last executing test programs: 4m33.848122005s ago: executing program 1 (id=10960): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x242, &(0x7f00000008c0)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 4m33.440082455s ago: executing program 1 (id=10966): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0) 4m32.943564496s ago: executing program 1 (id=10972): r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0)={[0x2]}, 0x8) setns(r0, 0x4000000) 4m32.532050186s ago: executing program 1 (id=10978): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m32.023149818s ago: executing program 1 (id=10983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) 4m31.412069192s ago: executing program 1 (id=10988): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 4m30.853300165s ago: executing program 32 (id=10988): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 2.047606372s ago: executing program 4 (id=14624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) 2.022910232s ago: executing program 0 (id=14626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x27, 0x28, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.904919995s ago: executing program 4 (id=14627): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x38, &(0x7f00000000c0)={0x3, 0xfffff430, 0x8}) 1.715329289s ago: executing program 0 (id=14630): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d01090050000f804c00f8804800738008008400", @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00a100090000000000000028002b800400c9801e0017004cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167041a200106801c011080bb5b03272a4b4535d9d060aefd828aebfc88fd2efadf5fd945c96b89acf080245e7e46c4ca994cd6c47bd146032402f051d78827df0f3c047720896ab1363a7590b7a7a1624fb31796"], 0x184}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.618857502s ago: executing program 4 (id=14632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000000206050000000000000000000100000405000400000000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.485753605s ago: executing program 0 (id=14634): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty=0x2000, @multicast1}}}}) 1.392954697s ago: executing program 4 (id=14637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1b8, 0x0, 0x2b8, 0x1b8, 0x400, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0xffffff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 1.301189249s ago: executing program 0 (id=14638): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000001, 0x2, 0x1}) 1.218815651s ago: executing program 3 (id=14639): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='trusted\x00', &(0x7f0000000180)=@chain) 1.189283442s ago: executing program 2 (id=14640): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, 0xffffffffffffffff, r0, r0, r0]}, 0x94) 1.028165786s ago: executing program 4 (id=14641): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x1}}, {@barrier}, {@barrier}, {@barrier}, {@part={'part', 0x3d, 0xc}}, {@nls={'nls', 0x3d, 'cp850'}}, {@creator={'creator', 0x3d, "7f0e5bc8"}}, {@force}]}, 0x1, 0x5e5, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.005400357s ago: executing program 3 (id=14642): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 937.333418ms ago: executing program 2 (id=14643): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000f40)={0x7, 0x1, 0x4, 0x10, 0xfff, {0x0, 0x2710}, {0x3, 0x8, 0x31, 0x8, 0x66, 0x1, "7ade423d"}, 0x43ae, 0x4, {}, 0x1}) 723.888803ms ago: executing program 4 (id=14644): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@autodefrag}, {@noacl}, {@nossd_spread}, {@noflushoncommit}, {@nodiscard}, {@compress_force}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@datacow}, {@ssd_spread}]}, 0x9, 0x559d, &(0x7f000000ac40)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 723.754193ms ago: executing program 2 (id=14645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020022010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a300000009f5c00048040000180080001006e6174003400028008000540eb000009080001400001"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x4000) 701.687033ms ago: executing program 3 (id=14646): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 522.022868ms ago: executing program 2 (id=14647): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x356, 0x3f, 0x6, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x4}, {}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x6, 0x4000, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x2, 0xb}) 468.241909ms ago: executing program 3 (id=14648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000e0000002000000000000210000000000000004d400000000ac1414bb000000000000000002000000fe800000000000000000000000000024ac1414bb0000000000000000000000000000000000000006020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000027f000001000000000000000000000000000000004e2200000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000100000000000000000008000000000000000000000000000000e70600000000000004000000000000000200000000000000feffffff000000000000000000000000440008"], 0x16c}}, 0x0) 338.449792ms ago: executing program 2 (id=14649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x404, 0x5080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xb92}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004094) 310.920433ms ago: executing program 3 (id=14650): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x1, 0x102, 0x1, {0x5, 0x20002, 0x755, 0x7f}}) 222.251595ms ago: executing program 0 (id=14651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x274}}, 0x0) 134.638357ms ago: executing program 2 (id=14652): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES64=r0], 0x0) 71.145018ms ago: executing program 3 (id=14653): keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) 0s ago: executing program 0 (id=14654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): t: Error -117 occurred while creating quota [ 1403.919294][ T353] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.12008: Failed to acquire dquot type 0 [ 1403.976650][ T353] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.12008: Freeing blocks not in datazone - block = 0, count = 4096 [ 1404.025094][ T353] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1404.055501][ T353] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1404.081702][ T353] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.12008: Failed to acquire dquot type 0 [ 1404.117906][ T353] EXT4-fs (loop4): 1 orphan inode deleted [ 1404.174102][ T353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1404.257353][ T371] netlink: 'syz.3.12015': attribute type 3 has an invalid length. [ 1404.306141][ T371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12015'. [ 1404.308175][ T353] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.12008: iget: bad extended attribute block 6 [ 1404.488262][T30278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.920662][ T419] loop2: detected capacity change from 0 to 2048 [ 1405.973553][ T419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1406.030686][ T398] loop4: detected capacity change from 0 to 32768 [ 1406.089378][ T419] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 1406.189671][ T28] audit: type=1800 audit(2000000310.940:2792): pid=398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12028" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1406.340904][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.881110][ T5822] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1406.889089][ T446] netlink: 'syz.2.12049': attribute type 3 has an invalid length. [ 1407.113130][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 1407.121971][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1407.131872][ T5822] usb 1-1: config 4 has an invalid interface number: 251 but max is 0 [ 1407.140157][ T5822] usb 1-1: config 4 has no interface number 0 [ 1407.173711][ T5822] usb 1-1: config 4 interface 251 has no altsetting 0 [ 1407.194774][ T5822] usb 1-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 1407.216401][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.260592][ T5822] usb 1-1: Product: syz [ 1407.264950][ T5822] usb 1-1: Manufacturer: syz [ 1407.269609][ T5822] usb 1-1: SerialNumber: syz [ 1407.403361][ T461] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1407.554300][ T5822] usb-storage 1-1:4.251: USB Mass Storage device detected [ 1407.656840][ T5822] usb 1-1: USB disconnect, device number 79 [ 1407.866404][ T474] trusted_key: encrypted_key: insufficient parameters specified [ 1408.036776][ T480] netlink: 'syz.3.12065': attribute type 1 has an invalid length. [ 1408.063969][ T480] netlink: 'syz.3.12065': attribute type 2 has an invalid length. [ 1408.078762][ T480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12065'. [ 1408.202104][ T486] loop4: detected capacity change from 0 to 64 [ 1408.589176][ T497] loop4: detected capacity change from 0 to 64 [ 1408.836985][ T504] loop2: detected capacity change from 0 to 1024 [ 1409.551328][ T528] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1409.575698][ T528] batman_adv: batadv0: Interface activated: netdevsim0 [ 1409.588646][ T528] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1409.626205][ T527] netlink: 'syz.3.12088': attribute type 21 has an invalid length. [ 1409.634770][ T527] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12088'. [ 1409.648878][ T527] netlink: 'syz.3.12088': attribute type 5 has an invalid length. [ 1409.657783][ T527] netlink: 'syz.3.12088': attribute type 6 has an invalid length. [ 1409.676837][ T527] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12088'. [ 1410.170030][ T550] netlink: 'syz.0.12098': attribute type 3 has an invalid length. [ 1410.753877][ T572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12108'. [ 1411.176520][ T588] netlink: 'syz.4.12114': attribute type 10 has an invalid length. [ 1411.257879][ T593] cgroup: name respecified [ 1411.264381][ T588] nlmon0: entered promiscuous mode [ 1411.271388][ T594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12115'. [ 1411.289262][ T588] nlmon0: entered allmulticast mode [ 1411.296913][ T588] team0: Device nlmon0 is of different type [ 1411.823176][ T2179] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1412.039872][ T2179] usb 3-1: Using ep0 maxpacket: 16 [ 1412.047642][ T2179] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.080104][ T2179] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1412.102069][ T2179] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1412.128464][ T2179] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1412.156209][ T2179] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1412.192866][ T2179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.200971][ T2179] usb 3-1: Product: syz [ 1412.213682][ T620] netlink: 'syz.0.12129': attribute type 1 has an invalid length. [ 1412.221761][ T2179] usb 3-1: Manufacturer: syz [ 1412.236952][ T2179] usb 3-1: SerialNumber: syz [ 1412.746881][ T2179] usb 3-1: 0:2 : does not exist [ 1412.799047][ T2179] usb 3-1: USB disconnect, device number 65 [ 1412.865220][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.012813][ T625] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1413.141075][ T632] netlink: 'syz.0.12132': attribute type 11 has an invalid length. [ 1413.173216][ T632] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.12132'. [ 1413.923992][ T654] netlink: 'syz.4.12143': attribute type 1 has an invalid length. [ 1413.924080][ T654] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.12143'. [ 1414.814671][ T680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12155'. [ 1415.001064][ T684] loop4: detected capacity change from 0 to 64 [ 1415.193892][T21262] Bluetooth: hci0: command tx timeout [ 1415.468626][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12164'. [ 1415.496228][ T698] netlink: 'syz.2.12164': attribute type 1 has an invalid length. [ 1417.212897][ T765] netlink: 'syz.2.12198': attribute type 10 has an invalid length. [ 1417.343234][ T765] veth0_vlan: left promiscuous mode [ 1417.384816][ T765] veth0_vlan: entered promiscuous mode [ 1417.442113][ T765] team0: Device veth0_vlan failed to register rx_handler [ 1417.575329][ T773] netlink: 'syz.3.12201': attribute type 10 has an invalid length. [ 1417.608775][ T773] nlmon0: entered promiscuous mode [ 1417.632329][ T773] nlmon0: entered allmulticast mode [ 1417.645341][ T773] team0: Device nlmon0 is of different type [ 1417.711108][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.897355][ T769] loop0: detected capacity change from 0 to 32768 [ 1417.910924][ T769] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.12199 (769) [ 1417.934392][ T769] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1417.945527][ T769] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1417.955050][ T769] BTRFS info (device loop0): enabling ssd optimizations [ 1417.962244][ T769] BTRFS info (device loop0): not using ssd optimizations [ 1417.969701][ T769] BTRFS info (device loop0): turning off barriers [ 1417.976332][ T769] BTRFS info (device loop0): use no compression [ 1417.982831][ T769] BTRFS info (device loop0): using free space tree [ 1418.147244][ T5785] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1418.942264][ T5823] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1419.182326][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 1419.196912][ T5823] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1419.222483][ T5823] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1419.246095][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1419.280012][ T5823] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1419.295884][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.323712][ T5823] usb 4-1: Product: syz [ 1419.328007][ T5823] usb 4-1: Manufacturer: syz [ 1419.332798][ T5823] usb 4-1: SerialNumber: syz [ 1419.354744][ T5823] usb 4-1: config 0 descriptor?? [ 1419.379492][ T5823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1419.518089][ T830] xt_CONNSECMARK: invalid mode: 129 [ 1419.550689][ T5822] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1419.638738][ T5823] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1419.646739][ T5823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1419.679526][ T5823] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1419.756406][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 1419.765492][ T5822] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1419.780860][ T5822] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1419.800116][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.817165][ T5822] usb 1-1: Product: syz [ 1419.822954][ T5822] usb 1-1: Manufacturer: syz [ 1419.827726][ T5822] usb 1-1: SerialNumber: syz [ 1419.839144][ T5822] r8152-cfgselector 1-1: config 0 descriptor?? [ 1419.901137][ T5823] usb 4-1: USB disconnect, device number 65 [ 1419.941798][ T826] loop2: detected capacity change from 0 to 32768 [ 1419.959553][ T826] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.12220 (826) [ 1420.019511][ T826] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1420.068813][ T826] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1420.089468][ T826] BTRFS info (device loop2): using free space tree [ 1420.204298][ T826] BTRFS info (device loop2): enabling ssd optimizations [ 1420.222476][ T826] BTRFS info (device loop2): auto enabling async discard [ 1420.342069][ T5822] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1420.359526][ T5822] r8152-cfgselector 1-1: USB disconnect, device number 80 [ 1420.406178][ T5786] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1420.564062][ T806] Process accounting paused [ 1421.137281][ T876] netlink: 'syz.0.12236': attribute type 10 has an invalid length. [ 1421.239323][ T876] team0: Device nlmon0 is of different type [ 1421.779775][ T896] netlink: 'syz.4.12245': attribute type 1 has an invalid length. [ 1421.799871][ T896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12245'. [ 1422.029233][ T908] netlink: 'syz.4.12249': attribute type 10 has an invalid length. [ 1422.116076][ T911] loop2: detected capacity change from 0 to 512 [ 1422.131092][ T911] EXT4-fs: Ignoring removed nobh option [ 1422.160207][ T914] program syz.3.12251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.220470][ T911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1422.261561][ T908] veth0_vlan: left promiscuous mode [ 1422.289880][ T911] ext4 filesystem being mounted at /2934/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.297667][ T908] veth0_vlan: entered promiscuous mode [ 1422.367943][ T908] team0: Device veth0_vlan failed to register rx_handler [ 1422.594531][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.987663][ T946] netlink: 'syz.3.12261': attribute type 6 has an invalid length. [ 1423.176627][ T953] loop4: detected capacity change from 0 to 256 [ 1423.289999][ T953] FAT-fs (loop4): Directory bread(block 64) failed [ 1423.296699][ T953] FAT-fs (loop4): Directory bread(block 65) failed [ 1423.320014][ T959] netlink: 'syz.0.12267': attribute type 10 has an invalid length. [ 1423.332957][ T953] FAT-fs (loop4): Directory bread(block 66) failed [ 1423.340052][ T953] FAT-fs (loop4): Directory bread(block 67) failed [ 1423.387074][ T953] FAT-fs (loop4): Directory bread(block 68) failed [ 1423.393744][ T953] FAT-fs (loop4): Directory bread(block 69) failed [ 1423.431604][ T953] FAT-fs (loop4): Directory bread(block 70) failed [ 1423.438349][ T953] FAT-fs (loop4): Directory bread(block 71) failed [ 1423.455544][ T963] comedi comedi4: bad chanlist[1]=0x727e4cde chan=19678 range length=2 [ 1423.464304][ T953] FAT-fs (loop4): Directory bread(block 72) failed [ 1423.492296][ T953] FAT-fs (loop4): Directory bread(block 73) failed [ 1423.574344][ T959] @ÿ: left promiscuous mode [ 1423.648112][ T959] @ÿ: entered promiscuous mode [ 1423.665431][ T966] AppArmor: change_hat: Invalid input 'ˆ' [ 1423.690779][ T959] team0: Device 5@ÿ failed to register rx_handler [ 1423.761505][ T28] audit: type=1800 audit(2000000327.161:2793): pid=953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12264" name="file1" dev="loop4" ino=1048715 res=0 errno=0 [ 1424.164436][ T978] bond5: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1424.181904][ T978] bond5 (unregistering): Released all slaves [ 1425.246461][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12284'. [ 1425.944985][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1426.171878][ T1033] x_tables: duplicate entry at hook 1 [ 1426.323235][ T1043] overlayfs: conflicting options: nfs_export=on,index=off [ 1426.780430][ T56] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1427.024419][ T56] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1427.056501][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.409401][ T1074] netlink: 'syz.3.12317': attribute type 75 has an invalid length. [ 1427.580137][ T1081] loop4: detected capacity change from 0 to 16 [ 1427.613279][ T1081] erofs: (device loop4): mounted with root inode @ nid 36. [ 1427.675755][ T1081] syz.4.12320: attempt to access beyond end of device [ 1427.675755][ T1081] loop4: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 1427.955869][ T1086] netlink: 'syz.4.12322': attribute type 9 has an invalid length. [ 1428.303998][ T28] audit: type=1326 audit(2000000331.350:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.3.12325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1428.394179][ T28] audit: type=1326 audit(2000000331.350:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.3.12325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1428.443681][ T56] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 1428.477909][ T28] audit: type=1326 audit(2000000331.387:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.3.12325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1428.504459][ T1096] loop4: detected capacity change from 0 to 2048 [ 1428.578532][ T28] audit: type=1326 audit(2000000331.387:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.3.12325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1428.586254][ T56] usb 3-1: USB disconnect, device number 66 [ 1428.603108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.622547][ T1096] loop4: p2 p3 < > p4 < p5 > [ 1428.627362][ T1096] loop4: partition table partially beyond EOD, truncated [ 1428.645721][ T1096] loop4: p3 start 4284289 is beyond EOD, truncated [ 1428.692915][ T28] audit: type=1326 audit(2000000331.387:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1093 comm="syz.3.12325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1429.172012][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1429.198335][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1429.206295][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1429.274896][ T1115] xt_addrtype: ipv6 does not support BROADCAST matching [ 1429.322900][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1429.857520][ T1132] tmpfs: Bad value for 'mpol' [ 1430.441175][ T1150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1430.973641][ T1167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12360'. [ 1431.015108][ T1167] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12360'. [ 1431.086462][ T1170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12362'. [ 1431.328310][ T1176] loop0: detected capacity change from 0 to 256 [ 1431.349197][ T1176] exfat: Deprecated parameter 'utf8' [ 1431.368484][ T1176] exfat: Deprecated parameter 'utf8' [ 1431.391702][ T1176] exfat: Deprecated parameter 'utf8' [ 1431.444065][ T1176] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 1431.498475][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.613252][ T5823] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1431.831788][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.862828][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1431.895298][ T5823] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1431.905070][ T5823] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1431.943684][ T5823] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1431.982828][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.007440][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12373'. [ 1432.022032][ T1193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12373'. [ 1432.057567][ T56] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1432.262805][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 1432.294002][ T56] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 1432.316920][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.326965][ T56] usb 3-1: Product: syz [ 1432.331820][ T56] usb 3-1: Manufacturer: syz [ 1432.336654][ T56] usb 3-1: SerialNumber: syz [ 1432.467347][ T28] audit: type=1326 audit(2000000335.189:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1201 comm="syz.0.12378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x0 [ 1432.514820][ T5823] usb 5-1: USB disconnect, device number 7 [ 1432.599166][ T56] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 1432.622307][ T56] kalmia: probe of 3-1:1.0 failed with error -71 [ 1432.653522][ T56] usb 3-1: USB disconnect, device number 67 [ 1432.777494][ T1208] loop0: detected capacity change from 0 to 4096 [ 1433.134751][ T5823] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1433.357570][ T5823] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1433.379776][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.387868][ T5823] usb 4-1: Product: syz [ 1433.406777][ T5823] usb 4-1: Manufacturer: syz [ 1433.411661][ T5823] usb 4-1: SerialNumber: syz [ 1433.436808][ T5823] usb 4-1: config 0 descriptor?? [ 1433.454152][ T5823] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1433.912674][ T5823] gspca_m5602: Failed to find a sensor [ 1433.918407][ T5823] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 1433.970193][ T5823] usb 4-1: USB disconnect, device number 66 [ 1434.509676][ T1263] ip6gre2: entered allmulticast mode [ 1434.520827][ T1265] loop2: detected capacity change from 0 to 256 [ 1434.560792][ T1265] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 1434.597814][ T1265] exFAT-fs (loop2): invalid boot region [ 1434.603487][ T1265] exFAT-fs (loop2): failed to recognize exfat type [ 1434.636825][ T1267] pim6reg: entered allmulticast mode [ 1435.297848][T13745] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1435.505759][T13745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1435.537317][T13745] usb 1-1: not running at top speed; connect to a high speed hub [ 1435.559404][T13745] usb 1-1: config index 0 descriptor too short (expected 28771, got 10) [ 1435.567868][T13745] usb 1-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1435.616696][ T1303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12423'. [ 1435.626343][T13745] usb 1-1: config 114 descriptor has 1 excess byte, ignoring [ 1435.626374][T13745] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1435.632805][T13745] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1435.674995][T13745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.687916][T13745] usb 1-1: Product: syz [ 1435.692180][T13745] usb 1-1: Manufacturer: syz [ 1435.698370][T13745] usb 1-1: SerialNumber: syz [ 1435.710232][ T1305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12424'. [ 1435.770022][ T1305] team0: entered promiscuous mode [ 1435.956951][T13745] usb 1-1: USB disconnect, device number 81 [ 1436.092755][ T1318] netlink: 'syz.2.12430': attribute type 1 has an invalid length. [ 1436.142975][ T2179] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1436.343661][ T2179] usb 4-1: Using ep0 maxpacket: 32 [ 1436.355778][ T2179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.367693][ T2179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.381520][ T2179] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1436.390655][ T2179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.401416][ T2179] usb 4-1: config 0 descriptor?? [ 1436.409455][ T2179] hub 4-1:0.0: USB hub found [ 1436.513462][ T5823] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1436.589554][ T1328] netlink: 'syz.2.12435': attribute type 9 has an invalid length. [ 1436.657058][ T2179] hub 4-1:0.0: 3 ports detected [ 1436.720597][ T5823] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 1436.786375][ T5823] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1436.798503][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.807568][ T5823] usb 5-1: Product: syz [ 1436.811921][ T5823] usb 5-1: Manufacturer: syz [ 1436.817774][ T5823] usb 5-1: SerialNumber: syz [ 1436.852368][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1436.880532][ T2179] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1436.888292][ T2179] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1436.948334][ T2179] usbhid 4-1:0.0: can't add hid device: -71 [ 1436.954532][ T2179] usbhid: probe of 4-1:0.0 failed with error -71 [ 1437.016988][ T2179] usb 4-1: USB disconnect, device number 67 [ 1437.433381][ T56] usb 5-1: USB disconnect, device number 8 [ 1437.792896][ T1360] xt_TCPMSS: Only works on TCP SYN packets [ 1437.994429][ T1368] netlink: 'syz.2.12452': attribute type 1 has an invalid length. [ 1438.007201][ T1368] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12452'. [ 1438.083018][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1438.112368][ T9] ath9k_htc: Failed to initialize the device [ 1438.126298][ T56] usb 5-1: ath9k_htc: USB layer deinitialized [ 1438.250966][ T1372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.198461][ T1400] loop2: detected capacity change from 0 to 2048 [ 1439.295317][ T1400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.381331][ T1380] loop4: detected capacity change from 0 to 32768 [ 1439.421496][ T1400] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1439.627516][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.658533][ T12] read_mapping_page failed! [ 1439.664088][ T12] ERROR: (device loop4): txCommit: [ 1439.664088][ T12] [ 1439.719396][ T12] jfs_write_inode: jfs_commit_inode failed! [ 1439.796529][ T1414] xt_TCPMSS: Only works on TCP SYN packets [ 1440.240097][ T1426] xt_CT: No such helper "snmp_trap" [ 1440.617380][ T1441] x_tables: duplicate entry at hook 2 [ 1440.758059][ T1447] netlink: 'syz.2.12491': attribute type 21 has an invalid length. [ 1440.760129][ T5822] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1440.998979][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 1441.032286][ T5822] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1441.064588][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.077163][ T5822] usb 1-1: Product: syz [ 1441.081449][ T5822] usb 1-1: Manufacturer: syz [ 1441.096975][ T5822] usb 1-1: SerialNumber: syz [ 1441.113847][ T5822] usb 1-1: config 0 descriptor?? [ 1441.344493][ T1466] netlink: 'syz.3.12501': attribute type 19 has an invalid length. [ 1441.397469][ T5822] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1441.547999][ T1471] overlayfs: missing 'lowerdir' [ 1441.632788][ T5822] usb write operation failed. (-71) [ 1441.658446][ T5822] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1441.694415][ T5822] dvbdev: DVB: registering new adapter (Terratec H7) [ 1441.701258][ T5822] usb 1-1: media controller created [ 1441.740356][ T5822] usb read operation failed. (-71) [ 1441.746977][ T5822] usb write operation failed. (-71) [ 1441.769569][ T5822] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 1441.821597][ T5822] usb 1-1: USB disconnect, device number 82 [ 1442.008735][ T1481] netlink: 'syz.4.12508': attribute type 11 has an invalid length. [ 1442.030042][ T1481] netlink: 'syz.4.12508': attribute type 11 has an invalid length. [ 1442.055200][ T1481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12508'. [ 1442.454873][ T1498] loop0: detected capacity change from 0 to 512 [ 1442.522738][ T1498] EXT4-fs (loop0): 1 truncate cleaned up [ 1442.538661][ T1498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.624685][ T1504] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12518'. [ 1442.730269][ T28] audit: type=1326 audit(2000000344.665:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1442.789870][ T28] audit: type=1326 audit(2000000344.665:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1442.838391][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.851745][ T28] audit: type=1326 audit(2000000344.665:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1442.949945][ T28] audit: type=1326 audit(2000000344.665:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1443.050684][ T28] audit: type=1326 audit(2000000344.702:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1443.145664][ T28] audit: type=1326 audit(2000000344.702:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1443.239808][ T28] audit: type=1326 audit(2000000344.702:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1443.292657][ T28] audit: type=1326 audit(2000000344.702:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1443.372997][ T28] audit: type=1326 audit(2000000344.702:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.3.12521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1444.159535][ T1549] netlink: 'syz.4.12539': attribute type 3 has an invalid length. [ 1445.275193][ T1594] program syz.0.12562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.303612][ T1594] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1445.502140][ T1601] loop4: detected capacity change from 0 to 512 [ 1445.624092][ T1601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.680523][ T1601] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1445.809667][ T1601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1445.878939][ T1615] netlink: 'syz.2.12571': attribute type 11 has an invalid length. [ 1445.936521][ T1615] netlink: 'syz.2.12571': attribute type 11 has an invalid length. [ 1445.951302][ T1615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12571'. [ 1446.093223][T30278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.394186][ T28] audit: type=1326 audit(2000000348.042:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1632 comm="syz.0.12580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1447.262220][ T1664] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12595'. [ 1447.378820][ T1668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12597'. [ 1447.529372][ T1672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1447.569178][ T1672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1447.595908][ T1676] loop0: detected capacity change from 0 to 1024 [ 1447.623411][ T1676] EXT4-fs: Ignoring removed bh option [ 1447.641954][ T1676] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1447.685204][ T1676] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1447.685204][ T1676] [ 1447.975555][ T1687] loop0: detected capacity change from 0 to 256 [ 1448.117881][ T1687] FAT-fs (loop0): Directory bread(block 64) failed [ 1448.177573][ T1687] FAT-fs (loop0): Directory bread(block 65) failed [ 1448.223731][ T1687] FAT-fs (loop0): Directory bread(block 66) failed [ 1448.231520][ T1687] FAT-fs (loop0): Directory bread(block 67) failed [ 1448.238578][ T1687] FAT-fs (loop0): Directory bread(block 68) failed [ 1448.245278][ T1687] FAT-fs (loop0): Directory bread(block 69) failed [ 1448.260046][ T1687] FAT-fs (loop0): Directory bread(block 70) failed [ 1448.266680][ T1687] FAT-fs (loop0): Directory bread(block 71) failed [ 1448.274908][ T1687] FAT-fs (loop0): Directory bread(block 72) failed [ 1448.282042][ T1687] FAT-fs (loop0): Directory bread(block 73) failed [ 1448.617342][ T5823] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1448.650871][ T1703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12615'. [ 1448.756161][ T1703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.811916][ T1703] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1448.846048][ T5823] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1448.869549][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.139011][ C0] dln2 4-1:1.0: bad/late response 1/29295 [ 1449.148680][ T5823] dln2 4-1:1.0: USB write failed: -110 [ 1449.154297][ T5823] dln2 4-1:1.0: failed to initialize hardware [ 1449.190585][ T5823] dln2: probe of 4-1:1.0 failed with error -110 [ 1449.388332][T13745] usb 4-1: USB disconnect, device number 68 [ 1449.595477][ T1718] loop4: detected capacity change from 0 to 1024 [ 1449.628336][ T1718] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1449.639214][ T1701] loop2: detected capacity change from 0 to 40427 [ 1449.656709][ T1718] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #13: comm syz.4.12621: iget: bad i_size value: -360287970189638630 [ 1449.671634][ T1701] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 1449.679496][ T1718] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.12621: couldn't read orphan inode 13 (err -117) [ 1449.690688][ T1701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1449.708114][ T1718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1449.766282][ T1701] F2FS-fs (loop2): invalid crc value [ 1449.791154][ T1701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1449.812987][T30278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.079597][ T1701] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1450.114442][ T1701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1450.395258][ T1693] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.449640][ T5786] syz-executor: attempt to access beyond end of device [ 1450.449640][ T5786] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1450.519413][ T5786] F2FS-fs (loop2): Remounting filesystem read-only [ 1450.740412][ T1741] bridge8: entered promiscuous mode [ 1450.799724][ T1741] bridge8: entered allmulticast mode [ 1451.054836][ T1733] loop4: detected capacity change from 0 to 32768 [ 1451.307134][T13745] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1451.525914][T13745] usb 1-1: Using ep0 maxpacket: 16 [ 1451.534058][T13745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.554314][T13745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1451.584500][T13745] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1451.597953][T13745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.639041][T13745] usb 1-1: Product: syz [ 1451.650009][T13745] usb 1-1: Manufacturer: syz [ 1451.663464][T13745] usb 1-1: SerialNumber: syz [ 1451.956644][T13745] usb 1-1: 0:2 : does not exist [ 1452.000204][T13745] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1452.041709][T13745] usb 1-1: USB disconnect, device number 83 [ 1452.132311][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1453.138573][ T1803] Process accounting resumed [ 1453.374756][ T1815] netlink: 'syz.4.12667': attribute type 1 has an invalid length. [ 1453.880498][ T1833] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 1454.611522][ T1823] loop4: detected capacity change from 0 to 40427 [ 1454.659960][ T1823] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 1454.698664][ T1823] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1454.766651][ T1823] F2FS-fs (loop4): invalid crc value [ 1454.784935][ T1860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12689'. [ 1454.805278][ T1823] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1454.812158][ T1860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12689'. [ 1455.043369][ T1823] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1455.078001][ T1823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1455.261563][ T1872] netlink: 'syz.2.12696': attribute type 1 has an invalid length. [ 1455.305083][T30278] syz-executor: attempt to access beyond end of device [ 1455.305083][T30278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1455.352239][T30278] F2FS-fs (loop4): Remounting filesystem read-only [ 1456.626416][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1456.855955][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1456.885272][ T9] usb 5-1: config index 0 descriptor too short (expected 161, got 153) [ 1456.910541][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.945609][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1456.962436][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1456.986640][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.032799][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1457.090340][ T1920] comedi comedi1: ni_at_a2150: I/O port conflict (0x4,28) [ 1457.436355][ T1931] loop0: detected capacity change from 0 to 256 [ 1457.501778][ T9] gspca_spca501: reg write: error -71 [ 1457.521434][ T9] spca501 5-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1457.541847][ T9] spca501: probe of 5-1:1.0 failed with error -22 [ 1457.562681][ T9] usb 5-1: USB disconnect, device number 9 [ 1457.816746][ T1939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1458.012063][ T1947] netlink: 'syz.2.12732': attribute type 1 has an invalid length. [ 1458.023272][ T1947] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12732'. [ 1458.185894][ T1951] netlink: 'syz.0.12734': attribute type 15 has an invalid length. [ 1458.228462][ T1951] IPv6: NLM_F_CREATE should be specified when creating new route [ 1458.555812][ T1957] ip6erspan0: entered allmulticast mode [ 1458.791446][ T1967] [U] ^R [ 1458.919493][ T1971] netlink: 'syz.2.12744': attribute type 29 has an invalid length. [ 1458.939627][ T1971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12744'. [ 1459.220581][ T1985] loop4: detected capacity change from 0 to 256 [ 1459.356054][ T1987] xt_recent: hitcount (32769) is larger than allowed maximum (255) [ 1459.681321][ T1994] loop4: detected capacity change from 0 to 2048 [ 1459.773172][ T1994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.063895][T30278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.727763][ T2036] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1461.298699][ T2058] netlink: 'syz.4.12786': attribute type 1 has an invalid length. [ 1461.836867][ T2078] program syz.2.12796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.740441][ T2110] netlink: 'syz.4.12812': attribute type 1 has an invalid length. [ 1462.780139][ T2110] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12812'. [ 1463.519892][ T2138] loop0: detected capacity change from 0 to 256 [ 1463.630219][ T2138] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 1463.641189][ T2142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12829'. [ 1463.651954][ T2138] FAT-fs (loop0): Filesystem has been set read-only [ 1463.727677][ T2145] gtp0: entered promiscuous mode [ 1463.733729][ T2145] gtp0: entered allmulticast mode [ 1463.735909][ T5785] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 1464.374569][ T2167] loop0: detected capacity change from 0 to 8 [ 1464.471564][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1464.494630][ T2169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1464.527442][ T2169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1464.704232][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12845'. [ 1464.744215][ T2176] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1465.996101][ T2225] netlink: 'syz.0.12868': attribute type 3 has an invalid length. [ 1466.006443][T13745] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1466.036015][ T2225] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12868'. [ 1466.237238][T13745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1466.247163][T13745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.268452][T13745] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1466.293633][T13745] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1466.316499][T13745] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1466.369564][T13745] usb 3-1: string descriptor 0 read error: -22 [ 1466.377693][T13745] usb 3-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 1466.403744][ T2236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12874'. [ 1466.409277][T13745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.468227][T13745] usb 3-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to g@b4.vu [ 1466.516423][T13745] usb 3-1: Error initialising Clarett USB Mixer Driver: -22 [ 1466.591986][T13745] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1466.663342][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.797848][T13745] usb 3-1: USB disconnect, device number 68 [ 1467.908694][T13745] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1468.129117][T13745] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1468.157740][T13745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.187867][T13745] usb 4-1: Product: syz [ 1468.193825][T13745] usb 4-1: Manufacturer: syz [ 1468.198625][T13745] usb 4-1: SerialNumber: syz [ 1468.223193][ T2293] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12901'. [ 1468.252970][T13745] ums-karma 4-1:1.0: USB Mass Storage device detected [ 1468.278826][T13745] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1468.278826][T13745] Please send a copy of this message to and [ 1468.518875][T13745] ums-karma: probe of 4-1:1.0 failed with error -5 [ 1468.566536][T13745] usb 4-1: USB disconnect, device number 69 [ 1468.615896][ T2305] loop0: detected capacity change from 0 to 1024 [ 1468.821424][ T2309] loop4: detected capacity change from 0 to 16 [ 1469.089812][ T5822] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1469.170409][ T2317] x_tables: duplicate entry at hook 4 [ 1469.307327][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 1469.324180][ T5822] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1469.342626][ T5822] usb 1-1: config 0 has no interface number 0 [ 1469.364368][ T5822] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 65519, setting to 1024 [ 1469.394313][ T5822] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1469.429723][ T5822] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1469.447451][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.458402][ T5822] usb 1-1: Product: syz [ 1469.462681][ T5822] usb 1-1: Manufacturer: syz [ 1469.478748][ T5822] usb 1-1: SerialNumber: syz [ 1469.524175][ T5822] usb 1-1: config 0 descriptor?? [ 1469.534615][ T2305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1469.580928][ T5822] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1469.603185][ T2327] xt_TCPMSS: Only works on TCP SYN packets [ 1469.608915][ T5822] em28xx 1-1:0.132: Video interface 132 found: bulk [ 1469.793966][ T2328] loop4: detected capacity change from 0 to 4096 [ 1469.852114][ T2328] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1469.903299][ T5822] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1469.999730][ T5822] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1470.030537][ T5822] em28xx 1-1:0.132: board has no eeprom [ 1470.086911][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1470.120277][ T5822] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1470.128430][ T5822] em28xx 1-1:0.132: analog set to bulk mode. [ 1470.170183][ T1706] em28xx 1-1:0.132: Registering V4L2 extension [ 1470.195503][ T5822] usb 1-1: USB disconnect, device number 84 [ 1470.202594][ T5822] em28xx 1-1:0.132: Disconnecting em28xx [ 1470.331798][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.380235][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00 [ 1470.412246][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.431361][ T9] usb 4-1: Product: syz [ 1470.442314][ T9] usb 4-1: Manufacturer: syz [ 1470.453281][ T9] usb 4-1: SerialNumber: syz [ 1470.481052][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1470.502672][ T9] gspca_stv06xx: st6422 sensor detected [ 1470.571722][ T1706] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1470.597451][ T1706] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1470.604669][ T1706] em28xx 1-1:0.132: No AC97 audio processor [ 1470.660208][ T1706] usb 1-1: Decoder not found [ 1470.672716][ T1706] em28xx 1-1:0.132: failed to create media graph [ 1470.679266][ T1706] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1470.740106][ T1706] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1470.760260][ T5822] em28xx 1-1:0.132: Closing input extension [ 1470.807131][ T5822] em28xx 1-1:0.132: Freeing device [ 1471.049068][ T2365] netlink: 'syz.2.12933': attribute type 30 has an invalid length. [ 1471.055339][ T9] STV06xx: probe of 4-1:1.0 failed with error -71 [ 1471.084038][ T9] usb 4-1: USB disconnect, device number 70 [ 1471.190403][ T2365] bond5: option arp_missed_max: invalid value (0) [ 1471.206172][ T2365] bond5: option arp_missed_max: allowed values 1 - 255 [ 1471.226424][ T2365] bond5 (unregistering): Released all slaves [ 1471.351298][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1471.351315][ T28] audit: type=1326 audit(1467.765:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.426513][ T28] audit: type=1326 audit(1467.802:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.481232][ T28] audit: type=1326 audit(1467.802:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.531499][ T28] audit: type=1326 audit(1467.802:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.582719][ T28] audit: type=1326 audit(1467.802:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.659102][ T28] audit: type=1326 audit(1467.802:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.734176][ T28] audit: type=1326 audit(1467.802:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.797661][ T28] audit: type=1326 audit(1467.802:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1471.894077][ T28] audit: type=1326 audit(1467.802:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2373 comm="syz.0.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1472.017828][ T2395] loop4: detected capacity change from 0 to 8 [ 1472.040074][ T28] audit: type=1326 audit(1468.402:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.3.12945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1472.523401][ T2414] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12952'. [ 1472.682213][ T2419] loop0: detected capacity change from 0 to 256 [ 1472.702018][ T2419] FAT-fs (loop0): Unrecognized mount option "sysÀRì®M–ñ"IÃë_immutable" or missing value [ 1472.962882][ T2432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12960'. [ 1474.169725][ T2491] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.12980'. [ 1474.206003][ T2491] openvswitch: netlink: Message has 20476 unknown bytes. [ 1474.613429][ T2508] 0x000000000000-0x000000020000 : "" [ 1474.658108][ T2508] ftl_cs: FTL header not found. [ 1474.671382][ T1706] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1474.897525][ T1706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.926020][ T1706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1474.948431][ T1706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1474.997917][ T1706] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1475.039821][ T1706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1475.047997][ T1706] usb 5-1: Product: syz [ 1475.083218][ T1706] usb 5-1: Manufacturer: syz [ 1475.099098][ T1706] usb 5-1: SerialNumber: syz [ 1475.131334][ T1706] usb 5-1: config 0 descriptor?? [ 1475.166688][ T1706] usb 5-1: no audio or video endpoints found [ 1475.416874][ T5822] usb 5-1: USB disconnect, device number 10 [ 1476.034508][ T2559] loop0: detected capacity change from 0 to 256 [ 1476.280802][ T2571] IPv6: NLM_F_CREATE should be specified when creating new route [ 1476.307778][ T2571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1476.315081][ T2571] IPv6: NLM_F_CREATE should be set when creating new route [ 1476.393423][ T2575] loop0: detected capacity change from 0 to 256 [ 1476.691518][ T2583] loop0: detected capacity change from 0 to 164 [ 1476.821112][ T2583] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1476.897043][ T2590] netlink: 'syz.4.13022': attribute type 3 has an invalid length. [ 1477.194310][ T2607] loop2: detected capacity change from 0 to 512 [ 1477.204576][ T2607] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1477.314388][ T2607] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1477.351318][ T2611] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13030'. [ 1477.621290][ T2623] loop0: detected capacity change from 0 to 764 [ 1478.299216][ T2647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13045'. [ 1478.344230][ T2652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1478.641327][ T2662] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1478.680847][ T2662] bond2 (unregistering): Released all slaves [ 1479.323502][ T2691] bond0: (slave bond_slave_1): Releasing backup interface [ 1479.496377][ T2699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13064'. [ 1480.106652][ T2724] Unsupported ieee802154 address type: 0 [ 1480.177426][ T2732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13078'. [ 1480.625147][ T2750] loop4: detected capacity change from 0 to 512 [ 1480.666164][ T2750] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1480.729981][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1480.762466][ T2750] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1480.942576][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.974330][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1481.012796][ T9] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 1481.048069][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.087096][ T9] usb 1-1: Product: syz [ 1481.092917][ T9] usb 1-1: Manufacturer: syz [ 1481.097599][ T9] usb 1-1: SerialNumber: syz [ 1481.145258][ T9] zaurus: probe of 1-1:1.0 failed with error -22 [ 1481.341872][ T2770] loop2: detected capacity change from 0 to 16 [ 1481.367600][ T2770] erofs: (device loop2): mounted with root inode @ nid 36. [ 1481.438464][ T2770] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 43 of nid 36 [ 1481.475405][ T9] usb 1-1: USB disconnect, device number 85 [ 1482.108085][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1482.108105][ T28] audit: type=1326 audit(1477.693:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.181905][ T28] audit: type=1326 audit(1477.730:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.214510][ T28] audit: type=1326 audit(1477.730:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.238976][ T28] audit: type=1326 audit(1477.749:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.306300][ T28] audit: type=1326 audit(1477.749:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.414073][ T28] audit: type=1326 audit(1477.749:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.496077][ T28] audit: type=1326 audit(1477.767:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.572025][ T28] audit: type=1326 audit(1477.767:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2798 comm="syz.3.13106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1482.792439][ T2830] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.13117'. [ 1482.996260][ T2846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13121'. [ 1483.038351][ T2846] netlink: set zone limit has 8 unknown bytes [ 1484.234494][ T2896] loop0: detected capacity change from 0 to 16 [ 1484.287426][ T2896] erofs: (device loop0): mounted with root inode @ nid 36. [ 1484.471498][ T2901] netlink: 'syz.3.13147': attribute type 28 has an invalid length. [ 1484.511190][ T2901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13147'. [ 1484.609725][ T2905] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1484.778047][ T2911] comedi comedi1: Minor 2 specified more than once! [ 1485.657877][ T2944] delete_channel: no stack [ 1485.835137][T28619] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1486.051962][T28619] usb 4-1: Using ep0 maxpacket: 8 [ 1486.061749][T28619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1486.095508][T28619] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1486.111143][T28619] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1486.125061][T28619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.144818][ T2957] loop4: detected capacity change from 0 to 4096 [ 1486.148386][T28619] usb 4-1: Product: syz [ 1486.159184][T28619] usb 4-1: Manufacturer: syz [ 1486.163928][T28619] usb 4-1: SerialNumber: syz [ 1486.206354][T28619] usb 4-1: config 0 descriptor?? [ 1486.322205][ T2959] loop2: detected capacity change from 0 to 4096 [ 1486.329048][ T2961] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1486.414719][ T2959] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1486.478714][ T2959] ntfs3: loop2: Failed to load $Extend (-22). [ 1486.507952][ T2959] ntfs3: loop2: Failed to initialize $Extend. [ 1486.620130][ T2963] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1486.638863][ T2963] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1486.649113][ T2965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13178'. [ 1486.661895][ T56] usb 4-1: USB disconnect, device number 71 [ 1487.178253][ T5822] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1487.283749][ T2939] Process accounting paused [ 1487.382998][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 1487.429421][ T5822] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1487.437707][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.464268][ T5822] usb 3-1: config 0 has no interface number 0 [ 1487.464312][ T2989] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13190'. [ 1487.489745][ T5822] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1487.502486][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.535798][ T5822] usb 3-1: Product: syz [ 1487.541292][ T5822] usb 3-1: Manufacturer: syz [ 1487.545979][ T5822] usb 3-1: SerialNumber: syz [ 1487.606357][ T5822] usb 3-1: config 0 descriptor?? [ 1487.636881][ T5822] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 1487.643570][ T5822] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1487.672139][ T2990] infiniband syz0: set down [ 1487.689128][ T5822] usb 3-1: No valid video chain found. [ 1487.902873][ T2179] usb 3-1: USB disconnect, device number 69 [ 1488.231618][ T3009] netlink: 'syz.4.13199': attribute type 2 has an invalid length. [ 1488.243550][ T3009] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13199'. [ 1488.323501][ T1143] smc: removing ib device syz0 [ 1488.725002][T13745] infiniband syz0: ib_query_port failed (-19) [ 1489.024348][ T3025] netlink: 'syz.4.13207': attribute type 21 has an invalid length. [ 1489.358959][ T3031] netlink: 'syz.4.13210': attribute type 2 has an invalid length. [ 1489.394180][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13210'. [ 1490.151175][ T3043] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.13215'. [ 1490.190956][ T3043] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1490.216402][ T3043] 0ªX¹¦Dö»: entered allmulticast mode [ 1490.644052][ T3049] netlink: 'syz.4.13219': attribute type 1 has an invalid length. [ 1492.284553][ T3104] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1492.292105][ T3110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13249'. [ 1492.567393][ T3115] loop4: detected capacity change from 0 to 2048 [ 1492.625255][ T3115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1492.783060][ T1706] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1493.030618][ T1706] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.072048][ T1706] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1493.092546][ T1706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.114478][ T1706] usb 4-1: Product: syz [ 1493.144262][ T1706] usb 4-1: Manufacturer: syz [ 1493.149255][ T1706] usb 4-1: SerialNumber: syz [ 1493.187727][ T1706] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1493.610743][ T3151] futex_wake_op: syz.0.13269 tries to shift op by 144; fix this program [ 1493.620035][ T3151] futex_wake_op: syz.0.13269 tries to shift op by 144; fix this program [ 1493.663303][ T1706] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1493.720917][ T1706] usb 4-1: USB disconnect, device number 72 [ 1493.735362][ T3156] x_tables: duplicate underflow at hook 2 [ 1493.824707][ T3160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13272'. [ 1494.421623][ T3184] comedi comedi0: fl512: I/O port conflict (0x7,16) [ 1494.422209][ T3178] loop4: detected capacity change from 0 to 4096 [ 1494.769456][ T3193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13288'. [ 1495.168393][ T3205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13294'. [ 1495.924031][ T1706] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1495.989229][ T3234] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1495.995802][ T3234] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 1496.022867][ T3234] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 1496.029460][ T3234] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 1496.039431][ T3234] comedi comedi1: 8255: I/O port conflict (0x14000000,4) [ 1496.051222][ T3234] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 1496.060469][ T3234] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 1496.067870][ T3234] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1496.074852][ T3234] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1496.083778][ T3234] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 1496.091386][ T3234] comedi comedi1: 8255: I/O port conflict (0x16,4) [ 1496.099079][ T3234] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 1496.117490][ T3234] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 1496.124898][ T3234] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4) [ 1496.132747][ T3234] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 1496.139472][ T3234] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 1496.147245][ T3234] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 1496.154390][ T3234] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 1496.164207][ T1706] usb 3-1: Using ep0 maxpacket: 32 [ 1496.172577][ T1706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1496.191643][ T1706] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 1496.267354][ T1706] usb 3-1: string descriptor 0 read error: -22 [ 1496.274310][ T1706] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1496.314511][ T1706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.596549][ T1706] usb 3-1: unit 255 not found! [ 1496.744844][ T3252] misc userio: Invalid payload size [ 1496.909548][ T1706] usb 3-1: USB disconnect, device number 70 [ 1497.305655][ T3272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13326'. [ 1497.850717][ T3292] loop4: detected capacity change from 0 to 64 [ 1497.978914][ T3296] delete_channel: no stack [ 1498.564484][ T3319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13349'. [ 1498.830504][T13745] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1499.060657][T13745] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1499.081620][T13745] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1499.103616][T13745] usb 3-1: Product: syz [ 1499.107988][T13745] usb 3-1: Manufacturer: syz [ 1499.132609][T13745] usb 3-1: SerialNumber: syz [ 1499.140303][ T28] audit: type=1326 audit(1493.407:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3339 comm="syz.0.13360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1499.150556][T13745] usb 3-1: config 0 descriptor?? [ 1499.217160][ T28] audit: type=1326 audit(1493.444:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3339 comm="syz.0.13360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1499.273895][ T28] audit: type=1326 audit(1493.453:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3339 comm="syz.0.13360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1499.364336][ T28] audit: type=1326 audit(1493.453:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3339 comm="syz.0.13360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1499.432116][ T28] audit: type=1326 audit(1493.453:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3339 comm="syz.0.13360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1499.507412][T13745] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1499.713462][T13745] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1499.733895][T13745] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1499.856608][ T3361] xt_policy: output policy not valid in PREROUTING and INPUT [ 1499.864975][T13745] peak_usb: probe of 3-1:0.0 failed with error -71 [ 1499.896463][T13745] usb 3-1: USB disconnect, device number 71 [ 1500.084933][ T3365] bridge9: entered promiscuous mode [ 1501.122911][ T3415] netlink: 'syz.0.13394': attribute type 12 has an invalid length. [ 1501.770377][ T3437] IPv6: NLM_F_CREATE should be specified when creating new route [ 1502.023684][ T3447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13409'. [ 1502.389095][ T3459] loop0: detected capacity change from 0 to 1024 [ 1502.419348][ T3459] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1502.439044][ T3459] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1502.449327][ T3459] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1502.503070][ T3459] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #5: comm syz.0.13415: unexpected bad inode w/o EXT4_IGET_BAD [ 1502.549375][ T3459] EXT4-fs (loop0): no journal found [ 1502.554682][ T3459] EXT4-fs (loop0): can't get journal size [ 1502.577106][ T3459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1502.671287][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.714923][ T3470] xt_hashlimit: max too large, truncated to 1048576 [ 1502.744016][ T3470] xt_hashlimit: overflow, try lower: 0/0 [ 1503.121003][ T3484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1503.541640][ T3501] netlink: 'syz.3.13435': attribute type 39 has an invalid length. [ 1503.779298][ T3511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13440'. [ 1504.358079][ T3537] netlink: 'syz.3.13453': attribute type 10 has an invalid length. [ 1504.399249][ T3537] team0: Device wg1 is up. Set it down before adding it as a team port [ 1505.103900][ T56] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1505.317388][ T56] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1505.332889][ T56] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 1505.343943][ T56] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.362762][ T56] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1505.394682][ T56] usb 3-1: config 13 has no interface number 0 [ 1505.406740][ T56] usb 3-1: config 13 interface 50 altsetting 4 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1505.437501][ T56] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1505.458085][ T56] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1505.470105][ T56] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1505.487536][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.502788][ T56] usb 3-1: Product: syz [ 1505.525410][ T56] usb 3-1: Manufacturer: syz [ 1505.535856][ T56] usb 3-1: SerialNumber: syz [ 1505.872490][ T56] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1505.883650][T28505] usb 3-1: Failed to submit usb control message: -71 [ 1505.899910][ T3587] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1505.908912][T28505] usb 3-1: unable to send the bmi data to the device: -71 [ 1505.916171][T28505] usb 3-1: unable to get target info from device [ 1505.923891][T28505] usb 3-1: could not get target info (-71) [ 1505.930880][T28505] usb 3-1: could not probe fw (-71) [ 1505.943027][ T56] usb 3-1: USB disconnect, device number 72 [ 1506.428619][ T3601] loop0: detected capacity change from 0 to 64 [ 1506.751779][ T3612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13487'. [ 1507.168281][ T3629] netlink: 'syz.2.13494': attribute type 39 has an invalid length. [ 1507.186231][ T3631] i2c i2c-0: Invalid block write size 252 [ 1507.243714][ T3629] macvlan0: entered promiscuous mode [ 1507.249163][ T3629] macvlan0: entered allmulticast mode [ 1507.562468][ T3644] xt_recent: Unsupported userspace flags (000000de) [ 1508.296000][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13516'. [ 1508.342112][ T3671] netlink: 'syz.2.13516': attribute type 1 has an invalid length. [ 1508.401387][ T3671] netlink: 'syz.2.13516': attribute type 2 has an invalid length. [ 1508.410582][ T3671] netlink: 120 bytes leftover after parsing attributes in process `syz.2.13516'. [ 1508.956924][ T3696] loop0: detected capacity change from 0 to 512 [ 1509.062333][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.266189][ T3696] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1509.301257][ T3696] Quota error (device loop0): write_blk: dquota write failed [ 1509.322848][ T3696] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1509.343472][ T3696] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13528: Failed to acquire dquot type 1 [ 1509.480845][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.547907][ T5822] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1509.744619][ T5822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.768003][ T5822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1509.805129][ T3716] netlink: 'syz.3.13537': attribute type 22 has an invalid length. [ 1509.810186][ T5822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1509.851138][ T5822] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1509.860814][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.885078][ T3720] loop0: detected capacity change from 0 to 8 [ 1509.901642][ T3706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1509.931399][ T5822] hub 5-1:1.0: bad descriptor, ignoring hub [ 1509.978610][ T5822] hub: probe of 5-1:1.0 failed with error -5 [ 1510.013638][ T5822] cdc_wdm 5-1:1.0: skipping garbage [ 1510.028092][ T5822] cdc_wdm 5-1:1.0: skipping garbage [ 1510.072291][ T5822] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1510.094038][ T5822] cdc_wdm 5-1:1.0: Unknown control protocol [ 1510.349338][ T5822] usb 5-1: USB disconnect, device number 11 [ 1510.430657][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13547'. [ 1510.761757][ T3746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13552'. [ 1510.774872][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13552'. [ 1511.124692][ T3760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13559'. [ 1511.178851][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13560'. [ 1511.206686][ T3762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13560'. [ 1511.252109][ T3766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1511.488794][ T1706] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1511.574151][ T3776] netlink: 300 bytes leftover after parsing attributes in process `syz.4.13567'. [ 1511.703071][ T1706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.727457][ T1706] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1511.748630][ T1706] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1511.783003][ T1706] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1511.814654][ T1706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.118146][ T1706] dvb_ttusb_budget: ttusb_init_controller: error [ 1512.135644][ T1706] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1512.341622][ T1706] DVB: Unable to find symbol stv0299_attach() [ 1512.348710][ T3801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13576'. [ 1512.512958][ T1706] DVB: Unable to find symbol tda8083_attach() [ 1512.523798][ T1706] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1512.547293][ T1706] usb 3-1: USB disconnect, device number 73 [ 1512.593312][ T3808] netlink: 'syz.0.13579': attribute type 1 has an invalid length. [ 1513.531886][ T3832] loop2: detected capacity change from 0 to 8192 [ 1513.554570][ T3832] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1513.636531][ T3832] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1513.682028][ T3832] REISERFS (device loop2): using ordered data mode [ 1513.723295][ T3832] reiserfs: using flush barriers [ 1513.747074][ T3832] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1513.798625][ T3832] REISERFS (device loop2): checking transaction log (loop2) [ 1513.852397][ T3832] REISERFS (device loop2): Using r5 hash to sort names [ 1513.879635][ T3832] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1513.911624][ T3846] loop0: detected capacity change from 0 to 64 [ 1514.001452][ T28] audit: type=1800 audit(1507.115:2859): pid=3846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13597" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1514.708823][ T3865] bond8: option lp_interval: invalid value (0) [ 1514.715196][ T3865] bond8: option lp_interval: allowed values 1 - 2147483647 [ 1514.725237][ T3865] bond8 (unregistering): Released all slaves [ 1515.921692][ T3899] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1515.975835][ T3899] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1515.984392][ T3899] overlayfs: missing 'lowerdir' [ 1517.023834][ T3931] loop4: detected capacity change from 0 to 4096 [ 1517.048794][ T3931] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1517.080217][ T3933] loop2: detected capacity change from 0 to 4096 [ 1517.138420][ T3933] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1517.176805][ T3931] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1517.541961][ T3943] lo: left promiscuous mode [ 1517.657801][ T3943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1517.805573][T13745] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1517.963851][ T3959] bad cache= option: no%e [ 1517.963851][ T3959] [ 1517.973095][ T3959] CIFS: VFS: bad cache= option: no%e [ 1518.034110][T13745] usb 3-1: Using ep0 maxpacket: 32 [ 1518.041722][T13745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.074201][T13745] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1518.101503][T13745] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1518.134327][T13745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.165494][T13745] usb 3-1: Product: syz [ 1518.170232][T13745] usb 3-1: Manufacturer: syz [ 1518.180927][T13745] usb 3-1: SerialNumber: syz [ 1518.198675][T13745] usb 3-1: config 0 descriptor?? [ 1518.456255][T13745] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1518.466524][T13745] 00 00 00 00 00 00 00 00 [ 1518.476752][T13745] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 1518.651166][ T56] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1518.668011][T28619] usb 3-1: USB disconnect, device number 74 [ 1518.867911][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 1518.885253][ T56] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1518.895312][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.907602][ T56] usb 1-1: config 0 has no interface number 0 [ 1518.914298][ T56] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1518.924698][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.939985][ T56] usb 1-1: config 0 descriptor?? [ 1519.212544][ T56] usb 1-1: USB disconnect, device number 86 [ 1519.874390][ T4007] Process accounting resumed [ 1519.903965][ T4006] loop2: detected capacity change from 0 to 4096 [ 1519.920686][ T4006] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1519.923452][ T4012] loop0: detected capacity change from 0 to 512 [ 1519.963612][ T4006] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1519.982326][ T4006] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1520.032092][ T4012] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1520.103360][ T4012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1520.138203][ T4012] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1520.152948][ T4006] ntfs3: loop2: failed to convert "c46c" to maciceland [ 1520.222298][ T4012] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1520.299879][ T4012] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1520.312348][ T4012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.13679: bg 0: block 15: invalid block bitmap [ 1520.363891][ T4012] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1520.407599][ T4012] EXT4-fs (loop0): 1 truncate cleaned up [ 1520.437031][ T4012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1520.585363][ T4012] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.13679: bad symlink. [ 1520.737623][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.988606][ T4040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13690'. [ 1521.310646][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13695'. [ 1522.299736][ T4060] loop4: detected capacity change from 0 to 32768 [ 1522.316543][ T4081] netlink: 'syz.0.13709': attribute type 11 has an invalid length. [ 1522.352091][ T4060] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1522.488704][ T4060] XFS (loop4): Ending clean mount [ 1522.672694][T30278] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1523.164621][ T4104] loop0: detected capacity change from 0 to 4096 [ 1523.244249][ T4104] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1523.318224][ T4104] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1523.375729][ T4104] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1523.488351][ T4104] ntfs3: loop0: failed to convert "c46c" to maciceland [ 1524.026435][ T5822] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1524.081233][ T56] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1524.237548][ T5822] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1524.247245][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1524.265345][ T5822] usb 3-1: Product: syz [ 1524.269610][ T5822] usb 3-1: SerialNumber: syz [ 1524.300394][ T56] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1524.311223][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.335934][ T5822] usb 3-1: config 0 descriptor?? [ 1524.367577][ T56] usb 5-1: config 0 descriptor?? [ 1524.418528][ T4132] tmpfs: Bad value for 'mpol' [ 1524.641509][ T4136] ip6gretap0: left promiscuous mode [ 1524.652163][ T4136] ip6gretap0: left allmulticast mode [ 1524.678580][ T4136] team0: left promiscuous mode [ 1524.683460][ T4136] bridge0: left promiscuous mode [ 1524.693841][ T4136] team0: left allmulticast mode [ 1524.701117][ T4136] bridge0: left allmulticast mode [ 1524.707364][ T4136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.740026][ T4136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1524.778089][ T4138] tmpfs: Bad value for 'mpol' [ 1524.796449][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1524.828939][ T56] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 1524.831569][ T5822] usb 3-1: USB disconnect, device number 75 [ 1524.836258][ T56] hackrf 5-1:0.0: Could not detect board [ 1524.836424][ T56] hackrf: probe of 5-1:0.0 failed with error -71 [ 1524.907566][ T56] usb 5-1: USB disconnect, device number 12 [ 1525.348653][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1525.448317][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13738'. [ 1525.581245][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1525.606548][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.638457][ T9] usb 1-1: Product: syz [ 1525.655304][ T9] usb 1-1: Manufacturer: syz [ 1525.660020][ T9] usb 1-1: SerialNumber: syz [ 1525.717073][ T56] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1525.802693][ T4159] loop4: detected capacity change from 0 to 64 [ 1525.843912][T12882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1525.897226][ T4159] syz.4.13744: attempt to access beyond end of device [ 1525.897226][ T4159] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1525.916562][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1525.950240][ T4159] Buffer I/O error on dev loop4, logical block 512, async page read [ 1525.977464][ T4159] syz.4.13744: attempt to access beyond end of device [ 1525.977464][ T4159] loop4: rw=0, sector=32768, nr_sectors = 2 limit=64 [ 1526.042364][ T4159] Buffer I/O error on dev loop4, logical block 16384, async page read [ 1526.305752][ T2179] usb 1-1: USB disconnect, device number 87 [ 1526.539425][ T4178] veth0: mtu less than device minimum [ 1526.572266][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13753'. [ 1526.672092][ T4183] netlink: 'syz.2.13755': attribute type 3 has an invalid length. [ 1526.680426][ T4183] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13755'. [ 1526.829789][ T4187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13757'. [ 1526.866046][ T4189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1526.875277][ T4189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1526.876694][ T56] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1526.907712][ T56] ath9k_htc: Failed to initialize the device [ 1526.917825][ T4189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1526.927703][ T2179] usb 1-1: ath9k_htc: USB layer deinitialized [ 1526.963804][ T4189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1527.002002][ T4189] netlink: 84 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1527.043867][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1527.093681][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1527.247955][ T4199] autofs4:pid:4199:autofs_fill_super: called with bogus options [ 1527.436419][ T4203] loop2: detected capacity change from 0 to 64 [ 1527.476650][ T4203] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1527.825899][ T2179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1528.000584][ T4223] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13775'. [ 1528.188271][ T2179] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1528.403448][ T2179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1528.426438][ T2179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1528.459679][ T2179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1528.498904][ T2179] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.531739][ T2179] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.562375][ T2179] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1528.594920][ T2179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.657372][ T4219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1528.673926][ T4219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1528.692341][ T4219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1528.733466][ T2179] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 1528.995525][ T4251] loop4: detected capacity change from 0 to 2048 [ 1529.038887][ T4251] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1529.118284][ T4255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1529.169980][ T2179] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 1529.224886][ T4251] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 1529.226006][ T2179] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 1529.311427][ T4251] Remounting filesystem read-only [ 1529.330177][ T2179] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 1529.364262][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 1529.373114][ T2179] usb 1-1: USB disconnect, device number 88 [ 1529.489577][ T2179] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 1529.557212][ T2179] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 1529.607211][ T2179] mos7720 1-1:1.0: device disconnected [ 1529.616154][ T28] audit: type=1326 audit(1521.527:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.665110][ T28] audit: type=1326 audit(1521.527:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.737474][ T4267] loop4: detected capacity change from 0 to 1024 [ 1529.748726][ T28] audit: type=1326 audit(1521.564:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.769281][ T4267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1529.803012][ T28] audit: type=1326 audit(1521.564:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.841247][ T4267] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1529.875860][ T28] audit: type=1326 audit(1521.573:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.910522][ T28] audit: type=1326 audit(1521.573:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1529.961742][ T4267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.034115][ T28] audit: type=1326 audit(1521.573:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1530.117274][ T28] audit: type=1326 audit(1521.583:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1530.179617][ T28] audit: type=1326 audit(1521.583:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.13795" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1530.270421][ T4280] x_tables: duplicate entry at hook 2 [ 1530.292839][T30278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.637725][ T56] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1530.880428][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 1530.888776][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1530.901879][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1530.923943][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1530.984064][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1531.007293][ T56] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1531.034078][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1531.049259][ T56] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1531.070484][ T56] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1531.080455][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.114423][ T56] usb 1-1: Product: syz [ 1531.118883][ T56] usb 1-1: Manufacturer: syz [ 1531.123543][ T56] usb 1-1: SerialNumber: syz [ 1531.157690][ T56] usb 1-1: config 0 descriptor?? [ 1531.163760][ T4283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1531.179608][ T4283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1531.187243][ T4307] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1531.210697][ T56] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1531.568799][ T5822] usb 1-1: USB disconnect, device number 89 [ 1531.721273][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1531.826561][ T4327] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1532.263033][T28619] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1532.501858][T28619] usb 4-1: Using ep0 maxpacket: 32 [ 1532.511585][T28619] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1532.542055][T28619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.571449][ T4349] netlink: 'syz.4.13835': attribute type 16 has an invalid length. [ 1532.574285][T28619] usb 4-1: config 0 descriptor?? [ 1532.595676][T28619] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1532.645773][ T4351] netlink: 'syz.0.13836': attribute type 2 has an invalid length. [ 1533.042463][T28619] gspca_sq930x: ucbus_write failed -71 [ 1533.054139][T28619] sq930x: probe of 4-1:0.0 failed with error -71 [ 1533.089933][T28619] usb 4-1: USB disconnect, device number 73 [ 1533.133368][ T4362] loop2: detected capacity change from 0 to 512 [ 1533.145911][ T4363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1533.178009][ T4362] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1533.193843][ T4362] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1533.205003][ T4362] EXT4-fs (loop2): group descriptors corrupted! [ 1533.586470][ T4375] netlink: 'syz.0.13848': attribute type 7 has an invalid length. [ 1533.594412][ T4375] netlink: 'syz.0.13848': attribute type 8 has an invalid length. [ 1533.636763][ T4375] netlink: 'syz.0.13848': attribute type 15 has an invalid length. [ 1534.353910][ T4393] loop2: detected capacity change from 0 to 4096 [ 1534.396948][ T4393] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1534.514698][ T4393] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1534.545866][ T4393] ntfs3: loop2: Inode r=b is not in use! [ 1534.565539][ T4393] ntfs3: loop2: Failed to load $Extend (-116). [ 1534.593653][ T4393] ntfs3: loop2: Failed to initialize $Extend. [ 1534.710251][ T4409] hub 8-0:1.0: USB hub found [ 1534.746312][ T4409] hub 8-0:1.0: 1 port detected [ 1535.672084][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13875'. [ 1536.280346][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13889'. [ 1536.799797][ T4471] veth5: entered promiscuous mode [ 1536.831474][ T4471] veth5: entered allmulticast mode [ 1537.277438][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1537.364279][ T4493] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1538.788718][ T4552] Timeout policy `syz1' can only be used by L3 protocol number 37376 [ 1539.092813][ T4564] autofs4:pid:4564:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 1539.642994][ T4584] netlink: 372 bytes leftover after parsing attributes in process `syz.3.13953'. [ 1539.770919][ T4590] IPv6: sit2: Disabled Multicast RS [ 1540.185456][T13745] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1540.337207][ T4613] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1540.395344][T13745] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1540.428680][T13745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 68, changing to 10 [ 1540.468917][T13745] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1540.490511][T13745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.498605][T13745] usb 5-1: Product: syz [ 1540.525374][T13745] usb 5-1: Manufacturer: syz [ 1540.545402][T13745] usb 5-1: SerialNumber: syz [ 1540.859638][T13745] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1540.939365][T13745] usb 5-1: USB disconnect, device number 13 [ 1541.067881][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.085259][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1541.229006][ T4638] cgroup: Name too long [ 1541.280459][T28619] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1541.498717][T28619] usb 3-1: Using ep0 maxpacket: 16 [ 1541.526224][T28619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1541.562384][T28619] usb 3-1: config 16 has an invalid interface number: 44 but max is 0 [ 1541.570765][T28619] usb 3-1: config 16 has no interface number 0 [ 1541.586500][T28619] usb 3-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 1541.602342][T28619] usb 3-1: config 16 interface 44 has no altsetting 0 [ 1541.612527][T28619] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 1541.636835][T28619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.648116][T28619] usb 3-1: Product: syz [ 1541.662978][T28619] usb 3-1: Manufacturer: syz [ 1541.667680][T28619] usb 3-1: SerialNumber: syz [ 1541.685905][ T4633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1541.878069][ T4653] loop0: detected capacity change from 0 to 4096 [ 1541.969056][T28619] cypress_cy7c63 3-1:16.44: Cypress CY7C63xxx device now attached [ 1541.993711][T28619] usb 3-1: USB disconnect, device number 76 [ 1542.020656][T28619] cypress_cy7c63 3-1:16.44: Cypress CY7C63xxx device now disconnected [ 1542.073758][ T4653] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1542.136334][T13745] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1542.374680][T13745] usb 5-1: Using ep0 maxpacket: 16 [ 1542.390871][T13745] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1542.407698][T13745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.428875][T13745] usb 5-1: Product: syz [ 1542.437880][T13745] usb 5-1: Manufacturer: syz [ 1542.448524][T13745] usb 5-1: SerialNumber: syz [ 1542.460627][T13745] usb 5-1: config 0 descriptor?? [ 1542.487701][T13745] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1542.508569][ T4665] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1542.931597][T13745] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 1542.970346][T13745] visor: probe of 5-1:0.0 failed with error -71 [ 1543.043451][T13745] usb 5-1: USB disconnect, device number 14 [ 1543.119725][ T4683] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13999'. [ 1543.159093][ T4683] ..0·: renamed from hsr0 (while UP) [ 1543.203658][ T4683] ..0·: entered allmulticast mode [ 1543.208813][ T4683] hsr_slave_0: entered allmulticast mode [ 1543.216243][ T4683] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 1543.718143][ T4702] netlink: 'syz.2.14008': attribute type 1 has an invalid length. [ 1543.746766][ T4702] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14008'. [ 1543.806189][ T28] audit: type=1326 audit(1534.630:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1543.881589][ T28] audit: type=1326 audit(1534.648:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1543.970366][ T28] audit: type=1326 audit(1534.648:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.068132][ T28] audit: type=1326 audit(1534.657:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.154872][ T28] audit: type=1326 audit(1534.657:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.231780][ T28] audit: type=1326 audit(1534.657:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.332343][ T28] audit: type=1326 audit(1534.657:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.419707][ T28] audit: type=1326 audit(1534.657:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.472386][ T28] audit: type=1326 audit(1534.657:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.14010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2efb9e159 code=0x7ffc0000 [ 1544.954144][ T5823] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1544.992633][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14028'. [ 1545.126186][ T4748] ipt_ECN: cannot use operation on non-tcp rule [ 1545.194778][ T5823] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1545.219107][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.699414][ T5823] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 1545.736015][ T5823] pn533_usb: probe of 5-1:1.0 failed with error -71 [ 1545.778333][ T5823] usb 5-1: USB disconnect, device number 15 [ 1546.668246][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14054'. [ 1546.839249][ T4804] bridge0: port 1() entered blocking state [ 1546.867264][ T4804] bridge0: port 1() entered disabled state [ 1546.882468][ T4804] : entered allmulticast mode [ 1546.914858][ T4804] : entered promiscuous mode [ 1547.140829][ T4818] loop4: detected capacity change from 0 to 256 [ 1547.565118][ T4828] dvmrp0: entered allmulticast mode [ 1547.801923][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14073'. [ 1547.988840][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14077'. [ 1547.999175][ T4846] netlink: 'syz.0.14078': attribute type 13 has an invalid length. [ 1548.018177][ T4846] netlink: 172 bytes leftover after parsing attributes in process `syz.0.14078'. [ 1548.097821][ T4846] erspan0: refused to change device tx_queue_len [ 1548.587288][ T4866] xt_limit: Overflow, try lower: 2147483649/3300 [ 1549.155690][ T4882] loop2: detected capacity change from 0 to 256 [ 1549.196048][ T4882] exfat: Deprecated parameter 'utf8' [ 1549.304871][ T4882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 1549.486560][ T4867] loop4: detected capacity change from 0 to 32768 [ 1549.540519][ T4867] (syz.4.14087,4867,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1549.584342][ T4867] (syz.4.14087,4867,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1549.653816][ T4867] JBD2: Ignoring recovery information on journal [ 1549.820318][ T4867] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1550.351573][T30278] ocfs2: Unmounting device (7,4) on (node local) [ 1550.989131][ T4923] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1551.623783][ T4948] binder: 4946:4948 ioctl 400c620e 200000000040 returned -22 [ 1551.887748][ T4959] geneve2: entered promiscuous mode [ 1552.624916][ T4975] Process accounting paused [ 1553.074929][ T5001] ip_tables: iptables: counters copy to user failed while replacing table [ 1553.370350][ T5013] netlink: 'syz.0.14158': attribute type 1 has an invalid length. [ 1553.411321][ T5013] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14158'. [ 1553.434681][ T5013] nbd: must specify at least one socket [ 1553.461693][ T5823] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1553.678856][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 1553.697452][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1553.738443][ T5823] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1553.770269][ T5823] usb 5-1: Product: syz [ 1553.774543][ T5823] usb 5-1: Manufacturer: syz [ 1553.787062][ T5823] usb 5-1: SerialNumber: syz [ 1553.799334][ T5823] usb 5-1: config 0 descriptor?? [ 1553.839738][ T5823] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1553.963970][ T5029] bond6 (unregistering): Released all slaves [ 1554.170577][ T5040] loop0: detected capacity change from 0 to 1024 [ 1554.267649][ T5823] gspca_zc3xx: reg_r err -71 [ 1554.278898][ T5823] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 1554.311679][ T5823] usb 5-1: USB disconnect, device number 16 [ 1554.650793][ T5048] x_tables: duplicate underflow at hook 4 [ 1554.827845][ T5056] netlink: 'syz.0.14179': attribute type 1 has an invalid length. [ 1554.847378][ T5056] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14179'. [ 1555.077480][ T5062] comedi comedi3: mpc624: I/O port conflict (0x4,16) [ 1555.509585][ T5085] bridge0: port 3(bond0) entered blocking state [ 1555.523393][ T5085] bridge0: port 3(bond0) entered disabled state [ 1555.536913][ T5085] bond0: entered allmulticast mode [ 1555.546054][ T5085] bond_slave_0: entered allmulticast mode [ 1555.552137][ T5085] macvlan1: entered allmulticast mode [ 1555.599732][ T5085] veth1_vlan: entered allmulticast mode [ 1555.622450][ T5085] bond0: entered promiscuous mode [ 1555.644230][ T5085] bond_slave_0: entered promiscuous mode [ 1555.650252][ T5085] macvlan1: entered promiscuous mode [ 1555.684809][ T5085] bridge0: port 3(bond0) entered blocking state [ 1555.692338][ T5085] bridge0: port 3(bond0) entered forwarding state [ 1556.565711][ T5123] loop2: detected capacity change from 0 to 256 [ 1556.664574][ T5123] exfat: Deprecated parameter 'utf8' [ 1556.701070][ T5123] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1557.050098][ T28] audit: type=1326 audit(1546.846:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.124487][ T28] audit: type=1326 audit(1546.865:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.159335][ T28] audit: type=1326 audit(1546.865:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.194554][ T28] audit: type=1326 audit(1546.865:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.235237][ T5138] loop4: detected capacity change from 0 to 4096 [ 1557.275099][ T28] audit: type=1326 audit(1546.865:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.309147][T28619] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1557.317276][ T5147] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.14218'. [ 1557.333186][ T5147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1557.345520][ T28] audit: type=1326 audit(1546.874:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.375690][ T5138] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1557.406217][ T5138] ntfs3: loop4: Failed to load $Extend (-22). [ 1557.419229][ T5138] ntfs3: loop4: Failed to initialize $Extend. [ 1557.437895][ T28] audit: type=1326 audit(1546.874:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.495768][ T28] audit: type=1326 audit(1546.874:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.534999][ T28] audit: type=1326 audit(1546.874:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.0.14217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbeeff9e159 code=0x7ffc0000 [ 1557.581706][T28619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.597227][T28619] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1557.628423][T28619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1557.659182][T28619] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1557.682844][T28619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.727217][T28619] hub 3-1:1.0: bad descriptor, ignoring hub [ 1557.753562][T28619] hub: probe of 3-1:1.0 failed with error -5 [ 1557.760351][T28619] cdc_wdm 3-1:1.0: skipping garbage [ 1557.774468][T28619] cdc_wdm 3-1:1.0: skipping garbage [ 1557.780475][T28619] cdc_wdm 3-1:1.0: skipping garbage [ 1557.803525][T28619] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1558.080407][T28619] usb 3-1: USB disconnect, device number 77 [ 1558.184162][ T5165] loop0: detected capacity change from 0 to 256 [ 1558.425537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1558.463442][T28619] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1558.713408][T28619] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.737375][T28619] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1558.754767][T28619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.804605][T28619] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1558.980390][ T5190] netlink: 'syz.2.14239': attribute type 21 has an invalid length. [ 1559.372041][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14245'. [ 1559.419808][ T5205] --map-set only usable from mangle table [ 1559.987803][T28619] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1560.206843][T28619] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1560.229383][T28619] stv0680 5-1:4.0: last error: 0, command = 0x8d [ 1560.246468][T28619] usb 5-1: USB disconnect, device number 17 [ 1560.257959][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14259'. [ 1562.149838][ T5290] overlayfs: conflicting options: nfs_export=on,index=off [ 1562.446473][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14293'. [ 1562.712437][ T5312] loop0: detected capacity change from 0 to 512 [ 1562.750518][ T5312] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1562.787929][ T5312] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.14299: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1562.831098][ T5312] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.14299: ea_inode dec ref err=-117 [ 1562.847817][ T5312] EXT4-fs (loop0): 1 orphan inode deleted [ 1562.893080][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1563.042585][ T5322] No such timeout policy "syz1" [ 1563.098082][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.586405][T28619] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1563.633953][ T5341] loop0: detected capacity change from 0 to 256 [ 1563.683896][ T5341] exfat: Deprecated parameter 'namecase' [ 1563.724712][ T5341] exfat: Deprecated parameter 'utf8' [ 1563.791835][ T5341] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1563.807819][T28619] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1563.823404][T28619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.854999][T28619] usb 5-1: Product: syz [ 1563.859265][T28619] usb 5-1: Manufacturer: syz [ 1563.863922][T28619] usb 5-1: SerialNumber: syz [ 1563.953513][ T5823] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1564.465058][T28619] usb 5-1: USB disconnect, device number 18 [ 1564.613769][ T28] audit: type=1800 audit(1553.803:2887): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.14318" name="/" dev="sockfs" ino=102074 res=0 errno=0 [ 1565.107721][ T5823] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1565.152239][ T5823] ath9k_htc: Failed to initialize the device [ 1565.176666][T28619] usb 5-1: ath9k_htc: USB layer deinitialized [ 1565.527428][ T5396] loop2: detected capacity change from 0 to 1024 [ 1566.965615][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1567.347191][ T5468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.565507][ T5476] netlink: 'syz.0.14375': attribute type 29 has an invalid length. [ 1567.615888][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14375'. [ 1567.670825][ T5476] netlink: 'syz.0.14375': attribute type 29 has an invalid length. [ 1567.691949][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14375'. [ 1567.944915][ T5490] IPVS: Error joining to the multicast group [ 1568.231779][ T5498] ipip2: entered promiscuous mode [ 1568.758438][ T5520] loop2: detected capacity change from 0 to 256 [ 1569.105549][ T5536] loop2: detected capacity change from 0 to 64 [ 1569.154873][ T56] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1569.325170][ T5541] loop4: detected capacity change from 0 to 164 [ 1569.364945][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 1569.371868][ T5541] Unsupported NM flag settings (240) [ 1569.400425][ T56] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1569.426469][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.456762][ T56] usb 4-1: Product: syz [ 1569.463118][ T56] usb 4-1: Manufacturer: syz [ 1569.473941][ T56] usb 4-1: SerialNumber: syz [ 1569.513248][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1569.535226][ T56] usb 4-1: config 0 descriptor?? [ 1569.564962][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1569.596428][ T5543] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1569.994524][ T56] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1570.009767][ T56] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1570.087748][ T56] peak_usb: probe of 4-1:0.0 failed with error -71 [ 1570.124073][ T56] usb 4-1: USB disconnect, device number 74 [ 1570.292956][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14419'. [ 1570.369888][ T5570] loop2: detected capacity change from 0 to 256 [ 1570.424111][ T5570] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1570.549328][ T28] audit: type=1800 audit(1559.293:2888): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14420" name="file1" dev="loop2" ino=1048730 res=0 errno=0 [ 1571.216182][ T5603] geneve4: entered promiscuous mode [ 1571.925390][ T5625] ipip0: entered promiscuous mode [ 1573.114168][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1573.146212][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1573.176595][ T5670] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1573.572697][ T5685] netdevsim netdevsim0: Direct firmware load for .® failed with error -2 [ 1573.586807][ T5685] netdevsim netdevsim0: Falling back to sysfs fallback for: .® [ 1573.908615][ T5696] vlan0: entered promiscuous mode [ 1574.052701][ T5702] usb usb7: usbfs: process 5702 (syz.4.14482) did not claim interface 0 before use [ 1574.836808][ T5729] program syz.0.14495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1576.062249][ T5789] netlink: 'syz.4.14518': attribute type 6 has an invalid length. [ 1576.087199][ T5787] veth1_to_hsr: entered allmulticast mode [ 1576.168860][ T5793] kAFS: unable to lookup cell '(,c¾Ì' [ 1576.353940][ T5808] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1576.981923][ T5835] bond7: Removing last arp target with arp_interval on [ 1577.225095][ T5851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1577.398211][ T5858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14541'. [ 1577.725676][ T5869] loop4: detected capacity change from 0 to 256 [ 1578.073134][ T5879] loop4: detected capacity change from 0 to 16 [ 1578.121322][ T5879] erofs: (device loop4): mounted with root inode @ nid 36. [ 1578.405125][ T5889] netlink: 'syz.4.14556': attribute type 3 has an invalid length. [ 1578.417383][ T5889] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14556'. [ 1578.561901][ T2179] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1578.616298][T28619] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1578.785233][ T2179] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1578.811096][ T2179] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1578.837646][ T2179] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1578.858861][T28619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 3328, setting to 1024 [ 1578.865636][ T2179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.885543][T28619] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1578.928788][T28619] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1578.949240][T28619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.965793][ T5887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1578.993132][T28619] usb 1-1: probing VID:PID(0424:012C) [ 1579.017756][T28619] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 1579.028966][T28619] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1579.035711][T28619] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 1579.076907][T28619] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1579.095692][T28619] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1579.235690][T28619] vub300: probe of 1-1:1.0 failed with error -71 [ 1579.259636][T28619] usb 1-1: USB disconnect, device number 90 [ 1579.387061][ T5823] usb 3-1: USB disconnect, device number 78 [ 1579.524025][ T5907] loop4: detected capacity change from 0 to 2048 [ 1579.546502][ T5907] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1579.561435][ T5907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1579.635581][ T5822] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1579.855952][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.878029][ T5822] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1579.894705][ T5822] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1579.904748][ T5822] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1579.921721][ T5822] usb 4-1: Product: syz [ 1579.926171][ T5822] usb 4-1: Manufacturer: syz [ 1579.937107][ T5822] usb 4-1: SerialNumber: syz [ 1580.160729][ T5920] ipt_ECN: cannot use operation on non-tcp rule [ 1580.177460][ T5922] sctp: [Deprecated]: syz.4.14572 (pid 5922) Use of int in maxseg socket option. [ 1580.177460][ T5922] Use struct sctp_assoc_value instead [ 1580.217502][ T5822] ttusb_dec_send_command: result bulk message failed: error -22 [ 1580.256873][ T5822] ttusb-dec: probe of 4-1:1.0 failed with error -22 [ 1580.278620][ T5822] usb 4-1: USB disconnect, device number 75 [ 1580.381897][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14574'. [ 1580.508743][ T5932] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1580.768134][ T5936] bond2: Removing last arp target with arp_interval on [ 1580.965166][ T5947] netlink: 'syz.4.14582': attribute type 7 has an invalid length. [ 1580.988094][ T5947] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14582'. [ 1581.025083][ T5951] netlink: 284 bytes leftover after parsing attributes in process `syz.0.14584'. [ 1581.719053][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14594'. [ 1582.462255][ T5994] loop4: detected capacity change from 0 to 2048 [ 1582.485505][ T5998] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14607'. [ 1582.526056][ T5994] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 1582.575657][ T5994] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1582.637922][ T5994] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1582.691648][ T5994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1583.966866][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14629'. [ 1584.070280][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14630'. [ 1584.490324][ T6059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1584.732926][ T6067] loop4: detected capacity change from 0 to 1024 [ 1584.756198][ T6067] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1585.063760][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14645'. [ 1585.312275][ T6081] Process accounting resumed [ 1585.738567][T28619] ------------[ cut here ]------------ [ 1585.745167][T28619] WARNING: CPU: 0 PID: 28619 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1585.756403][T28619] Modules linked in: [ 1585.760641][T28619] CPU: 0 PID: 28619 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1585.768265][T28619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1585.778421][T28619] Workqueue: events nf_tables_trans_destroy_work [ 1585.785164][T28619] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1585.791248][T28619] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 66 ab f8 e9 d3 f9 ff ff e8 7f 66 ab f8 e9 6c fe ff ff e8 75 66 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1585.810990][T28619] RSP: 0018:ffffc9000fe5f9d8 EFLAGS: 00010293 [ 1585.817258][T28619] RAX: ffffffff88dc1bfb RBX: ffff88802d75f4f0 RCX: ffff88802b7e0000 [ 1585.825473][T28619] RDX: 0000000000000000 RSI: ffff88802d75f400 RDI: ffff88802e1d9328 [ 1585.833537][T28619] RBP: ffffc9000fe5fbb0 R08: ffff88802b7e0000 R09: 000000000000000f [ 1585.841883][T28619] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802d75f4c0 [ 1585.850018][T28619] R13: dffffc0000000000 R14: ffff88802d75f510 R15: dffffc0000000000 [ 1585.858162][T28619] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1585.867310][T28619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1585.873963][T28619] CR2: 0000001b2df1fff8 CR3: 000000005b037000 CR4: 00000000003506f0 [ 1585.882064][T28619] Call Trace: [ 1585.885400][T28619] [ 1585.888450][T28619] ? lockdep_hardirqs_on+0x98/0x150 [ 1585.893751][T28619] nft_set_destroy+0x489/0xa20 [ 1585.899015][T28619] ? __kmem_cache_free+0xba/0x1f0 [ 1585.904137][T28619] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1585.910323][T28619] ? nft_object_dump+0x1e0/0x1e0 [ 1585.915464][T28619] ? _raw_spin_unlock_irq+0x23/0x50 [ 1585.920781][T28619] ? process_scheduled_works+0x975/0x1600 [ 1585.926690][T28619] ? process_scheduled_works+0x975/0x1600 [ 1585.932597][T28619] process_scheduled_works+0xa60/0x1600 [ 1585.938302][T28619] ? worker_attach_to_pool+0x370/0x370 [ 1585.943965][T28619] ? assign_work+0x3cc/0x5d0 [ 1585.948656][T28619] worker_thread+0xa5e/0xfe0 [ 1585.953545][T28619] kthread+0x2fa/0x390 [ 1585.957687][T28619] ? pr_cont_work+0x550/0x550 [ 1585.962452][T28619] ? kthread_blkcg+0xd0/0xd0 [ 1585.967248][T28619] ret_from_fork+0x48/0x80 [ 1585.971795][T28619] ? kthread_blkcg+0xd0/0xd0 [ 1585.976542][T28619] ret_from_fork_asm+0x11/0x20 [ 1585.981484][T28619] [ 1585.984566][T28619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1585.991986][T28619] CPU: 0 PID: 28619 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1585.999602][T28619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1586.009953][T28619] Workqueue: events nf_tables_trans_destroy_work [ 1586.016387][T28619] Call Trace: [ 1586.019735][T28619] [ 1586.022719][T28619] dump_stack_lvl+0x18c/0x250 [ 1586.027647][T28619] ? show_regs_print_info+0x20/0x20 [ 1586.033184][T28619] ? load_image+0x420/0x420 [ 1586.037773][T28619] panic+0x2ca/0x720 [ 1586.041809][T28619] ? bpf_jit_dump+0xd0/0xd0 [ 1586.046411][T28619] ? ret_from_fork_asm+0x11/0x20 [ 1586.051443][T28619] __warn+0x2e0/0x470 [ 1586.055516][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.060804][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.066081][T28619] report_bug+0x2be/0x4f0 [ 1586.070497][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.075783][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.081065][T28619] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1586.086360][T28619] handle_bug+0xcf/0x120 [ 1586.090720][T28619] exc_invalid_op+0x1a/0x50 [ 1586.095313][T28619] asm_exc_invalid_op+0x1a/0x20 [ 1586.100253][T28619] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1586.106193][T28619] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 66 ab f8 e9 d3 f9 ff ff e8 7f 66 ab f8 e9 6c fe ff ff e8 75 66 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1586.126140][T28619] RSP: 0018:ffffc9000fe5f9d8 EFLAGS: 00010293 [ 1586.132288][T28619] RAX: ffffffff88dc1bfb RBX: ffff88802d75f4f0 RCX: ffff88802b7e0000 [ 1586.140337][T28619] RDX: 0000000000000000 RSI: ffff88802d75f400 RDI: ffff88802e1d9328 [ 1586.148382][T28619] RBP: ffffc9000fe5fbb0 R08: ffff88802b7e0000 R09: 000000000000000f [ 1586.156426][T28619] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88802d75f4c0 [ 1586.164480][T28619] R13: dffffc0000000000 R14: ffff88802d75f510 R15: dffffc0000000000 [ 1586.172534][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.177821][T28619] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1586.183264][T28619] ? lockdep_hardirqs_on+0x98/0x150 [ 1586.188546][T28619] nft_set_destroy+0x489/0xa20 [ 1586.193383][T28619] ? __kmem_cache_free+0xba/0x1f0 [ 1586.198581][T28619] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1586.204658][T28619] ? nft_object_dump+0x1e0/0x1e0 [ 1586.209680][T28619] ? _raw_spin_unlock_irq+0x23/0x50 [ 1586.214943][T28619] ? process_scheduled_works+0x975/0x1600 [ 1586.220815][T28619] ? process_scheduled_works+0x975/0x1600 [ 1586.226611][T28619] process_scheduled_works+0xa60/0x1600 [ 1586.232258][T28619] ? worker_attach_to_pool+0x370/0x370 [ 1586.237789][T28619] ? assign_work+0x3cc/0x5d0 [ 1586.242453][T28619] worker_thread+0xa5e/0xfe0 [ 1586.247143][T28619] kthread+0x2fa/0x390 [ 1586.251280][T28619] ? pr_cont_work+0x550/0x550 [ 1586.256064][T28619] ? kthread_blkcg+0xd0/0xd0 [ 1586.260854][T28619] ret_from_fork+0x48/0x80 [ 1586.265434][T28619] ? kthread_blkcg+0xd0/0xd0 [ 1586.270083][T28619] ret_from_fork_asm+0x11/0x20 [ 1586.275015][T28619] [ 1586.278679][T28619] Kernel Offset: disabled [ 1586.283186][T28619] Rebooting in 86400 seconds..