last executing test programs: 14m21.125740913s ago: executing program 2 (id=1153): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) 14m20.835329898s ago: executing program 2 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000000) 14m20.674504188s ago: executing program 2 (id=1158): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 14m20.458108866s ago: executing program 2 (id=1162): syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@prjquota}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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") syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 14m17.811633063s ago: executing program 2 (id=1193): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '&\x00'}, 0x8) 14m15.868409513s ago: executing program 2 (id=1207): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70) 14m15.032022354s ago: executing program 32 (id=1207): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70) 1m15.153276322s ago: executing program 0 (id=12246): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000480c) 1m15.059058353s ago: executing program 0 (id=12247): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0xa00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1m14.767645793s ago: executing program 0 (id=12253): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x100001) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 1m14.523105363s ago: executing program 0 (id=12256): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x5, 0x1, 0x2036315a, 0x0, 0xa, [{0xdb, 0x223e}, {0x4, 0xffffacc5}, {0x0, 0x81}, {0xa2, 0x1}, {0x34a, 0x6}, {0x80000000, 0xd5fb5de}, {0x0, 0x9}, {0xc, 0x100}], 0x81, 0x6, 0x8, 0x0, 0x7}}) 1m14.245145646s ago: executing program 0 (id=12262): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5) 1m13.987624243s ago: executing program 0 (id=12266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000800000001000000005001000050000000c0006000100000001"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 58.909697397s ago: executing program 33 (id=12266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000800000001000000005001000050000000c0006000100000001"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 51.674934246s ago: executing program 4 (id=12430): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000000)="e1504cf5065239be4e96efb917ee54d7423f", 0x12}, {&(0x7f00000000c0)="1e65", 0x2}], 0x2) 51.435913077s ago: executing program 4 (id=12431): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) socket(0x22, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 51.101089769s ago: executing program 4 (id=12432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}}, 0x0) 50.787603464s ago: executing program 4 (id=12434): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 49.823922387s ago: executing program 4 (id=12441): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001f00000000000000080009000d000000", 0x24) 49.068175653s ago: executing program 4 (id=12444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x1, 0x6}}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 48.51926486s ago: executing program 34 (id=12444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x1, 0x6}}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.864866911s ago: executing program 5 (id=12739): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407e050e20000000000001090224000100005000090400feb90300010009210400080122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x2, "b05e2f86"}, @main=@item_012={0x2, 0x0, 0x8, '\x00\x00'}]}}, 0x0}, 0x0) 2.714722525s ago: executing program 3 (id=12747): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) 2.652208382s ago: executing program 6 (id=12748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.501916392s ago: executing program 7 (id=12749): setuid(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000005c0)=0x1f, 0x4) 2.218368724s ago: executing program 6 (id=12751): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0xa) shutdown(r0, 0x0) 2.218262113s ago: executing program 3 (id=12752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004050}, 0x4001a800) 2.031428315s ago: executing program 1 (id=12753): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.023231963s ago: executing program 3 (id=12754): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x9}) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) 1.899379798s ago: executing program 6 (id=12756): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 1.778397193s ago: executing program 3 (id=12757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.555225368s ago: executing program 5 (id=12758): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de, 0x0, 0x0, 0x2}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) 1.554496318s ago: executing program 6 (id=12768): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000001f80)=""/4095, 0xfff) getdents64(r0, 0x0, 0x0) 1.324469891s ago: executing program 1 (id=12759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.312721628s ago: executing program 3 (id=12760): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x1808001, &(0x7f0000000000)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@commit}]}, 0x1, 0x4470, &(0x7f0000008c00)="$eJzs271vHGkdB/DfrA2xgxP8lvdEWkGBBchapwJSEBIDioQINi9CFLHWL0kMa69lr1EKJILoIyFRIOprEl1/Sqr8C1dc2itT5K645nTXnE+7O2vvzHovq8hrX3yfjxSN55l5XuTvzuzz6HEKqdr91a3i6laxvF6sLt3dulr8e7WyvbYShUNy1P3Tm37kJPujc/vmr37/p6sRDz4Y/87Ozs5O1I3Gvmbafv70k38stR9bCrk69Xb3b+2g/CUiJiNiKPLjGYiIP78XkUTEWFo2nh6HI2Ikmtf+/e7j+aEDGs3Ayydzj+dmHz19tfZi+OadYtcbk4j/Vy78+N7aR98fuPbhDw+oewAA+Eq/nr/9x9+VZuJ5EqefDXbO18+lx27z4x168vP+RwkAAABd7a3/R5NC0rn+n0yPXbYEw8L27Xbrt7dnf1maSfd/k47rP0mLPv7FQGMPNb/vm9//HcvV33//t7OfN9UaX6vf0UgK05nzQmF6OmLmRvP8fHKyUKlu1X50t7q9vnxgw3hrZfNv7t5n0kk39HvNfzzXfv/3/yc6Pk318+LBfcSOtWz+A13ve+dfSU/5T+TqHUb+vLls/oONsu+131BsvgDq+f9n8PX5T+ba71f+p+vv9qQ+1qHMG6A+h6mXd5uvkJXN/1uNssyrM/1Fdnv+P8/lfybX/lG9/6du9LfX4yKb/7cbZdk/Wtt7/scKr3/+z+baP4r86+Of8v3fk2z+J5qF2Zdn4zfZ6/v/XK79PuX/MN1WjTidxETbX50+G2x+ObT2qxtLmvrljT6M4hjI5t+5y7+3/iv0NP87n6t/WOu/Vr+t9V9rHTKVNNd/7C+b/3DX+3p9/i/k6vX9/Z8MpSuAnX/2tZ9jKpv/yWbhPhPAXvO/mGu/X/k33vhDrfz3BvzFiWZ5yfyvJ9n806gyXwMPR6I1/0s6c/8sl/+lXPtt+ef/a8gB6Zz/1cc/1afejpts/iNd76vn/34P3/+Xc/X6P/+PKKUfgIf97ugYyuZ/qut9jed/6PX5X8nV63f+P+hn4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3wDj6XE0ksJ05rxQmJ6OmEjPz8fJZLG8vLBYqS79bStiMi0vxnhyr1JdLFcWVteryysL5UqluhRxJr0+GUPJVqVaW1grb5zdbWs4ub9S3qwtrpRrEXEuLb8cp1ptLa7W1sobjXtb175bqG5u3C+vLyyvbv6sVCqV4sLuGMaSlQe1lfVas/fm1YiLu3VHk7bBNS5f2h3LSPLX6vbmernSKL/cVqdSXSpX2upcSa/9N8aS2ub2+lK5trJQqd5r9XeUrqfH2Vvzf5j/zUzH9WLSPI4f7rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Jp5fu2n/4uIweZZISKut35I0n8ZAy+fzD2em3309NXai+Gbd4r73QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAl+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl45VGoaiMACfexUUXNTRJ3AKyeaqKOJiRPAJfIkOfc0+RoeOXUqhvYGQNNClpcP3LYfk595z4B4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDL8fnb/v3UTUSK281NxGzxeNfPn0qt3w6fvzrDjJzO13f7/lE35d3TKH8pv5aveZeuV/P/KPW6991pBnsy3Ke9cZ+hqX2bmq/rex8pVxHxUPLnlHNVHXcXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZm0MTAMEgjqN3gslmcQ2dwqgI7mF0PJdwHk2CwSB89b10cPz4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwz7hM69wPcWRUV2bsZ9u8/91zbN99ls3XZTkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3O3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBAQAA//8mjs2N") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 1.226628451s ago: executing program 6 (id=12761): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000002940)=0x3ff) 1.197703964s ago: executing program 7 (id=12762): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000005c0)=[{r0, 0x4001}], 0x1, 0x5) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001b00)={0xb, 0xd3, 0x5}) 1.17222621s ago: executing program 5 (id=12763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) 941.662902ms ago: executing program 7 (id=12764): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x80ab, @empty, 0x1}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3ff, 0x4) 920.835778ms ago: executing program 1 (id=12765): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x30, 0x114, 0x2, {{0x0}, 0x0}}], 0x60}, 0x0) 839.438561ms ago: executing program 5 (id=12766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100717565756500000014000280080004400000001606000340000700000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 712.903755ms ago: executing program 1 (id=12767): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) 641.754151ms ago: executing program 7 (id=12769): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 532.216098ms ago: executing program 5 (id=12770): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r0, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 518.709805ms ago: executing program 1 (id=12771): prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x541b, 0x0) 351.703371ms ago: executing program 5 (id=12772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0xa4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 300.352201ms ago: executing program 7 (id=12773): r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x1) syz_emit_ethernet(0xe, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@mpls_uc}}, 0x0) 268.465904ms ago: executing program 1 (id=12774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) 108.112072ms ago: executing program 6 (id=12775): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 74.579185ms ago: executing program 7 (id=12776): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 0s ago: executing program 3 (id=12777): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x3}, {0x16}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2, 0xd, {0x1}}, 0x19}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): acketSize 0 [ 922.723959][ T4311] usb 2-1: config 9 interface 221 has no altsetting 0 [ 922.764033][ T4311] usb 2-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 922.774185][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.802139][ T4311] usb 2-1: Product: syz [ 922.806479][ T4311] usb 2-1: Manufacturer: syz [ 922.821305][ T4311] usb 2-1: SerialNumber: syz [ 923.106119][ T4311] usb 2-1: USB disconnect, device number 51 [ 923.126395][T12446] udevd[12446]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.179272][T30211] loop5: detected capacity change from 0 to 512 [ 923.218586][T30211] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 923.240277][T30211] EXT4-fs (loop5): orphan cleanup on readonly fs [ 923.246998][ T4935] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 923.259382][T30211] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 923.268201][T30211] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 923.296243][T30211] EXT4-fs (loop5): 1 truncate cleaned up [ 923.302515][T30211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 923.318532][T30211] EXT4-fs (loop5): unmounting filesystem. [ 923.479042][ T4935] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 923.492379][ T4935] usb 5-1: config 0 has no interface number 0 [ 923.508875][ T4935] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 923.535167][ T4935] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 923.545296][ T4935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.562485][ T4935] usb 5-1: Product: syz [ 923.572616][ T4935] usb 5-1: Manufacturer: syz [ 923.577324][ T4935] usb 5-1: SerialNumber: syz [ 923.594470][ T4935] usb 5-1: config 0 descriptor?? [ 923.623604][ T4935] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 923.639592][T30218] loop5: detected capacity change from 0 to 4096 [ 923.721947][T30218] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 923.781008][T30218] ntfs3: loop5: Failed to load $Extend. [ 923.985664][T30228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11754'. [ 924.021013][ T4935] usb 5-1: USB disconnect, device number 52 [ 924.046688][ T4935] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 924.262324][T30234] netlink: 'syz.0.11756': attribute type 9 has an invalid length. [ 924.292187][T30234] netlink: 'syz.0.11756': attribute type 7 has an invalid length. [ 924.300122][T30234] netlink: 'syz.0.11756': attribute type 8 has an invalid length. [ 924.321629][T30230] loop1: detected capacity change from 0 to 4096 [ 924.354859][T30230] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 924.407122][T30236] tmpfs: Bad value for 'mpol' [ 924.759462][T30224] loop3: detected capacity change from 0 to 32768 [ 924.802943][T30224] XFS: attr2 mount option is deprecated. [ 924.823656][T30224] /dev/loop3: Can't open blockdev [ 925.120181][T30256] loop4: detected capacity change from 0 to 256 [ 925.887083][T30280] CIFS mount error: No usable UNC path provided in device string! [ 925.887083][T30280] [ 925.915511][T30280] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 926.265002][T30294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11788'. [ 926.286927][T30296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11787'. [ 926.303815][T30294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11788'. [ 926.323495][T30298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11789'. [ 927.201442][T30334] IPv6: NLM_F_CREATE should be specified when creating new route [ 927.226966][T30334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 927.234357][T30334] IPv6: NLM_F_CREATE should be set when creating new route [ 927.243450][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 927.243467][ T27] audit: type=1326 audit(1773108600.653:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.303081][ T27] audit: type=1326 audit(1773108600.653:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.325663][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.367824][ T27] audit: type=1326 audit(1773108600.653:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.390487][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.454403][ T27] audit: type=1326 audit(1773108600.653:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.477057][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.548211][ T27] audit: type=1326 audit(1773108600.653:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.642318][ T27] audit: type=1326 audit(1773108600.653:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.712173][ T27] audit: type=1326 audit(1773108600.653:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.781089][ T27] audit: type=1326 audit(1773108600.653:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.3.11807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb82539c799 code=0x7ffc0000 [ 927.995484][T30361] tmpfs: Bad value for 'mpol' [ 928.359895][T30375] bridge0: port 2(netdevsim0) entered blocking state [ 928.403201][T30375] bridge0: port 2(netdevsim0) entered disabled state [ 928.676903][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11832'. [ 929.012559][T30404] binder: 30402:30404 unknown command 0 [ 929.018201][T30404] binder: 30402:30404 ioctl c0306201 200000000480 returned -22 [ 929.192368][T30410] bridge0: port 3(netdevsim0) entered blocking state [ 929.230816][T30410] bridge0: port 3(netdevsim0) entered disabled state [ 929.246770][T30410] device netdevsim0 entered promiscuous mode [ 929.325725][T30415] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 929.623593][T30427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11854'. [ 930.125413][T30447] bridge0: port 3(netdevsim0) entered blocking state [ 930.148107][T30447] bridge0: port 3(netdevsim0) entered disabled state [ 930.216485][T30444] loop3: detected capacity change from 0 to 4096 [ 930.293151][T30444] overlayfs: failed to resolve './bus': -2 [ 930.597690][T30455] loop1: detected capacity change from 0 to 4096 [ 930.727934][ T27] audit: type=1326 audit(1773108604.133:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 930.758847][T30467] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 930.837910][ T27] audit: type=1326 audit(1773108604.163:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 930.860500][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.880321][T30470] comedi comedi3: ni_at_a2150: I/O port conflict (0x3c2,28) [ 931.080573][T30474] loop1: detected capacity change from 0 to 256 [ 931.157122][T30474] FAT-fs (loop1): Directory bread(block 64) failed [ 931.171069][T30474] FAT-fs (loop1): Directory bread(block 65) failed [ 931.178220][T30474] FAT-fs (loop1): Directory bread(block 66) failed [ 931.197496][T30474] FAT-fs (loop1): Directory bread(block 67) failed [ 931.208701][T30474] FAT-fs (loop1): Directory bread(block 68) failed [ 931.237306][T30474] FAT-fs (loop1): Directory bread(block 69) failed [ 931.288155][T30474] FAT-fs (loop1): Directory bread(block 70) failed [ 931.305380][T30482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11879'. [ 931.321754][T30474] FAT-fs (loop1): Directory bread(block 71) failed [ 931.330483][T30474] FAT-fs (loop1): Directory bread(block 72) failed [ 931.338019][T30484] bridge0: port 3(netdevsim0) entered blocking state [ 931.356879][T30474] FAT-fs (loop1): Directory bread(block 73) failed [ 931.363922][T30484] bridge0: port 3(netdevsim0) entered disabled state [ 931.416352][T30484] bridge0: port 3(netdevsim0) entered blocking state [ 931.423431][T30484] bridge0: port 3(netdevsim0) entered forwarding state [ 931.534815][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.541236][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.309907][T30518] loop3: detected capacity change from 0 to 512 [ 932.338823][T30518] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 932.357712][T30518] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 932.367479][T30518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 932.387877][T30518] EXT4-fs (loop3): unmounting filesystem. [ 932.452358][ T4311] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 932.616105][T30527] xt_ecn: cannot match TCP bits for non-tcp packets [ 932.674529][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 932.717128][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 932.762149][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 932.783290][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 932.800381][T30535] netlink: 'syz.3.11906': attribute type 12 has an invalid length. [ 932.808792][ T4311] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 932.824391][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 932.824408][ T27] audit: type=1326 audit(1773108606.233:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.5.11908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 932.829175][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.833017][ T27] audit: type=1326 audit(1773108606.233:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.5.11908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 932.900447][ T4311] usb 5-1: Product: syz [ 932.935064][ T4311] usb 5-1: Manufacturer: syz [ 932.942430][ T4311] usb 5-1: SerialNumber: syz [ 932.972196][ T4311] usb 5-1: config 0 descriptor?? [ 932.980789][ T27] audit: type=1326 audit(1773108606.263:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.5.11908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 933.056500][ T27] audit: type=1326 audit(1773108606.263:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.5.11908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 933.157582][ T27] audit: type=1326 audit(1773108606.263:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.5.11908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 933.197175][ T4311] adutux 5-1:0.0: Could not retrieve serial number [ 933.204343][ T4311] adutux: probe of 5-1:0.0 failed with error -5 [ 933.407739][ T4311] usb 5-1: USB disconnect, device number 53 [ 933.452269][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 933.532315][ T125] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 933.549156][T30557] loop3: detected capacity change from 0 to 1764 [ 933.600307][T30557] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 933.724193][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.739808][ T125] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 933.749563][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.774184][ T125] usb 2-1: config 0 descriptor?? [ 934.206854][ T4311] usb 2-1: USB disconnect, device number 52 [ 934.349166][T30568] loop4: detected capacity change from 0 to 4096 [ 934.365440][T30568] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 934.386224][T30568] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 934.424835][T30573] loop5: detected capacity change from 0 to 164 [ 934.441423][T30568] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 934.460643][T30568] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 934.476701][T30568] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 934.522857][T30573] Unable to read rock-ridge attributes [ 934.529318][T30568] ntfs: volume version 3.1. [ 934.545147][T30573] Unable to read rock-ridge attributes [ 934.979185][T30587] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11932'. [ 935.019794][ T125] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 935.054831][ T125] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 935.069152][ T4350] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 935.162414][ T125] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 935.371418][T30599] loop1: detected capacity change from 0 to 4096 [ 935.637091][T30607] loop4: detected capacity change from 0 to 2048 [ 935.711846][T30610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11944'. [ 935.714691][T30607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.097381][ T125] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 936.728887][T30638] loop4: detected capacity change from 0 to 512 [ 936.759163][T30638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 936.879396][T30638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 936.905954][T30638] ext4 filesystem being mounted at /2469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.996968][T30650] syz.0.11962 (30650): /proc/30649/oom_adj is deprecated, please use /proc/30649/oom_score_adj instead. [ 937.042534][ T4311] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 937.093217][T30652] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11963'. [ 937.117055][T30652] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11963'. [ 937.231163][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 937.247673][ T7803] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 937.272212][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 937.286287][ T4311] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 937.315959][T30658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11966'. [ 937.325236][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.396554][ T4311] usb 4-1: Product: syz [ 937.400840][ T4311] usb 4-1: Manufacturer: syz [ 937.417613][T30660] loop5: detected capacity change from 0 to 4096 [ 937.425928][T30660] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 937.444339][ T4311] usb 4-1: SerialNumber: syz [ 937.469185][ T4311] usb 4-1: config 0 descriptor?? [ 937.505468][T30661] ALSA: mixer_oss: invalid OSS volume '~¢)–„VÄ]Qå' [ 937.509724][ T4311] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 937.570934][ T4311] dvb-usb: bulk message failed: -22 (2/0) [ 937.598911][ T4311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.633001][ T4311] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 937.662244][ T4311] usb 4-1: media controller created [ 937.738144][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.843172][ T4311] dvb-usb: bulk message failed: -22 (1/0) [ 937.849034][ T4311] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 937.909602][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 937.970221][ T4311] dvb-usb: schedule remote query interval to 50 msecs. [ 937.999945][ T4311] dvb-usb: bulk message failed: -22 (2/0) [ 938.015081][ T4311] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 938.081292][ T4311] usb 4-1: USB disconnect, device number 51 [ 938.169089][ T4311] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 938.676404][T30696] rtc_cmos 00:00: Alarms can be up to one day in the future [ 939.017806][T30708] loop1: detected capacity change from 0 to 4096 [ 939.145848][T30717] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 939.158352][T30708] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 939.262723][T30708] NILFS (loop1): mounting fs with errors [ 939.311363][T30708] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 939.452273][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 939.588710][T30728] loop5: detected capacity change from 0 to 1024 [ 939.656795][T30731] openvswitch: netlink: Message has 4 unknown bytes. [ 939.742475][T30728] syz.5.12001: attempt to access beyond end of device [ 939.742475][T30728] loop5: rw=0, sector=393226, nr_sectors = 2 limit=1024 [ 940.181773][T30716] loop0: detected capacity change from 0 to 32768 [ 940.276950][T30716] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 940.279543][T30716] JBD2: Ignoring recovery information on journal [ 940.388265][T30750] loop4: detected capacity change from 0 to 4096 [ 940.431411][T30750] __ntfs_error: 18 callbacks suppressed [ 940.431430][T30750] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 940.478613][T30716] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 940.582209][T30750] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 940.620260][T30750] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 940.678981][T30750] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 940.766373][T30750] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 940.819691][T30750] ntfs: volume version 3.1. [ 940.855856][T30750] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 940.926320][T30750] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 940.965126][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 940.996878][T30750] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 941.031500][T30764] loop1: detected capacity change from 0 to 256 [ 941.059208][T30750] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 941.087233][T30750] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 941.332371][T30767] loop3: detected capacity change from 0 to 1024 [ 941.651183][T30779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12024'. [ 941.912273][ T4350] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 942.104055][ T4350] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 942.125570][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.170568][ T4350] usb 4-1: config 0 descriptor?? [ 942.186361][ T4350] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 942.281489][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12035'. [ 942.301374][T30804] loop5: detected capacity change from 0 to 16 [ 942.324744][T30804] erofs: (device loop5): mounted with root inode @ nid 36. [ 942.358016][T30804] erofs: (device loop5): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 942.525318][T30808] netlink: 'syz.4.12039': attribute type 1 has an invalid length. [ 942.591708][ T4350] gp8psk: usb in 137 operation failed. [ 942.609763][ T4350] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 942.647472][ T4350] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 942.708980][ T4350] usb 4-1: USB disconnect, device number 52 [ 943.089662][T30828] netlink: 'syz.4.12049': attribute type 6 has an invalid length. [ 943.545365][T30845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12057'. [ 943.607459][T30845] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12057'. [ 943.771719][T30855] dlm: no locking on control device [ 944.795176][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12080'. [ 944.840166][T30895] device vlan0 left promiscuous mode [ 944.882355][ T4350] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 945.090408][ T4350] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 945.131502][ T4350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.168087][ T4350] usb 6-1: Product: syz [ 945.175850][ T4350] usb 6-1: Manufacturer: syz [ 945.180556][ T4350] usb 6-1: SerialNumber: syz [ 945.230615][ T4350] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 945.283874][ T4350] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 945.576700][T30887] loop3: detected capacity change from 0 to 40427 [ 945.632879][T12446] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 945.754414][ T4935] usb 6-1: USB disconnect, device number 40 [ 945.916887][T30919] netlink: 'syz.1.12093': attribute type 2 has an invalid length. [ 945.982508][T30919] netlink: 'syz.1.12093': attribute type 1 has an invalid length. [ 946.205819][T30907] loop4: detected capacity change from 0 to 32768 [ 946.332246][ T4350] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 946.339322][ T4350] ath9k_htc: Failed to initialize the device [ 946.346178][ T4935] usb 6-1: ath9k_htc: USB layer deinitialized [ 946.359567][T30907] XFS (loop4): Mounting V5 Filesystem [ 946.526743][T30907] XFS (loop4): Ending clean mount [ 946.634122][T30925] loop1: detected capacity change from 0 to 32768 [ 946.696833][ T4278] XFS (loop4): Unmounting Filesystem [ 947.741329][T30932] loop3: detected capacity change from 0 to 32768 [ 947.807517][T30932] /dev/loop3: Can't open blockdev [ 948.172455][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 948.333810][T30976] netlink: 7 bytes leftover after parsing attributes in process `syz.5.12117'. [ 948.860150][T30992] mkiss: ax0: crc mode is auto. [ 948.926717][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12126'. [ 949.095794][T30997] IPVS: Error connecting to the multicast addr [ 949.173891][T31005] loop0: detected capacity change from 0 to 128 [ 949.303773][T31007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 949.688068][T31019] loop0: detected capacity change from 0 to 256 [ 949.774260][T31019] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 950.410761][T31043] loop5: detected capacity change from 0 to 16 [ 950.434912][T31043] erofs: (device loop5): mounted with root inode @ nid 36. [ 950.902041][T31025] loop4: detected capacity change from 0 to 32768 [ 950.981739][T31025] XFS (loop4): Mounting V5 Filesystem [ 951.041948][T31025] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 951.109721][T31067] loop3: detected capacity change from 0 to 8192 [ 951.137945][T31025] XFS (loop4): Ending clean mount [ 951.183705][ T4351] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 951.233002][T31025] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x1803 dinode [ 951.275173][T31025] XFS (loop4): Unmount and run xfs_repair [ 951.289868][T31025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 951.372224][T31025] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 951.472555][T31025] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 951.512296][T31025] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 951.521249][T31025] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 951.595812][T31082] loop0: detected capacity change from 0 to 1024 [ 951.602563][T31025] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 951.611459][T31025] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 951.672345][T31025] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 951.687959][T31082] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 951.742428][T31025] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 951.880418][T31082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 951.889213][ T4278] XFS (loop4): Unmounting Filesystem [ 951.921879][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 951.921895][ T27] audit: type=1800 audit(1773108625.230:3481): pid=31082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12165" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 952.065947][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 952.945869][T31128] PKCS8: Unsupported PKCS#8 version [ 953.022545][ T125] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 953.158214][ T4311] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 953.214033][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 953.234791][ T125] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 953.282233][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.318895][ T125] usb 5-1: Product: syz [ 953.323967][ T125] usb 5-1: Manufacturer: syz [ 953.328620][ T125] usb 5-1: SerialNumber: syz [ 953.343854][ T125] usb 5-1: config 0 descriptor?? [ 953.353547][ T125] gspca_main: se401-2.14.0 probing 047d:5003 [ 953.362352][ T4311] usb 2-1: Using ep0 maxpacket: 16 [ 953.376283][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.421697][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.437737][ T4311] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 953.463027][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.517061][ T4311] usb 2-1: config 0 descriptor?? [ 953.689584][ T27] audit: type=1326 audit(1773108627.000:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 953.771032][ T125] gspca_se401: Wrong descriptor type [ 953.794921][ T27] audit: type=1326 audit(1773108627.000:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 953.817489][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.892531][ T27] audit: type=1326 audit(1773108627.030:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 953.915183][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.995760][T13433] usb 5-1: USB disconnect, device number 54 [ 954.005969][ T4311] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 954.031975][ T27] audit: type=1326 audit(1773108627.030:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 954.096528][ T27] audit: type=1326 audit(1773108627.030:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 954.120458][T31156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12198'. [ 954.158915][ T4311] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 954.195826][ T4311] usb 2-1: USB disconnect, device number 53 [ 954.222631][ T27] audit: type=1326 audit(1773108627.050:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 954.311818][ T27] audit: type=1326 audit(1773108627.050:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 954.334411][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.375024][ T27] audit: type=1326 audit(1773108627.050:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31147 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241e59c799 code=0x7ffc0000 [ 954.397584][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.611999][T31161] fido_id[31161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 954.889451][T31177] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.12208'. [ 955.691690][T31208] CUSE: info not properly terminated [ 955.921165][T31215] loop1: detected capacity change from 0 to 1024 [ 955.946090][T31218] loop4: detected capacity change from 0 to 64 [ 955.978498][T31218] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 956.054536][T31218] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 956.183475][ T4326] hfsplus: b-tree write err: -5, ino 25 [ 956.218912][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 956.242321][ T4326] hfsplus: b-tree write err: -5, ino 2 [ 956.372913][T31228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12232'. [ 956.592310][ T4311] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 956.660291][T31211] loop5: detected capacity change from 0 to 32768 [ 956.805227][ T4311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.842251][ T4311] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 956.871555][ T4311] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 956.904907][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.907706][T31243] loop0: detected capacity change from 0 to 64 [ 956.942249][ T4311] usb 5-1: config 0 descriptor?? [ 956.970383][ T4311] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 957.008420][ T4311] dvb-usb: bulk message failed: -22 (3/0) [ 957.039738][ T4311] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 957.091353][ T4311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 957.105360][ T4311] usb 5-1: media controller created [ 957.111916][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.216461][ T4311] dvb-usb: bulk message failed: -22 (6/0) [ 957.242551][ T4311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 957.290577][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 957.355577][ T4311] dvb-usb: schedule remote query interval to 150 msecs. [ 957.372358][ T4311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 957.392395][ T4311] usb 5-1: USB disconnect, device number 55 [ 957.487608][ T4311] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 957.801789][T31263] mkiss: ax0: crc mode is auto. [ 957.985364][T31272] loop5: detected capacity change from 0 to 2048 [ 958.031125][T31272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.621903][ T27] audit: type=1326 audit(1773108631.930:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 958.688065][ T27] audit: type=1326 audit(1773108631.980:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 958.787198][ T27] audit: type=1326 audit(1773108631.980:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 958.908201][ T27] audit: type=1326 audit(1773108631.980:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 958.944212][T31299] loop1: detected capacity change from 0 to 1024 [ 959.004058][ T27] audit: type=1326 audit(1773108631.980:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 959.063646][T31299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 959.222934][ T27] audit: type=1326 audit(1773108631.980:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 959.302321][ T27] audit: type=1326 audit(1773108631.980:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 959.372250][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 959.378538][ T27] audit: type=1326 audit(1773108631.980:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.4.12261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac5b9c799 code=0x7ffc0000 [ 959.482337][ T27] audit: type=1800 audit(1773108632.500:3498): pid=31299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12264" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 960.060913][T31300] loop3: detected capacity change from 0 to 32768 [ 960.114124][T12446] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 960.692516][T13431] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 960.896047][T13431] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 960.912847][T13431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.950615][T13431] usb 5-1: Product: syz [ 960.967590][T13431] usb 5-1: Manufacturer: syz [ 960.986425][T13431] usb 5-1: SerialNumber: syz [ 960.991634][T31349] netlink: 'syz.1.12288': attribute type 298 has an invalid length. [ 961.009013][T13431] usb 5-1: config 0 descriptor?? [ 961.057023][T13431] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 961.091646][T13431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 961.122506][T13431] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 961.180757][T31353] loop5: detected capacity change from 0 to 1024 [ 961.187619][T13431] usb 5-1: media controller created [ 961.197843][T31353] EXT4-fs: Ignoring removed orlov option [ 961.261057][T13431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.294598][T31353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 961.495284][ T7116] EXT4-fs (loop5): unmounting filesystem. [ 961.642293][T13431] DVB: Unable to find symbol mt352_attach() [ 961.860629][T13431] DVB: Unable to find symbol nxt6000_attach() [ 961.870269][T13431] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 961.928154][T13431] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 961.979604][T13431] dvb-usb: schedule remote query interval to 1000 msecs. [ 962.009350][T13431] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 962.054726][T13431] dvb-usb: bulk message failed: -22 (7/0) [ 962.060573][T13431] dvb-usb: bulk message failed: -22 (7/0) [ 962.148488][T13431] usb 5-1: USB disconnect, device number 56 [ 962.191918][T13431] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 962.718255][T31384] loop5: detected capacity change from 0 to 256 [ 962.758329][T31380] loop3: detected capacity change from 0 to 4096 [ 962.771834][T31384] FAT-fs (loop5): Directory bread(block 64) failed [ 962.818668][T31384] FAT-fs (loop5): Directory bread(block 65) failed [ 962.852309][ T4311] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 962.869214][T31384] FAT-fs (loop5): Directory bread(block 66) failed [ 962.887948][T31384] FAT-fs (loop5): Directory bread(block 67) failed [ 962.913519][T31384] FAT-fs (loop5): Directory bread(block 68) failed [ 962.928519][T31384] FAT-fs (loop5): Directory bread(block 69) failed [ 962.970113][T31384] FAT-fs (loop5): Directory bread(block 70) failed [ 962.977443][ T125] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 962.980364][T31384] FAT-fs (loop5): Directory bread(block 71) failed [ 963.008088][T31384] FAT-fs (loop5): Directory bread(block 72) failed [ 963.022407][T31384] FAT-fs (loop5): Directory bread(block 73) failed [ 963.068348][ T4311] usb 2-1: Using ep0 maxpacket: 16 [ 963.076463][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.118000][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.160324][ T4311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 963.177678][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 963.185884][ T125] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.202236][ T4311] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 963.240129][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.243708][ T125] usb 5-1: config 0 interface 0 has no altsetting 0 [ 963.273758][ T4311] usb 2-1: config 0 descriptor?? [ 963.288046][ T125] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 963.327862][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.362208][ T125] usb 5-1: Product: syz [ 963.366478][ T125] usb 5-1: Manufacturer: syz [ 963.401560][ T125] usb 5-1: SerialNumber: syz [ 963.423218][ T125] usb 5-1: config 0 descriptor?? [ 963.500010][T31390] loop5: detected capacity change from 0 to 128 [ 963.694931][ T4311] microsoft 0003:045E:07DA.0002: invalid report_size 27513 [ 963.711156][ T125] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input51 [ 963.714001][ T4311] microsoft 0003:045E:07DA.0002: item 0 2 1 7 parsing failed [ 963.764527][ T4311] microsoft 0003:045E:07DA.0002: parse failed [ 963.770713][ T4311] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 963.846792][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 963.920994][ T4350] usb 2-1: USB disconnect, device number 54 [ 964.058852][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 964.066497][ T125] imon:send_packet: packet tx failed (-71) [ 964.092641][ T125] imon 5-1:0.0: panel buttons/knobs setup failed [ 964.262273][ T125] rc_core: IR keymap rc-imon-pad not found [ 964.268172][ T125] Registered IR keymap rc-empty [ 964.282248][ T125] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 964.302136][ T125] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 964.321937][ T125] imon:send_packet: packet tx failed (-71) [ 964.342276][ T125] imon 5-1:0.0: remote input dev register failed [ 964.348824][ T125] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 964.420272][ T125] imon 5-1:0.0: unable to initialize intf0, err 0 [ 964.439468][ T125] imon:imon_probe: failed to initialize context! [ 964.459663][ T125] imon 5-1:0.0: unable to register, err -19 [ 964.492549][ T125] usb 5-1: USB disconnect, device number 57 [ 964.530003][T31394] loop5: detected capacity change from 0 to 40427 [ 964.568098][T31394] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 964.612447][T31394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 964.638177][T31394] F2FS-fs (loop5): invalid crc value [ 964.683326][T31394] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 964.801761][T31406] loop1: detected capacity change from 0 to 128 [ 964.904184][T31394] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 964.911805][T31394] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 964.933295][T31406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 964.990081][T31406] ext4 filesystem being mounted at /2439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.013263][T31394] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 965.063258][ T27] audit: type=1804 audit(1773108638.370:3499): pid=31406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12313" name="/newroot/2439/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 965.122370][T13431] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 965.178094][ T27] audit: type=1800 audit(1773108638.380:3500): pid=31406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12313" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 965.263302][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 965.352381][T13431] usb 4-1: Using ep0 maxpacket: 32 [ 965.365114][T13431] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 965.396293][T13431] usb 4-1: config 0 has no interface number 0 [ 965.420385][T13431] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.456702][T13431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.480580][T13431] usb 4-1: Product: syz [ 965.486364][T13431] usb 4-1: Manufacturer: syz [ 965.491019][T13431] usb 4-1: SerialNumber: syz [ 965.499961][T31419] vxcan1 speed is unknown, defaulting to 1000 [ 965.521948][T13431] usb 4-1: config 0 descriptor?? [ 965.535520][T31420] netlink: 'syz.4.12319': attribute type 12 has an invalid length. [ 965.550799][T13431] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 965.698882][T31424] loop9: detected capacity change from 0 to 7 [ 965.719902][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.729185][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.759405][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.768936][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.796190][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.805500][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.833131][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.842441][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.875321][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.884614][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.911516][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.920802][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.947923][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.957303][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 965.972457][T12446] ldm_validate_partition_table(): Disk read failed. [ 966.000573][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 966.009900][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 966.037586][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 966.046890][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 966.075714][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 966.084987][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 966.092856][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 966.142141][T12446] Dev loop9: unable to read RDB block 0 [ 966.156286][T13431] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 966.175898][T12446] loop9: unable to read partition table [ 966.181957][T12446] loop9: partition table beyond EOD, truncated [ 966.212399][T13431] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 966.281442][T31424] ldm_validate_partition_table(): Disk read failed. [ 966.299380][T31424] Dev loop9: unable to read RDB block 0 [ 966.319713][T31424] loop9: unable to read partition table [ 966.329272][T31424] loop9: partition table beyond EOD, truncated [ 966.359476][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 966.369354][T31424] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 966.392377][T13431] usb 4-1: USB disconnect, device number 53 [ 966.407362][T13431] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 966.470690][T13431] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 966.483829][T31422] loop5: detected capacity change from 0 to 32768 [ 966.505334][T13431] quatech2 4-1:0.51: device disconnected [ 966.565682][T31422] XFS (loop5): Mounting V5 Filesystem [ 966.683434][T31422] XFS (loop5): Ending clean mount [ 966.720129][T31422] XFS (loop5): Quotacheck needed: Please wait. [ 966.768041][T31435] loop1: detected capacity change from 0 to 4096 [ 966.805255][T31435] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 966.876804][T31422] XFS (loop5): Quotacheck: Done. [ 966.969802][T31435] ntfs3: loop1: failed to convert "c46c" to macinuit [ 967.031821][T31419] wg1 speed is unknown, defaulting to 1000 [ 967.214161][T31437] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12322'. [ 967.253014][ T7116] XFS (loop5): Unmounting Filesystem [ 968.137509][T31454] loop4: detected capacity change from 0 to 4096 [ 968.170324][T31454] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 968.305442][T31454] ntfs: volume version 3.1. [ 968.426223][T31454] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 968.452990][T31463] netem: change failed [ 968.508884][T31454] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 968.552518][T31465] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12336'. [ 968.662528][T31467] loop3: detected capacity change from 0 to 164 [ 968.708888][T31469] loop1: detected capacity change from 0 to 256 [ 968.736312][T31467] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 968.783334][T31469] exfat: Deprecated parameter 'utf8' [ 968.882811][T31469] exfat: Deprecated parameter 'utf8' [ 968.888291][T31469] exfat: Deprecated parameter 'utf8' [ 969.038189][T31469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 969.107770][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12339'. [ 969.194388][T31471] loop5: detected capacity change from 0 to 4096 [ 969.243463][T31471] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 969.466929][T31479] loop1: detected capacity change from 0 to 1024 [ 969.508831][T31479] EXT4-fs: inline encryption not supported [ 969.553418][T31479] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 969.649492][T31479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 969.936958][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 970.072462][T31494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 970.079056][T31494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 970.123294][T31494] vhci_hcd vhci_hcd.0: Device attached [ 970.392208][ T4311] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 970.412422][T13433] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 970.443901][T31509] loop3: detected capacity change from 0 to 512 [ 970.460952][T31509] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 970.469808][T31509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 970.553090][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 970.589938][T31512] loop5: detected capacity change from 0 to 64 [ 970.612190][T13433] usb 5-1: Using ep0 maxpacket: 16 [ 970.619136][T13433] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.681147][T13433] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 970.731785][T13433] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 970.786816][T13433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.857678][T13433] usb 5-1: config 0 descriptor?? [ 971.042229][ T125] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 971.101749][T31495] usbip_core: unknown command [ 971.106937][T31495] vhci_hcd: unknown pdu 0 [ 971.114028][T13433] usb 5-1: USB disconnect, device number 58 [ 971.145942][T31495] usbip_core: unknown command [ 971.150953][ T4326] vhci_hcd: stop threads [ 971.158091][T31520] sctp: [Deprecated]: syz.5.12360 (pid 31520) Use of int in max_burst socket option. [ 971.158091][T31520] Use struct sctp_assoc_value instead [ 971.166113][ T4326] vhci_hcd: release socket [ 971.187926][ T4326] vhci_hcd: disconnect device [ 971.239767][ T125] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 971.252269][ T4311] usb 41-1: device descriptor read/64, error -71 [ 971.262415][ T125] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 971.282165][ T125] usb 4-1: config 220 has no interface number 2 [ 971.299636][ T125] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 971.337117][ T125] usb 4-1: config 220 interface 0 has no altsetting 0 [ 971.363260][ T125] usb 4-1: config 220 interface 76 has no altsetting 0 [ 971.378400][ T125] usb 4-1: config 220 interface 1 has no altsetting 0 [ 971.409039][ T125] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 971.420386][T31514] loop1: detected capacity change from 0 to 32768 [ 971.440348][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.453127][ T4311] vhci_hcd: vhci_device speed not set [ 971.460487][ T125] usb 4-1: Product: syz [ 971.470633][ T125] usb 4-1: Manufacturer: syz [ 971.475397][ T125] usb 4-1: SerialNumber: syz [ 971.652294][T13433] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 971.732729][ T125] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 971.759733][ T125] usb 4-1: No valid video chain found. [ 971.790177][ T125] usb 4-1: selecting invalid altsetting 0 [ 971.835646][ T125] usb 4-1: selecting invalid altsetting 0 [ 971.841460][ T125] usbtest: probe of 4-1:220.1 failed with error -22 [ 971.869984][T13433] usb 6-1: string descriptor 0 read error: -22 [ 971.882249][T13433] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 971.902952][T13433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.908669][ T125] usb 4-1: USB disconnect, device number 54 [ 971.944956][T13433] usb 6-1: config 0 descriptor?? [ 971.969648][T13433] usbtest 6-1:0.0: FX2 device [ 971.990143][T13433] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 972.206102][ T125] usb 6-1: USB disconnect, device number 41 [ 972.651829][T31540] loop3: detected capacity change from 0 to 512 [ 972.687860][T31540] /dev/loop3: Can't open blockdev [ 972.752409][ T125] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 972.875136][T31545] program syz.1.12371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 972.952319][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 972.967173][ T125] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 972.992298][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.000457][ T125] usb 6-1: Product: syz [ 973.034032][ T125] usb 6-1: Manufacturer: syz [ 973.038704][ T125] usb 6-1: SerialNumber: syz [ 973.063143][ T125] usb 6-1: config 0 descriptor?? [ 973.086820][ T125] usbtest 6-1:0.0: FX2 device [ 973.091610][ T125] usbtest 6-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 973.288360][T31554] netlink: 194188 bytes leftover after parsing attributes in process `syz.3.12376'. [ 973.296593][ T125] usb 6-1: USB disconnect, device number 42 [ 973.309865][T31554] netlink: zone id is out of range [ 973.316909][T31554] netlink: zone id is out of range [ 973.327977][T31554] netlink: zone id is out of range [ 973.334940][T31554] netlink: zone id is out of range [ 973.340335][T31554] netlink: zone id is out of range [ 973.351334][T31554] netlink: zone id is out of range [ 973.358101][T31554] netlink: zone id is out of range [ 973.382203][T13433] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 973.390037][T31554] netlink: zone id is out of range [ 973.402260][T31554] netlink: zone id is out of range [ 973.412526][T31554] netlink: zone id is out of range [ 973.550474][T31556] loop4: detected capacity change from 0 to 4096 [ 973.576565][T31556] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 973.595358][T13433] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.622501][T13433] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.652583][T13433] usb 2-1: config 0 interface 0 has no altsetting 0 [ 973.673600][T31556] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 973.679989][T13433] usb 2-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 973.709149][T31556] ntfs3: loop4: ino=0, attr_set_size [ 973.713390][T13433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.740668][T31556] ntfs3: loop4: ino=0, attr_set_size [ 973.763241][T13433] usb 2-1: config 0 descriptor?? [ 973.903039][T31561] genirq: Flags mismatch irq 10. 00000000 (aio_iiro_16) vs. 00000080 (virtio2) [ 974.183649][T13433] wacom 0003:056A:0144.0003: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 974.379299][T31569] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12384'. [ 974.422037][T13433] usb 2-1: USB disconnect, device number 55 [ 974.435949][T31569] tipc: Invalid UDP bearer configuration [ 974.436001][T31569] tipc: Enabling of bearer rejected, failed to enable media [ 974.818563][ T4269] team0: Port device syz_tun removed [ 974.993605][T31584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 975.022761][T31584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 975.042264][T17281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 975.050478][T17281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 975.079674][T17281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 975.087357][T17281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.105800][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 975.113649][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 975.120964][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 975.129123][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 975.138215][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 975.149198][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.210255][ T4326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.241937][T31592] loop4: detected capacity change from 0 to 8 [ 975.253374][T31590] netlink: 332 bytes leftover after parsing attributes in process `syz.3.12392'. [ 975.302974][T31592] SQUASHFS error: Failed to read block 0x636: -5 [ 975.309404][T31592] SQUASHFS error: Unable to read metadata cache entry [634] [ 975.322022][T31592] SQUASHFS error: Unable to read metadata cache entry [634] [ 975.332292][T31592] SQUASHFS error: Unable to read directory block [629:0] [ 975.335524][T31590] netlink: 'syz.3.12392': attribute type 9 has an invalid length. [ 975.347649][T31593] SQUASHFS error: Unable to read metadata cache entry [634] [ 975.360975][T31590] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12392'. [ 975.370613][T31593] SQUASHFS error: Unable to read metadata cache entry [634] [ 975.379828][T31590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12392'. [ 975.398679][T31593] SQUASHFS error: Unable to read directory block [629:0] [ 975.454645][ T4326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.497830][T31582] vxcan1 speed is unknown, defaulting to 1000 [ 975.684456][ T4326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.805398][ T4326] bridge0: port 3(netdevsim0) entered disabled state [ 975.924950][ T4326] bridge0: port 3(netdevsim0) entered disabled state [ 975.957229][ T4326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.986737][T31577] loop5: detected capacity change from 0 to 32768 [ 976.037993][T31577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.12388 (31577) [ 976.124789][T31577] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 976.174519][T31577] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 976.219247][T31577] BTRFS info (device loop5): setting nodatacow, compression disabled [ 976.274472][T31577] BTRFS info (device loop5): force clearing of disk cache [ 976.343101][T31577] BTRFS info (device loop5): enabling ssd optimizations [ 976.350128][T31577] BTRFS info (device loop5): using spread ssd allocation scheme [ 976.432111][T31577] BTRFS info (device loop5): turning off barriers [ 976.438651][T31577] BTRFS info (device loop5): disabling free space tree [ 976.454742][ T4326] device .d left promiscuous mode [ 976.509573][T31577] BTRFS info (device loop5): not using ssd optimizations [ 976.558290][T31577] BTRFS info (device loop5): not using spread ssd allocation scheme [ 976.604342][T31582] wg1 speed is unknown, defaulting to 1000 [ 976.815851][T31624] blktrace: Concurrent blktraces are not allowed on sg0 [ 976.874409][T31599] loop4: detected capacity change from 0 to 32768 [ 976.907800][T31577] BTRFS info (device loop5): rebuilding free space tree [ 977.003074][T31577] BTRFS info (device loop5): disabling free space tree [ 977.026877][T31599] XFS (loop4): Mounting V5 Filesystem [ 977.052576][T31577] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 977.102343][T31577] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 977.185255][T31642] loop3: detected capacity change from 0 to 512 [ 977.198307][T31642] /dev/loop3: Can't open blockdev [ 977.212504][T17281] Bluetooth: hci2: command 0x0409 tx timeout [ 977.284366][T31599] XFS (loop4): Ending clean mount [ 977.375672][T31599] XFS (loop4): Quotacheck needed: Please wait. [ 977.449105][T31601] loop1: detected capacity change from 0 to 40427 [ 977.457882][ T7116] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 977.498574][T31599] XFS (loop4): Quotacheck: Done. [ 977.548336][T31601] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 977.622219][T31601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 977.659022][T31601] F2FS-fs (loop1): invalid crc value [ 977.752661][T31601] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 977.880033][T12446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop5 scanned by udevd (12446) [ 978.055600][T31601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 978.062815][T31601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 978.154283][T31601] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 978.287551][ T4278] XFS (loop4): Unmounting Filesystem [ 978.533569][T31662] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 978.887538][T31670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12412'. [ 978.937654][T31670] nbd: must specify a size in bytes for the device [ 979.248825][T31676] netlink: 'syz.4.12406': attribute type 38 has an invalid length. [ 979.292399][T17281] Bluetooth: hci2: command 0x041b tx timeout [ 979.410378][ T27] audit: type=1326 audit(1773108652.720:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 979.473632][T31683] mkiss: ax0: crc mode is auto. [ 979.506599][ T27] audit: type=1326 audit(1773108652.760:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 979.624573][ T27] audit: type=1326 audit(1773108652.760:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 979.717908][ T27] audit: type=1326 audit(1773108652.760:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 979.859147][ T27] audit: type=1326 audit(1773108652.760:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 979.906554][T31582] chnl_net:caif_netlink_parms(): no params data found [ 979.949727][ T27] audit: type=1326 audit(1773108652.760:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 980.020310][T31699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 980.026996][T31699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 980.038569][ T27] audit: type=1326 audit(1773108652.760:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.1.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa479b9c799 code=0x7ffc0000 [ 980.065145][T31699] vhci_hcd vhci_hcd.0: Device attached [ 980.332703][ T4935] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 980.362470][ T4939] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 980.552313][ T4939] usb 4-1: Using ep0 maxpacket: 16 [ 980.559444][ T4939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.601605][ T4939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.641121][ T4939] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 980.672306][ T4939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.700758][ T4939] usb 4-1: config 0 descriptor?? [ 980.747407][T31582] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.771137][T31582] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.790234][T31582] device bridge_slave_0 entered promiscuous mode [ 980.856723][T31582] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.865548][T31582] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.883979][T31582] device bridge_slave_1 entered promiscuous mode [ 980.964667][T31700] usbip_core: unknown command [ 980.969700][T31700] vhci_hcd: unknown pdu 0 [ 980.980799][ T4350] usb 4-1: USB disconnect, device number 55 [ 980.988608][T31582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.000022][T31700] usbip_core: unknown command [ 981.045725][ T7803] vhci_hcd: stop threads [ 981.050060][ T7803] vhci_hcd: release socket [ 981.064403][T31582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.082265][ T4939] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 981.095442][ T7803] vhci_hcd: disconnect device [ 981.112554][ T4935] usb 39-1: device descriptor read/64, error -71 [ 981.176291][T31582] team0: Port device team_slave_0 added [ 981.211243][T31582] team0: Port device team_slave_1 added [ 981.274179][ T4939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 981.305399][ T4939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.321631][T31582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.322368][ T4935] vhci_hcd: vhci_device speed not set [ 981.343180][ T4939] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 981.350150][T31582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.373118][T17281] Bluetooth: hci2: command 0x040f tx timeout [ 981.392245][ T4939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.412680][ T4939] usb 6-1: config 0 descriptor?? [ 981.508745][T31582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.583612][T31582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.590775][T31582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.722719][T31582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.830859][ T4939] savu 0003:1E7D:2D5A.0004: collection stack underflow [ 981.848592][ T4939] savu 0003:1E7D:2D5A.0004: item 0 0 0 12 parsing failed [ 981.876768][T31723] loop1: detected capacity change from 0 to 40427 [ 981.888246][T31582] device hsr_slave_0 entered promiscuous mode [ 981.897862][ T4939] savu 0003:1E7D:2D5A.0004: parse failed [ 981.925249][T31582] device hsr_slave_1 entered promiscuous mode [ 981.932329][T31723] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 981.948233][ T4939] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22 [ 981.953149][T31582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.966003][T31723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 981.999877][T31582] Cannot create hsr debugfs directory [ 982.022275][T31723] F2FS-fs (loop1): invalid crc value [ 982.033539][ T4939] usb 6-1: USB disconnect, device number 43 [ 982.099372][T31723] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 982.134595][T31751] loop4: detected capacity change from 0 to 512 [ 982.319613][T31751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 982.332440][T31751] ext4 filesystem being mounted at /2559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.430516][T31751] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 982.494693][T31751] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 982.524915][T31723] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 982.559229][T31751] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.12434: Failed to acquire dquot type 0 [ 982.574334][T31723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 982.640501][T31751] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 982.815976][ T4268] syz-executor: attempt to access beyond end of device [ 982.815976][ T4268] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 982.967139][ T4278] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 983.027012][ T4278] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz-executor: Failed to acquire dquot type 0 [ 983.452334][T17281] Bluetooth: hci2: command 0x0419 tx timeout [ 983.584609][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 983.667104][T31582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 983.696071][T31582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 983.782586][ T4326] device hsr_slave_0 left promiscuous mode [ 983.818973][ T4326] device hsr_slave_1 left promiscuous mode [ 983.829225][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.852249][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.880997][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.891553][T31765] loop3: detected capacity change from 0 to 32768 [ 983.910184][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.926963][ T4326] device bridge_slave_1 left promiscuous mode [ 983.958015][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.998327][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.056662][T13431] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 984.195448][ T4326] device veth1_macvtap left promiscuous mode [ 984.230964][ T4326] device veth0_macvtap left promiscuous mode [ 984.261371][ T4326] device veth1_vlan left promiscuous mode [ 984.277890][ T4326] device veth0_vlan left promiscuous mode [ 984.304227][T13431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 984.342171][T13431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.351998][T13431] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 984.412121][T13431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.454160][T13431] usb 2-1: config 0 descriptor?? [ 984.562273][ T4939] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 984.762219][ T4939] usb 6-1: Using ep0 maxpacket: 32 [ 984.780527][ T4939] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 984.799543][ T4939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.807937][ T4939] usb 6-1: Product: syz [ 984.815390][ T4326] bond0 (unregistering): Released all slaves [ 984.856301][ T4939] usb 6-1: Manufacturer: syz [ 984.860974][ T4939] usb 6-1: SerialNumber: syz [ 984.870188][T13431] cypress 0003:04B4:DE64.0005: item fetching failed at offset 1/3 [ 984.884439][ T4939] usb 6-1: config 0 descriptor?? [ 984.902899][T13431] cypress 0003:04B4:DE64.0005: parse failed [ 984.908891][T13431] cypress: probe of 0003:04B4:DE64.0005 failed with error -22 [ 984.913404][ T4939] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 984.948940][ T4939] dvb-usb: bulk message failed: -22 (2/0) [ 985.004316][ T4939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.035343][ T4939] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 985.050678][ T4939] usb 6-1: media controller created [ 985.070902][ T4939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.144643][ T4939] usb 6-1: selecting invalid altsetting 7 [ 985.160694][ T4939] cxusb: set interface failed [ 985.166102][ T4939] dvb-usb: bulk message failed: -22 (1/0) [ 985.179875][ T4350] usb 2-1: USB disconnect, device number 56 [ 985.213413][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 985.229215][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 985.238179][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 985.246933][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 985.261000][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 985.268549][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 985.351368][T31786] loop3: detected capacity change from 0 to 32768 [ 985.359426][T31786] /dev/loop3: Can't open blockdev [ 985.382429][ T4939] DVB: Unable to find symbol lgdt330x_attach() [ 985.388646][ T4939] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 985.429985][T12446] blk_print_req_error: 25 callbacks suppressed [ 985.430004][T12446] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 985.582421][ T4939] rc_core: IR keymap rc-dvico-portable not found [ 985.588930][ T4939] Registered IR keymap rc-empty [ 985.626954][ T4939] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 985.672026][ T4939] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input56 [ 985.773523][ T4939] dvb-usb: schedule remote query interval to 100 msecs. [ 985.792947][ T4939] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 985.837907][ T4939] usb 6-1: USB disconnect, device number 44 [ 985.949168][ T4939] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 985.988702][T31799] loop5: detected capacity change from 0 to 4096 [ 986.031864][ T4326] bond3 (unregistering): Released all slaves [ 986.049017][T31801] loop1: detected capacity change from 0 to 512 [ 986.055584][T31799] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 986.088417][T31801] EXT4-fs: Ignoring removed orlov option [ 986.108501][T31801] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 986.184479][T31801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 986.300760][T31801] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.12450: corrupted in-inode xattr [ 986.345568][T31801] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.12450: couldn't read orphan inode 15 (err -117) [ 986.405540][T31801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 986.410551][T31807] loop3: detected capacity change from 0 to 64 [ 986.500178][T31801] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 986.544113][ T4364] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.765967][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 987.053744][ T4326] bond2 (unregistering): Released all slaves [ 987.090247][ T4326] bond1 (unregistering): Released all slaves [ 987.372406][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 987.412514][T31830] program syz.5.12463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.644540][T31836] loop1: detected capacity change from 0 to 512 [ 987.998759][T31841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12468'. [ 988.320364][T31846] loop1: detected capacity change from 0 to 4096 [ 988.420472][T31848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 988.947425][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 989.452590][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 989.694934][T31582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 989.732991][T31582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 989.819525][T31791] vxcan1 speed is unknown, defaulting to 1000 [ 990.114422][T31866] loop5: detected capacity change from 0 to 1024 [ 990.206530][T31582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.264603][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.289302][T31866] hfsplus: xattr searching failed [ 990.300183][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.353239][T31582] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.411148][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.431972][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.479905][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.487223][T18967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.563691][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 990.693236][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.707828][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.753301][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.760465][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.824805][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 990.855380][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 990.906866][T31791] wg1 speed is unknown, defaulting to 1000 [ 990.936351][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 990.954740][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 991.003837][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 991.042375][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 991.074481][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 991.112955][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 991.150862][T31582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.173483][T31582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 991.224831][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 991.234144][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 991.263774][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 991.532196][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 991.578344][T31906] loop3: detected capacity change from 0 to 256 [ 991.598681][T31906] exfat: Deprecated parameter 'namecase' [ 991.618480][T31906] /dev/loop3: Can't open blockdev [ 991.684260][T31907] loop1: detected capacity change from 0 to 2048 [ 991.792780][T31907] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 991.906304][T31907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.947451][T31791] chnl_net:caif_netlink_parms(): no params data found [ 991.969391][T31914] loop5: detected capacity change from 0 to 256 [ 992.040458][T31914] exfat: Deprecated parameter 'namecase' [ 992.077628][T31914] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 992.219300][ T7784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.538483][ T7784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.931218][ T7784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.975250][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.981716][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.005728][T31791] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.020330][T31791] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.029733][T31791] device bridge_slave_0 entered promiscuous mode [ 993.137588][ T7784] bridge0: port 3(netdevsim0) entered disabled state [ 993.200647][ T7784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.229598][T31791] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.262623][T31791] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.270825][T31791] device bridge_slave_1 entered promiscuous mode [ 993.329189][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.338929][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.368720][T31582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.465688][T31791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.550785][T31791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.612678][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 993.727486][T31791] team0: Port device team_slave_0 added [ 993.800442][T31791] team0: Port device team_slave_1 added [ 993.931267][T31791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.967780][T31939] loop5: detected capacity change from 0 to 32768 [ 993.982785][T31791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.069422][T31791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.141852][T31939] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 994.163592][T31939] XFS (loop5): Mounting V5 Filesystem [ 994.171867][T31791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.192707][T31791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.236760][T31939] XFS (loop5): Ending clean mount [ 994.260452][T31939] XFS (loop5): Quotacheck needed: Please wait. [ 994.338913][T31791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.412691][T31939] XFS (loop5): Quotacheck: Done. [ 994.574202][ T7116] XFS (loop5): Unmounting Filesystem [ 994.768549][T31984] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 995.154216][T31791] device hsr_slave_0 entered promiscuous mode [ 995.184275][T31791] device hsr_slave_1 entered promiscuous mode [ 995.212519][T31791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.232884][T31791] Cannot create hsr debugfs directory [ 995.463378][ T4935] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 995.665315][ T4935] usb 4-1: Using ep0 maxpacket: 32 [ 995.691180][ T4935] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 995.721702][ T4935] usb 4-1: config 0 has no interface number 0 [ 995.751369][ T4935] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 995.771098][ T4935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.811482][ T4935] usb 4-1: Product: syz [ 995.816983][ T4935] usb 4-1: Manufacturer: syz [ 995.821648][ T4935] usb 4-1: SerialNumber: syz [ 995.857524][ T4935] usb 4-1: config 0 descriptor?? [ 995.881244][ T4935] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 995.941531][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 995.961141][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 996.009885][T31992] loop1: detected capacity change from 0 to 32768 [ 996.051190][T31992] XFS (loop1): Mounting V5 Filesystem [ 996.079555][ T4935] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 996.090470][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 996.114133][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 996.130877][ T4935] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 996.146874][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 996.155490][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 996.164856][T31582] device veth0_vlan entered promiscuous mode [ 996.185058][T31992] XFS (loop1): Ending clean mount [ 996.199159][T31992] XFS (loop1): Quotacheck needed: Please wait. [ 996.290343][T31992] XFS (loop1): Quotacheck: Done. [ 996.330602][T31582] device veth1_vlan entered promiscuous mode [ 996.507579][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 996.516712][ T4937] usb 4-1: USB disconnect, device number 56 [ 996.538487][ T4937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 996.575074][ T4937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 996.610079][ T4937] quatech2 4-1:0.51: device disconnected [ 996.680971][ T4268] XFS (loop1): Unmounting Filesystem [ 996.860873][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 996.890963][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 996.906123][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 996.916244][T18967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.027985][T31582] device veth0_macvtap entered promiscuous mode [ 997.067508][T31582] device veth1_macvtap entered promiscuous mode [ 997.160446][T31791] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 997.199337][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.242236][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.274852][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.315990][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.352487][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.402155][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.428950][T31582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.519103][T31791] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 997.569286][T31791] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 997.587004][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 997.599181][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 997.621562][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 997.640583][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.682209][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.712201][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.753193][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.790159][T31582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.808727][T32039] loop3: detected capacity change from 0 to 64 [ 997.815191][T31582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.862015][T31582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.911237][T31791] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 997.954543][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 997.983147][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 998.019216][T31582] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.041588][T31582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.058379][T31582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.069090][T31582] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.280201][T32023] loop5: detected capacity change from 0 to 40427 [ 998.305537][T32023] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 998.313493][T32023] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 998.323098][T32023] F2FS-fs (loop5): invalid crc value [ 998.337152][T32023] F2FS-fs (loop5): Found nat_bits in checkpoint [ 998.603470][T32023] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 998.619562][T32023] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 998.789680][T18967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.822258][T18967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.854569][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 998.970784][T31791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.030668][ T7812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.059997][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.072571][ T7812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.080883][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.122978][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 999.165708][T31791] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.209025][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.268492][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.280412][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.287646][ T7803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.396184][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.408475][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.430092][T32068] program syz.5.12537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.458729][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.497929][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.505148][ T7803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.581497][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.628210][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.699053][ T7784] device hsr_slave_0 left promiscuous mode [ 999.725376][ T7784] device hsr_slave_1 left promiscuous mode [ 999.741003][ T7784] device bridge_slave_1 left promiscuous mode [ 999.776017][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.802771][ T7784] device bridge_slave_0 left promiscuous mode [ 999.824259][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.116760][T32074] loop5: detected capacity change from 0 to 32768 [ 1000.130101][T32074] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1000.138401][T32074] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1000.153138][T32074] syz.5.12539: attempt to access beyond end of device [ 1000.153138][T32074] loop5: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 1000.168064][T32074] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 1000.244049][ T7784] device veth0_macvtap left promiscuous mode [ 1000.254202][T32080] loop1: detected capacity change from 0 to 2048 [ 1000.276206][T32080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.293496][ T7784] device veth1_vlan left promiscuous mode [ 1000.713398][ T4937] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1000.768839][ T7784] bond3 (unregistering): Released all slaves [ 1000.867374][T13431] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1000.916515][ T4937] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1000.952370][ T4937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.964781][ T4937] usb 6-1: config 0 descriptor?? [ 1000.991250][ T4937] cp210x 6-1:0.0: cp210x converter detected [ 1001.064118][T13431] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.082130][T13431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.096826][T13431] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1001.116354][T13431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.132520][T13431] usb 4-1: Product: syz [ 1001.141870][T13431] usb 4-1: Manufacturer: syz [ 1001.162113][T13431] usb 4-1: SerialNumber: syz [ 1001.176656][T13431] usb 4-1: config 0 descriptor?? [ 1001.191033][T13431] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1001.201958][ T7784] bond2 (unregistering): Released all slaves [ 1001.237077][T13431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.264968][T13431] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1001.292145][T13431] usb 4-1: media controller created [ 1001.316031][T13431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.343990][T32088] loop1: detected capacity change from 0 to 32768 [ 1001.367334][ T7784] bond1 (unregistering): Released all slaves [ 1001.489488][T13431] DVB: Unable to find symbol tda10046_attach() [ 1001.496771][T13431] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1001.512338][T13431] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1001.601483][ T4937] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1001.609516][ T4937] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1001.630164][ T4937] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1001.660513][ T4937] usb 6-1: USB disconnect, device number 45 [ 1001.704445][ T4937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1001.745250][ T4937] cp210x 6-1:0.0: device disconnected [ 1001.935955][T13431] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 1001.982981][T13431] usb 4-1: USB disconnect, device number 57 [ 1002.343590][ T7784] team0 (unregistering): Port device virt_wifi0 removed [ 1003.018864][T32096] loop1: detected capacity change from 0 to 32768 [ 1003.063056][T32094] loop5: detected capacity change from 0 to 32768 [ 1003.166864][T32094] JBD2: Ignoring recovery information on journal [ 1003.269495][T32094] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1003.423440][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1003.423458][ T27] audit: type=1800 audit(1773108676.740:3508): pid=32094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12549" name="file1" dev="loop5" ino=17056 res=0 errno=0 [ 1003.613808][ T7784] team0 (unregistering): Port device team_slave_1 removed [ 1003.672903][ T7116] ocfs2: Unmounting device (7,5) on (node local) [ 1003.799003][ T7784] team0 (unregistering): Port device team_slave_0 removed [ 1003.838087][T32116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12557'. [ 1004.023218][ T7784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.039057][ T7784] device bond_slave_1 left promiscuous mode [ 1004.049126][ T4935] kernel write not supported for file /sg0 (pid: 4935 comm: kworker/0:11) [ 1004.213531][ T7784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.225156][ T7784] device bond_slave_0 left promiscuous mode [ 1004.631660][T10633] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 1004.641369][T10633] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 1004.651649][T10633] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 1004.704405][T10633] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 1004.918701][T32129] fido_id[32129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1005.044303][ T7784] team0 (unregistering): Port device bridge0 removed [ 1005.111547][ T7784] bond0 (unregistering): Released all slaves [ 1005.286557][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1005.310188][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1005.333191][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1005.352700][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1005.372976][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1005.384555][T32131] loop6: detected capacity change from 0 to 32768 [ 1005.394938][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1005.417089][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1005.443739][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1005.464041][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1005.515059][T31791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1005.632585][T32131] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1005.685141][T32131] XFS (loop6): Mounting V5 Filesystem [ 1005.951828][T32131] XFS (loop6): Ending clean mount [ 1006.026336][T32131] XFS (loop6): Quotacheck needed: Please wait. [ 1006.245172][T32131] XFS (loop6): Quotacheck: Done. [ 1006.723645][T31582] XFS (loop6): Unmounting Filesystem [ 1006.771649][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1006.785800][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1006.850001][T31791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.983464][T32176] Bluetooth: MGMT ver 1.22 [ 1007.574247][T32193] tipc: Started in network mode [ 1007.579205][T32193] tipc: Node identity ac1414aa, cluster identity 4711 [ 1007.654448][T32193] tipc: Enabled bearer , priority 10 [ 1007.962249][ T4350] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1008.158743][ T4350] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1008.178452][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.201023][ T4350] usb 4-1: config 0 descriptor?? [ 1008.219602][ T4350] cp210x 4-1:0.0: cp210x converter detected [ 1008.264745][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1008.293390][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1008.297104][T32186] loop1: detected capacity change from 0 to 32768 [ 1008.365474][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1008.393023][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1008.423652][ T4350] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1008.427399][T31791] device veth0_vlan entered promiscuous mode [ 1008.468975][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1008.482722][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1008.526890][T31791] device veth1_vlan entered promiscuous mode [ 1008.627423][T13431] usb 4-1: USB disconnect, device number 58 [ 1008.647828][T13431] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1008.675344][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1008.689916][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1008.697665][T13431] cp210x 4-1:0.0: device disconnected [ 1008.727431][T32212] netlink: 'syz.1.12586': attribute type 1 has an invalid length. [ 1008.753424][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1008.802756][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1008.846158][T31791] device veth0_macvtap entered promiscuous mode [ 1008.883402][T13433] tipc: Node number set to 2886997162 [ 1008.944508][T31791] device veth1_macvtap entered promiscuous mode [ 1008.998258][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.059780][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.100381][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.141538][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.184958][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.216432][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.224051][T32203] loop5: detected capacity change from 0 to 32768 [ 1009.252232][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.280737][T32203] XFS (loop5): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 1009.303737][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.370421][T31791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.420366][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1009.431893][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1009.434710][T32223] loop3: detected capacity change from 0 to 256 [ 1009.504261][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1009.541054][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1009.614716][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.692266][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.742846][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.773922][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.812145][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.842119][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.882776][T31791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.932681][T31791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.004388][T31791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.014018][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1010.045778][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1010.089474][T31791] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.132399][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12594'. [ 1010.141472][T31791] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.170909][T31791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.202566][T31791] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.503852][ T7803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.512320][ T7803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.544175][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1010.596692][T32249] loop3: detected capacity change from 0 to 256 [ 1010.627695][T32249] exfat: Deprecated parameter 'utf8' [ 1010.660534][T32249] exfat: Deprecated parameter 'namecase' [ 1010.677806][T32249] /dev/loop3: Can't open blockdev [ 1010.686197][ T7823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.712330][ T7823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.719975][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1011.725982][T32284] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1011.752322][T32284] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1011.790689][T32284] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1011.826418][T32284] comedi comedi3: 8255: I/O port conflict (0xcc7,4) [ 1011.848004][T32284] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1011.889559][T32284] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1011.911416][T32284] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1011.922678][T32284] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1011.944792][T32284] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1011.969156][T32284] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1012.003594][T32284] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1012.110664][T32296] loop7: detected capacity change from 0 to 1024 [ 1012.204558][T32296] hfsplus: catalog name length corrupted [ 1012.868325][T32313] loop1: detected capacity change from 0 to 8192 [ 1012.899980][T32313] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1012.940646][T32313] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1012.952408][T32313] REISERFS (device loop1): using ordered data mode [ 1012.962445][T32313] reiserfs: using flush barriers [ 1013.021456][T32313] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1013.102981][T32305] loop5: detected capacity change from 0 to 32768 [ 1013.110988][T32305] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.12618 (32305) [ 1013.124758][T32313] REISERFS (device loop1): checking transaction log (loop1) [ 1013.153978][T32313] REISERFS (device loop1): Using r5 hash to sort names [ 1013.161497][T32313] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1013.206988][T32305] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1013.233534][T32321] tipc: Started in network mode [ 1013.268694][T32305] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1013.278440][T32321] tipc: Node identity , cluster identity 4711 [ 1013.294010][T32321] tipc: Failed to set node id, please configure manually [ 1013.313936][T32305] BTRFS info (device loop5): using free space tree [ 1013.342307][T32321] tipc: Enabling of bearer rejected, failed to enable media [ 1013.367294][T10633] kernel write not supported for file /dsp1 (pid: 10633 comm: kworker/1:13) [ 1013.468607][T32313] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006" [ 1013.503163][T32302] loop3: detected capacity change from 0 to 32768 [ 1013.696229][T32305] BTRFS info (device loop5): enabling ssd optimizations [ 1014.197191][ T7116] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1014.441657][T32359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1014.488390][T32361] loop3: detected capacity change from 0 to 256 [ 1014.629143][T32364] loop7: detected capacity change from 0 to 128 [ 1014.712836][T32364] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1014.799744][T32364] hpfs: filesystem error: improperly stopped [ 1014.844708][T32364] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1014.890576][T32364] hpfs: You really don't want any checks? You are crazy... [ 1014.926822][T32364] hpfs: hpfs_map_sector(): read error [ 1014.977834][T32364] hpfs: code page support is disabled [ 1014.990497][T32364] hpfs: hpfs_map_4sectors(): unaligned read [ 1015.017502][T32364] hpfs: hpfs_map_4sectors(): unaligned read [ 1015.045944][T32364] hpfs: filesystem error: unable to find root dir [ 1015.197529][T32372] loop5: detected capacity change from 0 to 256 [ 1015.252858][T32372] exfat: Deprecated parameter 'namecase' [ 1015.278911][T32372] exfat: Deprecated parameter 'utf8' [ 1015.345629][T32372] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1015.456753][T32377] loop7: detected capacity change from 0 to 512 [ 1015.537340][T32377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1015.781804][T31791] EXT4-fs (loop7): unmounting filesystem. [ 1015.920038][T32368] netlink: 'syz.6.12635': attribute type 10 has an invalid length. [ 1015.959780][T32368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.967150][T32368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.012812][T32368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.020032][T32368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.027515][T32368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.034707][T32368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.048400][T10633] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1016.074042][T32368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1016.213244][T32390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12639'. [ 1016.263176][T10633] usb 6-1: Using ep0 maxpacket: 16 [ 1016.283420][T10633] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 1016.291917][T10633] usb 6-1: config 0 has no interface number 0 [ 1016.319000][T10633] usb 6-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.350105][T10633] usb 6-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.384558][T10633] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1016.412889][T10633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.463259][T10633] usb 6-1: config 0 descriptor?? [ 1016.740597][T32403] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12644'. [ 1016.760286][T32374] loop3: detected capacity change from 0 to 40427 [ 1016.879447][T10633] uclogic 0003:5543:0781.0007: unknown main item tag 0x0 [ 1016.912194][T10633] uclogic 0003:5543:0781.0007: unknown main item tag 0x0 [ 1016.919311][T10633] uclogic 0003:5543:0781.0007: unknown main item tag 0x0 [ 1016.970462][T10633] uclogic 0003:5543:0781.0007: unknown main item tag 0x0 [ 1017.004536][T10633] uclogic 0003:5543:0781.0007: unknown main item tag 0x0 [ 1017.055582][T10633] uclogic 0003:5543:0781.0007: No inputs registered, leaving [ 1017.094290][T10633] uclogic 0003:5543:0781.0007: hidraw0: USB HID v0.40 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input13 [ 1017.156349][T10633] usb 6-1: USB disconnect, device number 46 [ 1017.513041][T32423] Bluetooth: MGMT ver 1.22 [ 1017.524775][T32415] fido_id[32415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1018.371750][T32452] loop1: detected capacity change from 0 to 64 [ 1018.473147][T32452] syz.1.12664: attempt to access beyond end of device [ 1018.473147][T32452] loop1: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1018.539856][T32452] Trying to free block not in datazone [ 1018.597727][T32461] syz.1.12664: attempt to access beyond end of device [ 1018.597727][T32461] loop1: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1018.712364][T32461] buffer_io_error: 25 callbacks suppressed [ 1018.712381][T32461] Buffer I/O error on dev loop1, logical block 206, async page read [ 1018.771956][ T27] audit: type=1800 audit(1773108692.080:3509): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12664" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1019.006860][T32471] loop6: detected capacity change from 0 to 256 [ 1019.061530][T32471] exfat: Deprecated parameter 'namecase' [ 1019.106371][T32476] netlink: 'syz.1.12673': attribute type 10 has an invalid length. [ 1019.130866][T32471] exfat: Deprecated parameter 'utf8' [ 1019.207798][T32476] bridge0: port 2(netdevsim0) entered disabled state [ 1019.214710][T32476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.231429][T32471] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1019.272994][T32476] bridge0: port 2(netdevsim0) entered blocking state [ 1019.279897][T32476] bridge0: port 2(netdevsim0) entered forwarding state [ 1019.287045][T32476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.294224][T32476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.350256][T32476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1019.370928][T32477] netlink: 'syz.7.12674': attribute type 3 has an invalid length. [ 1019.572147][T13431] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1019.620751][T32455] loop3: detected capacity change from 0 to 32768 [ 1019.655666][T32486] loop7: detected capacity change from 0 to 512 [ 1019.702826][T32486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1019.750352][T32486] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1019.774527][T13431] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.803382][T13431] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.841269][T13431] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1019.860903][T13431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.895682][T32486] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.12677: Invalid block bitmap block 0 in block_group 0 [ 1019.896691][T13431] hub 6-1:4.0: USB hub found [ 1020.007577][T32486] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 1020.050001][T32486] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.12677: attempt to clear invalid blocks 983261 len 1 [ 1020.075261][T32486] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.12677: Invalid inode table block 0 in block_group 0 [ 1020.102759][T13431] hub 6-1:4.0: 2 ports detected [ 1020.108326][T13431] usb 6-1: selecting invalid altsetting 1 [ 1020.142157][T13431] hub 6-1:4.0: Using single TT (err -22) [ 1020.172302][T32486] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1020.213919][T32486] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1020.252441][T32486] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.12677: Invalid inode table block 0 in block_group 0 [ 1020.317028][T13431] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 1020.323744][T13431] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 1020.341578][T32486] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1020.379752][T32486] EXT4-fs error (device loop7): ext4_truncate:4318: inode #11: comm syz.7.12677: mark_inode_dirty error [ 1020.402249][T32486] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1020.421412][T32486] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.12677: Invalid inode table block 0 in block_group 0 [ 1020.435463][T13431] usb 6-1: USB disconnect, device number 47 [ 1020.493125][T32486] EXT4-fs (loop7): 1 truncate cleaned up [ 1020.498871][T32486] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1020.587149][T32489] loop1: detected capacity change from 0 to 32768 [ 1020.712960][T31791] EXT4-fs (loop7): unmounting filesystem. [ 1020.722351][T32489] XFS (loop1): Mounting V5 Filesystem [ 1020.917201][T32489] XFS (loop1): Ending clean mount [ 1021.140942][ T4268] XFS (loop1): Unmounting Filesystem [ 1021.322360][T32527] loop3: detected capacity change from 0 to 764 [ 1021.406441][T32527] Symlink component flag not implemented [ 1021.432911][T32527] Symlink component flag not implemented (15) [ 1021.956752][T32536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12690'. [ 1022.013681][T32518] loop6: detected capacity change from 0 to 32768 [ 1022.065980][T32518] (syz.6.12692,32518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1022.137168][T32518] (syz.6.12692,32518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1022.262996][T32518] JBD2: Ignoring recovery information on journal [ 1022.338145][T32545] netlink: 908 bytes leftover after parsing attributes in process `syz.7.12693'. [ 1022.460838][T32518] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1022.706006][T32554] vxcan1 speed is unknown, defaulting to 1000 [ 1022.764551][T32556] netlink: 'syz.7.12696': attribute type 12 has an invalid length. [ 1022.832558][T31582] ocfs2: Unmounting device (7,6) on (node local) [ 1022.886758][ T27] audit: type=1326 audit(1773108696.200:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1022.975508][ T27] audit: type=1326 audit(1773108696.240:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.061388][T32533] loop3: detected capacity change from 0 to 40427 [ 1023.074677][ T27] audit: type=1326 audit(1773108696.240:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.163505][ T4351] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1023.258642][ T27] audit: type=1326 audit(1773108696.240:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.352460][ T27] audit: type=1326 audit(1773108696.240:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.444679][ T27] audit: type=1326 audit(1773108696.240:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.595763][ T27] audit: type=1326 audit(1773108696.240:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.710136][ T27] audit: type=1326 audit(1773108696.240:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32559 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738499c799 code=0x7ffc0000 [ 1023.950709][T32554] wg1 speed is unknown, defaulting to 1000 [ 1024.006072][T32579] loop1: detected capacity change from 0 to 256 [ 1024.033089][T32579] exfat: Deprecated parameter 'utf8' [ 1024.052625][T32579] exfat: Deprecated parameter 'namecase' [ 1024.121269][T32579] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 1024.503784][T32570] loop5: detected capacity change from 0 to 32768 [ 1024.683247][T32570] XFS (loop5): Mounting V5 Filesystem [ 1024.847526][T32570] XFS (loop5): Ending clean mount [ 1024.867279][T32596] loop7: detected capacity change from 0 to 4096 [ 1025.082962][ T27] audit: type=1800 audit(1773108698.400:3518): pid=32596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.12709" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 1025.143844][ T7116] XFS (loop5): Unmounting Filesystem [ 1025.630496][T32587] loop1: detected capacity change from 0 to 32768 [ 1025.644660][T32599] loop3: detected capacity change from 0 to 32768 [ 1025.684408][T32599] /dev/loop3: Can't open blockdev [ 1025.723178][T32587] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1025.850913][T32587] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1026.085181][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 1026.555681][T32608] loop7: detected capacity change from 0 to 32768 [ 1027.804133][T32617] loop1: detected capacity change from 0 to 40427 [ 1027.881939][T32617] F2FS-fs (loop1): invalid crc value [ 1027.953719][T32617] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1027.985698][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12730'. [ 1028.023071][T32658] netlink: 6 bytes leftover after parsing attributes in process `syz.6.12730'. [ 1028.099456][T32617] F2FS-fs (loop1): Start checkpoint disabled! [ 1028.147713][T32617] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1028.175283][T32625] loop3: detected capacity change from 0 to 40427 [ 1028.695295][ T7818] kworker/u4:23: attempt to access beyond end of device [ 1028.695295][ T7818] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1029.302312][ T5307] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1029.366338][T32693] loop3: detected capacity change from 0 to 256 [ 1029.371398][T32664] loop7: detected capacity change from 0 to 32768 [ 1029.400073][T32664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.12732 (32664) [ 1029.469430][T32664] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1029.505997][ T5307] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 185, using maximum allowed: 30 [ 1029.532427][T32664] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1029.547954][ T5307] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.567041][T32664] BTRFS info (device loop7): using free space tree [ 1029.620795][ T5307] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.701432][ T5307] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 185 [ 1029.752141][ T5307] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1029.779234][ T5307] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1029.862142][ T5307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.905655][T32716] loop1: detected capacity change from 0 to 128 [ 1029.934495][ T5307] usb 6-1: config 0 descriptor?? [ 1029.952993][T32664] BTRFS info (device loop7): enabling ssd optimizations [ 1029.974245][T32716] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1030.243642][T31791] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1030.279988][ T4268] sysv_free_block: trying to free block not in datazone [ 1030.332975][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1030.389360][ T5307] nintendo 0003:057E:200E.0008: ignoring exceeding usage max [ 1030.406500][ T5307] nintendo 0003:057E:200E.0008: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 1030.529618][ T5307] nintendo 0003:057E:200E.0008: Failed charging grip handshake [ 1030.575850][ T5307] nintendo 0003:057E:200E.0008: Failed to initialize controller; ret=-110 [ 1030.652170][ T4275] Bluetooth: hci3: command 0x0405 tx timeout [ 1030.846261][T32745] loop1: detected capacity change from 0 to 64 [ 1031.198833][ T5307] nintendo 0003:057E:200E.0008: probe - fail = -110 [ 1031.230264][ T5307] nintendo: probe of 0003:057E:200E.0008 failed with error -110 [ 1031.280766][ T5307] usb 6-1: USB disconnect, device number 48 [ 1031.747995][T32757] fido_id[32757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1032.535863][T32760] loop3: detected capacity change from 0 to 32768 [ 1032.603168][T32760] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1032.642628][T32760] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 1032.753905][ T4267] INFO: trying to register non-static key. [ 1032.759800][ T4267] The code is fine but needs lockdep annotation, or maybe [ 1032.766936][ T4267] you didn't initialize this object before use? [ 1032.773201][ T4267] turning off the locking correctness validator. [ 1032.779555][ T4267] CPU: 1 PID: 4267 Comm: syz-executor Not tainted syzkaller #0 [ 1032.787146][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.797254][ T4267] Call Trace: [ 1032.800571][ T4267] [ 1032.803547][ T4267] dump_stack_lvl+0x188/0x24e [ 1032.808272][ T4267] ? show_regs_print_info+0x12/0x12 [ 1032.813527][ T4267] ? load_image+0x400/0x400 [ 1032.818072][ T4267] ? _find_next_bit+0x11e/0x130 [ 1032.822963][ T4267] ? __is_module_percpu_address+0x279/0x3b0 [ 1032.828916][ T4267] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1032.834689][ T4267] assign_lock_key+0x201/0x230 [ 1032.839504][ T4267] ? SOFTIRQ_verbose+0x10/0x10 [ 1032.844325][ T4267] ? verify_lock_unused+0x140/0x140 [ 1032.849569][ T4267] ? deref_stack_reg+0x19f/0x230 [ 1032.854554][ T4267] register_lock_class+0x21d/0x870 [ 1032.859719][ T4267] ? mark_lock+0x94/0x320 [ 1032.864103][ T4267] ? is_dynamic_key+0x260/0x260 [ 1032.869028][ T4267] ? __lock_acquire+0x13cf/0x7d10 [ 1032.874101][ T4267] ? __lock_acquire+0x7d10/0x7d10 [ 1032.879183][ T4267] __lock_acquire+0x16f/0x7d10 [ 1032.884009][ T4267] ? is_bpf_text_address+0x28b/0x2a0 [ 1032.889332][ T4267] ? kernel_text_address+0x9c/0xd0 [ 1032.894511][ T4267] ? verify_lock_unused+0x140/0x140 [ 1032.899766][ T4267] ? stack_trace_save+0xf0/0xf0 [ 1032.904661][ T4267] ? arch_stack_walk+0xf2/0x140 [ 1032.909556][ T4267] ? verify_lock_unused+0x140/0x140 [ 1032.914805][ T4267] ? stack_trace_save+0xa6/0xf0 [ 1032.919708][ T4267] lock_acquire+0x1bb/0x4a0 [ 1032.924273][ T4267] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1032.930223][ T4267] ? memset+0x1e/0x40 [ 1032.934249][ T4267] ? read_lock_is_recursive+0x10/0x10 [ 1032.939682][ T4267] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1032.945981][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 1032.951230][ T4267] _raw_spin_lock_irqsave+0xb0/0x100 [ 1032.956647][ T4267] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1032.962596][ T4267] ? _raw_spin_lock+0x40/0x40 [ 1032.967393][ T4267] ? ktime_get+0x247/0x270 [ 1032.971857][ T4267] ocfs2_mark_lockres_freeing+0x159/0x600 [ 1032.977725][ T4267] ? kasan_quarantine_put+0xd4/0x220 [ 1032.983056][ T4267] ? ocfs2_dlm_shutdown+0x240/0x240 [ 1032.988310][ T4267] ? ocfs2_journal_shutdown+0x673/0xc20 [ 1032.994082][ T4267] ? ocfs2_journal_init+0xdb0/0xdb0 [ 1032.999323][ T4267] ? __kmem_cache_free+0xb6/0x1f0 [ 1033.004395][ T4267] ocfs2_dlm_shutdown+0x36/0x240 [ 1033.009481][ T4267] ocfs2_dismount_volume+0x47f/0x940 [ 1033.014943][ T4267] ? ocfs2_enable_quotas+0x490/0x490 [ 1033.020275][ T4267] ? clear_inode+0x150/0x150 [ 1033.024931][ T4267] ? ocfs2_free_inode+0x20/0x20 [ 1033.029906][ T4267] generic_shutdown_super+0x130/0x340 [ 1033.035322][ T4267] kill_block_super+0x7c/0xe0 [ 1033.040040][ T4267] deactivate_locked_super+0x93/0xf0 [ 1033.045367][ T4267] cleanup_mnt+0x42c/0x4b0 [ 1033.049835][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 1033.055071][ T4267] task_work_run+0x1d0/0x260 [ 1033.059706][ T4267] ? task_work_cancel+0x220/0x220 [ 1033.064791][ T4267] ? exit_to_user_mode_loop+0x3b/0x110 [ 1033.070303][ T4267] exit_to_user_mode_loop+0xe6/0x110 [ 1033.075637][ T4267] exit_to_user_mode_prepare+0xee/0x180 [ 1033.081236][ T4267] syscall_exit_to_user_mode+0x16/0x40 [ 1033.086741][ T4267] do_syscall_64+0x58/0xa0 [ 1033.091211][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 1033.095971][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 1033.100718][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.106740][ T4267] RIP: 0033:0x7fb82539d9d7 [ 1033.111196][ T4267] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1033.130847][ T4267] RSP: 002b:00007ffc10a70a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1033.139306][ T4267] RAX: 0000000000000000 RBX: 00007fb825431f90 RCX: 00007fb82539d9d7 [ 1033.147315][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc10a70af0 [ 1033.155334][ T4267] RBP: 00007ffc10a70af0 R08: 00007ffc10a71af0 R09: 00000000ffffffff [ 1033.163351][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc10a71b80 [ 1033.171374][ T4267] R13: 00007fb825431f90 R14: 00000000000fc1ca R15: 00007ffc10a71bc0 [ 1033.179395][ T4267] [ 1033.331414][ T4267] ocfs2: Unmounting device (7,3) on (node local)