 1714.483386][T18549] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1714.528931][T18550] netlink: 17 bytes leftover after parsing attributes in process `syz.3.20777'. [ 1715.006509][T18568] device veth9 entered promiscuous mode [ 1715.083849][T18572] tmpfs: Bad value for 'mpol' [ 1715.311300][ T8683] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1715.530641][ T8683] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1715.555427][ T8683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.587408][ T8683] usb 4-1: Product: syz [ 1715.591656][ T8683] usb 4-1: Manufacturer: syz [ 1715.599595][T18592] netlink: 96 bytes leftover after parsing attributes in process `syz.7.20798'. [ 1715.624363][ T8683] usb 4-1: SerialNumber: syz [ 1715.628941][T18592] netlink: 658 bytes leftover after parsing attributes in process `syz.7.20798'. [ 1715.682365][ T8692] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1715.840297][ T8683] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1715.868149][ T8683] usb 4-1: unit 4 not found! [ 1715.875172][ T8692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1715.901956][ T8692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1715.922985][T18600] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1715.943859][ T8692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1715.962627][ T8683] usb 4-1: USB disconnect, device number 40 [ 1715.977996][ T8692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1716.011581][ T8692] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1716.028242][ T8692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.065112][ T8692] usb 1-1: config 0 descriptor?? [ 1716.144652][T18607] loop6: detected capacity change from 0 to 1024 [ 1716.207299][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.279152][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1716.288306][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1716.306915][ T8692] hdpvr 1-1:0.0: firmware version 0x8 dated [ 1716.319975][T18607] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1716.425895][T32468] Bluetooth: hci0: command 0x080f tx timeout [ 1716.504940][ T8692] hdpvr 1-1:0.0: device init failed [ 1716.510283][ T8692] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1716.536436][ T8692] usb 1-1: USB disconnect, device number 12 [ 1716.561861][T17175] EXT4-fs (loop6): unmounting filesystem. [ 1716.770455][T18626] loop6: detected capacity change from 0 to 512 [ 1716.830487][T18626] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1717.055606][T17175] EXT4-fs (loop6): unmounting filesystem. [ 1717.242137][T18616] loop7: detected capacity change from 0 to 32768 [ 1717.291452][T18642] bridge0: port 1(netdevsim0) entered blocking state [ 1717.337194][T18642] bridge0: port 1(netdevsim0) entered disabled state [ 1717.347070][T18642] device netdevsim0 entered promiscuous mode [ 1717.367091][T18616] jfs_rename: dtInsert returned -EIO [ 1718.399446][T18681] loop7: detected capacity change from 0 to 1024 [ 1718.426608][T18681] EXT4-fs: Ignoring removed bh option [ 1718.547272][T18681] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1718.722572][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1719.035345][T18658] loop6: detected capacity change from 0 to 40427 [ 1719.074400][T18658] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1719.082143][T18658] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1719.160525][T18658] F2FS-fs (loop6): invalid crc value [ 1719.235050][T18658] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1719.455835][T18658] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1719.462968][T18658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1720.023834][T18738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20863'. [ 1720.492822][ T8692] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1720.673799][ T8692] usb 4-1: Using ep0 maxpacket: 16 [ 1720.681509][ T8692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1720.714645][ T8692] usb 4-1: string descriptor 0 read error: -22 [ 1720.737492][T18760] smc: removing ib device syz1 [ 1720.745987][ T8692] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1720.769114][ T8692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.782044][T18762] AppArmor: change_hat: Invalid input '' [ 1721.044342][ T8692] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 1721.165632][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1721.216016][T18774] CIFS mount error: No usable UNC path provided in device string! [ 1721.216016][T18774] [ 1721.238234][ T8692] usb 4-1: USB disconnect, device number 41 [ 1721.246218][T18774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1721.294324][T18770] loop6: detected capacity change from 0 to 4096 [ 1721.392964][T18770] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1721.461256][T18770] ntfs3: loop6: Failed to load $Extend. [ 1721.635415][T18777] loop7: detected capacity change from 0 to 4096 [ 1721.662225][T18777] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1721.885968][T18784] loop1: detected capacity change from 0 to 256 [ 1722.693436][T18804] nvme_fabrics: missing parameter 'transport=%s' [ 1722.700066][T18804] nvme_fabrics: missing parameter 'nqn=%s' [ 1722.827987][ T5500] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 1722.893416][ T8692] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1723.034639][T18817] nvme_fabrics: missing parameter 'nqn=%s' [ 1723.046081][ T5500] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1723.074156][ T5500] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1723.083605][ T8692] usb 8-1: Using ep0 maxpacket: 8 [ 1723.094611][ T8692] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.112545][ T5500] usb 7-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1723.131537][ T5500] usb 7-1: config 0 has no interface number 0 [ 1723.140313][ T5500] usb 7-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 1723.145049][ T8692] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1723.175709][ T5500] usb 7-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 1723.184122][ T8692] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1723.195542][T18819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20901'. [ 1723.209446][ T5500] usb 7-1: Product: syz [ 1723.213975][ T5500] usb 7-1: Manufacturer: syz [ 1723.226031][ T5500] usb 7-1: SerialNumber: syz [ 1723.228933][ T8692] usb 8-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1723.260099][ T8692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.292662][ T5500] usb 7-1: config 0 descriptor?? [ 1723.295826][ T8692] usb 8-1: Product: syz [ 1723.316690][ T5500] usb 7-1: Found UVC 0.00 device syz (006d:0800) [ 1723.331383][ T5500] usb 7-1: No valid video chain found. [ 1723.332464][ T8692] usb 8-1: Manufacturer: syz [ 1723.360815][ T8692] usb 8-1: SerialNumber: syz [ 1723.389931][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20903'. [ 1723.407535][T18809] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1723.531686][ T5500] usb 7-1: USB disconnect, device number 62 [ 1723.615592][ T8692] usb 8-1: MIDIStreaming interface descriptor not found [ 1723.703558][ T8692] usb 8-1: USB disconnect, device number 57 [ 1723.736926][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20906'. [ 1724.040306][T18842] loop1: detected capacity change from 0 to 764 [ 1724.515527][T18858] AppArmor: change_hat: Invalid input '' [ 1725.146635][T18884] netlink: 76 bytes leftover after parsing attributes in process `syz.7.20933'. [ 1725.206741][T18884] netlink: 72 bytes leftover after parsing attributes in process `syz.7.20933'. [ 1725.229841][T18884] netlink: 'syz.7.20933': attribute type 3 has an invalid length. [ 1725.256570][T18884] netlink: 11 bytes leftover after parsing attributes in process `syz.7.20933'. [ 1725.418726][T18892] loop6: detected capacity change from 0 to 4096 [ 1725.448269][T18892] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1725.457555][ T5500] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1725.458226][T18898] loop7: detected capacity change from 0 to 512 [ 1725.502443][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20941'. [ 1725.560832][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20941'. [ 1725.636731][ T5500] usb 2-1: Using ep0 maxpacket: 16 [ 1725.643803][ T5500] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.688545][ T5500] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1725.732999][ T5500] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1725.761853][ T5500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1725.806697][ T5500] usb 2-1: SerialNumber: syz [ 1725.841358][ T5500] usb 2-1: 0:2 : does not exist [ 1726.243996][ T5500] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1726.287296][ T5500] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1726.329622][ T5500] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1726.384105][ T5500] usb 2-1: USB disconnect, device number 37 [ 1726.526066][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20953'. [ 1726.546933][T18928] loop6: detected capacity change from 0 to 2048 [ 1726.560661][ T8692] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1726.632853][T18928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1726.755023][ T8692] usb 4-1: Using ep0 maxpacket: 32 [ 1726.762749][ T8692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1726.780881][ T8692] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1726.798519][ T8692] usb 4-1: config 7 has no interface number 0 [ 1726.824591][ T8692] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1726.853343][ T8692] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1726.863577][T17175] EXT4-fs (loop6): unmounting filesystem. [ 1726.883113][ T8692] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1726.920674][ T8692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.960322][ T8692] usb 4-1: Product: syz [ 1726.976610][ T8692] usb 4-1: Manufacturer: syz [ 1726.998492][ T8692] usb 4-1: SerialNumber: syz [ 1727.212741][T18939] loop1: detected capacity change from 0 to 4096 [ 1727.261203][ T8692] usb 4-1: Unknown endpoint type found, address 0x07 [ 1727.278800][ T8692] usb 4-1: Unknown endpoint type found, address 0x8a [ 1727.297586][ T8692] usb 4-1: Not enough endpoints found in device, aborting! [ 1727.362811][T18939] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1727.449829][T18939] ntfs3: loop1: Failed to load $Extend. [ 1727.496860][ T8692] usb 4-1: USB disconnect, device number 42 [ 1728.107147][T18961] loop1: detected capacity change from 0 to 4096 [ 1728.144968][T18961] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1728.453324][T18974] delete_channel: no stack [ 1728.849772][T18990] openvswitch: netlink: Key type 316 is out of range max 32 [ 1728.907334][T18994] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20986'. [ 1729.088080][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20988'. [ 1729.509292][T19017] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20998'. [ 1729.532312][T19017] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20998'. [ 1729.555820][T19017] netlink: 'syz.6.20998': attribute type 6 has an invalid length. [ 1729.703340][T19015] loop1: detected capacity change from 0 to 8192 [ 1729.743583][T19015] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1730.082261][ T5500] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1730.237843][T19011] loop3: detected capacity change from 0 to 32768 [ 1730.255978][T19011] /dev/loop3: Can't open blockdev [ 1730.287869][ T5500] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.345025][ T5500] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1730.390515][ T5500] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1730.419468][ T5500] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.466595][ T5500] usb 8-1: config 0 descriptor?? [ 1730.881827][ T5500] Bluetooth: Can't get state to change to load configuration err [ 1730.906558][ T5500] Bluetooth: Loading sysconfig file failed [ 1730.947607][ T5500] ath3k: probe of 8-1:0.0 failed with error -16 [ 1730.986156][ T5500] usb 8-1: USB disconnect, device number 58 [ 1731.409002][T19060] loop3: detected capacity change from 0 to 1024 [ 1731.454370][T19063] device gre1 entered promiscuous mode [ 1731.729340][ T27] audit: type=1326 audit(1807.861:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1731.755553][ T5500] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1731.804663][ T27] audit: type=1326 audit(1807.913:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1731.920714][ T27] audit: type=1326 audit(1807.913:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1731.980137][ T5500] usb 2-1: Using ep0 maxpacket: 16 [ 1731.989957][ T5500] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1732.012845][ T5500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.041060][ T27] audit: type=1326 audit(1807.913:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1732.075700][ T5500] usb 2-1: Product: syz [ 1732.079981][ T5500] usb 2-1: Manufacturer: syz [ 1732.101609][ T5500] usb 2-1: SerialNumber: syz [ 1732.121906][ T5500] r8152-cfgselector 2-1: config 0 descriptor?? [ 1732.152299][ T27] audit: type=1326 audit(1807.913:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1732.252025][ T27] audit: type=1326 audit(1807.913:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1732.326609][ T27] audit: type=1326 audit(1807.913:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1732.395782][ T27] audit: type=1326 audit(1807.913:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.6.21023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0ffd9e0d9 code=0x7ffc0000 [ 1732.587365][ T5500] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1732.614199][ T5500] r8152-cfgselector 2-1: USB disconnect, device number 38 [ 1732.717175][T19102] netlink: 'syz.6.21038': attribute type 1 has an invalid length. [ 1732.725330][T19102] netlink: 'syz.6.21038': attribute type 1 has an invalid length. [ 1732.745789][T19102] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.21038'. [ 1732.856466][T19105] netlink: 'syz.0.21040': attribute type 10 has an invalid length. [ 1733.051205][T19105] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1733.075299][T19105] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1733.095654][T19105] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1733.157945][T19105] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1733.568389][T19129] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1733.671509][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21055'. [ 1733.713904][T19137] netlink: 944 bytes leftover after parsing attributes in process `syz.0.21055'. [ 1733.761237][T19137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.21055'. [ 1733.852292][T19141] device bridge12 entered promiscuous mode [ 1734.893782][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21076'. [ 1735.546136][T19204] loop3: detected capacity change from 0 to 1024 [ 1735.980619][ T3727] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1736.220699][ T3727] usb 7-1: Using ep0 maxpacket: 16 [ 1736.239341][ T3727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.271784][ T3727] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1736.305646][ T3727] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1736.324839][ T3727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1736.333000][ T3727] usb 7-1: SerialNumber: syz [ 1736.372716][ T3727] usb 7-1: 0:2 : does not exist [ 1736.449128][ T8692] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1736.517058][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21101'. [ 1736.551721][T19243] netlink: 'syz.7.21102': attribute type 30 has an invalid length. [ 1736.565938][T19243] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21102'. [ 1736.575899][T19243] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1736.585558][T19243] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1736.647573][ T8692] usb 1-1: Using ep0 maxpacket: 8 [ 1736.661203][ T8692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.687400][ T27] audit: type=1326 audit(1813.068:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1736.702827][ T8692] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 1736.741896][ T8692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.752212][ T27] audit: type=1326 audit(1813.068:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1736.786598][ T8692] usb 1-1: config 0 descriptor?? [ 1736.793583][ T3727] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1736.806304][ T8692] usb 1-1: Found UVC 148.00 device (05a9:2630) [ 1736.817735][ T3727] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1736.825491][ T8692] usb 1-1: No valid video chain found. [ 1736.854630][ T27] audit: type=1326 audit(1813.110:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1736.890596][ T27] audit: type=1326 audit(1813.110:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1736.933551][ T27] audit: type=1326 audit(1813.110:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1736.948368][ T3727] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1736.958999][ T8686] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1737.006442][ T27] audit: type=1326 audit(1813.110:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1737.031440][ T3727] usb 7-1: USB disconnect, device number 63 [ 1737.051642][ T8692] usb 1-1: USB disconnect, device number 13 [ 1737.079640][ T27] audit: type=1326 audit(1813.110:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1737.113060][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1737.162619][ T27] audit: type=1326 audit(1813.110:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1737.191469][ T27] audit: type=1326 audit(1813.110:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19244 comm="syz.1.21104" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1737.220807][ T8686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.252003][ T8686] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.276813][ T8686] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1737.293919][ T8686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.302429][ T8686] usb 4-1: Product: syz [ 1737.342873][ T8686] usb 4-1: Manufacturer: syz [ 1737.352596][ T8686] usb 4-1: SerialNumber: syz [ 1737.381628][ T8686] cdc_ncm 4-1:1.0: skipping garbage [ 1737.386939][ T8686] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 1737.397282][ T8686] cdc_ncm 4-1:1.0: bind() failure [ 1737.424428][ T8686] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1737.444340][ T8686] cdc_ncm 4-1:1.1: bind() failure [ 1737.596669][ T3727] usb 4-1: USB disconnect, device number 43 [ 1737.746083][T19267] loop6: detected capacity change from 0 to 512 [ 1737.799321][T19267] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1737.823359][ T27] audit: type=1400 audit(1814.265:1124): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=19268 comm="syz.1.21117" [ 1737.842549][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21116'. [ 1737.877852][T19267] UDF-fs: error (device loop6): udf_read_inode: (ino 19) failed ident=264 [ 1738.911831][T19315] netlink: 324 bytes leftover after parsing attributes in process `syz.6.21138'. [ 1739.154876][T19326] tmpfs: Bad value for 'mpol' [ 1739.342948][ T8686] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1739.544656][ T8686] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1739.576275][ T8686] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1739.619384][ T8686] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1739.643324][ T8686] usb 1-1: Manufacturer: syz [ 1739.656453][ T8686] usb 1-1: SerialNumber: syz [ 1739.871110][T19353] CIFS mount error: No usable UNC path provided in device string! [ 1739.871110][T19353] [ 1739.890683][ T8686] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1739.934355][ T8686] usb 1-1: USB disconnect, device number 14 [ 1739.943275][T19353] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1740.355063][T19359] nvme_fabrics: missing parameter 'transport=%s' [ 1740.902675][T19390] netlink: 272 bytes leftover after parsing attributes in process `syz.1.21176'. [ 1741.675704][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1741.675720][ T27] audit: type=1326 audit(1818.307:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.0.21192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1741.816981][ T27] audit: type=1326 audit(1818.359:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.0.21192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1741.876728][ T5500] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1741.915109][ T27] audit: type=1326 audit(1818.359:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.0.21192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1741.987331][ T27] audit: type=1326 audit(1818.359:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.0.21192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35c59e0d9 code=0x7ffc0000 [ 1742.052911][T19437] loop7: detected capacity change from 0 to 256 [ 1742.086200][ T5500] usb 4-1: Using ep0 maxpacket: 32 [ 1742.102289][ T5500] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1742.148148][ T5500] usb 4-1: config 0 has no interface number 0 [ 1742.182448][ T5500] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1742.217174][ T5500] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1742.246635][ T5500] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1742.305599][ T5500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.344024][ T5500] usb 4-1: Product: syz [ 1742.348364][ T5500] usb 4-1: Manufacturer: syz [ 1742.391147][ T5500] usb 4-1: SerialNumber: syz [ 1742.410652][ T5500] usb 4-1: config 0 descriptor?? [ 1742.414175][T19447] loop7: detected capacity change from 0 to 512 [ 1742.471644][T19447] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1742.516510][T19447] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1742.573340][T19447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1742.600459][T19447] System zones: 0-2, 18-18, 34-34 [ 1742.626186][T19454] loop1: detected capacity change from 0 to 256 [ 1742.635316][ T5500] radio-si470x 4-1:0.35: this is not a si470x device. [ 1742.703907][T19447] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.21202: bad orphan inode 15 [ 1742.718518][T19447] ext4_test_bit(bit=14, block=18) = 1 [ 1742.725817][T19447] is_bad_inode(inode)=0 [ 1742.730080][T19447] NEXT_ORPHAN(inode)=2264924160 [ 1742.735837][T19447] max_ino=32 [ 1742.739175][T19447] i_nlink=0 [ 1742.758244][T19447] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.21202: corrupted inode contents [ 1742.791697][T19447] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.21202: mark_inode_dirty error [ 1742.830049][T19447] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.21202: corrupted inode contents [ 1742.843694][ T5500] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1742.868555][ T5500] usb 4-1: USB disconnect, device number 44 [ 1742.894216][T19447] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2947: inode #15: comm syz.7.21202: mark_inode_dirty error [ 1742.925604][T19447] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.21202: mark inode dirty (error -117) [ 1742.995297][T19447] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 1743.026835][T19447] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1743.048297][ T8686] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1743.183361][T19465] Cannot find del_set index 286 as target [ 1743.217607][T19467] IPv6: sit8: Disabled Multicast RS [ 1743.229291][ T8686] usb 7-1: Using ep0 maxpacket: 16 [ 1743.239681][ T8686] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1743.262990][ T8686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.291076][ T8686] usb 7-1: Product: syz [ 1743.295347][ T8686] usb 7-1: Manufacturer: syz [ 1743.301546][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1743.319028][ T8686] usb 7-1: SerialNumber: syz [ 1743.342244][ T8686] usb 7-1: config 0 descriptor?? [ 1743.537184][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21216'. [ 1743.557350][ T8686] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 1743.572253][ T8686] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1743.771682][ T8686] usb 7-1: USB disconnect, device number 64 [ 1744.084590][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21225'. [ 1744.110193][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21225'. [ 1744.267418][ T5500] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1744.433895][T19507] loop7: detected capacity change from 0 to 4096 [ 1744.473493][T19507] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1744.483046][ T5500] usb 4-1: Using ep0 maxpacket: 32 [ 1744.490577][ T5500] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.521072][ T5500] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1744.551190][ T5500] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1744.582855][ T5500] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1744.635207][ T5500] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1744.694727][ T5500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.727270][ T5500] usb 4-1: Product: syz [ 1744.731556][ T5500] usb 4-1: Manufacturer: syz [ 1744.744021][T19507] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 1744.750284][T19507] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1744.766074][ T5500] usb 4-1: SerialNumber: syz [ 1744.894028][T23537] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 1744.919078][T23537] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 1745.055593][ T5500] usb 4-1: USB disconnect, device number 45 [ 1745.499749][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1745.941722][T19556] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21256'. [ 1746.005968][T19559] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1746.153797][ T8686] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1746.348978][ T8686] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1746.377775][ T8686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.400349][ T8686] usb 2-1: Product: syz [ 1746.408362][ T8686] usb 2-1: Manufacturer: syz [ 1746.413477][ T8686] usb 2-1: SerialNumber: syz [ 1746.455504][ T8686] usb 2-1: config 0 descriptor?? [ 1746.490061][ T8686] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 1746.698693][ T8686] usb 2-1: USB disconnect, device number 39 [ 1746.705057][ T8686] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 1746.974231][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21275'. [ 1747.115889][T19598] loop7: detected capacity change from 0 to 512 [ 1747.146576][T19578] loop6: detected capacity change from 0 to 32768 [ 1747.187696][T19598] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1747.202554][T19598] EXT4-fs (loop7): 1 truncate cleaned up [ 1747.208580][T19598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1747.227095][T19598] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 1747.290536][T19578] XFS (loop6): Mounting V5 Filesystem [ 1747.438924][T23537] EXT4-fs (loop7): unmounting filesystem. [ 1747.478344][T19578] XFS (loop6): Ending clean mount [ 1747.766118][T17175] XFS (loop6): Unmounting Filesystem [ 1748.191778][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.229167][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.263129][T19640] loop3: detected capacity change from 0 to 8 [ 1748.267061][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.311719][T19640] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1748.321788][ T5213] udevd[5213]: incorrect cramfs checksum on /dev/loop3 [ 1748.335568][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.376838][T19640] cramfs: bad data blocksize 4294934200 [ 1748.383028][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.400323][ T5213] udevd[5213]: incorrect cramfs checksum on /dev/loop3 [ 1748.417663][T19640] cramfs: bad data blocksize 4294934200 [ 1748.437626][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.452231][ T27] audit: type=1800 audit(1825.425:1137): pid=19640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21293" name="file1" dev="loop3" ino=33092 res=0 errno=0 [ 1748.459141][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.510998][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.534488][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.561747][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.583746][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.649855][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1748.679046][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21290'. [ 1749.224574][T19668] ieee802154 phy1 wpan1: encryption failed: -22 [ 1749.339699][ T27] audit: type=1326 audit(1826.338:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.3.21306" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1749.406685][ T27] audit: type=1326 audit(1826.391:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.3.21306" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1749.472086][ T27] audit: type=1326 audit(1826.391:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.3.21306" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1749.554003][ T27] audit: type=1326 audit(1826.391:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.3.21306" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1749.655842][ T27] audit: type=1326 audit(1826.391:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19669 comm="syz.3.21306" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a379e0d9 code=0x7ffc0000 [ 1750.309516][T19698] netlink: 'syz.0.21320': attribute type 7 has an invalid length. [ 1750.405731][T19703] loop7: detected capacity change from 0 to 256 [ 1750.435258][T19696] loop3: detected capacity change from 0 to 4096 [ 1750.479281][T19696] /dev/loop3: Can't open blockdev [ 1750.523827][ T5213] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1751.290504][T19734] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1751.624733][T19746] lo speed is unknown, defaulting to 1000 [ 1751.659228][T19746] lo speed is unknown, defaulting to 1000 [ 1751.674636][T19746] lo speed is unknown, defaulting to 1000 [ 1751.709700][T19746] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1751.763170][T19746] lo speed is unknown, defaulting to 1000 [ 1751.770703][T19746] lo speed is unknown, defaulting to 1000 [ 1751.808982][T19746] lo speed is unknown, defaulting to 1000 [ 1751.850897][T19746] lo speed is unknown, defaulting to 1000 [ 1751.877998][T19746] lo speed is unknown, defaulting to 1000 [ 1752.555639][T19780] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1752.581587][T19748] loop3: detected capacity change from 0 to 32768 [ 1752.706711][ T5213] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1753.413079][T19801] loop6: detected capacity change from 0 to 512 [ 1753.488060][T19801] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1753.521907][T19801] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1753.587911][T19801] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1753.612701][T19801] System zones: 0-2, 18-18, 34-34 [ 1753.639946][T19801] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.21370: bad orphan inode 15 [ 1753.689236][T19801] ext4_test_bit(bit=14, block=18) = 1 [ 1753.726644][T19801] is_bad_inode(inode)=0 [ 1753.730894][T19801] NEXT_ORPHAN(inode)=2264924160 [ 1753.792847][T19801] max_ino=32 [ 1753.796167][T19801] i_nlink=0 [ 1753.820522][T19784] loop1: detected capacity change from 0 to 32768 [ 1753.825189][T19801] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.21370: corrupted inode contents [ 1753.881523][T19801] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.21370: mark_inode_dirty error [ 1753.945698][T19801] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.21370: corrupted inode contents [ 1753.966906][T19801] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2947: inode #15: comm syz.6.21370: mark_inode_dirty error [ 1753.980273][T19801] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.21370: mark inode dirty (error -117) [ 1753.995841][T19801] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 1754.005361][T19801] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1754.055364][T19784] XFS (loop1): Mounting V5 Filesystem [ 1754.074076][T19811] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 1754.281332][T19784] XFS (loop1): Ending clean mount [ 1754.309028][T19784] XFS (loop1): Quotacheck needed: Please wait. [ 1754.325422][T17175] EXT4-fs (loop6): unmounting filesystem. [ 1754.496505][T19784] XFS (loop1): Quotacheck: Done. [ 1754.555097][T19837] cgroup: name respecified [ 1754.680301][ T4273] XFS (loop1): Unmounting Filesystem [ 1754.897755][ T8683] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1755.029806][T19850] sctp: [Deprecated]: syz.7.21389 (pid 19850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1755.029806][T19850] Use struct sctp_sack_info instead [ 1755.118672][ T8683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1755.148536][ T8683] usb 4-1: not running at top speed; connect to a high speed hub [ 1755.183933][ T8683] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1755.192198][ T8683] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.243068][ T8683] usb 4-1: config 4 has no interface number 0 [ 1755.253298][ T8683] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1755.280712][ T8686] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1755.305034][ T8683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.326012][ T8683] usb 4-1: Product: syz [ 1755.330262][ T8683] usb 4-1: Manufacturer: syz [ 1755.355057][ T8683] usb 4-1: SerialNumber: syz [ 1755.492126][ T8686] usb 1-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 1755.510107][ T8686] usb 1-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1755.540125][ T8686] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1755.561504][ T8686] usb 1-1: string descriptor 0 read error: -22 [ 1755.581698][ T8683] usb 4-1: Found UVC 0.00 device syz (04f2:b746) [ 1755.593839][ T8686] usb 1-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 1755.604217][ T8683] usb 4-1: No valid video chain found. [ 1755.622294][ T8683] usb 4-1: USB disconnect, device number 46 [ 1755.628393][ T8686] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1755.668975][ T8686] usbhid 1-1:1.0: fixing wrong optional hid class descriptors count [ 1755.687214][ T8686] usbhid 1-1:1.0: can't add hid device: -22 [ 1755.697101][ T8686] usbhid: probe of 1-1:1.0 failed with error -22 [ 1755.707165][ T5500] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1755.916938][ T5500] usb 8-1: Using ep0 maxpacket: 8 [ 1755.926238][ T5500] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1755.951870][ T5500] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.964994][ T5500] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1756.001661][ T5500] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1756.019463][ T5500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.035882][ T5500] usb 8-1: Product: syz [ 1756.041260][ T5500] usb 8-1: Manufacturer: syz [ 1756.041487][ T8683] usb 1-1: USB disconnect, device number 15 [ 1756.047347][ T5500] usb 8-1: SerialNumber: syz [ 1756.465493][ T5500] usb 8-1: cannot find UAC_HEADER [ 1756.476841][ T27] audit: type=1326 audit(1833.845:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.1.21404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1756.513192][ T27] audit: type=1326 audit(1833.845:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.1.21404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1756.549609][ T5500] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1756.578107][ T27] audit: type=1326 audit(1833.845:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.1.21404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1756.603841][ T5500] usb 8-1: USB disconnect, device number 59 [ 1756.696470][ T27] audit: type=1326 audit(1833.845:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.1.21404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1756.794856][ T27] audit: type=1326 audit(1833.845:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.1.21404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86119e0d9 code=0x7ffc0000 [ 1756.852168][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1757.690894][T19920] loop1: detected capacity change from 0 to 64 [ 1758.145141][T19934] CIFS: Attempting to mount \\::1\share [ 1758.153103][T19931] loop1: detected capacity change from 0 to 4096 [ 1758.161028][T19934] CIFS: VFS: No username specified [ 1758.235746][T19905] loop3: detected capacity change from 0 to 32768 [ 1758.860456][T19955] __nla_validate_parse: 248 callbacks suppressed [ 1758.860477][T19955] netlink: 755 bytes leftover after parsing attributes in process `syz.3.21441'. [ 1758.909181][T19957] CIFS: VFS: Unable to allocate memory for devname [ 1759.274045][T19969] loop6: detected capacity change from 0 to 256 [ 1759.359787][T19969] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1759.615197][T19978] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1759.755827][ T5500] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1759.844760][T19952] loop7: detected capacity change from 0 to 32768 [ 1759.902408][T19952] jfs_strtoUCS: char2uni returned -22. [ 1759.927443][T19952] charset = ascii, char = 0xe9 [ 1759.965150][ T5500] usb 2-1: Using ep0 maxpacket: 8 [ 1759.976853][ T5500] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1760.005676][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1760.037005][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1760.078229][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1760.117324][ T5500] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1760.165306][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1760.197455][T19995] loop6: detected capacity change from 0 to 128 [ 1760.204904][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1760.237604][ T5500] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1760.256729][T19995] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1760.276627][ T5500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.288295][ T5500] usb 2-1: Product: syz [ 1760.292973][ T5500] usb 2-1: Manufacturer: syz [ 1760.297819][ T5500] usb 2-1: SerialNumber: syz [ 1760.360879][ T5500] usb 2-1: config 0 descriptor?? [ 1760.384984][T19975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1760.550696][ T5216] udevd[5216]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.680268][ T5500] usb 2-1: USB disconnect, device number 40 [ 1761.893283][T20040] loop6: detected capacity change from 0 to 2048 [ 1761.908062][ T8683] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1761.979204][T20045] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1762.088758][ T8683] usb 2-1: Using ep0 maxpacket: 8 [ 1762.096973][ T8683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1762.107712][T20047] loop3: detected capacity change from 0 to 4096 [ 1762.117063][ T8683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.133994][T20047] /dev/loop3: Can't open blockdev [ 1762.156376][ T8683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1762.177179][ T8686] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1762.225022][ T8683] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1762.254384][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.265936][ T8683] usb 2-1: Product: syz [ 1762.280778][ T8683] usb 2-1: Manufacturer: syz [ 1762.290132][ T8683] usb 2-1: SerialNumber: syz [ 1762.365231][ T8686] usb 1-1: Using ep0 maxpacket: 32 [ 1762.372932][ T8686] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1762.392609][ T8686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.413445][ T8686] usb 1-1: config 0 has no interface number 0 [ 1762.420041][ T8686] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1762.454229][ T8686] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1762.470299][ T8686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.495949][ T8686] usb 1-1: Product: syz [ 1762.522173][ T8686] usb 1-1: Manufacturer: syz [ 1762.546422][ T8686] usb 1-1: SerialNumber: syz [ 1762.565838][ T8686] usb 1-1: config 0 descriptor?? [ 1762.592834][ T8686] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1762.600648][ T8692] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1762.622295][ T8686] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 1762.725586][ T8683] usb 2-1: cannot find UAC_HEADER [ 1762.786176][ T8692] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.805035][ T8683] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1762.813804][ T8686] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1762.824565][ T8692] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1762.847684][ T8683] usb 2-1: USB disconnect, device number 41 [ 1762.874167][ T8692] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1762.882277][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1762.902342][ T8692] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1762.916482][ T8692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.956076][ T8692] usb 7-1: config 0 descriptor?? [ 1763.016114][ T8686] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1763.043228][ T8686] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1763.053016][ T8686] usb 1-1: USB disconnect, device number 16 [ 1763.063059][ T8686] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1763.373751][ T8692] hid-multitouch 0003:0EEF:72C4.0002: No inputs registered, leaving [ 1763.407995][ T8692] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 1763.553480][ T8692] usb 7-1: USB disconnect, device number 65 [ 1763.818163][T20074] fido_id[20074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1763.969855][T20089] loop7: detected capacity change from 0 to 256 [ 1764.013592][T20089] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1764.279058][T20094] loop6: detected capacity change from 0 to 1024 [ 1764.502671][T20076] loop3: detected capacity change from 0 to 32768 [ 1764.867277][T20109] loop1: detected capacity change from 0 to 512 [ 1764.918325][T20109] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1764.946902][T20109] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1764.991485][T20109] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1765.070568][ T5500] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1765.094186][T20109] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1765.150428][T20109] System zones: 0-2, 18-18, 34-35 [ 1765.161027][T20109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1765.269170][ T5500] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1765.304186][ T5500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.317992][ T5500] usb 7-1: Product: syz [ 1765.341421][ T5500] usb 7-1: Manufacturer: syz [ 1765.346118][ T5500] usb 7-1: SerialNumber: syz [ 1765.432122][T20117] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1765.455412][ T5500] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1765.491488][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 1765.533346][T20097] loop7: detected capacity change from 0 to 32768 [ 1765.731573][T20097] XFS (loop7): Mounting V5 Filesystem [ 1766.072922][ T8692] usb 7-1: USB disconnect, device number 66 [ 1766.143695][T20097] XFS (loop7): Ending clean mount [ 1766.242074][ T3727] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1766.303408][T23537] XFS (loop7): Unmounting Filesystem [ 1766.446227][T20128] loop1: detected capacity change from 0 to 32768 [ 1766.472375][ T3727] usb 2-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 1766.489721][ T3727] usb 2-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.525704][ T3727] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1766.553740][T20128] loop1: p1 p3 < > [ 1766.569632][ T3727] usb 2-1: string descriptor 0 read error: -22 [ 1766.609847][ T3727] usb 2-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 1766.619858][ T3727] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1766.670158][ T5500] usb 7-1: Service connection timeout for: 256 [ 1766.681702][ T5500] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1766.694267][ T3727] usbhid 2-1:1.0: fixing wrong optional hid class descriptors count [ 1766.704314][ T5500] ath9k_htc: Failed to initialize the device [ 1766.725331][ T3727] usbhid 2-1:1.0: can't add hid device: -22 [ 1766.738808][ T8692] usb 7-1: ath9k_htc: USB layer deinitialized [ 1766.741595][ T3727] usbhid: probe of 2-1:1.0 failed with error -22 [ 1766.930240][ T8686] usb 2-1: USB disconnect, device number 42 [ 1767.111710][T20153] netlink: 128 bytes leftover after parsing attributes in process `syz.6.21530'. [ 1767.397373][T20160] xt_l2tp: unknown flags: 51 [ 1767.951983][T20177] loop1: detected capacity change from 0 to 2048 [ 1767.992872][T20177] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 1768.044337][T20177] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1768.119053][T20177] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1768.160115][T20177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1768.265522][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1768.285332][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1768.414362][T20164] loop3: detected capacity change from 0 to 32768 [ 1768.486836][ T4265] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1768.736508][T20170] loop7: detected capacity change from 0 to 32768 [ 1768.766399][ T5500] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1768.815437][T20170] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 1768.815437][T20170] [ 1768.841325][T20170] ERROR: (device loop7): remounting filesystem as read-only [ 1768.857340][T20170] ialloc: diAlloc returned -5! [ 1768.956976][ T5500] usb 2-1: Using ep0 maxpacket: 32 [ 1768.966132][ T5500] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1768.997430][ T5500] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1769.016815][ T5500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.070977][ T5500] usb 2-1: Product: syz [ 1769.080364][ T5500] usb 2-1: Manufacturer: syz [ 1769.085090][ T5500] usb 2-1: SerialNumber: syz [ 1769.114878][ T5500] usb 2-1: config 0 descriptor?? [ 1769.159440][ T5500] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1769.214441][ T5500] dvb-usb: bulk message failed: -22 (2/0) [ 1769.249227][ T5500] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1769.290370][ T5500] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1769.298525][ T5500] usb 2-1: media controller created [ 1769.397821][T20196] loop3: detected capacity change from 0 to 4096 [ 1769.415117][ T5500] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1769.493821][ T5500] usb 2-1: selecting invalid altsetting 7 [ 1769.522097][ T5500] cxusb: set interface failed [ 1769.526899][ T5500] dvb-usb: bulk message failed: -22 (1/0) [ 1769.663658][T20204] loop6: detected capacity change from 0 to 4096 [ 1769.767265][ T5500] DVB: Unable to find symbol lgdt330x_attach() [ 1769.776906][ T5500] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1769.803520][T20204] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1769.957846][T17175] EXT4-fs (loop6): unmounting filesystem. [ 1770.242652][ T5500] rc_core: IR keymap rc-dvico-portable not found [ 1770.249175][ T5500] Registered IR keymap rc-empty [ 1770.279896][ T5500] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1770.349740][ T5500] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input101 [ 1770.380930][ T5500] dvb-usb: schedule remote query interval to 100 msecs. [ 1770.429966][ T5500] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1770.494781][ T5500] usb 2-1: USB disconnect, device number 43 [ 1770.578179][ T5500] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1771.426415][T20239] loop3: detected capacity change from 0 to 32768 [ 1772.043585][T20268] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1772.067348][T20271] ip_tables: iptables: counters copy to user failed while replacing table [ 1772.223422][T20273] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21583'. [ 1772.955223][T20298] loop1: detected capacity change from 0 to 4096 [ 1773.038636][T20298] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1773.106119][T20298] ntfs3: loop1: Failed to load $Extend. [ 1773.276002][T20313] netlink: 196 bytes leftover after parsing attributes in process `syz.0.21602'. [ 1773.314435][T20313] netlink: 196 bytes leftover after parsing attributes in process `syz.0.21602'. [ 1773.334866][T20313] netlink: 19 bytes leftover after parsing attributes in process `syz.0.21602'. [ 1773.450097][T20317] loop1: detected capacity change from 0 to 256 [ 1773.651815][T20321] UBIFS error (pid: 20321): cannot open "ubi0:testvol", error -19 [ 1773.877302][T20329] loop3: detected capacity change from 0 to 512 [ 1773.902262][T20329] EXT4-fs: Ignoring removed mblk_io_submit option [ 1773.953559][T20329] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 1773.979288][T20329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1773.988993][ T5500] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1774.077609][T20329] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1774.195607][ T5500] usb 2-1: Using ep0 maxpacket: 16 [ 1774.202717][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.240355][ T5500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.257007][ T5500] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1774.267033][ T5500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.277306][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1774.291499][ T5500] usb 2-1: config 0 descriptor?? [ 1774.479499][T20323] loop6: detected capacity change from 0 to 32768 [ 1774.491930][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21617'. [ 1774.551731][T20323] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 1774.551731][T20323] [ 1774.610308][T20323] ERROR: (device loop6): remounting filesystem as read-only [ 1774.634930][T20323] ialloc: diAlloc returned -5! [ 1774.711704][ T5500] elecom 0003:056E:00FD.0003: unknown main item tag 0x4 [ 1774.727033][ T5500] elecom 0003:056E:00FD.0003: unknown main item tag 0xd [ 1774.752435][ T5500] elecom 0003:056E:00FD.0003: hidraw0: USB HID v0.09 Device [HID 056e:00fd] on usb-dummy_hcd.1-1/input0 [ 1774.757396][ T8692] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1774.799554][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1774.808832][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1774.930032][ T5500] usb 2-1: USB disconnect, device number 44 [ 1774.995652][ T8692] usb 1-1: Using ep0 maxpacket: 32 [ 1775.002763][ T8692] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1775.043746][ T8692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.052232][T20355] Bluetooth: MGMT ver 1.22 [ 1775.094324][ T8692] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1775.147858][ T8692] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1775.178437][T20349] fido_id[20349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1775.200096][ T8692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.234553][ T8692] usb 1-1: config 0 descriptor?? [ 1775.561417][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21627'. [ 1775.660976][ T8692] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 1775.678591][ T8692] elecom 0003:056E:011C.0004: unknown main item tag 0x4 [ 1775.700265][ T8692] elecom 0003:056E:011C.0004: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.0-1/input0 [ 1775.894128][ T8692] usb 1-1: USB disconnect, device number 17 [ 1776.114255][T20368] fido_id[20368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1776.150815][T20378] loop3: detected capacity change from 0 to 512 [ 1776.159921][T20378] /dev/loop3: Can't open blockdev [ 1776.207326][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1776.435418][T20386] loop3: detected capacity change from 0 to 64 [ 1776.437319][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1776.862319][T20396] loop3: detected capacity change from 0 to 1024 [ 1777.714327][T20427] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21658'. [ 1777.745689][T20427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21658'. [ 1777.774302][T20427] netlink: 64 bytes leftover after parsing attributes in process `syz.3.21658'. [ 1778.106132][T20437] loop3: detected capacity change from 0 to 4096 [ 1778.220929][T20408] loop1: detected capacity change from 0 to 40427 [ 1778.273602][T20408] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1778.281512][T20408] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1778.375642][T20408] F2FS-fs (loop1): invalid crc value [ 1778.384522][T20441] loop6: detected capacity change from 0 to 4096 [ 1778.436780][T20408] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 1778.476739][T20441] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1778.595974][T20441] ntfs3: loop6: Failed to load $Extend. [ 1778.718827][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21678'. [ 1778.779415][T20408] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1778.794754][T20408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1779.075616][T20458] binder: 20457:20458 ioctl 541b 0 returned -22 [ 1780.286780][ T8692] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1780.323305][T20488] loop7: detected capacity change from 0 to 64 [ 1780.497933][ T8692] usb 7-1: Using ep0 maxpacket: 16 [ 1780.508060][ T8692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.574565][ T8692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.602806][ T8692] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1780.628297][ T8692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.655444][ T8692] usb 7-1: config 0 descriptor?? [ 1780.724941][T20478] loop1: detected capacity change from 0 to 40427 [ 1780.773617][T20478] F2FS-fs (loop1): invalid crc value [ 1780.800376][T20478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1781.010521][T20478] F2FS-fs (loop1): Start checkpoint disabled! [ 1781.056360][ T8692] elecom 0003:056E:00FD.0005: unknown main item tag 0x4 [ 1781.071496][ T8692] elecom 0003:056E:00FD.0005: unknown main item tag 0xd [ 1781.111628][ T8692] elecom 0003:056E:00FD.0005: hidraw0: USB HID v0.09 Device [HID 056e:00fd] on usb-dummy_hcd.6-1/input0 [ 1781.126802][T20478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1781.277562][ T8692] usb 7-1: USB disconnect, device number 67 [ 1781.296514][T20512] netem: change failed [ 1781.547029][T20511] fido_id[20511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1781.636571][T11987] kworker/u4:0: attempt to access beyond end of device [ 1781.636571][T11987] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1781.703845][T20516] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1782.995769][T20560] loop4: detected capacity change from 0 to 524287964 [ 1783.040312][ C0] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1783.050935][ C1] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1783.060902][ C1] Buffer I/O error on dev loop4, logical block 65535968, async page read [ 1783.692672][ T5500] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1783.794715][T20590] loop6: detected capacity change from 0 to 512 [ 1783.806959][T20594] loop3: detected capacity change from 0 to 256 [ 1783.837708][T20590] EXT4-fs (loop6): unsupported inode size: 127 [ 1783.873802][T20590] EXT4-fs (loop6): blocksize: 4096 [ 1783.912919][ T5500] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1783.934563][ T5500] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1784.007042][ T5500] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1784.058342][ T5500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.096785][ T5500] usb 8-1: Product: syz [ 1784.101037][ T5500] usb 8-1: Manufacturer: syz [ 1784.127398][ T5500] usb 8-1: SerialNumber: syz [ 1784.154974][ T5500] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 1784.168355][T20600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21738'. [ 1784.185350][T20600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21738'. [ 1784.196902][ T5500] ums-sddr09 8-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1784.196902][ T5500] Please send a copy of this message to and [ 1784.216456][T20600] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 1784.292347][T20600] iwpm_hello_cb: Unable to parse nlmsg [ 1784.847288][ T5500] ums-sddr09: probe of 8-1:1.0 failed with error -5 [ 1784.885905][ T5500] usb 8-1: USB disconnect, device number 60 [ 1784.936575][T20627] loop1: detected capacity change from 0 to 64 [ 1785.126923][T20631] Bluetooth: hci0: unsupported parameter 5135 [ 1785.143006][T20631] Bluetooth: hci0: unsupported parameter 8192 [ 1785.181524][T20631] Bluetooth: hci0: unsupported parameter 5135 [ 1785.200985][T20631] Bluetooth: hci0: unsupported parameter 8192 [ 1785.378800][T20638] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1785.390602][T20638] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1785.399061][T20638] CPU: 0 PID: 20638 Comm: syz.3.21754 Not tainted syzkaller #0 [ 1785.406661][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.416777][T20638] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420 [ 1785.423180][T20638] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef [ 1785.442833][T20638] RSP: 0018:ffffc900034d7a00 EFLAGS: 00010246 [ 1785.448953][T20638] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 1785.456977][T20638] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888076cbe038 [ 1785.464996][T20638] RBP: ffffc900034d7b40 R08: ffff888076cbe03f R09: 1ffff1100ed97c07 [ 1785.473024][T20638] R10: dffffc0000000000 R11: ffffed100ed97c08 R12: ffff88805f2d00b6 [ 1785.481048][T20638] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 1785.489065][T20638] FS: 00007fa4a46566c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1785.498042][T20638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.504688][T20638] CR2: 0000001b2fe23ffc CR3: 000000004c288000 CR4: 00000000003506f0 [ 1785.512805][T20638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1785.520839][T20638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1785.528872][T20638] Call Trace: [ 1785.532198][T20638] [ 1785.535183][T20638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1785.541235][T20638] ? __lock_acquire+0x7c40/0x7c40 [ 1785.546325][T20638] ? hidpp_ff_range_store+0x190/0x190 [ 1785.551765][T20638] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1785.557721][T20638] ? lockdep_hardirqs_on+0x94/0x140 [ 1785.562980][T20638] hidpp_raw_event+0x155/0x1740 [ 1785.567911][T20638] ? __might_fault+0xa6/0x120 [ 1785.572733][T20638] hid_input_report+0x3fe/0x4f0 [ 1785.577646][T20638] ? hidpp_remove+0x90/0x90 [ 1785.582214][T20638] uhid_dev_input2+0xb1/0x130 [ 1785.586961][T20638] uhid_char_write+0x376/0xaf0 [ 1785.591768][T20638] ? uhid_char_read+0x870/0x870 [ 1785.596657][T20638] vfs_write+0x2dc/0x9a0 [ 1785.600940][T20638] ? file_end_write+0x250/0x250 [ 1785.605837][T20638] ? __fget_files+0x28/0x460 [ 1785.610447][T20638] ? __fget_files+0x3fc/0x460 [ 1785.615145][T20638] ? __fdget_pos+0x1d4/0x360 [ 1785.619773][T20638] ? ksys_write+0x70/0x260 [ 1785.624254][T20638] ksys_write+0x14d/0x260 [ 1785.628619][T20638] ? __ia32_sys_read+0x80/0x80 [ 1785.633420][T20638] ? lockdep_hardirqs_on+0x94/0x140 [ 1785.638648][T20638] do_syscall_64+0x4c/0xa0 [ 1785.643108][T20638] ? clear_bhb_loop+0x60/0xb0 [ 1785.647812][T20638] ? clear_bhb_loop+0x60/0xb0 [ 1785.652508][T20638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1785.658428][T20638] RIP: 0033:0x7fa4a379e0d9 [ 1785.662872][T20638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.682496][T20638] RSP: 002b:00007fa4a4656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1785.690945][T20638] RAX: ffffffffffffffda RBX: 00007fa4a3a25fa0 RCX: 00007fa4a379e0d9 [ 1785.698934][T20638] RDX: 000000000000001a RSI: 0000200000000580 RDI: 0000000000000003 [ 1785.706926][T20638] RBP: 00007fa4a3835024 R08: 0000000000000000 R09: 0000000000000000 [ 1785.714912][T20638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.722900][T20638] R13: 00007fa4a3a26038 R14: 00007fa4a3a25fa0 R15: 00007ffcd467d728 [ 1785.730909][T20638] [ 1785.734124][T20638] Modules linked in: [ 1785.745021][T20638] ---[ end trace 0000000000000000 ]--- [ 1785.750736][T20638] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420 [ 1785.757111][T20638] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef [ 1785.781592][T20638] RSP: 0018:ffffc900034d7a00 EFLAGS: 00010246 [ 1785.787924][T20638] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 1785.796080][T20638] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888076cbe038 [ 1785.806000][T20638] RBP: ffffc900034d7b40 R08: ffff888076cbe03f R09: 1ffff1100ed97c07 [ 1785.814440][T20638] R10: dffffc0000000000 R11: ffffed100ed97c08 R12: ffff88805f2d00b6 [ 1785.824279][T20638] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 1785.832830][T20638] FS: 00007fa4a46566c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1785.842019][T20638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.849225][T20638] CR2: 00007fa4a37eb7c0 CR3: 000000004c288000 CR4: 00000000003506f0 [ 1785.857383][T20638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1785.867653][T20638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1785.876140][T20638] Kernel panic - not syncing: Fatal exception [ 1785.882866][T20638] Kernel Offset: disabled [ 1785.887210][T20638] Rebooting in 86400 seconds..