last executing test programs: 5m6.943364789s ago: executing program 0 (id=88): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 5m6.414038402s ago: executing program 0 (id=94): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x0, "ef"}, @main=@item_4={0x3, 0x0, 0xb, "1c0800"}, @main=@item_4={0x3, 0x0, 0xa, "58da9ea0"}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @main=@item_4={0x3, 0x0, 0xa, "9c6de405"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0xb, "af7da730"}, @global]}}, 0x0}, 0x0) 5m4.366020058s ago: executing program 0 (id=118): unshare(0x22020600) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e20, @broadcast}, 0xc8) 5m3.996548383s ago: executing program 0 (id=124): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5m3.586090926s ago: executing program 0 (id=128): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x127) 5m2.94770694s ago: executing program 0 (id=136): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xcf, 0x9, 0x1}, 0x10) 5m2.235096143s ago: executing program 32 (id=136): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0xcf, 0x9, 0x1}, 0x10) 6.242929011s ago: executing program 6 (id=2797): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 5.872658316s ago: executing program 6 (id=2801): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@namecase}, {@utf8}, {@discard}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a801adea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fcee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 5.704142779s ago: executing program 4 (id=2804): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xa}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 5.575947544s ago: executing program 3 (id=2805): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 5.324241038s ago: executing program 2 (id=2806): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x12, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) 5.158138722s ago: executing program 3 (id=2807): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x8, 0x3a, 0x0, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x31}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 5.110139584s ago: executing program 4 (id=2808): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @c}, 0x0, r1}) 4.975816274s ago: executing program 6 (id=2809): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.906052522s ago: executing program 2 (id=2822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x592c) accept4$x25(r0, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 4.470786946s ago: executing program 6 (id=2824): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fchdir(0xffffffffffffffff) 4.349152152s ago: executing program 4 (id=2813): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 4.010073938s ago: executing program 5 (id=2815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 3.802356796s ago: executing program 2 (id=2816): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x14, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 3.722144882s ago: executing program 3 (id=2817): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 3.66313893s ago: executing program 5 (id=2818): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'rr\x00', 0x0, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.238953226s ago: executing program 4 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 3.129818267s ago: executing program 5 (id=2821): r0 = socket$pppoe(0x18, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001900)=""/195, 0xc3}], 0x9}, 0x101) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3.027006418s ago: executing program 2 (id=2823): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x7f49, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 2.692662594s ago: executing program 4 (id=2826): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2.633226317s ago: executing program 2 (id=2827): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 2.528724756s ago: executing program 1 (id=2828): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="d4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4a1d, 0x7ffffffd, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2.182240458s ago: executing program 1 (id=2829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.181972436s ago: executing program 5 (id=2830): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.180341455s ago: executing program 6 (id=2841): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 1.795320647s ago: executing program 6 (id=2831): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 1.756095001s ago: executing program 1 (id=2832): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x0, 0x9}) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, r0, 0x0) 1.748022281s ago: executing program 2 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.599511047s ago: executing program 5 (id=2834): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x3}, 0x8) 1.387106106s ago: executing program 1 (id=2835): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.359276638s ago: executing program 3 (id=2836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffb0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c8c0) 1.178665996s ago: executing program 5 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nolargeio}, {@nolargeio}, {@bsdgroups}]}, 0x1, 0xb92c, &(0x7f000002e340)="$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") open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) 1.040006723s ago: executing program 3 (id=2838): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x4000, &(0x7f0000000580)={[{@uid}, {@umask={'umask', 0x3d, 0x4fffc}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0x357, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x987452, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 773.408186ms ago: executing program 4 (id=2839): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) 661.355386ms ago: executing program 3 (id=2840): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 202.617151ms ago: executing program 1 (id=2842): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)={'a', ' *:* ', 'm\x00'}, 0x8) 0s ago: executing program 1 (id=2843): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200012, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$eJzs3U1vHVf9B/DfffD1Q/9NreqvKkQs0hRKS2meEyhPTVmwgAVIKGsSuW4VSAElAdEqIo4shNgAWyQWsOmGRd9IXwPiBRDJZpUFZdDY5zjj62tfW4nvXPt8PpIz85sz43smX4/vvZ6ZewIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiO9990cXOhFx41dpwWLE/0UvohsxX9eno565ltfvR8TJ2GiOlyKiNxtRb7/xzwsRlyPi0xMRa+v3l+rFF/fZjyvn79357Pvf+cfv/rh68ifv/vjj4fYf/v+lT37/IGLxB2998tmDZ7PvAAAAUIqqqqpOept/Kr2/77bdKQBgIvLzf5Xk5Wq1Wq1+pvUfupN4vD//ZWvBlO2/ekrqpmq0B80iIlaa29SvGcaejp8dtwIAMFEr8bjtLtAi+RetHxHPtd0JYKp12u4Ah2Jt/f5SJ+XbaT4fnN5sz3+n3Jb/Smfr/o7dpuMMX2MyqZ+v1ejFi7v0Z37vTY/lX7Fy/t3h/G9stg/Seoed/6Tslv9g89an4uT8e8P5D9mW/58i4sjm3x2Zf6ly/v2D5L/SO8LHv/wBAAAAADj+8t//F1s+/zupk6t7nf89PaE+AAAAAAAAAMCz9rTj/20x/h8AAABMrfq9eu2vJ54s2+2z2Orl1zsRzw+tDxQm3Syz0HY/AAAAAAAAAAAAAKAk/c1reK93ImYi4vmFhaqq6q+m4fqgnnb7o670/YeStf1LHgAANn16Yuhe/k7EXERcT+XMwsJCVc3NL1QL1fxsfj07mJ2r5hvva/O0XjY72McL4v6gqr/ZXGO7pnHvl8e1D3+/+rEGVW8fHZuMlsIGgGTz2WjNM9IxU1UvRNuvcjgaHP/Hj+Of/Wj75xQAAAA4fFVVVZ30cd6n0vh+3bY7BQBMwlx+/h8+L6BWq9Vqtfr41U3VaA+aRUSsNLepXzMYjh8AjpiVeNx2F2iR/IvWj4iTbXcCmGqdtjvAoVhbv7/USfl2ms8HaXz3fC3ItvxXOhvb5e1HTccZvsZkUj9fq9GLF3fpz0sT6sM0yfl3h/O/sdk+SOsddv6Tslv+9X4uttCftuX8e8P5Dzk++XdH5l+qnH//QPn35A8AAAAAAFMs//1/0fnfvMsAAAAAAAAAcOSsrd9fyve95vP/nx+xXqc55/7PYyPn39l3/u7/PU5y/t3h/IcuyOk15h+98yT/f6/fX/r43r8+l6dTn/9Mb1A/9kyn2+una36qmffiVtyO5Ti/Y/16nYcRqf3CjvaZbdtfHNN+aUf7oG6fz+1nYyl+Hrfj3a322TEXRs2Naa/GtOf8e47/IuX8+42vOv+F1N4ZmtYePezuOO6b01GPc+3v/3k1H13Xr/1254EwIavR29q3pnr/zrTQn43/k+cG8cu7y3fO/vrmvXt3LkSabFt6MdLkGcv5z6SvnP9rr2y259/7zeP10cPBgfOfFqvR3zX/Vxrz9f6+PuG+tSHnP0hfOf/8DDT6+D/K+e9+/L/RQn8AAAAAAAAAAAAAAABgL1VVbdwiei0irqb7f9q6NxMAmKz8/F8leblarVar1erjVzdVo73dLGJu+zb1a4bfjPpmAMA0+29E/LPtTtAa+Rcsf95fPf1C250BJuruhx/99Obt28t37h5su8XD6hAAAAAAAAAAcGB5/M/TjfGfN64DGho3etv4r+/E6akb//PxyFsadljtDnobY52nHXo59h7/+8y29p3jf/fHPN7MXo2D8f2dHdM+N6Z93P9Kzv/llHHO/1TasZLGf32thf60Led/Jo31nPP/0tB6zfyrvx3l/Lvb8j9374NfnLv74Udv3vrg5vvL7y//7ML5q5cvXbl86cqVc+/dur18fvPf0d9sz4P7aMj557GvXQdalpx/zlz+Zcn5fzHV8i9Lzv/VVMu/LDn//HpP/mXJ+ef3PvIvS87/9VTLvyw5/y+nWv5lyfm/kWr5lyXn/5VUy78sOf83Uy3/suT8z6Za/mXJ+Z9LtfzLkvPPZ7jkX5acf76yQf5lyflfTLX8y5Lzv5Rq+Zcl53851fIvS87/SqrlX5ac/9VUy78sOf+vplr+Zcn5fy3V8i9Lzv+tVMu/LDn/r6da/mXJ+X8j1fIvS87/m6mWf1ly/t9K9Vb+vXb7xWTk/L+dasd/WXL+b6da/mV58vn/ZsyYMZNn2v7NBAAAAAAAAAAAAAAM28/1wPGUlxO3vY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu7GLnO+n7gz756nYTEfxJCCCFxnBcMcbLr18QEg3n9p6GlaSC0FGgS7HVi8Ju8NiQINZsmbUEgNVJ7ARelgChCaqtECKlUoihSkdq7cgXNDWolLiIVqhBBVSrCVmfO8zw7Mzs7s+vsy5lzPh8U/7w7Z2aePXNmdr9rvnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaXf+O2T8dCSEU/7X+2BbCJcXft4bDxYfzBzZ7hQAAAMDL9VLrz7+9LH/i8Aqu1LbNP1/7r99aWFhYCB998flf//nCQr5gewhjW0JoXZb8yy9/sdC+TfREmBoZbft4dMDdjw24fHzA5RMDLp8ccPmWAZdPDbh8yQ5YYmv5+5jWjd3Y+uu2cpeGK8JE67Ibe1zriZEto6PpdzktI63rLEwcC8fDiTAbZpZcZ6T1vxC+c31xX3eFdF+jbfd1TQjhhZ99+khaw0jcxzeGjjtraX/sfvq2sP3Fn336yNfP/eQ1vebA3bBkpSHs3FGs88kQFn9dFUbClrxP0jpH29Z5TY91jnWsc6R1veLv3et8YYXrTF/3VFzn9/us85r4uUduCCHMh2W36fZEGA0Xdd1r3t9T5RFR3EbxUL4yjK/qOLm+73EyMl9sU1znxzd0Hifdx2Ta/9fHfTK+zBraH46fPj65ZL9f0HGytbzlKhyrxW3fU9zp1FT7r1Y7jtVim0/ftPwx0POx63EM5GO57RjYMegYGJ0cax0Do4tr3tFxDOxecp3RMNK6r+dv6n8MTJ87eWZ67tFP3Xr85IMPzT40e2r3zIF9e/fv27t///Sx4ydmZ8o/V7dLh8hFYTQfgzvia006Bl/ftW37IbnwlTV6HsTXoSo8D4qv/f03Fwu6ZDQsc4wX2zy58+U/D/L3/bbnwXjb86Dna2qP58H4Cp4HxTYv7FzZ98zxtv96rWFdXgtbaxqpxPfD4j4//IblXwuviev6zBtX+/1wbMkxkL6skfjcKz6Tf96buiPul6XHxdXFBRdPhvNzs2dve+TBc+fO7g5xbIjL2x6r7uPloravKSw5XkZXfbwc/ptf3Xx1j89vi/tq6pb+j1Wxzb5d/R+r1qt75/6cDOX+7PjsnhDHGtvo/dnru1mxP3OW6LM/i22evPXl/yyYc0nb69/EoNe/sYnx8vVvLO+NiY7Xv6UPzVhrZSG8cOvKXv8m4n8b/fp3RUVe/4p99eHbljkGJsr1FNt8Znq1x8B439e/G+Iciet5Q0wMU225/9ety+fLw7TtsRx43IyPT8TjZjzdY+dxs3fJdYpbK+5758yFHTc7b+h8rDp+bqnhcVPsq7+Y6f/aUWzz7O6X/9qxNf217bVjctAxMDE2Wax3Ih8E5evdwtZ0DNwWjoTT4UQ4mq9TPMrFfe3as7JjYDL+t9GvHVdV5Bgo9tUX9iweA1M9Ht9im+/tXdufnXbGz5TbTHT87NT9+4XlMv/V44u3173b1vKxGo/rfOcP3ps/1ytDFNv8ZN9qc0b//XRL/MzF6eK2/dT9/FnumD4aNmY/XRXXeWJ//99NFdtccWCFx9PhEMJzu59r/b4r/n73m+d/8K2O3/v2+p3yc7ufu3v63h+uZv0AAFy4X7f+nJ8sf9Zs+xfrlfz7PwAAADAUUu4fjTOT/wEAAKA2Uu4fizOT/wEAAKA2Uu4fjzNrSP5/+I6DT7/0WMjvBrgQpcvTbrjnLeV2qeM9Hz/evrCo+Pzbvzbx9GcfW9l9j4YQfnX3a3tu//Bb0rpKZ9I639T5+SWuum5F9//AfYvbtb9/wgsHy9tPX89KD4PUVf7O9J7W7W5/dHdrPnt3aM175z/zRHn75cdp++f3ltv/ZXzTksPHRjquvzOu58Y4t8f3lLnn8OJ+KGa63tPXXPtPl39g8f7S9UZ2XNr6Mr/wh+XtpveIeurycvv0dS+3/n/83DeeLrZ/5Kbe639stPf6n4+3++M4f3mo3L59n3+2bf1/HNef7i9d77avfrfn+p95dbn9M/G4+HKc3et/25+97qVej1e6n8N3ltdL9z/z3/ta10u3l26/e/1Tj+3u2B/dt//si+XtHPrEz8fat0+fT/eTPHBn5/E9Eh/fjh55COEbfxI69nN4c3m9f+haf7q9M3f2Xv8tXes8M3Jd6/qLX8+2jq/rS3+9p+fXm9Zz+O+2dXw9T70r7r8Xp79X3O7z98bjMV7+v98vb6/7vUyfeVfn603a/svbyudtur3prvU/1bX++euKfTd4/Xe9WK7/mbdu6Vj/4XfH4+mucg5a/0N/dVnH9b/y9fLxOPvJXadOz50/frRtr7Y/j7dMbb3o4ktecell8bW0++P7T597ePbs9pntMyFsH8K3DFzv9X81zv8qx3zbRdvW5h7SK0553H3+PeX3rdf/ovz4qZ+X84H4eKbvj1/64kTH8dr9uM+/tZx91r8ib4zrWKlXf+4/rlvRhs9/5Dvn//6PftL9c0H6es68aqr19X3h+itbl408W17e/Xo1yL+/qvN5/aPxmdb8dtyvC/GdmXdcWd5f9+2n9yb5/PvK52/6SS5dP3S9n8i2sc6vY8n6J1e3/h/Fn2O+e1Xn6186Pr79WNe7OW8LI8US5uPrQ5gvL09bpf39+Reu7Hl/6X14wvxrVrPMZc09Ojd94vip849Mn5udOzc99+in7j95+vypc/e33rv0/o8Nuv7i8/ui1vP76OyBfaH1bD9djnXWWv8rNm/9Z+47cvT2mZuPzh578Pyxc/edmT370JG5uSOzR+dufvDYsdlPDrr+8aOHdu85uPf2PbseOn700B0HD+49uOv4qdPFMspFDXBg5uO7Tp29v3WVuUP7Du7ev3/fzK6Tp4/OHrp9ZmbX+UHXb31v2lVc+xO7zs6eePDc8ZOzu+aOf2r20O6DBw7sGfjujyfPHJvbPn32/Knp83OzZ6fLr2X7udani+99g65PM8ydjq93XUbiT+cfvOVAfn/cwtceX/amyk26vrv/NL4XVPr+NujjlPsn4swakv8BAACgCVLuj2/8v3iB/A8AAAC1kXL/ljgz+R8AAABqI+X+MvlP5dO/NyX/r1X//3H9/xb9f/3/oP+f6f/r/4fN7f+vqR/+XP8/NKH/v8r16/9XoP+/ietvXP+/6xu2/j8rUbX+f8z9YWsI/v0fAAAAairl/ovizOR/AAAAqI2U+y+OM5P/AQAAoDZS7r8kzqwh+d/5//X/9f/79f/Ttvr/Qf+/Cv3/G/9T/38J/X/9/6D/f8E2uz8/7OuvYP9/q/P/UzVV6/+n3P+KOLOG5H8AAABogpT7L40zk/8BAACgNlLuvyzOTP4HAACA2ki5f1ucWUPyv/6//v+g/v+vFhYWmtv/d/7/dvr/m97/d/7/HvT/9f+D/v8FW1F/fmT5A1P/v3L9//U9/38X/X9Womr9/5T7/1+cWUPyPwAAADRByv2vjDOT/wEAAKA2Uu6/PM5M/gcAAIDaSLn/ijizhuT/Zvb/fxxC0P8Pzv+v/9+1Tv3/Te//jwX9/1XT/9f/D/r/F2yz+/PDvn79f/1/Bqta/z/l/lfFmTUk/wMAAEATpNx/ZZyZ/A8AAAC1kXL/q+PM5H8AAACojZT7r4oza0j+b2b/3/n/9f9L+v+d66xv/3+y7/or1P+vz/n/ty7+Vf9f/78f/X/9/2Fefw36/yP6/6y3qvX/U+5/TZxZQ/I/AAAANEHK/VfHmcn/AAAAUBsp9782zkz+BwAAgNpIuf+aOLOhz/+jK9pK/38t+v+Lx43+v/5/0P/PqtP/779+/f/1NVz9/+W/d+r/l/T/O61d/39+cQH6/0Oz/hr0/53/n3VXtf5/yv2vizMb+vwPAAAAJCn3XxtnJv8DAABAbaTcf12c2Wry/8IK/w/vAAAAwKZIuX97nFlD/v1f/9/5//X/9f/1//X/19Nw9f+Xp/9f0v/v5Pz/+v/6//r/9LfB/f+LB/X/U+6/Ps6sIfkfAAAAmiDl/h1xZvI/AAAA1EbK/TfEmcn/AAAAUBsp998YZ9aQ/K//r/+v/6//39H/v7b9nvT/9f9fPv1//f9+9P/1/4d5/fr/+v8MtsH9/4Efp9x/U5xZQ/I/AAAANEHK/TfHmcn/AAAAUBsp978+zkz+BwAAgNpIuX9nnFlD8v+K+/8jIQT9/2Xp//dev/7/Ovf/x5z/P+j/V57+v/5/P/r/+v/DvH79f/1/Bqta/z/l/jfEmTUk/wMAAEATpNz/xjgz+R8AAABqI+X+W+LM5H8AAACojZT7d8WZNST/O/+//n9F+v9bgv5/Nc7/X9P+/9s/VE79/42n/6//34/+f237/90v7eti3fv/X/xg3+s3rv8/2fmh/j8rUbX+f8r9t8aZNST/AwAAQBOk3H9bnJn8DwAAALWRcv90nJn8DwAAAENpvMfnUu6fiTNrSP7f0P5/1wOg/6//H5z/X//f+f/1/18m/X/9/zCs/f+xWvf/nf+/jv3/Lvr/rETV+v8p9++OM2tI/gcAAIAmSLl/T5yZ/A8AAAC1kXL/3jgz+R8AAABqI+X+fXFmDcn/zv+v/6//r/+v/6//v570/1fV/1/hd9BF+v+loez/1/v8//r/+v/6/w002uNzVev/p9y/P86sIfkfAAAAmiDl/gNxZvI/AAAA1EbK/bfHmcn/AAAAUBsp998RZ9aQ/K//r/+v/6//r/+v/7+e9P+bd/7/Xv3P5ej/6/8P8/r1//X/Gaxq/f+U+w/GmTUk/wMAAEATpNz/pjgz+R8AAABqI+X+O+PMeub//1nV/ycMAAAA2Dj9emgp9785zqwh//6v/1/3/v/ClmHu/18at9H/1/8P+v9D0v9f+gKs/9+8/v9q1q//r/8/zOvX/9f/Z7Cq9f9T7j8UZ9aQ/A8AAABNkHL/W+LM5H8AAACojZT73xpnJv8DAABAbaTcfzjOrCH5X/+/7v3/tT3//xXO/6//r/+v/79K+v/6//3o/w9n/z/+2KL/X6H+f3EM6f9TRVXr/6fc/7Y4s4bkfwAAAGiClPvfHmcm/wMAAEBtpNz/jjgz+R8AAABqI+X+d8aZNST/6//r/1f5/P/6/xvQ/08lTv1//f91ov+/bv3/1kuh/n9J///C9OzPTwbn/x/C/r/z/1NVVev/p9z/rjizhuR/AAAAaIKU+98dZyb/AwAAQG2k3P//48zkfwAAAKiNlPvvijNrSP7X/9f/r0P//3H9f+f/1/+vLP1/5//vR/+/gv3/DezPD/v69f/1/xmsav3/lPt/I86sIfkfAAAAmiDl/rvjzOR/AAAAqI2U+98TZyb/AwAAwJCZXPaSlPt/M86sIflf/39j+v+j+fb1/53/X/9f/1//fy3p/+v/B/3/C7bZ/flhX7/+v/4/g1Wt/59y/2/FmTUk/wMAAEATpNz/3jgz+R8AAABqI+X+344zk/8BAACgNlLuvyfOrIb5v1epcK37/93X76dJ/X/n/9f/D/r/+v9te1X/f+3o/+v/B/3/C7bZ/flhX7/+v/4/g1Wt/59y/+/EmdUw/wMAAEBTpdx/b5yZ/A8AAAC1kXL/++LM5H8AAACojZT73x9n1pD87/z/+v9D1v8faS9y6v/r/wf9/8rT/9f/70f/X/9/mNev/6//z2BV6/+n3H9fnFlD8j8AAAA0Qcr9H4gzk/8BAACgNlLu/904M/kfAAAAaiPl/t+LM2tI/tf/76T/X/n+v/P/6//r/w8Z/f+l/f/iNWwt+///9uTKt9f/7/w69P/1//X/9f9ZX1Xr/6fc/8E4s4bkfwAAAGiClPt/P85M/gcAAIDaSLn/Q3Fm8j8AAADURsr9H44za0j+1/93/n/9f/1//X/9//Wk/+/8//1cSP9/S9v1q9n/36L/r/+v/6//T3yFrlr/P+X+j8SZNST/AwAAQBOk3P8HcWaryf/ja70qAAAAYC2l3H9/nJl//wcAAIDaSLn/gTizhuT/Nej/jwb9f/1//f+ex4P+v/6//r/+v/5/f87/r/8/zOvX/9f/Z7Cq9f9T7n8wzuxw590AAAAAwyvl/o/GmTXk3/8BAACgCVLuPxJnJv8DAABAbaTcfzTOrCH53/n/K9f/v+elhQX9f/3/fDv6//r/+v/96f/r/wf9/ws29+g3xvT/9f/1/1lPVev/p9w/G2fWkPwPAAAATZBy/7E4M/kfAAAAaiPl/ofizOR/AAAAqI2U+x+OM2tI/tf/r1z/3/n/9f87bmcd+//f/2bXOvX/9f/Xg/6//n8/+v+b3f93/n/9f/1/1lfV+v8p9x+PM2tI/gcAAIAmSLn/Y3Fm8j8AAADURsr9H48zk/8BAACgNlLuPxFn1pD8r/+v/6//39j+v/P/R/r/60v/X/+/H/1//f9hXr/+v/4/g1Wt/59y/8k4s4bkfwAAAGiClPtPxZnJ/wAAAFAbKfefjjOT/wEAAOD/2LvPJcvqqo/jZwaGGep5KG/BW/CNb70Er8EqL8Ccw2DGiDnnnMWEigFzxKyYMWcUM6hVWEyvtWZ66D7ndE+fPnv/1+fzglUTGHb3tJS/mvqyh5G7/wFxS5P9r/8/WP9/Yp828HD9/2n9v/5f/6//1/9fIv3/MfX/8bWt/99N/6//1//r/1lum/3/iT1+PHf/A+OWJvsfAAAAOsjd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/j6//v/xu3zPH/n8/3v+/9/Pr//X/+n/9v/5/kP4/6P930//r/wfp/08vjqL/z/+Dpv/nAtvs//f6du7+h8YtTfY/AAAAdJC7/2Fxi/0PAAAAw8jd//C4xf4HAACAYeTuf0Tc0mT/T+z9/1Vz6P/1/wv9v/7/os+n/l//vxf9v/5/of8/tG3383N//oH6f+//Z2Om1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v7HxC1N9v/E+v/zz6X/b9D/31KfP/3/Dv1//L7q//X/B6D/1/8v9P+Htu1+fu7Pr//X/7Pa1Pr/3P2PjVua7H8AAADoIHf/4+IW+x8AAACGkbv/8XGL/Q8AAADDyN1/Nm7Za/+fPq6nOj76f/2/9//r//X/x9X/n63Pqv7/6Oj/9f8L/f+hbbufn/vz6//1/6w2tf4/d//VcYs//wcAAIBh5O5/Qtxi/wMAAMAwcvc/MW6x/wEAAGAYufufFLc02f/6f/2//l//f3z9/+nm/f/5z6r+/+jo//X/C/3/oW27n5/78+v/9f+sNrX+P3f/k+OWJvsfAAAAOsjd/5S4xf4HAACAYeTuf2rcYv8DAADAMHL3Py1uabL/9f/6f/2//t/7//X/m6T/1/8vo//X/8/5+fX/+n9W23j/f99rzt11+//c/dfELU32PwAAAHSQu//pcYv9DwAAAMPI3f+MuMX+BwAAgGHk7n9m3NJk/+v/9f/n+/87T4zW/y+u3/l5+n/9/7Ln1/9vlv5f/7+M/l//P+fn1//r/1lt4/3/it7/4m/n7n9W3NJk/wMAAEAHufufHbfY/wAAADCM3P3PiVvsfwAAABhG7v5r45Ym+1//r//3/n/9v/5f/79J+n/9/3kX/69d/6//n/fzL+v/77PG8+v/6WBq/X/u/ufGLU32PwAAAHSQu/95cYv9DwAAAMPI3f/8uMX+BwAAgGHk7n9B3NJk/+v/9f/6f/3/7v7/ZMv+/67v0/9vhv5f/7+M/l//P+fn9/5//T+rTa3/z93/wrilyf4HAACADnL3vyhusf8BAABgGLn7Xxy32P8AAAAwjNz9L4lbmux//b/+X/+v/7+k9/9fdu558t+es+3/vf9/c/T/+v9l9P/6/zk//8b6/2vvfde/MPX/DGFq/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAAMPI3f/yuMX+BwAAgDnbFWLl7n9F3NJk/9+9/99d4ur/1zNo/3/niYX+X/9/3sjv/9f/b47+X/+/zLr9/0L/Xx+L/n86z+/9//p/Vpta/5+7/5VxS5P9DwAAAB3k7n9V3GL/AwAAwDBy9786brH/AQAAYBi5+18TtzTZ/97/P4n+vyqWifX/3v+v/9/1cen/9f+Hof/X/y/j/f/6/zk/v/5f/89qU+v/c/e/Nm5psv8BAACgg9z9r4tb7H8AAAAYRu7+18ct9j8AAAAMI3f/G+KWJvv/CPr/ywfv/0+t87EM+v5//b/+f9fHpf/X/x+G/l//v4z+f+/+/8w+/zz9/7SeX/+v/2e1qfX/ufvfGLc02f8AAADQQe7+N8Ut9j8AAAAMI3f/m+MW+x8AAACGkbv/LXFLk/2/X/9/2//t/Lj3/69H/7/38+v/9f/6f/2//l//v4z+3/v/5/z8+n/9P6tNrf/P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAYufvfHrfY/wAAADCM3P3viFua7P8jeP//Rf3/PfX/ffv/+O6z+v+4E+3/r8hfR/+/Q/+/Wfp//f8y+n/9/+ye/8T5ryj9v/6f1abW/+fuf2fc0mT/AwAAQAe5+98Vt9j/AAAAMIzc/e+OW+x/AAAAGEbu/vfELU32/9H3/97/37j/P9z7/0/q/5P3/8fvq/5f/38A+v8D9/83X7HOT9T/r0X/37D/v4D+X//PalPr/3P3Xxe3NNn/AAAA0EHu/vfGLfY/AAAADCN3//viFvsfAAAAhpG7//1xS5P9r//X/2+9//f+/6L/j99X/b/+/wBG7v9vX+O5vP9/h/7/cDbSz185Sv9/auU/X/+v/2e1qfX/ufs/ELc02f8AAADQQe7+D8Yt9j8AAAAMI3f/9XGL/Q8AAADDyN3/obilyf7X/+v/9f+T7/+vu/jrTf+v/58T/f/k3v+v/595/3/O9vv/6+K3xvv/J9H/x3ec1f8zPVPr/3P3fzhuabL/AQAAoIPc/R+JW+x/AAAAGEbu/hviFvsfAAAAhpG7/6NxS5P9r/+fe/9/v1vjCTr0/5cvevb/3v8fV/+v/9+L/l//v2jW/0/+/f/6f+//1/9zgan1/7n7Pxa3NNn/AAAA0EHu/o/HLfY/AAAADCN3/yfiFvsfAAAAhpG7/8a4pcn+1//Pvf/3/n/9v/5f/z9t+n/9/zL6f/3/nJ+/c/9/Qv/PmqbW/+fu/2Tc0mT/AwAAQAe5+z8Vt9j/AAAAMIzc/Z+OW+x/AAAAGEbu/s/ELU32v/5f/6//1/9fcv9/tf5/of/fl/5f/7+M/l//P+fn79z/L/T/rGlq/X/u/s/GLU32PwAAAHSQu/9zcYv9DwAAAMPI3f/5uMX+BwAAgGHk7v9C3HCvq7b3SEfr1D7fH725/n/y/X9+Ker/9f9lcv2/9/+fo//fm/5f/7+M/l//P+fn1//r/1ltav1/7v4vxi3+/B8AAACGkbv/S3GL/Q8AAADDyN1/Y9xi/wMAAMAwvnzur2cWX4lbmux//f/k+3/v/9f/6//j6v/1/3vR/+v/6791pP8/sG3383N/fv2//p/Vptb/5+6/KW5psv8BAACgg9z9X41b7H8AAAAYRu7+r8Ut9j8AAAAMI3f/1+OWJvtf/3/Q/v/0nr+e/j8+Cfr/Xb++/l//r//X/0+p/z8zav/v/f+Htu1+fu7Pr//X/7Pa1Pr/3P3fiFua7H8AAADoIHf/N+MW+x8AAACGkbv/W3GL/Q8AAADDyN3/7bilyf7X/3v/v/f/6//1//r/TdL/T6f/X+j/9f8X2XY/P/fn1//r/1ltav1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADDyN1/c9xi/wMAAMAwcvd/L25psv9H7v+X/TT9/w79v/5/Men+/+Suz6f+X/+/F/2//n+h/z+0bffzc39+/b/+n9Wm1v/n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P0/jFvsfwAAABhG7v4fxS1N9v/I/f8yR93/n4qr/1+3/7/p//Nzp/8///fp/+P31fv/9f8HoP/X/y/0/4e27X5+7s+v/9f/s9qW+v9Ti336/9z9P45bmux/AAAA6CB3/0/iFvsfAAAAhpG7/5a4xf4HAACAYeTu/2ncMs7+v/8NS35Q/+/9/97/r//X/+v/N0n/r/9fRv+v/5/z8+v/9f+sNrX3/+fu/1ncMs7+BwAAgPZy9/88brH/AQAAYBi5+38Rt9j/AAAAMIzc/b+MW5rsf/2//l//36r/v2yh/9f/HzP9v/5/Gf2//n/Oz6//1/+z2tT6/9z9v4pbmux/AAAA6CB3/6/jFvsfAAAAhpG7/zdxi/0PAAAAw8jd/9u4pcn+1//r//X/rfp/7//X/x87/b/+fxn9v/5/zs+v/9f/s9rU+v/c/b+LW5rsfwAAAOggd//v4xb7HwAAAIaRu/8PcYv9DwAAAMPI3f/HuKXJ/tf/6//1/1Pt/3e+BvX/+n/9/3L6f/3/Qv9/aNvu5+f+/J36/9N7/P36f9Yxtf4/d/+tcUuT/Q8AAAAd5O7/U9xi/wMAAMAwcvf/OW6x/wEAAGAYuftvi1ua7P/59P9X6//1/+v3/6dH6P+9/1//r/9fh/7/0vr/M/v9RP3/Wo6+/7/q3F/1//N4/rH7/ytXfvz6f9Yxtf4/d/9f4pYm+x8AAAA6yN3/17jF/gcAAIBh5O7/W9xi/wMAAMAwcvf/PW7ZZ/+fPJanOj7z6f+9/386/f+p+rgn2/8P8f5//b/+X/+/Dv2/9/8v5tn/72q7vf9/ns+/vP+/x8z7/93v/9+L/p91TK3/z93/j7jFn/8DAADAMHL3/zNusf8BAABgGLn7/xW32P8AAAAwjNz9t8ctTfa//l//P+T7//X/+n/9/2S07P/z626j/f/Ou7n1/ztm2P/v8/5//f+cnn+G7/+/48JvLO//L9P/cySm1v/n7r8jbmmy/wEAAKCD3P3/jlvsfwAAABhG7v7/xC32PwAAAAwjd/9/45Ym+1//r//X/+v/9f/6/01q2f97///a9P/6/zk//wz7/128/5/jMLX+P3f//wIAAP//1d0Z6g==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): lesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.103271][T10782] loop3: detected capacity change from 0 to 256 [ 312.223804][T10425] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 312.479770][ T5635] ocfs2: Unmounting device (7,4) on (node local) [ 312.711426][T10468] usb 3-1: USB disconnect, device number 14 [ 312.952019][T10794] loop3: detected capacity change from 0 to 512 [ 313.108344][T10794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.161938][T10794] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.224986][T10794] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 313.368782][T10804] loop4: detected capacity change from 0 to 256 [ 313.430856][T10804] FAT-fs (loop4): unable to read block(805306368) for building NFS inode [ 313.477726][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.487133][T10802] loop1: detected capacity change from 0 to 4096 [ 313.701280][T10809] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.755479][T10811] loop3: detected capacity change from 0 to 256 [ 313.838699][T10811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 313.945596][ T30] audit: type=1800 audit(1784107265.460:109): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2068" name="file1" dev="loop3" ino=1048700 res=0 errno=0 [ 314.053474][ T30] audit: type=1800 audit(1784107265.490:110): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2068" name="file1" dev="loop3" ino=1048700 res=0 errno=0 [ 314.653662][T10424] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 314.729688][T10834] comedi comedi1: comedi_test: 256 microvolt, 100000 microsecond waveform attached [ 314.821063][T10425] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 314.843678][T10424] usb 4-1: Using ep0 maxpacket: 16 [ 314.850698][T10424] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 314.873698][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.896513][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.910437][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.943335][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.004379][T10425] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.034820][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.070769][T10425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 315.108562][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.159304][T10425] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.200027][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.234586][T10425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.268469][T10424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.325541][T10425] usb 3-1: config 0 descriptor?? [ 315.339046][T10424] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 315.380493][T10828] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.416706][T10424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 315.460825][T10425] hub 3-1:0.0: USB hub found [ 315.509479][T10424] usb 4-1: SerialNumber: syz [ 315.530768][T10817] loop5: detected capacity change from 0 to 32768 [ 315.573933][T10424] usb 4-1: config 0 descriptor?? [ 315.687200][T10424] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 315.719953][T10425] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 315.913759][ T4977] bcm5974 4-1:0.0: could not read from device [ 315.971028][T10425] usbhid 3-1:0.0: can't add hid device: -71 [ 316.006173][T10826] bcm5974 4-1:0.0: could not read from device [ 316.024719][ T4977] bcm5974 4-1:0.0: could not read from device [ 316.036051][T10425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 316.051421][T10424] usb 4-1: USB disconnect, device number 8 [ 316.104466][T10836] loop1: detected capacity change from 0 to 131072 [ 316.113975][T10836] F2FS-fs (loop1): invalid crc value [ 316.233218][T10836] F2FS-fs (loop1): f2fs_convert_inline_folio: corrupted inline inode ino=3, i_addr[0]:0x1601, run fsck to fix. [ 316.246132][T10836] loop1: lost filesystem error report for type 5 error -117 [ 316.246167][T10836] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 316.279516][T10425] usb 3-1: USB disconnect, device number 15 [ 316.465162][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.471648][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.173897][T10860] team0: Device veth0_vlan failed to register rx_handler [ 317.719693][T10849] loop4: detected capacity change from 0 to 32768 [ 317.831825][T10468] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 317.833764][T10849] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.932339][T10881] loop5: detected capacity change from 0 to 512 [ 317.945698][T10872] loop2: detected capacity change from 0 to 4096 [ 318.022337][T10468] usb 7-1: unable to get BOS descriptor or descriptor too short [ 318.042820][T10468] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 318.058887][T10468] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 318.070765][T10468] usb 7-1: config 63 has no interface number 0 [ 318.077035][T10468] usb 7-1: config 63 interface 66 has no altsetting 0 [ 318.087355][T10468] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 318.103394][T10468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.124801][T10468] usb 7-1: Product: syz [ 318.131896][T10468] usb 7-1: Manufacturer: syz [ 318.140596][T10881] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 318.141784][T10468] usb 7-1: SerialNumber: syz [ 318.238659][T10849] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 318.310871][T10872] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 318.312826][T10881] EXT4-fs (loop5): 1 truncate cleaned up [ 318.339538][T10849] XFS (loop4): Starting recovery (logdev: internal) [ 318.399511][T10881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.461315][T10468] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 318.508960][T10849] XFS (loop4): Ending recovery (logdev: internal) [ 318.517993][T10468] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 318.560149][T10468] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 318.615646][T10468] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 318.664142][T10468] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 318.730277][T10468] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 318.758583][T10468] uvcvideo 7-1:63.66: No streaming interface found for terminal 29. [ 318.804329][T10468] uvcvideo 7-1:63.66: Entity type for entity Output 32773 was not initialized! [ 318.831066][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.904008][T10468] usb 7-1: USB disconnect, device number 13 [ 318.940826][ T5635] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.028189][ T9331] udevd[9331]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 319.098969][ T9331] udevd[9331]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 319.785772][T10468] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.863005][T10907] team0: Device veth0_vlan failed to register rx_handler [ 319.877783][T10911] loop5: detected capacity change from 0 to 8 [ 319.974069][T10911] SQUASHFS error: Failed to read block 0x26067d: -5 [ 320.006040][T10468] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 320.026885][T10911] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 320.046708][T10468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.074852][T10911] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 320.108483][T10468] usb 3-1: config 0 descriptor?? [ 320.143609][T10468] cp210x 3-1:0.0: cp210x converter detected [ 320.323360][ T196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.534425][T10925] loop4: detected capacity change from 0 to 512 [ 320.556236][T10918] loop6: detected capacity change from 0 to 4096 [ 320.560740][T10468] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 320.576870][T10925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.625442][T10925] EXT4-fs (loop4): 1 truncate cleaned up [ 320.650378][T10468] usb 3-1: cp210x converter now attached to ttyUSB0 [ 320.696501][T10925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.768015][T10918] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 320.826463][T10468] usb 3-1: USB disconnect, device number 16 [ 320.883942][T10468] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.968511][T10468] cp210x 3-1:0.0: device disconnected [ 321.098609][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.675240][T10924] loop5: detected capacity change from 0 to 32768 [ 322.036450][T10921] loop3: detected capacity change from 0 to 32768 [ 322.144569][T10921] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 322.357114][T10921] XFS (loop3): Ending clean mount [ 322.409001][T10965] loop1: detected capacity change from 0 to 256 [ 322.455252][T10965] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 322.745211][ T5638] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 323.413915][T10972] loop5: detected capacity change from 0 to 4096 [ 323.433194][T10938] loop4: detected capacity change from 0 to 40427 [ 323.437671][T10972] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.504974][T10938] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 323.532919][T10938] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 323.544810][T10972] EXT4-fs (loop5): Test dummy encryption mode enabled [ 323.587638][T10938] F2FS-fs (loop4): Image doesn't support compression [ 323.606582][T10979] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 323.613304][T10938] F2FS-fs (loop4): invalid crc value [ 323.719414][T10972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.937248][T10972] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 323.956578][T10984] loop2: detected capacity change from 0 to 4096 [ 324.016431][T10984] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 324.120165][T10984] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 324.229713][T10938] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.281057][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.343402][T10938] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 324.413472][T10938] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 324.470445][T10938] F2FS-fs (loop4): Start checkpoint disabled! [ 324.579566][T10993] loop1: detected capacity change from 0 to 256 [ 324.604979][T10993] exfat: Deprecated parameter 'utf8' [ 324.639442][T10993] exfat: Deprecated parameter 'namecase' [ 324.650599][T10938] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 324.682182][T10993] exfat: Deprecated parameter 'utf8' [ 324.707118][T10993] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 324.827243][T11000] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 324.862833][T10998] IPVS: stopping master sync thread 11000 ... [ 324.875605][T11001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2141'. [ 325.078209][T10983] loop6: detected capacity change from 0 to 32768 [ 325.118020][T10983] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2135 (10983) [ 325.217866][T10983] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 325.240727][T10983] BTRFS info (device loop6): using blake2b checksum algorithm [ 325.311389][T11010] loop1: detected capacity change from 0 to 1024 [ 325.347665][T11010] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 325.450216][T10983] BTRFS info (device loop6): enabling ssd optimizations [ 325.477900][T10468] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 325.509889][T10983] BTRFS info (device loop6): turning on async discard [ 325.553369][T10983] BTRFS info (device loop6): enabling free space tree [ 325.580771][T10983] BTRFS info (device loop6): use zstd compression, level 3 [ 325.676280][T10468] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.701789][T10468] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.727056][T10468] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.772891][T10468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.815174][T10468] usb 4-1: SerialNumber: syz [ 325.873517][T10424] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 326.079699][T10424] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 326.103751][ T6179] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 326.120105][T10424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.134313][T10468] usb 4-1: 0:2 : does not exist [ 326.146610][T10424] usb 6-1: Product: syz [ 326.151230][T10424] usb 6-1: Manufacturer: syz [ 326.157402][T11034] loop4: detected capacity change from 0 to 256 [ 326.169108][T10424] usb 6-1: SerialNumber: syz [ 326.245651][T11034] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 326.400724][ T30] audit: type=1800 audit(1784107277.910:111): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2148" name="file1" dev="loop4" ino=1048701 res=0 errno=0 [ 326.510635][T10468] usb 4-1: USB disconnect, device number 9 [ 326.544729][ T30] audit: type=1800 audit(1784107277.910:112): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2148" name="file1" dev="loop4" ino=1048701 res=0 errno=0 [ 326.617970][T10424] rtl8150 6-1:1.0: couldn't reset the device [ 326.658426][T10424] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 326.819508][T10424] usb 6-1: USB disconnect, device number 11 [ 327.117749][T11045] loop6: detected capacity change from 0 to 128 [ 327.168750][T11046] batadv0: entered promiscuous mode [ 327.178602][T11045] EXT4-fs: Ignoring removed nobh option [ 327.229251][T11046] batadv0: left promiscuous mode [ 327.253112][T11045] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.350959][T11045] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.354920][T11030] loop1: detected capacity change from 0 to 32768 [ 327.427211][T11030] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.604604][ T6179] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.624903][T11030] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 327.766116][T11030] XFS (loop1): Starting recovery (logdev: internal) [ 327.949876][T11030] XFS (loop1): Ending recovery (logdev: internal) [ 328.014101][T11076] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 328.093434][T10425] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 328.244855][ T5633] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.256762][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2165'. [ 328.286086][T10425] usb 7-1: Using ep0 maxpacket: 32 [ 328.356531][T10425] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 328.400500][T10425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 328.431698][T10425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 328.470157][T10425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 328.519170][T10425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 328.598547][T10425] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 328.635174][T10425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.669437][T10425] usb 7-1: Product: syz [ 328.690824][T11086] loop5: detected capacity change from 0 to 256 [ 328.707255][T10425] usb 7-1: Manufacturer: syz [ 328.726401][T10425] usb 7-1: SerialNumber: syz [ 328.759133][T11086] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 328.763939][T10425] usb 7-1: config 0 descriptor?? [ 328.998508][T11089] loop4: detected capacity change from 0 to 4096 [ 329.105170][T11089] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 329.181011][T11089] ntfs3(loop4): ino=1a, mi_enum_attr [ 329.201937][T11089] ntfs3(loop4): ino=1a, mi_enum_attr [ 329.226054][T11089] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 329.286011][T10425] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 329.314087][T10425] input input25: Device does not respond to id packet M [ 329.550563][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.585431][T10425] input input25: Device does not respond to id packet B [ 329.626302][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.650463][T10425] input input25: Device does not respond to id packet N [ 329.681284][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.709247][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.723794][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.749733][T10425] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 329.780520][T10425] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input25 [ 329.990408][T10425] usb 7-1: USB disconnect, device number 14 [ 330.101620][T11111] loop1: detected capacity change from 0 to 512 [ 330.176331][T10420] kernel read not supported for file task/798/attr/current (pid: 10420 comm: kworker/1:8) [ 331.283825][T11107] loop5: detected capacity change from 0 to 32768 [ 331.388038][T11107] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 331.543738][T10420] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 331.582292][T11109] loop3: detected capacity change from 0 to 32768 [ 331.650329][T11109] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.723525][T10420] usb 3-1: Using ep0 maxpacket: 8 [ 331.735922][T10420] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.757944][T10420] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.853435][T10420] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.875285][T11150] team_slave_0: entered allmulticast mode [ 331.889940][T11109] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 331.931088][T10420] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.954626][T11109] XFS (loop3): Starting recovery (logdev: internal) [ 331.970800][T11150] team_slave_0: entered promiscuous mode [ 331.996977][T10420] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.998492][ T5634] ocfs2: Unmounting device (7,5) on (node local) [ 332.060628][T10420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.160251][T11145] loop1: detected capacity change from 0 to 4096 [ 332.204944][T11145] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 332.273454][T11109] XFS (loop3): Ending recovery (logdev: internal) [ 332.335577][T10420] usb 3-1: GET_CAPABILITIES returned 0 [ 332.368152][T10420] usbtmc 3-1:16.0: can't read capabilities [ 332.450326][T11145] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 332.475564][T11152] loop4: detected capacity change from 0 to 4096 [ 332.498442][T11152] EXT4-fs: Ignoring removed mblk_io_submit option [ 332.597644][T11152] EXT4-fs (loop4): Test dummy encryption mode enabled [ 332.631504][ T5638] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.645325][T10426] usb 3-1: USB disconnect, device number 17 [ 332.674291][T11152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.703480][T10424] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 332.919240][T10424] usb 7-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 332.983309][T10424] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 332.987445][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.053933][T10424] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 333.137587][T10424] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.167995][T10424] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 333.223953][T10424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.286514][T10424] usb 7-1: config 0 descriptor?? [ 333.758149][T10424] hid_parser_main: 31 callbacks suppressed [ 333.758180][T10424] uclogic 0003:5543:0781.0028: unknown main item tag 0x2 [ 333.805624][T11173] loop4: detected capacity change from 0 to 512 [ 333.823841][T10424] uclogic 0003:5543:0781.0028: unexpected long global item [ 333.843844][T10424] uclogic 0003:5543:0781.0028: parse failed [ 333.859747][T10424] uclogic 0003:5543:0781.0028: probe with driver uclogic failed with error -22 [ 333.978978][T11173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 334.012652][T10464] usb 7-1: USB disconnect, device number 15 [ 334.038475][T11173] ext4 filesystem being mounted at /358/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.161512][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 334.220737][T11181] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 334.608439][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2209'. [ 335.059786][T11201] loop5: detected capacity change from 0 to 1024 [ 335.143346][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.169880][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.194426][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.211000][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.224492][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.243418][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.262011][T11201] hfsplus: invalid length 62193 has been corrected to 255 [ 335.361824][T10468] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 335.551998][T10468] usb 7-1: Using ep0 maxpacket: 16 [ 335.565120][T10468] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.589570][T10468] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.608874][T10468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.625494][T11195] loop3: detected capacity change from 0 to 32768 [ 335.636544][T10468] usb 7-1: config 0 descriptor?? [ 335.645103][T11195] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2212 (11195) [ 335.693268][T11195] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 335.751432][T11195] BTRFS info (device loop3): using blake2b checksum algorithm [ 335.955380][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.039930][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.058027][ T4941] Bluetooth: hci0: Malformed LE Event: 0x0d [ 336.058789][T10426] usb 7-1: USB disconnect, device number 16 [ 336.090022][T11195] BTRFS info (device loop3): enabling ssd optimizations [ 336.124878][T11195] BTRFS info (device loop3): turning on async discard [ 336.171417][T11195] BTRFS info (device loop3): enabling free space tree [ 336.206177][T11195] BTRFS info (device loop3): use zstd compression, level 3 [ 336.316780][T11230] binder: 11228:11230 ioctl c0306201 200000000040 returned -14 [ 336.453949][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 336.536095][ T30] audit: type=1804 audit(1784107289.053:113): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2224" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1910 res=1 errno=0 [ 336.610561][ T5638] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 336.657292][ T30] audit: type=1800 audit(1784107289.083:114): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2224" name="cgroup.controllers" dev="tmpfs" ino=1910 res=0 errno=0 [ 337.154924][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 337.183880][T10426] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 337.346024][T10426] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 337.384672][T10426] usb 7-1: config 0 has no interface number 0 [ 337.424442][T10426] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.489478][T10426] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 337.530302][T10426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.565155][T10426] usb 7-1: Product: syz [ 337.583910][T10426] usb 7-1: Manufacturer: syz [ 337.615014][T10426] usb 7-1: SerialNumber: syz [ 337.660597][T10426] usb 7-1: config 0 descriptor?? [ 337.717231][T10426] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 337.978893][T10426] usb 7-1: USB disconnect, device number 17 [ 338.068281][T10426] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 338.434342][T11280] loop5: detected capacity change from 0 to 512 [ 338.496857][T11280] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2246: inode has both inline data and extents flags [ 338.582401][T11280] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 338.583853][T11280] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2246: couldn't read orphan inode 15 (err -117) [ 338.593132][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 338.593166][ C0] EXT4-fs (loop5): initial error at time 1784107291: ext4_orphan_get:1399: inode 15 [ 338.593220][ C0] EXT4-fs (loop5): last error at time 1784107291: ext4_orphan_get:1399: inode 15 [ 338.660406][T11280] loop5: lost filesystem error report for type 5 error -117 [ 338.669155][T11280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.813783][T11270] loop4: detected capacity change from 0 to 32768 [ 338.825578][T11270] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2240 (11270) [ 338.879372][T11270] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 338.882792][T10431] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 338.901130][T11270] BTRFS info (device loop4): using blake2b checksum algorithm [ 339.040529][T11270] BTRFS info (device loop4): enabling ssd optimizations [ 339.075539][T10431] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 339.108896][T11270] BTRFS info (device loop4): turning on async discard [ 339.129513][T10431] usb 4-1: config 0 has no interface number 0 [ 339.136054][T11270] BTRFS info (device loop4): enabling free space tree [ 339.145465][T11270] BTRFS info (device loop4): use zstd compression, level 3 [ 339.184097][T10431] usb 4-1: config 0 interface 4 has no altsetting 0 [ 339.204016][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.228908][T10431] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.306444][T10431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.401518][T10431] usb 4-1: config 0 descriptor?? [ 339.478315][T10431] cp210x 4-1:0.4: cp210x converter detected [ 339.506444][T11311] netlink: 'syz.5.2252': attribute type 12 has an invalid length. [ 339.534965][T11311] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2252'. [ 339.846918][T10431] cp210x 4-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 339.906221][T10431] usb 4-1: cp210x converter now attached to ttyUSB0 [ 339.944067][T11316] batadv0: entered promiscuous mode [ 339.945384][T10431] usb 4-1: USB disconnect, device number 10 [ 340.037596][T10431] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.070553][T10431] cp210x 4-1:0.4: device disconnected [ 340.159324][ T5635] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 340.189991][T11316] batadv0: left promiscuous mode [ 340.525209][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 341.124997][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2264'. [ 341.142583][T10431] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 341.189743][T11339] netlink: 'syz.5.2264': attribute type 25 has an invalid length. [ 341.247382][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 341.302964][T10431] usb 5-1: Using ep0 maxpacket: 32 [ 341.328385][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.370609][T10431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.412114][T10431] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.457313][T10431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.537854][T10431] usb 5-1: config 0 descriptor?? [ 341.582992][T10431] hub 5-1:0.0: USB hub found [ 341.805745][T10431] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 342.085554][T11358] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2272'. [ 342.230172][T10431] hid-generic 0003:046D:C31C.0029: unknown main item tag 0x0 [ 342.380744][T10431] hid-generic 0003:046D:C31C.0029: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 342.443306][T10431] usb 5-1: USB disconnect, device number 12 [ 342.656453][T11375] loop5: detected capacity change from 0 to 512 [ 342.693202][T11375] EXT4-fs: Ignoring removed nobh option [ 342.728070][T11369] fido_id[11369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 342.757464][T11375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 342.805466][T11375] EXT4-fs (loop5): 1 truncate cleaned up [ 342.835908][T11375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.165088][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.089000][T11393] loop2: detected capacity change from 0 to 32768 [ 344.125843][T11393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2286 (11393) [ 344.218132][T11393] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.218683][T11414] sctp: Trying to GSO but underlying device doesn't support it. [ 344.278638][T11393] BTRFS info (device loop2): using sha256 checksum algorithm [ 344.575674][T11393] BTRFS info (device loop2): enabling ssd optimizations [ 344.612075][T11393] BTRFS info (device loop2): turning on async discard [ 344.639574][T11393] BTRFS info (device loop2): enabling free space tree [ 344.671084][T11434] loop3: detected capacity change from 0 to 1024 [ 344.725363][T11434] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 344.819431][T11434] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.2296: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.855502][T11434] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 344.861775][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 344.877369][ C0] EXT4-fs (loop3): initial error at time 1784107297: ext4_map_blocks:791: inode 3: block 2 [ 344.885973][T11434] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 344.887453][ C0] EXT4-fs (loop3): last error at time 1784107297: ext4_map_blocks:791: inode 3: block 2 [ 344.907067][ T30] audit: type=1800 audit(1784107297.403:115): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2286" name="file0" dev="loop2" ino=258 res=0 errno=0 [ 344.921172][T11438] loop4: detected capacity change from 0 to 512 [ 344.927922][T11434] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.2296: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.927984][T11434] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 344.954590][T11434] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 344.986196][T11434] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.2296: Failed to acquire dquot type 0 [ 345.000227][T11438] EXT4-fs: Ignoring removed nobh option [ 345.017458][T11438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.044480][T11434] loop3: lost filesystem error report for type 5 error -117 [ 345.044841][T11434] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 345.116419][T11438] EXT4-fs (loop4): 1 truncate cleaned up [ 345.130553][T11434] loop3: lost filesystem error report for type 5 error -117 [ 345.130872][T11434] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.2296: mark_inode_dirty error [ 345.157324][ T5629] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.198352][T11438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.217856][T11434] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 345.227603][T11434] EXT4-fs warning (device loop3): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 345.369934][T11434] EXT4-fs (loop3): 1 orphan inode deleted [ 345.421533][ T48] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.462390][T11434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.497178][ T48] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 345.514613][ T48] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 345.604254][ T48] EXT4-fs error (device loop3): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 0 [ 345.658877][T11434] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm syz.3.2296: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.699662][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.722585][T11434] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 345.756749][T11434] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 60928 [ 345.773483][T10420] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 345.804725][T11448] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 345.814298][T11434] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.2296: Failed to acquire dquot type 0 [ 345.959561][T10420] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.012149][T10420] usb 7-1: config 0 interface 0 has no altsetting 0 [ 346.041613][T10420] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 346.057231][T10420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.072640][ T48] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.099428][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.120532][T10420] usb 7-1: config 0 descriptor?? [ 346.148696][ T48] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.149173][ T48] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 346.222200][ T48] EXT4-fs error (device loop3): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 0 [ 346.259270][ T48] loop3: lost filesystem error report for type 5 error -117 [ 346.279240][ T5638] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 346.365779][ T5638] loop3: lost filesystem error report for type 5 error -117 [ 346.388916][ T5638] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 346.412327][T11456] batadv_slave_1: entered promiscuous mode [ 346.437763][T11458] loop1: detected capacity change from 0 to 1024 [ 346.454213][T11455] batadv_slave_1: left promiscuous mode [ 346.456678][ T5638] loop3: lost filesystem error report for type 5 error -117 [ 346.465168][T11458] EXT4-fs: Ignoring removed nobh option [ 346.470614][ T5638] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 346.491240][T11458] EXT4-fs: Ignoring removed bh option [ 346.535484][T11458] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 346.559293][ T5638] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.595084][T11458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 346.684457][T11458] System zones: 0-1, 3-12 [ 346.690856][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.729089][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.753561][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.809633][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.865329][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.883346][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.910422][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.967239][T10420] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 346.980857][T10420] steelseries 0003:1038:1410.002A: report_id 0 is invalid [ 347.013497][T10420] steelseries 0003:1038:1410.002A: item 0 0 1 8 parsing failed [ 347.034716][T10420] steelseries 0003:1038:1410.002A: parse failed [ 347.040790][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.051307][T10420] steelseries 0003:1038:1410.002A: probe with driver steelseries failed with error -22 [ 347.149943][T10420] usb 7-1: USB disconnect, device number 18 [ 347.476444][T11475] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2313'. [ 347.645952][T11479] loop5: detected capacity change from 0 to 256 [ 347.852142][T11484] loop6: detected capacity change from 0 to 512 [ 348.006028][T11484] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 348.105585][T11484] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 348.145984][T11484] EXT4-fs (loop6): orphan cleanup on readonly fs [ 348.157012][T11484] EXT4-fs warning (device loop6): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 348.197242][T11484] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 348.241703][T11484] EXT4-fs (loop6): 1 orphan inode deleted [ 348.291065][T11493] loop3: detected capacity change from 0 to 128 [ 348.308369][T11484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.328901][T11493] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 348.344749][T11493] hpfs: filesystem error: improperly stopped [ 348.356286][T11493] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 348.365956][T10420] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 348.397305][T11493] hpfs: You really don't want any checks? You are crazy... [ 348.421896][T11493] hpfs: hpfs_map_sector(): read error [ 348.444509][T11493] hpfs: code page support is disabled [ 348.458867][T11493] hpfs: hpfs_map_4sectors(): unaligned read [ 348.487157][T11493] hpfs: hpfs_map_4sectors(): unaligned read [ 348.500693][T11493] hpfs: filesystem error: unable to find root dir [ 348.535142][T10420] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 348.553650][T10420] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 348.569807][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.589782][T10420] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 348.625554][T10420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.635942][T11493] hpfs: hpfs_map_4sectors(): unaligned read [ 348.651047][T11493] hpfs: hpfs_map_sector(): read error [ 348.658544][T10420] usb 6-1: Product: syz [ 348.680015][T10420] usb 6-1: Manufacturer: syz [ 348.703604][T10420] usb 6-1: SerialNumber: syz [ 348.727747][T10420] usb 6-1: config 0 descriptor?? [ 348.774115][T11489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 348.782609][T11489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.074377][T11489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.120483][T11489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.303898][T11504] loop6: detected capacity change from 0 to 1024 [ 349.331972][T11504] EXT4-fs: Ignoring removed orlov option [ 349.350807][T11503] loop2: detected capacity change from 0 to 2048 [ 349.353544][T11504] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 349.406872][T11504] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 349.443741][T11504] EXT4-fs (loop6): invalid journal inode [ 349.468184][T11504] EXT4-fs (loop6): can't get journal size [ 349.530244][T11503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.574601][T11504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.593358][T10420] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 349.667058][T11503] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.722088][T11504] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 349.722088][T11504] [ 349.777105][T10420] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 349.779062][ T30] audit: type=1800 audit(1784107302.293:116): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2326" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 349.840930][T10420] usb 6-1: USB disconnect, device number 12 [ 349.949606][T11503] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.2326: bg 0: block 345: padding at end of block bitmap is not set [ 350.009178][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.035517][T11503] EXT4-fs (loop2): Remounting filesystem read-only [ 350.091402][T11503] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 0 [ 350.135582][T11503] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 350.250962][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.298569][T11520] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2330'. [ 350.300403][T11518] loop1: detected capacity change from 0 to 2048 [ 350.451636][T11518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.543560][T11518] EXT4-fs (loop1): shut down requested (1) [ 350.653041][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.326359][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 351.348692][ T196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.444251][T11541] macvlan2: entered allmulticast mode [ 351.463470][T11541] hsr0: entered allmulticast mode [ 351.473845][T11541] hsr_slave_0: entered allmulticast mode [ 351.488504][T11541] hsr_slave_1: entered allmulticast mode [ 351.519447][T11541] hsr0: entered promiscuous mode [ 351.549940][T11543] loop6: detected capacity change from 0 to 1024 [ 352.138940][T11530] loop2: detected capacity change from 0 to 32768 [ 352.168094][T11530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2333 (11530) [ 352.261960][T11530] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.309799][T11530] BTRFS info (device loop2): using crc32c checksum algorithm [ 352.377715][T11560] loop5: detected capacity change from 0 to 128 [ 352.476661][T11560] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.515803][T11530] BTRFS info (device loop2): enabling ssd optimizations [ 352.566961][T11530] BTRFS info (device loop2): turning on flush-on-commit [ 352.610205][T11530] BTRFS info (device loop2): enabling free space tree [ 352.655368][T11530] BTRFS info (device loop2): enabling auto defrag [ 352.695338][T11530] BTRFS info (device loop2): use lzo compression, level 1 [ 352.727560][T11530] BTRFS info (device loop2): max_inline set to 4096 [ 353.011117][T11582] loop6: detected capacity change from 0 to 256 [ 353.174699][ T30] audit: type=1800 audit(1784107305.683:117): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2354" name="file1" dev="loop6" ino=1048705 res=0 errno=0 [ 353.410168][ T5629] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 354.023778][T10425] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 354.086814][T11598] loop6: detected capacity change from 0 to 128 [ 354.186226][T10425] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 354.226378][T10425] usb 4-1: config 1 has no interface number 0 [ 354.246644][T10425] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 354.300845][T10425] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 354.337339][T10425] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.400889][T10425] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 354.446093][T10425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.474832][T10425] usb 4-1: Product: syz [ 354.487753][T10425] usb 4-1: Manufacturer: syz [ 354.503027][T10425] usb 4-1: SerialNumber: syz [ 354.525018][T11605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 354.579574][T11594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.605811][T11584] loop5: detected capacity change from 0 to 32768 [ 354.793726][T11607] loop6: detected capacity change from 0 to 4096 [ 354.821468][T11607] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.864824][T11594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.893562][T11607] EXT4-fs (loop6): Test dummy encryption mode enabled [ 354.951397][T11607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.018356][T11607] Quota error (device loop6): do_check_range: Getting block 1024 out of range 0-5 [ 355.067475][T11613] loop5: detected capacity change from 0 to 64 [ 355.367762][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.407709][T10425] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 355.549349][T10425] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 355.604260][T10425] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 355.655079][T10425] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 355.680138][T10425] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 355.691666][T11615] loop1: detected capacity change from 0 to 4096 [ 355.755011][T10425] usb 4-1: USB disconnect, device number 11 [ 355.782975][T11615] ntfs3(loop1): ino=0, mi_enum_attr [ 355.783737][T10425] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 355.871028][T11615] ntfs3(loop1): ino=0, mi_enum_attr [ 355.899360][T11615] ntfs3(loop1): ino=0, mi_enum_attr [ 356.095347][T11615] ntfs3(loop1): failed to convert "0080" to cp864 [ 356.121576][ T30] audit: type=1326 audit(1784107308.633:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.4.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2e99de59 code=0x7fc00000 [ 356.157058][T11615] ntfs3(loop1): ino=1e, mi_enum_attr [ 356.185758][T11630] input: syz0 as /devices/virtual/input/input26 [ 356.215239][T10425] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 356.431994][T10468] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 356.603404][T10468] usb 7-1: Using ep0 maxpacket: 16 [ 356.621908][T10468] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.647095][T10468] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 356.667079][T10468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.705296][T10468] usb 7-1: config 0 descriptor?? [ 356.768279][T11641] loop5: detected capacity change from 0 to 512 [ 356.785050][T11641] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.806250][ T30] audit: type=1326 audit(1784107309.323:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.4.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d2e99de59 code=0x7fc00000 [ 356.895786][T11641] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2380: bad orphan inode 131083 [ 356.905281][T11645] loop1: detected capacity change from 0 to 1024 [ 356.950766][T11645] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 356.999981][T11641] loop5: lost filesystem error report for type 5 error -117 [ 357.000243][T11645] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 357.007718][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 357.007750][ C1] EXT4-fs (loop5): initial error at time 1784107309: ext4_orphan_get:1425 [ 357.007793][ C1] EXT4-fs (loop5): last error at time 1784107309: ext4_orphan_get:1425 [ 357.076584][T11641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.126681][T11645] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #32: comm syz.1.2381: iget: special inode unallocated [ 357.155520][T11641] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1330: inode #12: block 7: comm syz.5.2380: path /387/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 357.174672][T10468] cherry 0003:046A:0027.002B: unknown main item tag 0x2 [ 357.237205][T10468] cherry 0003:046A:0027.002B: unknown main item tag 0x6 [ 357.256364][T11645] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 357.256764][T11645] EXT4-fs (loop1): no journal found [ 357.266235][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 357.266266][ C1] EXT4-fs (loop1): initial error at time 1784107309: ext4_get_journal_inode:5900: inode 32 [ 357.266323][ C1] EXT4-fs (loop1): last error at time 1784107309: ext4_get_journal_inode:5900: inode 32 [ 357.266397][T10468] cherry 0003:046A:0027.002B: ignoring exceeding usage max [ 357.304584][T11651] loop4: detected capacity change from 0 to 2048 [ 357.330399][T10468] cherry 0003:046A:0027.002B: hidraw0: USB HID v0.82 Device [HID 046a:0027] on usb-dummy_hcd.6-1/input0 [ 357.349850][T11645] EXT4-fs (loop1): can't get journal size [ 357.385980][T11645] EXT4-fs (loop1): filesystem is read-only [ 357.400244][T11651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.416000][T10468] usb 7-1: USB disconnect, device number 19 [ 357.436862][T11651] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.494036][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.527953][T11645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.604363][ T30] audit: type=1800 audit(1784107310.113:120): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2384" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 357.672597][T11651] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.2384: bg 0: block 345: padding at end of block bitmap is not set [ 357.682905][T11657] fido_id[11657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 357.761046][T11651] EXT4-fs (loop4): Remounting filesystem read-only [ 357.763372][T11645] EXT4-fs error (device loop1): ext4_lookup:1777: inode #2: comm syz.1.2381: bad inode number: 15 [ 357.830528][T11651] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 0 [ 357.856018][T11651] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 357.944520][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.144663][T11664] loop2: detected capacity change from 0 to 32768 [ 358.153974][T11664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2388 (11664) [ 358.179951][T11664] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.190369][T11664] BTRFS info (device loop2): using sha256 checksum algorithm [ 358.227888][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.350098][T11672] loop3: detected capacity change from 0 to 8192 [ 358.392531][T11672] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.465263][T11664] BTRFS info (device loop2): enabling ssd optimizations [ 358.474218][T11664] BTRFS info (device loop2): turning on sync discard [ 358.480937][T11664] BTRFS info (device loop2): enabling free space tree [ 358.568534][ T5629] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.588838][T11708] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2400'. [ 360.417058][T11723] loop5: detected capacity change from 0 to 8 [ 360.698820][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 360.808990][T11731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.818649][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 360.825987][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 360.833265][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 361.111177][T11714] loop3: detected capacity change from 0 to 32768 [ 361.169984][T11714] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 361.204250][T10425] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 361.350558][T11714] XFS (loop3): Ending clean mount [ 361.415833][T10425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.489395][T10425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.546480][T10425] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 361.600505][T10425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.647254][T10425] usb 2-1: config 0 descriptor?? [ 361.674811][ T5638] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 361.759662][T11764] loop6: detected capacity change from 0 to 256 [ 361.825468][T11764] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.949466][ T30] audit: type=1800 audit(1784107314.463:121): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2420" name="file1" dev="loop6" ino=1048709 res=0 errno=0 [ 362.057285][ T30] audit: type=1800 audit(1784107314.463:122): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2420" name="file1" dev="loop6" ino=1048709 res=0 errno=0 [ 362.155945][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.224670][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.264712][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.287322][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.329303][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.378331][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.428523][T10425] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 362.440406][T11777] loop2: detected capacity change from 0 to 2048 [ 362.497840][T10425] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 362.565953][T11778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.601154][T11774] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 362.650605][T10425] cp2112 0003:10C4:EA90.002C: error requesting version [ 362.680327][T10425] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -71 [ 362.695451][T11774] FAT-fs (loop6): Filesystem has been set read-only [ 362.786921][T10425] usb 2-1: USB disconnect, device number 16 [ 363.208145][T11784] fido_id[11784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 363.482237][T10464] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 363.665619][T10464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.709600][T10464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.769392][T10464] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 363.778911][T10464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.812149][T10464] usb 6-1: config 0 descriptor?? [ 363.953368][T10425] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 364.156283][T10425] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.179639][T10425] usb 2-1: config 10 has an invalid interface number: 111 but max is 0 [ 364.210095][T10425] usb 2-1: config 10 has no interface number 0 [ 364.238409][T10425] usb 2-1: config 10 interface 111 has no altsetting 0 [ 364.265922][T10464] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0 [ 364.271668][T10425] usb 2-1: string descriptor 0 read error: -22 [ 364.295605][T10425] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=8e.18 [ 364.329683][T10425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.336969][T11796] loop6: detected capacity change from 0 to 32768 [ 364.346157][T10464] arvo 0003:1E7D:30D4.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 364.450973][T10425] rndis_host 2-1:10.111: More than one union descriptor, skipping ... [ 364.475592][T11796] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.523488][T10425] rndis_host 2-1:10.111: skipping garbage [ 364.581591][T10425] rndis_host 2-1:10.111: ACM capabilities 04, not really RNDIS? [ 364.651846][T11796] XFS (loop6): Ending clean mount [ 364.693376][T10425] cdc_acm 2-1:10.111: More than one union descriptor, skipping ... [ 364.740211][T10464] usb 6-1: USB disconnect, device number 13 [ 364.750007][T10425] cdc_acm 2-1:10.111: skipping garbage [ 364.809476][T10425] usb 2-1: USB disconnect, device number 17 [ 364.967399][ T6179] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 365.288959][T11824] loop6: detected capacity change from 0 to 512 [ 365.349543][T11824] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.431652][T11824] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2441: bad orphan inode 131083 [ 365.528215][T11824] loop6: lost filesystem error report for type 5 error -117 [ 365.545253][T11824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.720493][T11824] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1330: inode #12: block 7: comm syz.6.2441: path /353/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 365.752865][T11834] loop1: detected capacity change from 0 to 256 [ 365.805779][T11834] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.904461][ T30] audit: type=1800 audit(1784107318.423:123): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2445" name="file1" dev="loop1" ino=1048710 res=0 errno=0 [ 365.990472][ T30] audit: type=1800 audit(1784107318.443:124): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2445" name="file1" dev="loop1" ino=1048710 res=0 errno=0 [ 366.013974][T10426] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 366.027116][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.038119][T11842] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 366.098528][T11842] FAT-fs (loop1): Filesystem has been set read-only [ 366.195833][T10426] usb 4-1: Using ep0 maxpacket: 32 [ 366.217034][T10426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.260288][T10426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.284781][T10426] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.305668][T10426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.344853][T10426] usb 4-1: config 0 descriptor?? [ 366.375476][T10426] hub 4-1:0.0: USB hub found [ 366.411704][T11849] syz_tun: entered promiscuous mode [ 366.433594][T11849] vlan2: entered promiscuous mode [ 366.587849][T10426] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 366.661940][T11852] loop6: detected capacity change from 0 to 256 [ 366.872683][T10468] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 367.009430][T10426] hid-generic 0003:046D:C31C.002E: unknown main item tag 0x0 [ 367.053408][T10468] usb 2-1: Using ep0 maxpacket: 16 [ 367.076489][T10468] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.079327][T10426] hid-generic 0003:046D:C31C.002E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 367.113341][T10468] usb 2-1: config 0 has no interface number 0 [ 367.144463][T10468] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.205686][T10468] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.225592][T10426] usb 4-1: USB disconnect, device number 12 [ 367.243900][T10468] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 367.281359][T10468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.323704][T10468] usb 2-1: config 0 descriptor?? [ 367.341542][T11861] fido_id[11861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 367.774965][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.818504][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.379785][T11874] loop4: detected capacity change from 0 to 4096 [ 368.414453][T11874] EXT4-fs: Ignoring removed i_version option [ 368.478296][T11874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.625220][T10468] hid (null): report_id 2050 is invalid [ 368.638944][T11874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.646756][T10468] usb 2-1: USB disconnect, device number 18 [ 368.944051][T11870] loop2: detected capacity change from 0 to 131072 [ 368.954201][T11870] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 368.963601][T11870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 368.972058][ T30] audit: type=1800 audit(1784107321.483:125): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2463" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 369.001129][T11870] F2FS-fs (loop2): invalid crc value [ 369.109761][T11870] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 369.127163][T11870] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 369.134476][T11870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 369.269217][T11865] loop6: detected capacity change from 0 to 32768 [ 369.289104][T11870] F2FS-fs (loop2): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. e16374e0 [ 369.337060][T11886] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 369.415327][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.537710][T11865] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 369.691485][T11892] ipvlan3: entered promiscuous mode [ 369.736871][T11892] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 369.770949][T11892] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 369.847838][T11892] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 370.049012][T11895] loop5: detected capacity change from 0 to 4096 [ 370.065841][ T6179] ocfs2: Unmounting device (7,6) on (node local) [ 370.169598][T11895] NILFS (loop5): invalid segment: Checksum error in segment payload [ 370.219300][T11895] NILFS (loop5): trying rollback from an earlier position [ 370.333575][T11895] NILFS (loop5): recovery complete [ 370.383570][T11903] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.454464][T11905] loop2: detected capacity change from 0 to 8 [ 371.063874][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2474'. [ 371.538822][T11930] xt_hashlimit: max too large, truncated to 1048576 [ 371.571693][T11930] sctp: [Deprecated]: syz.4.2486 (pid 11930) Use of int in maxseg socket option. [ 371.571693][T11930] Use struct sctp_assoc_value instead [ 372.220874][T11915] loop5: detected capacity change from 0 to 32768 [ 372.257839][T11915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2480 (11915) [ 372.380982][T11915] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.427924][T11915] BTRFS info (device loop5): using crc32c checksum algorithm [ 372.670522][T11915] BTRFS info (device loop5): enabling ssd optimizations [ 372.726856][T11915] BTRFS info (device loop5): turning on flush-on-commit [ 372.767829][T11915] BTRFS info (device loop5): enabling free space tree [ 372.819996][T11915] BTRFS info (device loop5): enabling auto defrag [ 372.868207][T11915] BTRFS info (device loop5): use lzo compression, level 1 [ 372.915795][T11915] BTRFS info (device loop5): max_inline set to 4096 [ 372.952480][T11968] loop6: detected capacity change from 0 to 1024 [ 372.997853][T11968] EXT4-fs: Ignoring removed oldalloc option [ 373.005778][T11932] loop2: detected capacity change from 0 to 32768 [ 373.006532][T11966] loop1: detected capacity change from 0 to 2048 [ 373.013884][T11968] EXT4-fs: Ignoring removed oldalloc option [ 373.062148][T11932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2487 (11932) [ 373.093385][T11968] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 373.156402][T11932] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.170915][T11932] BTRFS info (device loop2): using sha256 checksum algorithm [ 373.181091][T11968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.236944][T11966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.307629][ T5634] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.334014][T11968] EXT4-fs (loop6): shut down requested (1) [ 373.495805][T11932] BTRFS info (device loop2): rebuilding free space tree [ 373.765332][T11932] BTRFS info (device loop2): disabling free space tree [ 373.786187][T11932] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 373.801848][T11932] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 373.914690][T11932] BTRFS info (device loop2): enabling ssd optimizations [ 373.929702][T11932] BTRFS info (device loop2): turning on async discard [ 373.953357][T11932] BTRFS info (device loop2): force clearing of disk cache [ 373.966163][T11932] BTRFS info (device loop2): enabling auto defrag [ 373.987910][T11932] BTRFS info (device loop2): max_inline set to 485 [ 374.062106][T11972] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 374.268965][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.346946][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.640492][T12007] loop6: detected capacity change from 0 to 256 [ 374.716704][T12007] exFAT-fs (loop6): error, The cluster chain has a loop [ 374.798500][T12007] exFAT-fs (loop6): Filesystem has been set read-only [ 374.849490][T12007] exFAT-fs (loop6): failed to count the number of clusters in root [ 374.916627][T12007] exFAT-fs (loop6): failed to recognize exfat type [ 374.980337][T11999] BTRFS info (device loop2 state M): max_inline set to 485 [ 375.337369][T12015] loop3: detected capacity change from 0 to 2048 [ 375.378976][T12015] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 375.493347][T12021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.607234][ T5629] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.807709][T12025] loop9: detected capacity change from 0 to 7 [ 375.881103][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.890579][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 375.960106][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.969426][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.026603][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.035956][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.053292][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.062579][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.077324][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.086613][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.096822][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.106111][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.114769][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.124091][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.133255][T12025] ldm_validate_partition_table(): Disk read failed. [ 376.192979][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.202429][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.210690][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.220051][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.228654][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.237919][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 376.251006][T12025] Dev loop9: unable to read RDB block 0 [ 376.278007][T12025] loop9: unable to read partition table [ 376.298679][T10471] IPVS: starting estimator thread 0... [ 376.320329][T12025] loop9: partition table beyond EOD, truncated [ 376.335467][T12025] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 376.356689][T12032] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 376.464604][T12035] IPVS: using max 25 ests per chain, 60000 per kthread [ 376.978318][T12045] loop6: detected capacity change from 0 to 4096 [ 377.159494][T12053] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.391004][T12028] loop1: detected capacity change from 0 to 32768 [ 377.428147][T12028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2515 (12028) [ 377.590689][T12028] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 377.631164][T12028] BTRFS info (device loop1): using blake2b checksum algorithm [ 377.919523][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.929063][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.010106][T12028] BTRFS info (device loop1): enabling ssd optimizations [ 378.064263][T12028] BTRFS info (device loop1): turning on async discard [ 378.118234][T12028] BTRFS info (device loop1): enabling free space tree [ 378.156588][T12028] BTRFS info (device loop1): use zstd compression, level 3 [ 378.388625][T12081] loop5: detected capacity change from 0 to 2048 [ 378.517313][T12081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.639847][ T5633] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 378.966864][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.324876][T12104] binder: BINDER_SET_CONTEXT_MGR already set [ 379.409200][T12104] binder: 12103:12104 ioctl 4018620d 200000000240 returned -16 [ 379.518032][T12114] netlink: 'syz.3.2543': attribute type 2 has an invalid length. [ 380.328166][T12130] loop3: detected capacity change from 0 to 4096 [ 380.360662][T12130] EXT4-fs: Ignoring removed i_version option [ 380.399510][T12130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.488517][T12130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.555719][ T30] audit: type=1800 audit(1784107333.063:126): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2550" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 380.604190][T12133] loop6: detected capacity change from 0 to 4096 [ 380.676284][T12133] NILFS (loop6): invalid segment: Checksum error in segment payload [ 380.729090][T12133] NILFS (loop6): trying rollback from an earlier position [ 380.787306][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.831525][T12133] NILFS (loop6): recovery complete [ 380.846307][T12141] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.064789][T10471] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 381.263344][T10471] usb 3-1: Using ep0 maxpacket: 8 [ 381.290301][T10471] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 381.313844][T10471] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 381.353655][T10431] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 381.373565][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.420342][T10471] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.427680][T12128] loop5: detected capacity change from 0 to 32768 [ 381.474716][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.486466][T12128] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2549 (12128) [ 381.524306][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.537224][T12128] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 381.547019][T10431] usb 2-1: Using ep0 maxpacket: 8 [ 381.560327][T12128] BTRFS info (device loop5): using blake2b checksum algorithm [ 381.563613][T10471] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 381.599837][T10431] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 381.619664][T10431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.644931][T10471] usb 3-1: config 168 interface 0 has no altsetting 0 [ 381.689234][T10471] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 381.704700][T10431] pvrusb2: Hardware description: Terratec Grabster AV400 [ 381.716112][T10471] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 381.728213][T10431] pvrusb2: ********** [ 381.733676][T10431] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 381.746262][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.763710][T10431] pvrusb2: Important functionality might not be entirely working. [ 381.771701][T10471] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.781094][T12128] BTRFS info (device loop5): enabling ssd optimizations [ 381.801845][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.816376][T10431] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 381.839411][T12128] BTRFS info (device loop5): turning on async discard [ 381.846153][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.857837][T10431] pvrusb2: ********** [ 381.859246][T12128] BTRFS info (device loop5): enabling free space tree [ 381.876167][T12128] BTRFS info (device loop5): use zstd compression, level 3 [ 381.899410][T10471] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 381.920096][T12165] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.941108][ T2362] pvrusb2: Invalid write control endpoint [ 381.955535][T10471] usb 3-1: config 168 interface 0 has no altsetting 0 [ 381.980061][T10471] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 381.987647][T12165] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 382.026090][T10471] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.087747][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.094554][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2560'. [ 382.119660][T10471] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.154298][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.158261][T12165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.187468][T12168] netlink: 'syz.6.2560': attribute type 10 has an invalid length. [ 382.188144][T10431] usb 2-1: USB disconnect, device number 19 [ 382.207852][T10471] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.233061][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'. [ 382.244524][T12165] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 382.247307][T10471] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 382.270074][ T5634] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 382.287209][T10471] usb 3-1: config 168 interface 0 has no altsetting 0 [ 382.305098][T12168] geneve2: entered promiscuous mode [ 382.313302][T10471] usb 3-1: string descriptor 0 read error: -22 [ 382.322726][T10471] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 382.328039][T12165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.343608][T10471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.350631][T12168] geneve2: entered allmulticast mode [ 382.378066][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.385865][T12165] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 382.424497][ T2362] pvrusb2: Invalid write control endpoint [ 382.438336][T10471] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 382.466339][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 382.480776][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 382.491103][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 382.506466][ T2362] pvrusb2: Device being rendered inoperable [ 382.519300][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 382.525784][T12165] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.538551][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 382.589182][T12165] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 382.635469][ T2362] pvrusb2: Attached sub-driver cx25840 [ 382.651873][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 382.677331][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 382.757165][T10467] usb 3-1: USB disconnect, device number 18 [ 382.798684][T12178] xt_hashlimit: size too large, truncated to 1048576 [ 382.809738][T12165] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.835609][T12165] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 383.049782][T12165] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 383.068004][T12165] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 383.317805][T12190] input: syz0 as /devices/virtual/input/input27 [ 383.902215][ T4941] Bluetooth: hci1: command 0x0406 tx timeout [ 383.934962][T12199] loop1: detected capacity change from 0 to 4096 [ 383.983800][T12199] NILFS (loop1): invalid segment: Checksum error in segment payload [ 384.005388][T12199] NILFS (loop1): trying rollback from an earlier position [ 384.072686][T12207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.077432][T12202] bond1: ARP target 9.0.0.0 is already present [ 384.118699][T12199] NILFS (loop1): recovery complete [ 384.159285][T12211] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.163462][T12202] bond1: option arp_ip_target: invalid value (9) [ 384.222426][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 384.287779][T12202] bond1 (unregistering): Released all slaves [ 384.350274][T12214] loop6: detected capacity change from 0 to 2048 [ 384.382079][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 384.471456][T12214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.541860][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 384.863801][ T4941] Bluetooth: hci5: command 0x0406 tx timeout [ 384.906547][T12219] loop5: detected capacity change from 0 to 32768 [ 384.936585][T12219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2577 (12219) [ 384.955541][T12219] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.965722][T12219] BTRFS info (device loop5): using sha256 checksum algorithm [ 385.053305][T12219] BTRFS info (device loop5): enabling ssd optimizations [ 385.060338][T12219] BTRFS info (device loop5): turning on sync discard [ 385.067734][T12219] BTRFS info (device loop5): enabling free space tree [ 385.102231][ T4941] Bluetooth: hci0: command 0x0405 tx timeout [ 385.487101][ T5634] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.555413][ T5645] Bluetooth: unknown link type 128 [ 385.735455][T12248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.762530][T12248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.809529][T12248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.860123][T12248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.907807][T12248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.954708][T12248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.451247][T12269] vivid-006: disconnect [ 386.504769][T12273] input: syz0 as /devices/virtual/input/input28 [ 386.517153][T12268] vivid-006: reconnect [ 386.827885][T12282] loop3: detected capacity change from 0 to 256 [ 386.954801][T12282] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 386.999747][T12282] FAT-fs (loop3): Filesystem has been set read-only [ 387.487162][T12294] loop6: detected capacity change from 0 to 128 [ 387.497092][T12295] loop3: detected capacity change from 0 to 512 [ 387.554276][T12295] EXT4-fs: Ignoring removed oldalloc option [ 387.561403][T12294] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 387.579580][T12295] EXT4-fs (loop3): Test dummy encryption mode enabled [ 387.626894][T12294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.663161][ T4941] Bluetooth: hci1: command 0x0406 tx timeout [ 387.672458][T12299] loop4: detected capacity change from 0 to 512 [ 387.714667][T12295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.792857][T12295] EXT4-fs (loop3): shut down requested (1) [ 387.821917][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 387.827991][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 387.830678][T12299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.891977][T12299] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.902596][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 387.927747][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.989798][ T5645] Bluetooth: hci0: command 0x0405 tx timeout [ 387.995929][ T4941] Bluetooth: hci5: command 0x0406 tx timeout [ 388.121514][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.707091][T12322] loop4: detected capacity change from 0 to 128 [ 388.764313][T12322] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.830055][ T30] audit: type=1800 audit(1784107341.343:127): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2615" name="file2" dev="loop4" ino=1048712 res=0 errno=0 [ 388.893598][T12325] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2616'. [ 389.158247][ T3378] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.266390][T12330] loop5: detected capacity change from 0 to 4096 [ 389.411472][T12330] ntfs3(loop5): Failed to load $Extend (-22). [ 389.430181][T12337] loop4: detected capacity change from 0 to 64 [ 389.453661][T12330] ntfs3(loop5): Failed to initialize $Extend. [ 389.569589][T12337] hfs: request for non-existent node 131072 in B*Tree [ 389.608848][T12337] hfs: request for non-existent node 131072 in B*Tree [ 389.902455][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 390.062226][ T5645] Bluetooth: hci0: command 0x0405 tx timeout [ 390.080470][T12344] openvswitch: netlink: IPv4 tunnel dst address is zero [ 390.151121][T12344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.182080][T12323] loop6: detected capacity change from 0 to 32768 [ 390.251323][T12323] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 390.358559][T12323] JBD2: Ignoring recovery information on journal [ 390.473767][T12323] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 390.714498][T12323] (syz.6.2613,12323,0):ocfs2_check_dir_entry:312 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds [ 390.714662][T12323] (syz.6.2613,12323,0):ocfs2_find_dir_space_el:3546 ERROR: status = -2 [ 390.737626][T12323] (syz.6.2613,12323,0):ocfs2_prepare_dir_for_insert:4342 ERROR: status = -2 [ 390.746730][T12323] (syz.6.2613,12323,0):ocfs2_rename:1487 ERROR: status = -2 [ 390.756664][T12323] (syz.6.2613,12323,0):ocfs2_rename:1700 ERROR: status = -2 [ 390.925358][T12351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.957499][T12351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.993448][T12351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.010414][ T6179] ocfs2: Unmounting device (7,6) on (node local) [ 391.013515][T12351] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.052037][T12351] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 391.076883][T12351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.362265][T10431] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 391.450952][T12366] loop5: detected capacity change from 0 to 128 [ 391.477432][T12366] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.557234][T10431] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 391.574920][ T30] audit: type=1800 audit(1784107344.093:128): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2633" name="file2" dev="loop5" ino=1048714 res=0 errno=0 [ 391.671556][T12366] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 391.715779][T10431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.719527][T12366] FAT-fs (loop5): Filesystem has been set read-only [ 391.781565][T10431] usb 5-1: Product: syz [ 391.811478][T10431] usb 5-1: Manufacturer: syz [ 391.883303][T10431] usb 5-1: SerialNumber: syz [ 392.124518][ T5634] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.827686][T10431] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 392.868826][T10431] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 392.898948][T12396] loop5: detected capacity change from 0 to 128 [ 392.918233][T10431] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 392.937313][T12398] loop6: detected capacity change from 0 to 2048 [ 392.943999][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 392.946852][T12396] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 392.950034][ T4941] Bluetooth: hci1: command 0x0406 tx timeout [ 392.978596][T10431] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 393.025064][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 393.031232][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 393.051200][T10431] usb 5-1: USB disconnect, device number 13 [ 393.065080][T12396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.083432][T12398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.106472][ T5645] Bluetooth: hci0: command 0x0405 tx timeout [ 393.112638][ T4941] Bluetooth: hci5: command 0x0406 tx timeout [ 393.333883][T12405] loop3: detected capacity change from 0 to 512 [ 393.385999][T12405] EXT4-fs error (device loop3): ext4_iget_extra_inode:5179: inode #15: comm syz.3.2646: corrupted in-inode xattr: e_value out of bounds [ 393.428385][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.477676][T12405] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 393.478248][T12405] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2646: couldn't read orphan inode 15 (err -117) [ 393.487519][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 393.487550][ C0] EXT4-fs (loop3): initial error at time 1784107345: ext4_iget_extra_inode:5179: inode 15 [ 393.487604][ C0] EXT4-fs (loop3): last error at time 1784107345: ext4_iget_extra_inode:5179: inode 15 [ 393.566926][T12405] loop3: lost filesystem error report for type 5 error -117 [ 393.615541][T12405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.705287][T12405] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #2: comm syz.3.2646: directory missing '.' [ 393.971137][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.950315][T12433] loop4: detected capacity change from 0 to 512 [ 394.990291][T12433] EXT4-fs: Ignoring removed nobh option [ 395.029727][T12433] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.104384][T12437] loop6: detected capacity change from 0 to 512 [ 395.121265][T12433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.248591][T12437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.297686][T12437] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.319998][T12437] EXT4-fs (loop6): shut down requested (2) [ 395.403182][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.754022][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2665'. [ 395.967379][T12433] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 396.069692][T12466] loop3: detected capacity change from 0 to 128 [ 396.093768][T12466] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 396.166023][ T5635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.167418][ T30] audit: type=1800 audit(1784107348.683:129): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2671" name="file2" dev="loop3" ino=1048716 res=0 errno=0 [ 396.391876][T10431] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 396.462041][T12373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 396.562179][T10431] usb 7-1: Using ep0 maxpacket: 32 [ 396.587384][T10431] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 396.624234][T10431] usb 7-1: config 0 has no interface number 0 [ 396.658541][T10431] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 396.688842][T10431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.717671][T10431] usb 7-1: Product: syz [ 396.723742][T10431] usb 7-1: Manufacturer: syz [ 396.730014][T10431] usb 7-1: SerialNumber: syz [ 396.748571][T10431] usb 7-1: config 0 descriptor?? [ 396.767442][T10431] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 396.991413][T10431] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 397.029225][T10431] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 397.306475][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 397.369025][T12493] loop1: detected capacity change from 0 to 512 [ 397.411096][T12493] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.469942][T12493] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 397.479611][T12493] EXT4-fs (loop1): orphan cleanup on readonly fs [ 397.497309][T12493] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4221: comm syz.1.2682: Allocating blocks 41-42 which overlap fs metadata [ 397.514554][T12493] loop1: lost filesystem error report for type 5 error -117 [ 397.515757][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 397.516002][T10425] usb 7-1: USB disconnect, device number 20 [ 397.523302][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 397.542896][ C0] EXT4-fs (loop1): initial error at time 1784107350: ext4_mb_mark_diskspace_used:4221 [ 397.552540][ C0] EXT4-fs (loop1): last error at time 1784107350: ext4_mb_mark_diskspace_used:4221 [ 397.647122][T12493] EXT4-fs (loop1): Remounting filesystem read-only [ 397.667625][T12501] loop3: detected capacity change from 0 to 256 [ 397.677544][T12493] Quota error (device loop1): write_blk: dquota write failed [ 397.678712][T10425] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 397.692040][T12501] exFAT-fs (loop3): error, no upcase table entry. Please run fsck [ 397.740016][T12493] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 397.760296][T12501] exFAT-fs (loop3): Filesystem has been set read-only [ 397.786197][T10425] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 397.792106][T12501] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 397.816687][T12493] EXT4-fs (loop1): 1 truncate cleaned up [ 397.845408][T12493] EXT4-fs (loop1): pa ffff88803557f1d0: logic 1, phys. 41, len 23 [ 397.850413][T10425] quatech2 7-1:0.51: device disconnected [ 397.882863][T12493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.199161][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.419770][T12506] No fuse device found [ 398.673722][T12491] loop5: detected capacity change from 0 to 32768 [ 398.690185][T12491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2681 (12491) [ 398.761469][T12491] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 398.791528][T12491] BTRFS info (device loop5): using sha256 checksum algorithm [ 398.867824][T12491] BTRFS info (device loop5): rebuilding free space tree [ 398.910366][T12491] BTRFS info (device loop5): disabling free space tree [ 398.921268][T12491] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.933526][T12491] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 398.960899][T12491] BTRFS info (device loop5): enabling ssd optimizations [ 398.973689][T12491] BTRFS info (device loop5): turning on async discard [ 398.980583][T12491] BTRFS info (device loop5): force clearing of disk cache [ 398.990033][T12491] BTRFS info (device loop5): enabling auto defrag [ 398.998419][T12491] BTRFS info (device loop5): max_inline set to 485 [ 399.453780][T10425] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 399.510151][T12491] BTRFS info (device loop5 state M): max_inline set to 485 [ 399.583507][T12504] loop3: detected capacity change from 0 to 32768 [ 399.616288][T10425] usb 5-1: Using ep0 maxpacket: 16 [ 399.636313][T10425] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 399.670303][ T30] audit: type=1800 audit(1784107352.183:130): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2686" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 399.671520][T10425] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 399.778026][ T5634] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 399.831188][T10425] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.859081][T10425] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 399.888647][T10425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.918174][T10425] usb 5-1: Product: syz [ 399.929662][T10425] usb 5-1: Manufacturer: syz [ 399.940936][T10425] usb 5-1: SerialNumber: syz [ 399.979852][T10425] usb 5-1: config 0 descriptor?? [ 400.338845][T10425] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 400.444317][T12551] netlink: 'syz.3.2699': attribute type 10 has an invalid length. [ 400.487719][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2699'. [ 400.655621][T10426] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 400.863414][T10426] usb 6-1: Using ep0 maxpacket: 8 [ 400.890539][T10426] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 400.947066][T12551] team0: Port device geneve1 added [ 400.947264][T10426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.964222][T10425] usb 5-1: USB disconnect, device number 14 [ 400.964297][ C0] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 401.128429][T12559] loop2: detected capacity change from 0 to 1024 [ 401.159107][T10426] pvrusb2: Hardware description: Terratec Grabster AV400 [ 401.210074][T10426] pvrusb2: ********** [ 401.234876][T12559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 401.246814][T10426] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 401.259337][T12559] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.369684][T10426] pvrusb2: Important functionality might not be entirely working. [ 401.413551][T10426] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 401.466228][T12568] loop6: detected capacity change from 0 to 128 [ 401.473888][T10426] pvrusb2: ********** [ 401.501602][ T2362] pvrusb2: Invalid write control endpoint [ 401.503772][T12568] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.508687][T12559] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2704: lblock 0 mapped to illegal pblock 0 (length 6) [ 401.678705][T12572] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2704: lblock 0 mapped to illegal pblock 0 (length 1) [ 401.711003][ T30] audit: type=1800 audit(1784107354.223:131): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2706" name="file2" dev="loop6" ino=1048718 res=0 errno=0 [ 401.720951][T12566] loop3: detected capacity change from 0 to 4096 [ 401.733031][T12573] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 401.733073][T12573] FAT-fs (loop6): Filesystem has been set read-only [ 401.828291][T12572] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 401.848322][T12566] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 401.889485][T10426] usb 6-1: USB disconnect, device number 14 [ 401.925508][ T2362] pvrusb2: Invalid write control endpoint [ 401.931076][T12572] EXT4-fs (loop2): This should not happen!! Data will be lost [ 401.931076][T12572] [ 401.980122][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 402.048196][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 402.090856][T12566] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 402.093450][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 402.169189][T12566] ntfs3(loop3): Failed to load $Extend (-2). [ 402.183963][ T2362] pvrusb2: Device being rendered inoperable [ 402.201999][T12566] ntfs3(loop3): Failed to initialize $Extend. [ 402.206082][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 402.251227][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 402.327620][ T2362] pvrusb2: Attached sub-driver cx25840 [ 402.333278][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 402.347071][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 402.488984][ T5629] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 402.594413][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.757894][T12579] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2710'. [ 403.191225][T12593] loop6: detected capacity change from 0 to 512 [ 403.217469][T12593] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.281100][T12593] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4221: comm syz.6.2717: Allocating blocks 41-42 which overlap fs metadata [ 403.357896][T12593] loop6: lost filesystem error report for type 5 error -117 [ 403.360024][T12593] EXT4-fs (loop6): Remounting filesystem read-only [ 403.367484][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 403.367520][ C1] EXT4-fs (loop6): initial error at time 1784107355: ext4_mb_mark_diskspace_used:4221 [ 403.367567][ C1] EXT4-fs (loop6): last error at time 1784107355: ext4_mb_mark_diskspace_used:4221 [ 403.475873][T12593] Quota error (device loop6): write_blk: dquota write failed [ 403.492857][T12593] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 403.536084][T12593] Quota error (device loop6): write_blk: dquota write failed [ 403.554827][T12593] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 403.583619][T12593] EXT4-fs (loop6): 1 truncate cleaned up [ 403.605692][T12593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.824771][T12602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 403.895990][T12585] loop2: detected capacity change from 0 to 32768 [ 403.925810][T12585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2711 (12585) [ 403.980901][T12585] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 404.026387][T12585] BTRFS info (device loop2): using crc32c checksum algorithm [ 404.087255][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.154403][T12585] BTRFS info (device loop2): enabling ssd optimizations [ 404.164172][T10426] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 404.178072][T12585] BTRFS info (device loop2): turning on flush-on-commit [ 404.210623][T12585] BTRFS info (device loop2): enabling free space tree [ 404.231811][T12585] BTRFS info (device loop2): force zlib compression, level 3 [ 404.239270][T12585] BTRFS info (device loop2): max_inline set to 4096 [ 404.325541][T10426] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.354111][T10426] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.371253][T10426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.380988][T10426] usb 2-1: SerialNumber: syz [ 404.444037][T12627] netlink: 'syz.5.2725': attribute type 10 has an invalid length. [ 404.473351][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2725'. [ 404.523330][T10424] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 404.604670][T12627] team0: Port device geneve1 added [ 404.626061][ T5629] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 404.693341][T10424] usb 7-1: Using ep0 maxpacket: 16 [ 404.719866][T10424] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.758203][T10424] usb 7-1: config 0 interface 0 has no altsetting 0 [ 404.785408][T10424] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 404.832228][T10424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.947746][T10424] usb 7-1: config 0 descriptor?? [ 405.063844][T10426] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.231888][T10431] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 405.289448][T10420] usb 2-1: USB disconnect, device number 20 [ 405.393773][T10431] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 405.419676][T10431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.453962][T10424] mcp2221 0003:04D8:00DD.0030: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 405.464074][T10431] usb 6-1: config 0 descriptor?? [ 405.497044][T10431] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 405.644813][T10426] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 405.833782][T10426] usb 3-1: Using ep0 maxpacket: 32 [ 405.843049][T10426] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 405.866748][T10426] usb 3-1: config 0 has no interface number 0 [ 405.887277][T10426] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 405.896990][T10431] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 405.924230][T10467] usb 7-1: USB disconnect, device number 21 [ 405.946951][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.985868][T10426] usb 3-1: Product: syz [ 405.990121][T10426] usb 3-1: Manufacturer: syz [ 405.997036][T10426] usb 3-1: SerialNumber: syz [ 406.061139][T10426] usb 3-1: config 0 descriptor?? [ 406.090220][T12654] loop1: detected capacity change from 0 to 512 [ 406.146433][T12654] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.160793][T12653] loop3: detected capacity change from 0 to 1024 [ 406.218677][T12654] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4221: comm syz.1.2736: Allocating blocks 41-42 which overlap fs metadata [ 406.276922][T12654] loop1: lost filesystem error report for type 5 error -117 [ 406.279279][T12654] EXT4-fs (loop1): Remounting filesystem read-only [ 406.286738][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 406.286772][ C1] EXT4-fs (loop1): initial error at time 1784107358: ext4_mb_mark_diskspace_used:4221 [ 406.286817][ C1] EXT4-fs (loop1): last error at time 1784107358: ext4_mb_mark_diskspace_used:4221 [ 406.299636][T10431] gspca_cpia1: usb_control_msg 02, error -71 [ 406.304228][T12654] Quota error (device loop1): write_blk: dquota write failed [ 406.368920][T12654] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 406.382956][T12654] Quota error (device loop1): write_blk: dquota write failed [ 406.390576][T12654] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 406.409104][T10431] gspca_cpia1: usb_control_msg 05, error -71 [ 406.430076][T10431] cpia1 6-1:0.0: unexpected systemstate: 00 [ 406.443472][T12654] EXT4-fs (loop1): 1 truncate cleaned up [ 406.474369][T10431] usb 6-1: USB disconnect, device number 15 [ 406.476309][T12654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.584794][T10426] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 406.607722][T10426] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 406.831061][T10426] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 406.877518][T10426] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 406.930078][T10426] usb 3-1: USB disconnect, device number 19 [ 407.320823][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.733418][T12685] loop6: detected capacity change from 0 to 24 [ 407.755163][T12685] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 407.907655][T12685] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 408.323177][T12700] netlink: 'syz.3.2757': attribute type 8 has an invalid length. [ 408.950315][T12716] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2764'. [ 409.189343][T12682] loop1: detected capacity change from 0 to 32768 [ 409.271248][T12682] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.387006][T12682] XFS (loop1): Ending clean mount [ 409.501638][ T5633] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.578982][T12732] loop3: detected capacity change from 0 to 4096 [ 409.583208][T10426] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 409.748306][T10426] usb 5-1: Using ep0 maxpacket: 8 [ 409.772139][T12732] ntfs3(loop3): Failed to load $Extend (-22). [ 409.798024][T10426] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.805914][T12732] ntfs3(loop3): Failed to initialize $Extend. [ 409.879721][T10426] usb 5-1: config 4 interface 0 has no altsetting 0 [ 409.917872][T10426] usb 5-1: string descriptor 0 read error: -22 [ 409.937840][T10426] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 409.981166][T10426] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 410.075695][T10426] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 410.139038][T10426] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 410.203742][T10426] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 410.278825][T10426] usb 5-1: media controller created [ 410.411499][T10426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.704502][T12751] loop5: detected capacity change from 0 to 128 [ 410.793899][T12751] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.922736][T12760] netlink: 'syz.6.2778': attribute type 14 has an invalid length. [ 410.927114][T12751] ext4 filesystem being mounted at /445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.389128][T12766] loop3: detected capacity change from 0 to 1024 [ 411.451079][T10426] zl10353_read_register: readreg error (reg=127, ret==0) [ 411.458063][ T5634] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.496422][T12766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 411.525412][T12766] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.708327][T12766] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.2782: lblock 0 mapped to illegal pblock 0 (length 6) [ 411.778746][T10426] usb 5-1: USB disconnect, device number 15 [ 411.812595][T12777] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.2782: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.900067][T12777] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 411.981532][T12777] EXT4-fs (loop3): This should not happen!! Data will be lost [ 411.981532][T12777] [ 412.176267][ T5638] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 412.216323][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 412.338372][T12762] loop1: detected capacity change from 0 to 32768 [ 412.389026][T12762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2780 (12762) [ 412.511682][T12762] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 412.548927][T12762] BTRFS info (device loop1): using crc32c checksum algorithm [ 412.712622][T12762] BTRFS info (device loop1): enabling ssd optimizations [ 412.780516][T12762] BTRFS info (device loop1): turning on flush-on-commit [ 412.841009][T12762] BTRFS info (device loop1): enabling free space tree [ 412.886497][T12762] BTRFS info (device loop1): enabling auto defrag [ 412.931981][T12762] BTRFS info (device loop1): use lzo compression, level 1 [ 412.965270][T12762] BTRFS info (device loop1): max_inline set to 4096 [ 413.161247][T12762] BTRFS critical (device loop1 state E): emergency shutdown [ 413.358173][ T5633] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 413.405290][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 413.508869][T12823] loop6: detected capacity change from 0 to 256 [ 413.544485][T12823] exfat: Deprecated parameter 'utf8' [ 413.549887][T12823] exfat: Deprecated parameter 'utf8' [ 413.569392][T12823] exfat: Deprecated parameter 'namecase' [ 413.633330][T12823] exfat: Deprecated parameter 'utf8' [ 413.748646][T12823] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 414.297918][T12838] loop4: detected capacity change from 0 to 128 [ 414.376673][T12838] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.473953][T12838] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.234407][T12855] loop1: detected capacity change from 0 to 512 [ 415.248958][T12855] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.334504][ T5635] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.571993][T12859] loop2: detected capacity change from 0 to 256 [ 415.646075][T12859] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 415.693230][T12864] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.697161][T12865] IPVS: rr: FWM 3 0x00000003 - no destination available [ 415.749039][T12859] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 415.752026][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 415.818432][T12859] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 416.161588][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'. [ 416.732060][T12880] loop2: detected capacity change from 0 to 512 [ 416.774114][T12880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 416.892013][T12880] EXT4-fs (loop2): 1 truncate cleaned up [ 416.948274][T12880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.073448][T10420] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 417.091984][T12890] loop8: detected capacity change from 0 to 7 [ 417.145021][T12890] loop8: [POWERTEC] [ 417.153007][T12887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.196741][T12880] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 417.236026][T12880] EXT4-fs (loop2): Remounting filesystem read-only [ 417.257511][T10420] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 417.289320][T10420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.297368][T12887] bond0: (slave bond2): Enslaving as an active interface with an up link [ 417.389434][T10420] usb 5-1: Product: syz [ 417.407468][T10420] usb 5-1: Manufacturer: syz [ 417.420220][T10420] usb 5-1: SerialNumber: syz [ 417.456468][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.678507][T10420] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 417.705301][T10420] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 417.736373][T10420] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 417.756790][T12900] bond0: entered promiscuous mode [ 417.773571][T10426] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 417.781371][T12900] bond_slave_0: entered promiscuous mode [ 417.797067][T12899] sctp: [Deprecated]: syz.5.2834 (pid 12899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.797067][T12899] Use struct sctp_sack_info instead [ 417.818135][T10420] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 417.830555][T12900] bond_slave_1: entered promiscuous mode [ 417.857337][T10420] usb 5-1: USB disconnect, device number 16 [ 417.870901][T12900] batadv0: entered promiscuous mode [ 417.920300][T12900] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 417.974032][T10426] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 417.982477][T10426] usb 7-1: config 0 has no interface number 0 [ 417.988738][T10426] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 418.004962][T10426] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.030260][T10426] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 418.058125][T10426] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 418.071527][T10426] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 418.089243][T10426] usb 7-1: Product: syz [ 418.105479][T10426] usb 7-1: SerialNumber: syz [ 418.126218][T10426] usb 7-1: config 0 descriptor?? [ 418.237561][T12908] loop3: detected capacity change from 0 to 64 [ 418.343392][T12908] hfs: walked past end of dir [ 418.592630][T12900] bond0: left promiscuous mode [ 418.599142][T12900] bond_slave_0: left promiscuous mode [ 418.611454][T12900] bond_slave_1: left promiscuous mode [ 418.825730][T12906] loop5: detected capacity change from 0 to 65536 [ 418.846384][T12900] batadv0: left promiscuous mode [ 418.857445][T10426] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 418.924844][T12906] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 418.969284][T12906] XFS (loop5): Ending clean mount [ 419.008493][T10426] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input30 [ 419.046592][ T30] audit: type=1800 audit(1784107371.563:132): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2837" name="file1" dev="loop5" ino=70 res=0 errno=0 [ 419.155528][T10426] ------------[ cut here ]------------ [ 419.156137][T10426] URB ffff888022362e00 submitted while active [ 419.156159][T10426] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#1: kworker/1:14/10426 [ 419.156303][T10426] Modules linked in: [ 419.156379][T10426] CPU: 1 UID: 0 PID: 10426 Comm: kworker/1:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.156465][T10426] Tainted: [L]=SOFTLOCKUP [ 419.156481][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 419.156509][T10426] Workqueue: usb_hub_wq hub_event [ 419.156555][T10426] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 419.156653][T10426] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae 43 8b fa 48 8d 3d 97 6e b1 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 419.156695][T10426] RSP: 0018:ffffc900037e6e68 EFLAGS: 00010283 [ 419.156729][T10426] RAX: 000000000005ed37 RBX: ffff888022362e00 RCX: ffffc9001e12c000 [ 419.156758][T10426] RDX: 0000000000100000 RSI: ffff888022362e00 RDI: ffffffff912fe670 [ 419.156818][T10426] RBP: ffff888020aee580 R08: 0000000000000000 R09: fffffbfff2244d12 [ 419.156846][T10426] R10: ffffc900037e6ef0 R11: 0000000000000000 R12: ffff8880361e68a0 [ 419.156874][T10426] R13: ffff8880361e6810 R14: ffff8880361e6850 R15: ffff88802bea42e0 [ 419.156906][T10426] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 419.156973][T10426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.157003][T10426] CR2: 0000200000001000 CR3: 000000005bcde000 CR4: 0000000000350ef0 [ 419.157031][T10426] Call Trace: [ 419.157044][T10426] [ 419.157059][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.157159][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.157217][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.157318][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.157380][T10426] cm109_input_open+0x273/0x400 [ 419.157428][T10426] ? __pfx_cm109_input_open+0x10/0x10 [ 419.157509][T10426] input_open_device+0x24c/0x3d0 [ 419.157584][T10426] kbd_connect+0x124/0x180 [ 419.157665][T10426] input_attach_handler.isra.0+0x177/0x1e0 [ 419.157726][T10426] input_register_device.cold+0x139/0x375 [ 419.157825][T10426] cm109_usb_probe+0x128d/0x17f0 [ 419.157894][T10426] usb_probe_interface+0x303/0x8f0 [ 419.157989][T10426] ? __pfx_usb_probe_interface+0x10/0x10 [ 419.158049][T10426] really_probe+0x241/0xa60 [ 419.158135][T10426] __driver_probe_device+0x20e/0x450 [ 419.158191][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.158272][T10426] driver_probe_device+0x4a/0x140 [ 419.158324][T10426] __device_attach_driver+0x1df/0x320 [ 419.158437][T10426] ? __pfx___device_attach_driver+0x10/0x10 [ 419.158488][T10426] bus_for_each_drv+0x159/0x1e0 [ 419.158585][T10426] ? __pfx_bus_for_each_drv+0x10/0x10 [ 419.158653][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.158736][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.158801][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.158879][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.158950][T10426] __device_attach+0x1e4/0x4d0 [ 419.159029][T10426] ? __pfx___device_attach+0x10/0x10 [ 419.159081][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.159131][T10426] ? do_raw_spin_unlock+0x145/0x1e0 [ 419.159217][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.159276][T10426] device_initial_probe+0xaf/0xd0 [ 419.159354][T10426] bus_probe_device+0x64/0x160 [ 419.159403][T10426] device_add+0x121d/0x1970 [ 419.159513][T10426] ? __pfx_device_add+0x10/0x10 [ 419.159581][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.159671][T10426] usb_set_configuration+0xd97/0x1c60 [ 419.159752][T10426] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 419.159847][T10426] usb_generic_driver_probe+0xa1/0xe0 [ 419.159916][T10426] usb_probe_device+0xef/0x400 [ 419.159991][T10426] ? __pfx_usb_probe_device+0x10/0x10 [ 419.160044][T10426] really_probe+0x241/0xa60 [ 419.160098][T10426] __driver_probe_device+0x20e/0x450 [ 419.160180][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.160237][T10426] driver_probe_device+0x4a/0x140 [ 419.160287][T10426] __device_attach_driver+0x1df/0x320 [ 419.160373][T10426] ? __pfx___device_attach_driver+0x10/0x10 [ 419.160423][T10426] bus_for_each_drv+0x159/0x1e0 [ 419.160519][T10426] ? __pfx_bus_for_each_drv+0x10/0x10 [ 419.160586][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.160662][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.160727][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.160775][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.160871][T10426] __device_attach+0x1e4/0x4d0 [ 419.160921][T10426] ? __pfx___device_attach+0x10/0x10 [ 419.160972][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.161049][T10426] ? do_raw_spin_unlock+0x145/0x1e0 [ 419.161103][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.161160][T10426] device_initial_probe+0xaf/0xd0 [ 419.161249][T10426] bus_probe_device+0x64/0x160 [ 419.161298][T10426] device_add+0x121d/0x1970 [ 419.161392][T10426] ? __pfx_device_add+0x10/0x10 [ 419.161448][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.161498][T10426] ? add_device_randomness+0xc9/0x110 [ 419.161595][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.161658][T10426] usb_new_device.cold+0x685/0x115c [ 419.161806][T10426] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 419.161848][T10426] ? do_raw_spin_lock+0x128/0x260 [ 419.161898][T10426] ? __pfx_usb_new_device+0x10/0x10 [ 419.163576][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.163629][T10426] ? mark_held_locks+0x40/0x70 [ 419.163678][T10426] hub_event+0x30a3/0x4a60 [ 419.163803][T10426] ? __pfx_hub_event+0x10/0x10 [ 419.163850][T10426] ? debug_object_deactivate+0x2e4/0x3b0 [ 419.163940][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.163995][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.164073][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.164153][T10426] ? rcu_is_watching+0x12/0xc0 [ 419.164250][T10426] process_one_work+0xa23/0x1940 [ 419.164339][T10426] ? __pfx_process_one_work+0x10/0x10 [ 419.164431][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.164498][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.164588][T10426] worker_thread+0x5ef/0xe50 [ 419.164667][T10426] ? __pfx_worker_thread+0x10/0x10 [ 419.164759][T10426] ? kthread+0x13a/0x450 [ 419.164811][T10426] ? __pfx_worker_thread+0x10/0x10 [ 419.164868][T10426] kthread+0x370/0x450 [ 419.164946][T10426] ? __pfx_kthread+0x10/0x10 [ 419.165007][T10426] ret_from_fork+0x72b/0xd50 [ 419.165058][T10426] ? __pfx_ret_from_fork+0x10/0x10 [ 419.165149][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.165226][T10426] ? __switch_to+0x800/0x10f0 [ 419.165319][T10426] ? __switch_to_asm+0x39/0x70 [ 419.165376][T10426] ? __pfx_kthread+0x10/0x10 [ 419.165468][T10426] ret_from_fork_asm+0x1a/0x30 [ 419.165553][T10426] [ 419.165574][T10426] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 419.165606][T10426] CPU: 1 UID: 0 PID: 10426 Comm: kworker/1:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.165661][T10426] Tainted: [L]=SOFTLOCKUP [ 419.165677][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 419.165703][T10426] Workqueue: usb_hub_wq hub_event [ 419.165746][T10426] Call Trace: [ 419.165759][T10426] [ 419.165773][T10426] dump_stack_lvl+0x100/0x190 [ 419.165819][T10426] vpanic+0x552/0x970 [ 419.165857][T10426] ? __pfx_vpanic+0x10/0x10 [ 419.165910][T10426] panic+0xd1/0xe0 [ 419.165949][T10426] ? __pfx_panic+0x10/0x10 [ 419.166010][T10426] check_panic_on_warn.cold+0x19/0x34 [ 419.166055][T10426] ? usb_submit_urb+0x1689/0x19b0 [ 419.166117][T10426] __warn.cold+0x191/0x318 [ 419.166164][T10426] __report_bug+0x30f/0x440 [ 419.166233][T10426] ? usb_submit_urb+0x1689/0x19b0 [ 419.166301][T10426] ? __pfx___report_bug+0x10/0x10 [ 419.166379][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.166427][T10426] ? preempt_schedule_common+0x42/0xc0 [ 419.166490][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.166538][T10426] ? preempt_schedule_thunk+0x16/0x40 [ 419.166607][T10426] report_bug_entry+0xe1/0x290 [ 419.166673][T10426] ? usb_submit_urb+0x168c/0x19b0 [ 419.166737][T10426] handle_bug+0x1cd/0x2a0 [ 419.166782][T10426] exc_invalid_op+0x17/0x50 [ 419.166827][T10426] asm_exc_invalid_op+0x1a/0x20 [ 419.166866][T10426] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 419.166931][T10426] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae 43 8b fa 48 8d 3d 97 6e b1 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 419.166970][T10426] RSP: 0018:ffffc900037e6e68 EFLAGS: 00010283 [ 419.167002][T10426] RAX: 000000000005ed37 RBX: ffff888022362e00 RCX: ffffc9001e12c000 [ 419.167029][T10426] RDX: 0000000000100000 RSI: ffff888022362e00 RDI: ffffffff912fe670 [ 419.167056][T10426] RBP: ffff888020aee580 R08: 0000000000000000 R09: fffffbfff2244d12 [ 419.167083][T10426] R10: ffffc900037e6ef0 R11: 0000000000000000 R12: ffff8880361e68a0 [ 419.167109][T10426] R13: ffff8880361e6810 R14: ffff8880361e6850 R15: ffff88802bea42e0 [ 419.167162][T10426] ? usb_submit_urb+0x1682/0x19b0 [ 419.167230][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.167293][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.167341][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.167402][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.167462][T10426] cm109_input_open+0x273/0x400 [ 419.167511][T10426] ? __pfx_cm109_input_open+0x10/0x10 [ 419.167556][T10426] input_open_device+0x24c/0x3d0 [ 419.167627][T10426] kbd_connect+0x124/0x180 [ 419.167673][T10426] input_attach_handler.isra.0+0x177/0x1e0 [ 419.167730][T10426] input_register_device.cold+0x139/0x375 [ 419.167794][T10426] cm109_usb_probe+0x128d/0x17f0 [ 419.167867][T10426] usb_probe_interface+0x303/0x8f0 [ 419.167927][T10426] ? __pfx_usb_probe_interface+0x10/0x10 [ 419.167982][T10426] really_probe+0x241/0xa60 [ 419.168034][T10426] __driver_probe_device+0x20e/0x450 [ 419.168080][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.168134][T10426] driver_probe_device+0x4a/0x140 [ 419.168188][T10426] __device_attach_driver+0x1df/0x320 [ 419.168240][T10426] ? __pfx___device_attach_driver+0x10/0x10 [ 419.168288][T10426] bus_for_each_drv+0x159/0x1e0 [ 419.168351][T10426] ? __pfx_bus_for_each_drv+0x10/0x10 [ 419.168417][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.168465][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.168529][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.168578][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.168646][T10426] __device_attach+0x1e4/0x4d0 [ 419.168696][T10426] ? __pfx___device_attach+0x10/0x10 [ 419.168747][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.168796][T10426] ? do_raw_spin_unlock+0x145/0x1e0 [ 419.168846][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.168902][T10426] device_initial_probe+0xaf/0xd0 [ 419.168953][T10426] bus_probe_device+0x64/0x160 [ 419.168999][T10426] device_add+0x121d/0x1970 [ 419.169059][T10426] ? __pfx_device_add+0x10/0x10 [ 419.169120][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.169188][T10426] usb_set_configuration+0xd97/0x1c60 [ 419.169266][T10426] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 419.169332][T10426] usb_generic_driver_probe+0xa1/0xe0 [ 419.169399][T10426] usb_probe_device+0xef/0x400 [ 419.169445][T10426] ? __pfx_usb_probe_device+0x10/0x10 [ 419.169496][T10426] really_probe+0x241/0xa60 [ 419.169550][T10426] __driver_probe_device+0x20e/0x450 [ 419.169597][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.169652][T10426] driver_probe_device+0x4a/0x140 [ 419.169702][T10426] __device_attach_driver+0x1df/0x320 [ 419.169755][T10426] ? __pfx___device_attach_driver+0x10/0x10 [ 419.169803][T10426] bus_for_each_drv+0x159/0x1e0 [ 419.169870][T10426] ? __pfx_bus_for_each_drv+0x10/0x10 [ 419.169935][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.169984][T10426] ? lockdep_hardirqs_on+0x78/0x100 [ 419.170048][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.170093][T10426] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 419.170161][T10426] __device_attach+0x1e4/0x4d0 [ 419.170216][T10426] ? __pfx___device_attach+0x10/0x10 [ 419.170266][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.170313][T10426] ? do_raw_spin_unlock+0x145/0x1e0 [ 419.170365][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.170421][T10426] device_initial_probe+0xaf/0xd0 [ 419.170473][T10426] bus_probe_device+0x64/0x160 [ 419.170518][T10426] device_add+0x121d/0x1970 [ 419.170578][T10426] ? __pfx_device_add+0x10/0x10 [ 419.170631][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.170678][T10426] ? add_device_randomness+0xc9/0x110 [ 419.170740][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.170799][T10426] usb_new_device.cold+0x685/0x115c [ 419.170857][T10426] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 419.170895][T10426] ? do_raw_spin_lock+0x128/0x260 [ 419.170945][T10426] ? __pfx_usb_new_device+0x10/0x10 [ 419.170993][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171041][T10426] ? mark_held_locks+0x40/0x70 [ 419.171089][T10426] hub_event+0x30a3/0x4a60 [ 419.171190][T10426] ? __pfx_hub_event+0x10/0x10 [ 419.171235][T10426] ? debug_object_deactivate+0x2e4/0x3b0 [ 419.171294][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171349][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171402][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171450][T10426] ? rcu_is_watching+0x12/0xc0 [ 419.171510][T10426] process_one_work+0xa23/0x1940 [ 419.171595][T10426] ? __pfx_process_one_work+0x10/0x10 [ 419.171658][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171724][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.171780][T10426] worker_thread+0x5ef/0xe50 [ 419.171859][T10426] ? __pfx_worker_thread+0x10/0x10 [ 419.171925][T10426] ? kthread+0x13a/0x450 [ 419.171980][T10426] ? __pfx_worker_thread+0x10/0x10 [ 419.172041][T10426] kthread+0x370/0x450 [ 419.172097][T10426] ? __pfx_kthread+0x10/0x10 [ 419.172159][T10426] ret_from_fork+0x72b/0xd50 [ 419.172216][T10426] ? __pfx_ret_from_fork+0x10/0x10 [ 419.172268][T10426] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.172316][T10426] ? __switch_to+0x800/0x10f0 [ 419.172374][T10426] ? __switch_to_asm+0x39/0x70 [ 419.172429][T10426] ? __pfx_kthread+0x10/0x10 [ 419.172491][T10426] ret_from_fork_asm+0x1a/0x30 [ 419.172572][T10426] [ 419.172815][T10426] Kernel Offset: disabled