last executing test programs: 6m14.418774957s ago: executing program 1 (id=13195): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 6m14.109664614s ago: executing program 1 (id=13200): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x3, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x1}}, 0x2c, 0x1) 6m13.88094361s ago: executing program 1 (id=13203): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="636f6465706167653d3836392c73686f72746e616d653d6c6f7765722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030352c696f636861727365743d6d616363656c7469632c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c726f6469722c757466383d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c0063941c9e85a4a6c9623e4e078c057b7ad26b5df56bc068c9bbfad58258cd725f2ba1ac6a1d0dfa9dd3e97ae4c601cd2daf1aa09d695f95a8e37e067abce8220d03637ebea9dfa6b5b3fb924526e2ece7147b53b5fd2dffd4157fe34486f7dc5d6cf0ad876441657b346d82f5427a45a4fcd25118b8685df4e8cbcf0e9c24378d0d4cacfb96ac63288d337447b67a9c4f5d790e2e867082c6b5c0e78eda22226160db3c52569f1a8d1effc576885a99215266a45f4388900dad5d51e8f51b06900922645cf0b3c0824df0ae14902284075969352197f00352fb426b29928015b5b8a94cf365"], 0x2a, 0x364, &(0x7f0000000640)="$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") syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501"], 0x0) 6m11.160158065s ago: executing program 1 (id=13218): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fb, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m10.603545497s ago: executing program 1 (id=13222): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x4e8, 0x0, 0x6affffff, 0x3403000b, 0x378, 0x7, 0x450, 0x230, 0x230, 0x450, 0x223, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x53}, 0x0, 0x358, 0x378, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x30}, {}, {}, {0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x3, 0x0, 0x1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [0xff000000, 0xff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff, 0xff000000, 0xff0000ff, 0xff], @ipv4=@loopback, [0xff, 0x0, 0xffffff00, 0xff], 0x6, 0x1, 0x5c, 0x4e23, 0x4e24, 0x4e21, 0x4e21, 0x100, 0x89b}, 0x0, 0x5c}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffff00, 0xff, 'veth0_to_batadv\x00', 'hsr0\x00', {}, {}, 0x16, 0x0, 0x64}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x548) 6m9.902713244s ago: executing program 1 (id=13225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @mcast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc49}]}]}, 0x50}}, 0x0) 6m9.26362082s ago: executing program 32 (id=13225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @mcast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc49}]}]}, 0x50}}, 0x0) 3.658967373s ago: executing program 2 (id=18239): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x11}]}) 3.417848939s ago: executing program 2 (id=18242): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2) 3.284142802s ago: executing program 2 (id=18243): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvrL1OYju1CxygEm2hRU4E2bVrtbU4lCIhOFUCyj0Ye21ZXnsj77qNrYo64g9AQgiQOMGFCxJ/AAhV4sIRIVWCMwgQCEEKB5BoBs3urOMfu2s32ew69ucjTeb92Jnve5vM7LyZyUwAF9ar+XQvTdPrETGVlxfy6ZNZZi/i2Yh47+5bS9mURJq+/o8kkrysva606VJMtBZpruCrX4r4RnI8bn1nd32xWq1s5flyY+NWub6ze2NtY3G1slrZnJ+fe2nh5YUXF2YfpnsrE3niakS88oW/fO/bP/niK7/8zJt/vPm3a99MWm1++2g/PqDRXpWt77MYlw+UZfG2HjDYWdT+Agp5307jTv5PBACAwcqOSz+UH+dfj6kY6X04CwAAADyG0s9Nxv+S9rW7Y8a6lAMAAACPkUJETEZSKOX3b05GoVAqRfMe3o/EeKFaqzc+vVLb3lzO6iKmo1hYWatWZvN7W6ejmGT5uSz9i/fTNM+/0Ky7Xz8fEU9GxHenrjTzpaVadXnYJz8AAADggpg4Mv7/91Rr/A8AAACcM9Odiy8Nuh0AAADAo9Nl/A8AAACcI8b/AAAAcK59+bXXsiltv/96+Y2d7fXaGzeWK/X10sb2UmmptnWrtFqrrTaf2bfRc2X7rw7c3L5dblTqjXJ9Z/fmRm17s3Fz7dArsAEAAIABevKZd36fRMTeZ680p8zYgfr/5u8JGFoDgUdm/5RdJPl87PiH/vBEa/7nATUKGIiRYTcAGJrRYTcAGJrisBsADF1yQn3Xm3d+k88/0d/2AAAA/Tfzse7X/ws9l9zrXQ2ceTZiuLhc/4eLq3n9v8Mtfx05WIBzpegIAC68h77+fyL/hwgAAIZtsjklhVJ+em8yCoVSKeJq87UAxWRlrVqZjYgnIuJ3U8VLWX6uuWRy4pgBAAAAAAAAAAAAAAAAAAAAAAAAAGhJ0yRSAAAA4FyLKPw1+VXrWf4zU89PHj0/MJb8ZyryV4S++cPXv397sdHYmsvK/7lf3vhBXv7CMM5gAAAAAEe1x+ntcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NN7d99aak+DjPv3z0fEdKf4o3G5Ob8cxYgY/1cSoweWSyJipA/x9+5ExEc7xU+yZu2H7BT/yqOPH9P5t9Ap/kQf4sNF9k62/3m10/ZXiGeb887b32jEofyD6r7/i/3930iX7f/qKWM89e7Pyl3j34l4arTz/qcdP+kS/7lTxv/613Z3u9WlP4qY6fj7kxyKVW5s3CrXd3ZvrG0srlZWK5vz83MvLby88OLCbHllbbyS/VmtzHaM8Z2P//xer/6Pd4k/fUL/nz9l/99/9/bdD7eSxU7xrz3XIf6vf5x/4nj8Qv7b96k8ndXPtNN7rfRBT//0t0/36v9yl/6f9Pd/7ZT9v/6Vb/3plB8FAAagvrO7vlitVrbyROxFHC553BPZKP0MNEPiDCbePl71THRdKkl6rzBN0zTbph6iYUn36INJJPslw94zAQAA/Xb/6H/YLQEAAAAAAAAAAAAAAAAAAICLaxDPFTsac28/lfTjEdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3x/wAAAP//Em/qYg==") mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0) 2.869750572s ago: executing program 4 (id=18245): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.619940928s ago: executing program 0 (id=18246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xffffffffffffff29, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) 2.579745219s ago: executing program 4 (id=18247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x0) 2.302628086s ago: executing program 2 (id=18248): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00'}, 0x3, 0x0, 0x4000008, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) 2.243425727s ago: executing program 0 (id=18249): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000180)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@usebackuproot}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180), 0x28) 2.243260247s ago: executing program 4 (id=18250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1.942955384s ago: executing program 2 (id=18251): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003002000000000", 0x39}], 0x1) 1.910071174s ago: executing program 4 (id=18252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bc29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x1, 0x10003}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48891}, 0x0) 1.744303258s ago: executing program 5 (id=18253): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5e) 1.743753509s ago: executing program 4 (id=18254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.507995884s ago: executing program 4 (id=18255): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1909491, 0x0, 0x0, 0x0, &(0x7f0000000040)) 1.496286855s ago: executing program 2 (id=18257): syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff000000070581020002"], 0x0) nanosleep(0x0, 0x0) 1.040262345s ago: executing program 3 (id=18259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c000280050001002f0000002c0001801400030000000000000000000000ffffac1414bb1400560000000000000000000000ffff000000003c0003800c00028004000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc000000000000000000000000000000140004"], 0xc8}}, 0x40004) 912.770238ms ago: executing program 0 (id=18260): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 819.58498ms ago: executing program 3 (id=18261): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368"], 0x128}}, 0x0) 744.182542ms ago: executing program 5 (id=18262): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 744.052422ms ago: executing program 0 (id=18263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 640.656865ms ago: executing program 3 (id=18264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) 618.088185ms ago: executing program 0 (id=18265): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9d, 0x82000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 476.065688ms ago: executing program 0 (id=18266): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) 466.481859ms ago: executing program 5 (id=18267): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f009, 0x1}) 378.232131ms ago: executing program 5 (id=18268): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 276.064423ms ago: executing program 3 (id=18269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 247.677914ms ago: executing program 5 (id=18270): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="920100000000000081", @ANYRES32=r0], 0x10) 124.592937ms ago: executing program 3 (id=18271): r0 = syz_io_uring_setup(0x3e36, &(0x7f0000000000)={0x0, 0x428c, 0x40, 0x2, 0x2db}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x33dc, 0xc59e, 0x12, 0x0, 0x0) 98.44µs ago: executing program 3 (id=18272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 0s ago: executing program 5 (id=18273): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b48, 0x0) kernel console output (not intermixed with test programs): 893] netlink: 'syz.3.16474': attribute type 4 has an invalid length. [ 1620.740171][ T7847] F2FS-fs (loop4): recover fsync data on readonly fs [ 1620.745416][ T7893] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16474'. [ 1620.782298][ T7847] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1620.827380][ T7847] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 1620.856879][ T7847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1620.892613][T17252] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1620.926775][ T7900] loop5: detected capacity change from 0 to 512 [ 1621.004141][ T7847] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 1621.006526][ T7900] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1621.063733][ T7900] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1621.096270][ T7900] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1621.114693][ T7900] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1621.121763][T17252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.123639][ T7900] System zones: 0-2, 18-18, 34-35 [ 1621.186630][ T7900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1621.203022][T17252] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1621.288220][T17252] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1621.312696][T17252] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1621.322227][T17252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.357350][T17252] usb 3-1: config 0 descriptor?? [ 1621.450690][ T383] EXT4-fs (loop5): unmounting filesystem. [ 1621.467352][ T7911] loop4: detected capacity change from 0 to 64 [ 1621.512908][ T4278] Bluetooth: hci0: command 0x0401 tx timeout [ 1621.523044][ T7909] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1621.683105][ T7913] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16481'. [ 1621.813965][ T26] audit: type=1326 audit(2000000706.016:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1621.836349][T17251] usb 3-1: USB disconnect, device number 46 [ 1621.941079][ T26] audit: type=1326 audit(2000000706.054:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1621.999718][ T7919] netlink: 'syz.5.16484': attribute type 3 has an invalid length. [ 1622.034101][ T26] audit: type=1326 audit(2000000706.054:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.037373][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16484'. [ 1622.117938][ T26] audit: type=1326 audit(2000000706.054:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.218586][ T26] audit: type=1326 audit(2000000706.054:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.290590][ T26] audit: type=1326 audit(2000000706.054:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.337862][ T7927] Unsupported ieee802154 address type: 0 [ 1622.366892][ T26] audit: type=1326 audit(2000000706.054:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.368962][T16452] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1622.497081][ T26] audit: type=1326 audit(2000000706.054:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.3.16482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1622.636251][T16452] usb 1-1: Using ep0 maxpacket: 16 [ 1622.647408][T16452] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1622.700395][T16452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.708477][T16452] usb 1-1: Product: syz [ 1622.755749][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16495'. [ 1622.764727][T16452] usb 1-1: Manufacturer: syz [ 1622.770065][T16452] usb 1-1: SerialNumber: syz [ 1622.809415][T16452] usb 1-1: config 0 descriptor?? [ 1622.811080][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16495'. [ 1622.857036][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16495'. [ 1622.909069][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16497'. [ 1623.310088][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16503'. [ 1623.353992][ T7958] device vxcan3 entered promiscuous mode [ 1623.524209][ T7966] netlink: 'syz.4.16508': attribute type 1 has an invalid length. [ 1623.573300][ T7970] loop2: detected capacity change from 0 to 512 [ 1623.622036][ T7970] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1623.681843][ T7970] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1623.735372][ T7970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.16507: bg 0: block 248: padding at end of block bitmap is not set [ 1623.750743][ T4278] Bluetooth: hci0: command 0x0401 tx timeout [ 1623.789627][ T7970] Quota error (device loop2): write_blk: dquota write failed [ 1623.803350][ T7970] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1623.868301][ T7970] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.16507: Failed to acquire dquot type 1 [ 1623.893172][ T7970] EXT4-fs (loop2): 1 truncate cleaned up [ 1623.904102][ T7970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1624.035726][ T7970] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.16507: deleted inode referenced: 12 [ 1624.170221][ T7987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.208654][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.223435][ T7987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.252015][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.264062][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1624.422712][T17252] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1624.637779][T17252] usb 6-1: Using ep0 maxpacket: 16 [ 1624.653223][T17252] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.692287][T17252] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.744079][T17252] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1624.753204][T17252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1624.782121][T17252] usb 6-1: SerialNumber: syz [ 1624.846285][T17252] usb 6-1: 0:2 : does not exist [ 1625.276875][T17252] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1625.293376][T16452] usb 1-1: USB disconnect, device number 30 [ 1625.326707][T17252] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1625.380207][T17252] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1625.414939][T17252] usb 6-1: USB disconnect, device number 15 [ 1625.952238][ T4278] Bluetooth: hci0: command 0x0c20 tx timeout [ 1625.952441][T16452] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1626.254715][T16452] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.272630][T16452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1626.293514][T16452] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1626.319060][T16452] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1626.335172][T16452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1626.343808][T16452] usb 1-1: Product: syz [ 1626.355373][T16452] usb 1-1: Manufacturer: syz [ 1626.360679][T16452] usb 1-1: SerialNumber: syz [ 1626.385185][T16452] usb 1-1: config 0 descriptor?? [ 1626.435733][T16452] usb 1-1: no audio or video endpoints found [ 1626.476203][T17251] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1626.668587][T16451] usb 1-1: USB disconnect, device number 31 [ 1626.695030][T17251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1626.715326][ T8052] loop2: detected capacity change from 0 to 64 [ 1626.723440][T17251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.754676][T17251] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.821588][T17251] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1626.845631][T17251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1626.887361][T17251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.915119][T17251] usb 5-1: Product: syz [ 1626.919420][T17251] usb 5-1: Manufacturer: syz [ 1626.945872][T17251] usb 5-1: SerialNumber: syz [ 1627.158294][ T8062] loop5: detected capacity change from 0 to 8 [ 1627.170452][ T8061] __nla_validate_parse: 1 callbacks suppressed [ 1627.170474][ T8061] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16554'. [ 1627.195127][T17251] usb 5-1: bad CDC descriptors [ 1627.220322][T17251] usb 5-1: USB disconnect, device number 32 [ 1627.246088][ T8062] cramfs: bad data blocksize 3959421443 [ 1627.255087][ T8062] cramfs: bad data blocksize 4294965915 [ 1627.286255][ T8062] cramfs: bad data blocksize 802397048 [ 1627.301724][ T8062] cramfs: bad data blocksize 4294742353 [ 1627.336948][ T8062] cramfs: bad data blocksize 3367320904 [ 1627.365596][ T8062] cramfs: bad data blocksize 859179931 [ 1627.371882][ T8064] Cannot find add_set index 1536 as target [ 1627.377922][ T8062] cramfs: bad data blocksize 3436389781 [ 1627.397055][ T8062] cramfs: bad data blocksize 4294365136 [ 1627.415598][ T8062] cramfs: bad data blocksize 4294967040 [ 1627.435366][ T8062] cramfs: bad data blocksize 3959421443 [ 1627.454886][ T26] audit: type=1800 audit(2000000711.280:510): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.16553" name="file2" dev="loop5" ino=268 res=0 errno=0 [ 1627.606641][ T8070] loop2: detected capacity change from 0 to 512 [ 1627.656087][ T8070] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1627.691597][ T8070] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1627.749596][ T8070] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1627.770915][ T8070] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1627.779067][ T8070] System zones: 0-2, 18-18, 34-35 [ 1627.894449][ T8070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1628.031633][ T8084] loop5: detected capacity change from 0 to 512 [ 1628.087828][ T8084] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1628.095046][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1628.120678][ T8084] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1628.236941][ T8084] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 1628.254159][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16565'. [ 1628.361810][ T8084] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.16564: inode #15: comm syz.5.16564: iget: illegal inode # [ 1628.407591][ T8084] EXT4-fs (loop5): Remounting filesystem read-only [ 1628.429157][ T8084] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.16564: couldn't read orphan inode 15 (err -117) [ 1628.479058][ T8084] EXT4-fs (loop5): Remounting filesystem read-only [ 1628.496663][ T8084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1628.582793][ T8096] netlink: 'syz.4.16570': attribute type 1 has an invalid length. [ 1628.606141][ T8098] netlink: 'syz.0.16569': attribute type 3 has an invalid length. [ 1628.630429][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16569'. [ 1628.632129][ T8084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.16564: bg 0: block 19: invalid block bitmap [ 1628.640382][T10240] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1628.665814][ T8096] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16570'. [ 1628.754657][ T8084] EXT4-fs (loop5): Remounting filesystem read-only [ 1628.888471][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1628.897997][T10240] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1628.921619][T10240] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1628.928619][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.940142][T10240] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1628.961821][ T383] EXT4-fs (loop5): unmounting filesystem. [ 1628.964836][T10240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.997713][T10240] usb 4-1: Product: syz [ 1629.009341][T10240] usb 4-1: Manufacturer: syz [ 1629.019481][T10240] usb 4-1: SerialNumber: syz [ 1629.049212][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.078451][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.270979][T10240] usb 4-1: selecting invalid altsetting 0 [ 1629.292302][T10240] usb 4-1: Can't get UAC3 power state for id 10 [ 1629.313536][T10240] usb 4-1: selecting invalid altsetting 0 [ 1629.349061][T10240] usb 4-1: selecting invalid altsetting 0 [ 1629.450163][T10240] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1629.527315][T10240] usb 4-1: USB disconnect, device number 27 [ 1629.543623][ T4552] udevd[4552]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1629.729733][ T8124] loop5: detected capacity change from 0 to 512 [ 1629.764513][ T8124] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1629.781751][ T8124] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.803049][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1629.848704][ T8124] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz.5.16583: Directory block failed checksum [ 1630.054791][ T383] EXT4-fs (loop5): unmounting filesystem. [ 1630.090854][ T8139] loop4: detected capacity change from 0 to 512 [ 1630.126822][ T8139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1630.182409][ T8139] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1630.206223][ T8139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.16589: bg 0: block 248: padding at end of block bitmap is not set [ 1630.279486][ T8139] Quota error (device loop4): write_blk: dquota write failed [ 1630.338175][ T8141] delete_channel: no stack [ 1630.343084][ T8139] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1630.392286][ T8139] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.16589: Failed to acquire dquot type 1 [ 1630.430286][ T8139] EXT4-fs (loop4): 1 truncate cleaned up [ 1630.456377][ T8139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1630.544394][ T8139] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.16589: deleted inode referenced: 12 [ 1630.590773][ T8152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.635196][ T8152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.651037][ T26] audit: type=1326 audit(2000000714.271:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1630.707442][ T8152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.739811][ T8152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.758169][ T26] audit: type=1326 audit(2000000714.271:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1630.798758][ T8152] batman_adv: batadv0: Interface deactivated: vlan1 [ 1630.806052][ T8152] batman_adv: batadv0: Removing interface: vlan1 [ 1630.819557][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 1630.859900][ T26] audit: type=1326 audit(2000000714.271:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1630.884070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.992799][ T26] audit: type=1326 audit(2000000714.309:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1631.013886][ T8162] loop2: detected capacity change from 0 to 64 [ 1631.145346][ T26] audit: type=1326 audit(2000000714.309:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1631.169499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.236333][ T26] audit: type=1326 audit(2000000714.309:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1631.260461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.336193][ T26] audit: type=1326 audit(2000000714.309:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.2.16597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1631.682171][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16612'. [ 1631.835357][T10240] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1632.033435][ T8193] tmpfs: Bad value for 'mpol' [ 1632.042134][T10240] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 1632.059915][T10240] usb 6-1: config 0 has no interface number 1 [ 1632.086296][T10240] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1632.135055][T10240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.164253][T10240] usb 6-1: config 0 descriptor?? [ 1632.413249][T10240] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 1632.512477][ T8212] Cannot find add_set index 1536 as target [ 1632.651577][ T4320] usb 6-1: USB disconnect, device number 16 [ 1632.671366][ T4320] qcserial 6-1:0.2: device disconnected [ 1632.734859][ T8216] loop2: detected capacity change from 0 to 512 [ 1632.757371][ T8216] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1632.766960][ T8220] loop0: detected capacity change from 0 to 64 [ 1632.816421][ T8216] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.16627: bad orphan inode 13 [ 1632.835584][ T8216] ext4_test_bit(bit=12, block=18) = 1 [ 1632.849560][ T8216] is_bad_inode(inode)=0 [ 1632.897425][ T8216] NEXT_ORPHAN(inode)=0 [ 1632.901582][ T8216] max_ino=32 [ 1632.905540][ T8216] i_nlink=1 [ 1632.909296][ T8216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1632.927882][ T8216] __quota_error: 1 callbacks suppressed [ 1632.927902][ T8216] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 2 [ 1632.949233][ T8216] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 1632.959654][ T8216] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.16627: Failed to acquire dquot type 1 [ 1633.090754][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1633.509620][T10240] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1633.720450][ T8248] loop4: detected capacity change from 0 to 64 [ 1633.727349][T10240] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1633.759372][T10240] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1633.771687][ T8250] tmpfs: Bad value for 'mpol' [ 1633.820313][T10240] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1633.883054][T10240] usb 1-1: string descriptor 0 read error: -22 [ 1633.890782][T10240] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1633.906082][T10240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.942057][T10240] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 1633.971154][T10240] gspca_stv06xx: st6422 sensor detected [ 1634.055557][ T8259] loop4: detected capacity change from 0 to 8 [ 1634.103555][ T8259] cramfs: bad data blocksize 3959421443 [ 1634.109313][ T8259] cramfs: bad data blocksize 4294965915 [ 1634.135844][ T8259] cramfs: bad data blocksize 802397048 [ 1634.162914][ T8259] cramfs: bad data blocksize 4294742353 [ 1634.180975][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.197721][ T8259] cramfs: bad data blocksize 3367320904 [ 1634.210064][ T8259] cramfs: bad data blocksize 859179931 [ 1634.222800][ T8259] cramfs: bad data blocksize 3436389781 [ 1634.229683][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.239848][ T8259] cramfs: bad data blocksize 4294365136 [ 1634.247739][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.255701][ T8259] cramfs: bad data blocksize 4294967040 [ 1634.261451][ T8259] cramfs: bad data blocksize 3959421443 [ 1634.267637][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.275467][ T26] audit: type=1800 audit(2000000717.665:519): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16647" name="file2" dev="loop4" ino=268 res=0 errno=0 [ 1634.413522][T16451] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1634.494154][T10240] STV06xx: probe of 1-1:1.0 failed with error -71 [ 1634.522409][T10240] usb 1-1: USB disconnect, device number 32 [ 1634.619317][T16451] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.638081][T16451] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1634.657757][T16451] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1634.668201][T16451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.679452][T16451] usb 4-1: config 0 descriptor?? [ 1634.734229][T16452] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1634.749095][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1634.769773][ T5162] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1634.922649][T16451] usb 4-1: USB disconnect, device number 28 [ 1634.943500][T16452] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1634.968551][T16452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.978855][T16452] usb 5-1: Product: syz [ 1634.984134][T16452] usb 5-1: Manufacturer: syz [ 1634.990316][T16452] usb 5-1: SerialNumber: syz [ 1634.996227][ T5162] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1635.009977][ T5162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.034808][ T5162] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1635.048511][ T5162] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1635.081305][ T5162] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.105281][T16452] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1635.134667][ T5162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.162025][ T5162] usb 3-1: Product: syz [ 1635.166428][ T5162] usb 3-1: Manufacturer: syz [ 1635.171144][ T5162] usb 3-1: SerialNumber: syz [ 1635.185491][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1635.462956][ T5162] usb 3-1: bad CDC descriptors [ 1635.481266][ T5162] usb 3-1: USB disconnect, device number 47 [ 1635.573229][ T4320] usb 5-1: USB disconnect, device number 33 [ 1635.664967][T17252] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1635.728958][T16451] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1635.878717][T17252] usb 6-1: Using ep0 maxpacket: 8 [ 1635.885740][T17252] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.909150][T17252] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1635.918667][T17252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.927680][T17252] usb 6-1: Product: syz [ 1635.932288][T17252] usb 6-1: Manufacturer: syz [ 1635.936975][T17252] usb 6-1: SerialNumber: syz [ 1635.937690][T16451] usb 1-1: Using ep0 maxpacket: 8 [ 1635.957027][T16451] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 1635.958495][T17252] usb 6-1: config 0 descriptor?? [ 1635.980038][T17252] cdc_phonet 6-1:0.0: skipping garbage [ 1635.986121][T17252] cdc_phonet: probe of 6-1:0.0 failed with error -22 [ 1635.991481][T16451] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1636.015114][T16451] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1636.037317][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.050998][T16451] usb 1-1: Product: syz [ 1636.055278][T16451] usb 1-1: Manufacturer: syz [ 1636.064887][T16451] usb 1-1: SerialNumber: syz [ 1636.072455][T16451] usb 1-1: config 0 descriptor?? [ 1636.098114][T16451] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1636.221064][T16452] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1636.240021][T16452] ath9k_htc: Failed to initialize the device [ 1636.255970][T17251] usb 6-1: USB disconnect, device number 17 [ 1636.266622][ T4320] usb 5-1: ath9k_htc: USB layer deinitialized [ 1636.329457][T16451] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1636.348627][T16451] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1636.448348][ T8297] libceph: secret too big 31 [ 1636.565345][T16452] usb 1-1: USB disconnect, device number 33 [ 1636.988239][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.035126][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.091440][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.144251][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.076354][ T8355] x_tables: unsorted entry at hook 1 [ 1638.504049][ T8372] loop2: detected capacity change from 0 to 8 [ 1638.534293][ T8372] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1638.534338][ T8372] SQUASHFS error: Failed to read block 0x9b: -5 [ 1638.534358][ T8372] SQUASHFS error: Unable to read metadata cache entry [99] [ 1638.534374][ T8372] SQUASHFS error: Unable to read inode 0x127 [ 1638.708981][ T8377] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1638.902401][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16707'. [ 1638.920602][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16707'. [ 1639.066330][ T8389] kAFS: unable to lookup cell '.,' [ 1639.387357][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1639.441955][ T8407] bond0: (slave netdevsim0): Releasing backup interface [ 1639.504107][ T8407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1639.793031][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16727'. [ 1639.835117][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16727'. [ 1639.862568][ T26] audit: type=1326 audit(2000000722.881:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1639.886695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.914905][ T8423] device ipip0 entered promiscuous mode [ 1639.976124][ T26] audit: type=1326 audit(2000000722.937:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.077087][ T26] audit: type=1326 audit(2000000722.937:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.101232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.174932][ T26] audit: type=1326 audit(2000000722.947:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.273136][ T26] audit: type=1326 audit(2000000722.947:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.293179][ T8437] loop0: detected capacity change from 0 to 256 [ 1640.297345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.345197][ T8430] nvme_rdma: malformed address passed: 1#-&Q;?s>#Z>U7 h-ؖYFxH:4420 [ 1640.382105][ T26] audit: type=1326 audit(2000000722.947:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.406270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.488632][ T26] audit: type=1326 audit(2000000722.956:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.512811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.606766][ T26] audit: type=1326 audit(2000000722.956:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.16728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1640.834473][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16742'. [ 1641.118611][ T26] audit: type=1326 audit(2000000724.050:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.2.16748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1641.219394][ T26] audit: type=1326 audit(2000000724.087:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.2.16748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1641.243554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.323406][T17251] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1641.528241][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16754'. [ 1641.548201][T17251] usb 6-1: Using ep0 maxpacket: 8 [ 1641.555181][T17251] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1641.590841][T17251] usb 6-1: config 179 has no interface number 0 [ 1641.618983][T17251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1641.668475][T17251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1641.687156][T17251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1641.720378][T17251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1641.751603][T17251] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1641.751661][T17251] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1641.751689][T17251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.756089][ T8462] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1641.839491][ T8490] loop2: detected capacity change from 0 to 128 [ 1642.226700][T17251] usb 6-1: USB disconnect, device number 18 [ 1642.232834][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1642.232885][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1642.457733][ T8501] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 6 out of range (1000000..45000000) [ 1642.776149][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16775'. [ 1643.045915][T16451] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1643.249049][T16451] usb 1-1: Using ep0 maxpacket: 16 [ 1643.265013][T16451] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1643.290862][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.331361][T16451] usb 1-1: Product: syz [ 1643.331394][T16451] usb 1-1: Manufacturer: syz [ 1643.331412][T16451] usb 1-1: SerialNumber: syz [ 1643.333404][T16451] usb 1-1: config 0 descriptor?? [ 1643.340856][T16451] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1643.598681][ T8548] netlink: 6 bytes leftover after parsing attributes in process `syz.5.16788'. [ 1643.695251][ T8552] loop4: detected capacity change from 0 to 64 [ 1643.775365][T16451] gspca_spca508: reg_read err -71 [ 1643.786682][T16451] gspca_spca508: reg_read err -71 [ 1643.804786][T16451] gspca_spca508: reg_read err -71 [ 1643.823279][T16451] gspca_spca508: reg_read err -71 [ 1643.837627][T16451] gspca_spca508: reg write: error -71 [ 1643.861221][T16451] spca508: probe of 1-1:0.0 failed with error -71 [ 1643.914972][T16451] usb 1-1: USB disconnect, device number 34 [ 1644.011474][ T8559] loop4: detected capacity change from 0 to 8 [ 1644.061040][ T8556] loop5: detected capacity change from 0 to 4096 [ 1644.067936][ T8559] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1644.083258][ T8559] SQUASHFS error: Failed to read block 0x9b: -5 [ 1644.095084][ T8559] SQUASHFS error: Unable to read metadata cache entry [99] [ 1644.110713][ T8559] SQUASHFS error: Unable to read inode 0x127 [ 1644.164457][ T8563] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1644.513965][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16800'. [ 1644.740961][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16804'. [ 1644.761634][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16804'. [ 1644.772488][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16804'. [ 1644.953610][T16451] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1645.079321][ T5162] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1645.177325][T16451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1645.195638][T16451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1645.222135][T16451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1645.266147][T16451] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1645.283061][ T5162] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.308920][T16451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.317693][ T5162] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1645.344770][T16451] usb 3-1: config 0 descriptor?? [ 1645.352773][ T5162] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1645.390539][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.498091][ T5162] usb 1-1: config 0 descriptor?? [ 1645.576068][ T8612] netlink: 'syz.5.16819': attribute type 1 has an invalid length. [ 1645.584153][ T8612] netlink: 'syz.5.16819': attribute type 2 has an invalid length. [ 1645.600732][T16451] ath6kl: Failed to submit usb control message: -71 [ 1645.603290][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16819'. [ 1645.618712][T16451] ath6kl: unable to send the bmi data to the device: -71 [ 1645.640352][T16451] ath6kl: Unable to send get target info: -71 [ 1645.679726][T16451] ath6kl: Failed to init ath6kl core: -71 [ 1645.744841][ T5162] usb 1-1: USB disconnect, device number 35 [ 1645.825206][T16451] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1645.887774][T16451] usb 3-1: USB disconnect, device number 48 [ 1645.988713][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1646.268715][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16828'. [ 1646.337466][ T8629] loop4: detected capacity change from 0 to 4096 [ 1646.349328][ T8585] Process accounting resumed [ 1646.365316][ T8629] __ntfs_error: 2 callbacks suppressed [ 1646.365334][ T8629] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1646.446501][ T8629] ntfs: volume version 3.1. [ 1646.881041][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16838'. [ 1647.399239][T16451] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1647.604860][T16451] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.622231][T16451] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1647.651637][T16451] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1647.671925][T16451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.704850][T16451] usb 6-1: config 0 descriptor?? [ 1647.947807][T16451] usb 6-1: USB disconnect, device number 19 [ 1648.093333][ T26] audit: type=1326 audit(2000000730.575:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.172400][ T26] audit: type=1326 audit(2000000730.575:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.196616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.223436][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.264410][ T26] audit: type=1326 audit(2000000730.622:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.379824][ T26] audit: type=1326 audit(2000000730.622:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.379872][ T26] audit: type=1326 audit(2000000730.622:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.379914][ T26] audit: type=1326 audit(2000000730.622:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.379953][ T26] audit: type=1326 audit(2000000730.622:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.379993][ T26] audit: type=1326 audit(2000000730.622:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.380031][ T26] audit: type=1326 audit(2000000730.622:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.2.16853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1648.493214][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16859'. [ 1648.551431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.915084][ T8706] netlink: 'syz.2.16874': attribute type 10 has an invalid length. [ 1649.253781][ T8714] loop5: detected capacity change from 0 to 4096 [ 1649.344052][ T8714] ntfs: volume version 3.1. [ 1649.677908][ T8733] No such timeout policy "syz1" [ 1650.197462][ T8756] loop0: detected capacity change from 0 to 764 [ 1650.238082][ T8756] rock: directory entry would overflow storage [ 1650.261353][ T8756] rock: sig=0x4654, size=5, remaining=4 [ 1650.340307][ T8752] loop2: detected capacity change from 0 to 4096 [ 1650.464490][ T8752] ntfs: volume version 3.1. [ 1650.474193][ T8763] netlink: 'syz.3.16894': attribute type 12 has an invalid length. [ 1651.509468][ T8802] loop0: detected capacity change from 0 to 4096 [ 1651.589902][ T8802] ntfs: volume version 3.1. [ 1652.162958][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16927'. [ 1652.183347][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16927'. [ 1652.405566][T16451] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1652.518284][ T8839] loop4: detected capacity change from 0 to 4096 [ 1652.539656][ T8839] __ntfs_error: 3 callbacks suppressed [ 1652.539674][ T8839] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1652.608801][T16451] usb 4-1: Using ep0 maxpacket: 32 [ 1652.616718][T16451] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1652.641490][T16451] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1652.651294][ T8839] ntfs: volume version 3.1. [ 1652.662215][T17251] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1652.670417][T16451] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.706680][T16451] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1652.731497][T16451] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1652.782231][T16451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.820234][T16451] usb 4-1: config 0 descriptor?? [ 1652.881604][T17251] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1652.901265][T17251] usb 6-1: not running at top speed; connect to a high speed hub [ 1652.944065][T17251] usb 6-1: config 129 has an invalid interface number: 195 but max is 0 [ 1652.972660][T17251] usb 6-1: config 129 has no interface number 0 [ 1652.990022][T17251] usb 6-1: config 129 interface 195 has no altsetting 0 [ 1653.003207][T17251] usb 6-1: New USB device found, idVendor=684d, idProduct=aa5b, bcdDevice= d.12 [ 1653.023027][ T8826] loop2: detected capacity change from 0 to 40427 [ 1653.030975][T17251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.042992][T17251] usb 6-1: Product: syz [ 1653.048658][T17251] usb 6-1: Manufacturer: syz [ 1653.070414][T17251] usb 6-1: SerialNumber: syz [ 1653.077478][ T8826] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 1653.097579][ T8826] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 1653.125876][ T8826] F2FS-fs (loop2): invalid crc value [ 1653.166875][ T8826] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1653.262865][ T8826] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 1653.275415][T16451] usb 4-1: USB disconnect, device number 29 [ 1653.316173][T17251] usb-storage 6-1:129.195: USB Mass Storage device detected [ 1653.356368][ T8826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1653.405520][T17251] usb 6-1: USB disconnect, device number 20 [ 1653.418911][ T8826] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 1653.850194][T17252] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1653.945778][T16451] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1654.063603][T17252] usb 5-1: Using ep0 maxpacket: 8 [ 1654.083952][T17252] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1654.108277][T17252] usb 5-1: config 179 has no interface number 0 [ 1654.114693][T17252] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1654.137360][T17252] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1654.154270][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1654.158285][T17252] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1654.182410][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1654.215483][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1654.237174][T17252] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1654.246098][T16451] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1654.268974][T16451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.272521][T17252] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1654.298841][T16451] usb 1-1: config 0 descriptor?? [ 1654.344523][T17252] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1654.394889][T17252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.439522][ T8867] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1654.526922][T16451] ath6kl: Failed to submit usb control message: -71 [ 1654.533664][T16451] ath6kl: unable to send the bmi data to the device: -71 [ 1654.557881][T16451] ath6kl: Unable to send get target info: -71 [ 1654.580397][T16451] ath6kl: Failed to init ath6kl core: -71 [ 1654.701248][ T8894] x_tables: unsorted underflow at hook 3 [ 1654.703459][T16451] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1654.719280][T16451] usb 1-1: USB disconnect, device number 36 [ 1655.021607][T17252] usb 5-1: USB disconnect, device number 34 [ 1655.027865][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1655.036377][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1655.277071][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16962'. [ 1655.521225][ T8920] netlink: 'syz.5.16967': attribute type 12 has an invalid length. [ 1655.633918][ T26] audit: type=1326 audit(2000000737.624:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.16968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1655.724144][ T26] audit: type=1326 audit(2000000737.624:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.16968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1655.809925][ T26] audit: type=1326 audit(2000000737.661:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.16968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1655.916448][ T26] audit: type=1326 audit(2000000737.661:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.16968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1656.024587][ T26] audit: type=1326 audit(2000000737.661:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.16968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1656.288418][ T8947] Zero length message leads to an empty skb [ 1656.733790][ T8964] loop0: detected capacity change from 0 to 256 [ 1656.755773][ T8962] loop2: detected capacity change from 0 to 4096 [ 1656.783201][ T8964] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 1656.795740][ T8964] exFAT-fs (loop0): failed to load alloc-bitmap [ 1656.824482][ T8964] exFAT-fs (loop0): failed to recognize exfat type [ 1656.836150][ T8965] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1656.888650][T17252] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1656.926165][ T8938] loop5: detected capacity change from 0 to 32768 [ 1657.031137][ T8938] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 1657.031137][ T8938] [ 1657.101295][T17252] usb 4-1: Using ep0 maxpacket: 16 [ 1657.110943][T17252] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1657.160401][T17252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.186873][T17252] usb 4-1: Product: syz [ 1657.197725][T17252] usb 4-1: Manufacturer: syz [ 1657.213390][T17252] usb 4-1: SerialNumber: syz [ 1657.241011][T17252] usb 4-1: config 0 descriptor?? [ 1657.299159][T17252] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1657.734423][T17252] gspca_spca508: reg_read err -71 [ 1657.742450][T17252] gspca_spca508: reg_read err -71 [ 1657.775115][T17252] gspca_spca508: reg_read err -71 [ 1657.797359][T17252] gspca_spca508: reg_read err -71 [ 1657.812562][T17252] gspca_spca508: reg write: error -71 [ 1657.847447][T17252] spca508: probe of 4-1:0.0 failed with error -71 [ 1657.876201][T17252] usb 4-1: USB disconnect, device number 30 [ 1658.081146][ T8992] loop4: detected capacity change from 0 to 4096 [ 1658.132803][ T8997] loop5: detected capacity change from 0 to 64 [ 1658.147778][ T8999] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1658.294891][ T9001] xt_hashlimit: size too large, truncated to 1048576 [ 1658.323191][ T9001] xt_hashlimit: max too large, truncated to 1048576 [ 1658.846254][ T9021] netlink: 'syz.3.17012': attribute type 10 has an invalid length. [ 1659.071724][ T5162] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1659.241260][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1659.283693][ T5162] usb 1-1: Using ep0 maxpacket: 8 [ 1659.292699][ T5162] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1659.322164][ T5162] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1659.351059][ T5162] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1659.382297][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.434922][ T5162] usb 1-1: Product: syz [ 1659.439275][ T5162] usb 1-1: Manufacturer: syz [ 1659.460914][ T5162] usb 1-1: SerialNumber: syz [ 1659.473627][ T5162] usb 1-1: config 0 descriptor?? [ 1659.729985][T16451] usb 1-1: USB disconnect, device number 37 [ 1659.870398][ T9029] loop2: detected capacity change from 0 to 40427 [ 1659.897474][ T9029] F2FS-fs (loop2): invalid crc value [ 1659.936589][ T9029] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1660.184066][ T9029] F2FS-fs (loop2): Start checkpoint disabled! [ 1660.336834][ T9029] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1660.738265][T17252] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1660.942103][T17252] usb 5-1: Using ep0 maxpacket: 8 [ 1660.964383][T17252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.008341][T17252] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1661.020320][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17042'. [ 1661.059113][T17252] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1661.102129][T17252] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1661.129619][T17252] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1661.153383][T17252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.168763][T17252] usb 5-1: Product: syz [ 1661.173556][T17252] usb 5-1: Manufacturer: syz [ 1661.178832][T17252] usb 5-1: SerialNumber: syz [ 1661.211055][T17252] usb 5-1: config 0 descriptor?? [ 1661.253951][T17252] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1661.302762][ T9094] loop0: detected capacity change from 0 to 256 [ 1661.438434][ T9094] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1661.459420][T17252] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1661.489345][T17252] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1661.522793][T17252] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1661.684738][T17252] usb 5-1: USB disconnect, device number 35 [ 1661.757063][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17052'. [ 1662.021189][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17055'. [ 1662.360596][ T9098] loop5: detected capacity change from 0 to 40427 [ 1662.411507][ T9098] F2FS-fs (loop5): invalid crc value [ 1662.434357][ T9098] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1662.514099][T17252] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1662.577709][ T9098] F2FS-fs (loop5): Start checkpoint disabled! [ 1662.654877][ T9098] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1662.717207][T17252] usb 3-1: Using ep0 maxpacket: 16 [ 1662.724745][T17252] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1662.752038][T17252] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1662.770564][T17252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.781800][T17252] usb 3-1: Product: syz [ 1662.786052][T17252] usb 3-1: Manufacturer: syz [ 1662.790788][T17252] usb 3-1: SerialNumber: syz [ 1662.798489][T17252] r8152-cfgselector 3-1: config 0 descriptor?? [ 1662.966887][ T7214] kworker/u4:8: attempt to access beyond end of device [ 1662.966887][ T7214] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1663.250527][T17252] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1663.281944][T17252] r8152-cfgselector 3-1: USB disconnect, device number 49 [ 1664.696836][ T9187] loop2: detected capacity change from 0 to 4096 [ 1664.720412][ T9187] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1664.765696][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17090'. [ 1664.827982][ T9187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1664.859179][ T9187] ntfs3: loop2: Failed to load $Extend. [ 1665.020092][ T9195] loop0: detected capacity change from 0 to 512 [ 1665.049316][ T9195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1665.091835][ T9195] EXT4-fs (loop0): bad geometry: first data block 1 is beyond end of filesystem (0) [ 1665.458265][ T9208] CacheFiles: Empty directory specified [ 1665.582259][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17100'. [ 1665.680329][T16451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1665.710489][T16451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1666.268506][ T5162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1666.414549][ T9241] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1666.775597][ T5162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1666.803719][ T5162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1666.971645][ T9257] lo speed is unknown, defaulting to 1000 [ 1667.051795][ T5162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1667.694963][ T9285] loop2: detected capacity change from 0 to 2048 [ 1667.813519][ T9285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1667.947056][ T9262] loop4: detected capacity change from 0 to 40427 [ 1667.959172][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1667.987764][ T9262] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 1668.071158][ T9262] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4 [ 1668.121358][ T9262] F2FS-fs (loop4): invalid crc value [ 1668.148325][ T9262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1668.263880][ T9262] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 1668.392925][ T9262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1668.547669][ T9262] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 1668.872286][ T26] audit: type=1326 audit(2000000750.001:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1668.953337][ T26] audit: type=1326 audit(2000000750.001:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.082091][ T26] audit: type=1326 audit(2000000750.001:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.184326][ T26] audit: type=1326 audit(2000000750.001:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.288240][ T26] audit: type=1326 audit(2000000750.001:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.409176][ T26] audit: type=1326 audit(2000000750.001:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.510812][ T26] audit: type=1326 audit(2000000750.039:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.616524][ T26] audit: type=1326 audit(2000000750.039:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1669.643888][ T9343] loop0: detected capacity change from 0 to 64 [ 1669.725214][ T26] audit: type=1326 audit(2000000750.039:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.17152" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1670.231310][ T9361] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1670.791602][ T9341] loop5: detected capacity change from 0 to 40427 [ 1670.813309][ T9341] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 1670.845703][ T9341] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x30e4 [ 1670.892048][ T9341] F2FS-fs (loop5): invalid crc value [ 1670.935435][ T9341] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1670.964425][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1670.974306][ T9388] netlink: 'syz.4.17183': attribute type 46 has an invalid length. [ 1671.054654][ T9341] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 1671.154866][ T9394] CIFS: Attempting to mount \\::1\share [ 1671.167926][ T9341] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1671.210922][ T9394] CIFS: VFS: No username specified [ 1671.309834][ T9341] F2FS-fs (loop5) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 1671.820324][T16451] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1672.027251][T16451] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 1672.055743][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.066484][T16451] usb 1-1: Product: syz [ 1672.070718][T16451] usb 1-1: Manufacturer: syz [ 1672.090296][T16451] usb 1-1: SerialNumber: syz [ 1672.266644][ T9425] device ip6gre3 entered promiscuous mode [ 1673.395757][T16451] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1673.403394][T16451] r8153_ecm: probe of 1-1:1.0 failed with error -71 [ 1673.415584][T16451] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1673.423232][T16451] r8152-cfgselector 1-1: USB disconnect, device number 38 [ 1673.433581][ T4373] udevd[4373]: setting mode of /dev/bus/usb/001/038 to 020664 failed: No such file or directory [ 1673.445069][ T4373] udevd[4373]: setting owner of /dev/bus/usb/001/038 to uid=0, gid=0 failed: No such file or directory [ 1674.500443][ T9457] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.17216'. [ 1674.553798][ T9457] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4 [ 1675.090784][ T9441] loop0: detected capacity change from 0 to 40427 [ 1675.117840][ T9441] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 1675.141353][ T9441] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 1675.167369][ T9441] F2FS-fs (loop0): invalid crc value [ 1675.211079][T17252] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1675.214556][ T5162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1675.235384][ T9441] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1675.345399][ T9441] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 1675.425045][T17252] usb 6-1: Using ep0 maxpacket: 16 [ 1675.433379][T17252] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1675.451678][ T9441] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1675.464277][T17252] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1675.473967][ T9483] lo speed is unknown, defaulting to 1000 [ 1675.519878][T17252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.540026][T17252] usb 6-1: Product: syz [ 1675.551509][T17252] usb 6-1: Manufacturer: syz [ 1675.557171][ T9441] F2FS-fs (loop0) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 1675.567288][T17252] usb 6-1: SerialNumber: syz [ 1675.591659][T17252] r8152-cfgselector 6-1: config 0 descriptor?? [ 1675.639004][ T5162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1675.673369][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.767401][T16451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1676.071487][T17252] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1676.089027][T17252] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 1676.204945][ T9501] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1676.883722][T16451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1676.904164][ T9530] x_tables: duplicate underflow at hook 4 [ 1676.910629][T16451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1677.318485][T16451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1677.679472][ T9560] device ip6gre4 entered promiscuous mode [ 1678.236770][ T9578] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 1678.281366][ T9578] syz.3.17275: attempt to access beyond end of device [ 1678.281366][ T9578] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1678.312058][ T9551] loop4: detected capacity change from 0 to 32768 [ 1678.336855][ T9551] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.17260 (9551) [ 1678.382563][ T9551] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1678.427838][ T9551] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1678.458578][ T9551] BTRFS info (device loop4): turning off barriers [ 1678.478540][ T9551] BTRFS info (device loop4): enabling auto defrag [ 1678.479378][ T9588] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1678.530102][ T9551] BTRFS info (device loop4): force zlib compression, level 3 [ 1678.557448][ T9587] Process accounting paused [ 1678.565088][ T9551] BTRFS info (device loop4): enabling ssd optimizations [ 1678.598182][ T9551] BTRFS info (device loop4): using spread ssd allocation scheme [ 1678.636504][ T9551] BTRFS info (device loop4): using free space tree [ 1679.091635][ T9622] loop0: detected capacity change from 0 to 256 [ 1679.098201][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1679.150696][ T4284] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1679.255256][ T9622] FAT-fs (loop0): Directory bread(block 64) failed [ 1679.262012][ T9622] FAT-fs (loop0): Directory bread(block 65) failed [ 1679.315341][ T9622] FAT-fs (loop0): Directory bread(block 66) failed [ 1679.329227][ T9622] FAT-fs (loop0): Directory bread(block 67) failed [ 1679.335935][ T9622] FAT-fs (loop0): Directory bread(block 68) failed [ 1679.394723][ T9622] FAT-fs (loop0): Directory bread(block 69) failed [ 1679.401449][ T9622] FAT-fs (loop0): Directory bread(block 70) failed [ 1679.486672][ T9622] FAT-fs (loop0): Directory bread(block 71) failed [ 1679.504484][ T9622] FAT-fs (loop0): Directory bread(block 72) failed [ 1679.543337][ T9622] FAT-fs (loop0): Directory bread(block 73) failed [ 1679.792268][ T9631] loop2: detected capacity change from 0 to 8192 [ 1679.871167][ T9631] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1680.030447][ T9631] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 1680.078193][ T9631] FAT-fs (loop2): Filesystem has been set read-only [ 1680.269943][ T4275] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 1680.318923][ T9648] loop5: detected capacity change from 0 to 8 [ 1680.380590][ T9648] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1680.387042][ T9648] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1680.460358][ T9654] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.17301'. [ 1680.538243][ T9654] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4 [ 1680.805509][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1680.817365][ T9665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17309'. [ 1681.353816][ T9690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17321'. [ 1681.383449][ T9690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17321'. [ 1681.409363][ T26] audit: type=1326 audit(2000000761.724:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.5.17322" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1681.451844][ T9690] netlink: 'syz.2.17321': attribute type 6 has an invalid length. [ 1681.528845][ T26] audit: type=1326 audit(2000000761.762:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.5.17322" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1681.616756][ T26] audit: type=1326 audit(2000000761.762:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.5.17322" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37edf9e159 code=0x7ffc0000 [ 1681.788451][ T9706] tmpfs: Bad value for 'mpol' [ 1682.450401][ T9736] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1683.453116][ T9778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17364'. [ 1683.948197][ T9791] lo speed is unknown, defaulting to 1000 [ 1683.972014][T17252] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1684.155045][ T9804] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1684.175254][T17252] usb 6-1: Using ep0 maxpacket: 8 [ 1684.182991][T17252] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1684.219381][T17252] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1684.238247][T17252] usb 6-1: config 0 has no interface number 0 [ 1684.252571][T17252] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1684.294077][T17252] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1684.313215][T17252] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1684.330091][T17252] usb 6-1: string descriptor 0 read error: -22 [ 1684.339746][T17252] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1684.349467][T17252] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1684.391487][T17251] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1684.408382][T17252] usb 6-1: config 0 descriptor?? [ 1684.436356][T17252] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input109 [ 1684.535626][ T9808] loop0: detected capacity change from 0 to 4096 [ 1684.554327][ T9808] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1684.602943][T17251] usb 3-1: Using ep0 maxpacket: 8 [ 1684.613148][T17251] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1684.650015][T17251] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1684.676362][ T9808] ntfs: volume version 3.1. [ 1684.695408][T17251] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1684.728924][T17251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.747059][T17251] usb 3-1: Product: syz [ 1684.768195][T17251] usb 3-1: Manufacturer: syz [ 1684.792510][T17251] usb 3-1: SerialNumber: syz [ 1684.818556][ T6190] udevd[6190]: Error opening device "/dev/input/event4": Input/output error [ 1684.828803][T17250] usb 6-1: USB disconnect, device number 22 [ 1684.854880][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 1684.856366][T17251] usb 3-1: config 0 descriptor?? [ 1684.877366][ T6190] udevd[6190]: Unable to EVIOCGABS device "/dev/input/event4" [ 1684.990771][ T9820] netlink: 'syz.0.17382': attribute type 1 has an invalid length. [ 1685.130259][ T4320] usb 3-1: USB disconnect, device number 50 [ 1685.243891][ T9822] loop4: detected capacity change from 0 to 8192 [ 1685.309959][ T9822] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1685.752254][ T9835] lo speed is unknown, defaulting to 1000 [ 1686.304456][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17400'. [ 1686.993966][ T9878] openvswitch: netlink: Message has 4 unknown bytes. [ 1687.479336][ T9897] loop5: detected capacity change from 0 to 512 [ 1687.631086][ T9897] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.17418: iget: bad i_size value: 38620345925642 [ 1687.652762][ T9897] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.17418: couldn't read orphan inode 15 (err -117) [ 1687.747689][ T9897] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1687.917960][ T383] EXT4-fs (loop5): unmounting filesystem. [ 1688.276439][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17434'. [ 1688.678333][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1688.774761][ T9943] loop4: detected capacity change from 0 to 4096 [ 1688.811056][ T9943] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1688.919133][ T9943] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1688.945392][ T9943] ntfs3: loop4: Failed to load $Extend. [ 1689.013382][ T9943] ntfs3: loop4: no free space to extend mft [ 1689.206729][ T9963] loop2: detected capacity change from 0 to 256 [ 1689.306289][ T9963] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1689.327660][ T9969] netlink: 'syz.5.17455': attribute type 10 has an invalid length. [ 1689.363063][ T9969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17455'. [ 1689.408582][ T9969] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1690.014764][ T9994] loop4: detected capacity change from 0 to 64 [ 1690.732984][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1690.881828][ T4320] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1691.105705][T17250] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1691.115556][ T4320] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 1691.124263][ T4320] usb 3-1: config 0 has no interface number 0 [ 1691.131578][ T4320] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1691.144532][ T4320] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1691.154986][ T4320] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1691.166690][ T4320] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1691.203505][ T4320] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1691.223761][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1691.244096][ T4320] usb 3-1: Product: syz [ 1691.254474][ T4320] usb 3-1: Manufacturer: syz [ 1691.264900][ T4320] usb 3-1: SerialNumber: syz [ 1691.289413][ T4320] usb 3-1: config 0 descriptor?? [ 1691.303788][ T4320] xpad: probe of 3-1:0.237 failed with error -5 [ 1691.338256][T17250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.356369][T17250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1691.369689][T10041] loop0: detected capacity change from 0 to 1024 [ 1691.379257][T17250] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1691.417268][T17250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.438990][T17250] usb 5-1: Product: syz [ 1691.443285][T17250] usb 5-1: Manufacturer: syz [ 1691.448731][T10041] hfsplus: catalog record size mismatch (type 4, got 20, expected 10) [ 1691.458896][T17250] usb 5-1: SerialNumber: syz [ 1691.517879][T17191] usb 3-1: USB disconnect, device number 51 [ 1691.716189][T17250] usb 5-1: 0:2 : does not exist [ 1691.721222][T17250] usb 5-1: unit 9 not found! [ 1691.748357][T17250] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1691.784065][T17250] usb 5-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1691.813332][T17250] usb 5-1: USB disconnect, device number 36 [ 1691.889892][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17496'. [ 1692.104537][ T648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1692.123289][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1692.180005][T10065] ipt_REJECT: ECHOREPLY no longer supported. [ 1692.712506][T10085] netlink: 'syz.4.17512': attribute type 1 has an invalid length. [ 1692.746723][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17512'. [ 1694.676162][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17551'. [ 1694.692855][T10168] netlink: 'syz.0.17553': attribute type 16 has an invalid length. [ 1694.724203][T10168] netlink: 'syz.0.17553': attribute type 3 has an invalid length. [ 1694.772046][T10168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17553'. [ 1694.899962][T10175] loop4: detected capacity change from 0 to 256 [ 1695.206875][ T26] audit: type=1326 audit(2000000774.625:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ed99e159 code=0x7ffc0000 [ 1695.254941][ T26] audit: type=1326 audit(2000000774.625:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ed99e159 code=0x7ffc0000 [ 1695.353368][ T26] audit: type=1326 audit(2000000774.625:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ed99e159 code=0x7ffc0000 [ 1695.447422][ T26] audit: type=1326 audit(2000000774.653:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f95ed99e159 code=0x7ffc0000 [ 1695.471670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.524297][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1695.524526][ T26] audit: type=1326 audit(2000000774.691:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95ed95e98e code=0x7ffc0000 [ 1695.687510][ T26] audit: type=1326 audit(2000000774.691:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95ed95e98e code=0x7ffc0000 [ 1695.796049][ T26] audit: type=1326 audit(2000000774.691:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95ed95e98e code=0x7ffc0000 [ 1695.863977][T10206] netlink: 144 bytes leftover after parsing attributes in process `syz.5.17572'. [ 1695.910876][ T26] audit: type=1326 audit(2000000774.691:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95ed95e98e code=0x7ffc0000 [ 1695.935268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.951426][ T26] audit: type=1326 audit(2000000774.691:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95ed95e98e code=0x7ffc0000 [ 1696.070589][ T26] audit: type=1326 audit(2000000774.691:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.4.17562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ed99e159 code=0x7ffc0000 [ 1696.094901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.245217][T10219] UBIFS error (pid: 10219): cannot open "(null)", error -22 [ 1696.338658][T10224] binder: 10223:10224 ioctl c0306201 200000000680 returned -14 [ 1696.492048][T10220] loop2: detected capacity change from 0 to 8192 [ 1696.610411][T10220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1696.647534][T10220] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1696.706876][T10220] REISERFS (device loop2): using ordered data mode [ 1696.713692][T10220] reiserfs: using flush barriers [ 1696.720256][T10220] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1696.737545][T10220] REISERFS (device loop2): checking transaction log (loop2) [ 1696.764021][T10220] REISERFS (device loop2): Using r5 hash to sort names [ 1696.785920][T10220] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1696.909250][ T29] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1696.936564][T10250] loop5: detected capacity change from 0 to 256 [ 1697.263469][T10262] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1697.537718][T10272] IPv6: sit3: Disabled Multicast RS [ 1697.640547][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17603'. [ 1697.836034][T16451] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1697.975274][T10291] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1698.052692][T16451] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.063761][T16451] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1698.078082][T16451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.121764][T16451] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1698.177152][ T4320] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1698.275371][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.395007][ T4320] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1698.412664][ T4320] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1698.420951][ T4320] usb 4-1: Product: syz [ 1698.455111][ T4320] usb 4-1: Manufacturer: syz [ 1698.459802][ T4320] usb 4-1: SerialNumber: syz [ 1698.480051][ T4320] usb 4-1: config 0 descriptor?? [ 1698.660616][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17620'. [ 1698.705986][ T4320] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1698.834708][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17625'. [ 1698.922459][ T4320] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1698.937531][ T4320] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1699.013193][ T4320] peak_usb: probe of 4-1:0.0 failed with error -71 [ 1699.081611][ T4320] usb 4-1: USB disconnect, device number 31 [ 1699.290375][T16451] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1699.364876][T17191] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1699.514968][T16451] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1699.534112][T16451] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1699.567905][T16451] usb 1-1: USB disconnect, device number 39 [ 1699.579556][T17191] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 1699.598268][T17191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.624092][T17191] usb 5-1: Product: syz [ 1699.628357][T17191] usb 5-1: Manufacturer: syz [ 1699.653233][T17191] usb 5-1: SerialNumber: syz [ 1699.726592][T10351] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17640'. [ 1700.949783][T10391] lo speed is unknown, defaulting to 1000 [ 1700.975415][T17191] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1700.991163][T17191] r8153_ecm: probe of 5-1:1.0 failed with error -71 [ 1701.031849][T17191] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1701.053540][T17191] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 1701.162678][ T4320] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1701.187218][T17251] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1701.373704][ T4320] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1701.390806][ T4320] usb 6-1: not running at top speed; connect to a high speed hub [ 1701.410471][T17251] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1701.419823][ T4320] usb 6-1: config 0 has an invalid interface number: 102 but max is 0 [ 1701.428409][T17251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.435255][T10404] netlink: 'syz.0.17666': attribute type 9 has an invalid length. [ 1701.437730][ T4320] usb 6-1: config 0 has no interface number 0 [ 1701.454350][ T4320] usb 6-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=45.70 [ 1701.464611][T17251] usb 4-1: config 0 descriptor?? [ 1701.470983][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.484735][T17251] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1701.498784][ T4320] usb 6-1: Product: syz [ 1701.504781][ T4320] usb 6-1: Manufacturer: syz [ 1701.509583][ T4320] usb 6-1: SerialNumber: syz [ 1701.532217][ T4320] usb 6-1: config 0 descriptor?? [ 1701.778009][ T4320] rtsx_usb: probe of 6-1:0.102 failed with error -22 [ 1701.808743][ T4320] usb 6-1: USB disconnect, device number 23 [ 1701.919810][T17251] gspca_stv06xx: I2C: Read error writing address: -71 [ 1701.955140][T17251] usb 4-1: USB disconnect, device number 32 [ 1702.077017][T10416] loop2: detected capacity change from 0 to 4096 [ 1702.116751][T10416] __ntfs_error: 4 callbacks suppressed [ 1702.116769][T10416] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1702.186879][T10416] ntfs: volume version 3.1. [ 1702.193940][T10422] lo speed is unknown, defaulting to 1000 [ 1702.483121][T10429] loop2: detected capacity change from 0 to 256 [ 1702.946937][T10444] binder: 10442:10444 ioctl c0306201 200000000680 returned -14 [ 1703.057034][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.073175][T10439] lo speed is unknown, defaulting to 1000 [ 1703.378513][T10460] usb usb8: usbfs: process 10460 (syz.0.17691) did not claim interface 0 before use [ 1703.620246][T10469] loop4: detected capacity change from 0 to 256 [ 1703.748242][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.931560][T10477] netlink: 'syz.3.17702': attribute type 1 has an invalid length. [ 1704.036149][T10479] loop4: detected capacity change from 0 to 1024 [ 1704.154321][T10479] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.17701: lblock 2 mapped to illegal pblock 2 (length 1) [ 1704.219498][T10487] lo speed is unknown, defaulting to 1000 [ 1704.284021][T10479] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1704.317233][T10479] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.17701: lblock 0 mapped to illegal pblock 48 (length 1) [ 1704.398510][T10479] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1704.424187][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1704.440804][T10485] loop5: detected capacity change from 0 to 8192 [ 1704.449587][T10479] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.17701: Failed to acquire dquot type 0 [ 1704.489196][T10492] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17707'. [ 1704.501412][T10485] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1704.531653][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17707'. [ 1704.542267][T10479] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1704.565809][T10492] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17707'. [ 1704.577096][T10479] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.17701: mark_inode_dirty error [ 1704.606163][T10492] netlink: 100 bytes leftover after parsing attributes in process `syz.0.17707'. [ 1704.634660][T10479] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1704.645617][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17707'. [ 1704.649793][T10485] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 1704.660110][T10479] EXT4-fs (loop4): 1 orphan inode deleted [ 1704.688963][ T648] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1704.702700][T10479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1704.728715][T10485] FAT-fs (loop5): Filesystem has been set read-only [ 1704.754478][ T648] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1704.789725][ T648] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 1704.858279][ T383] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 1704.859590][T10479] EXT4-fs (loop4): unmounting filesystem. [ 1704.906730][T10479] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.17701: Invalid inode table block 1 in block_group 0 [ 1704.939529][T10479] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1704.964231][T10479] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz.4.17701: mark_inode_dirty error [ 1705.932739][T10522] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1705.949324][T10520] loop4: detected capacity change from 0 to 1764 [ 1705.955907][T10522] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1705.971702][T10518] lo speed is unknown, defaulting to 1000 [ 1705.985794][T17191] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1706.001884][T10524] loop5: detected capacity change from 0 to 256 [ 1706.034281][T10520] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1706.071034][T10524] FAT-fs (loop5): Directory bread(block 64) failed [ 1706.085646][T10524] FAT-fs (loop5): Directory bread(block 65) failed [ 1706.101043][T10524] FAT-fs (loop5): Directory bread(block 66) failed [ 1706.122367][T10524] FAT-fs (loop5): Directory bread(block 67) failed [ 1706.142399][T10524] FAT-fs (loop5): Directory bread(block 68) failed [ 1706.160769][T10524] FAT-fs (loop5): Directory bread(block 69) failed [ 1706.178649][T10524] FAT-fs (loop5): Directory bread(block 70) failed [ 1706.196040][T10524] FAT-fs (loop5): Directory bread(block 71) failed [ 1706.203484][T17191] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.211059][T10524] FAT-fs (loop5): Directory bread(block 72) failed [ 1706.221431][T17191] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1706.238336][T10524] FAT-fs (loop5): Directory bread(block 73) failed [ 1706.277061][T17191] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.315027][T17191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.335440][T17191] usb 1-1: Product: syz [ 1706.340167][T17191] usb 1-1: Manufacturer: syz [ 1706.344822][T17191] usb 1-1: SerialNumber: syz [ 1706.584236][T17191] usb 1-1: 0:2 : does not exist [ 1706.591457][T17191] usb 1-1: unit 9 not found! [ 1706.632428][T17191] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1706.642833][T10533] netlink: 'syz.4.17728': attribute type 4 has an invalid length. [ 1706.680363][T17191] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1706.691951][T10533] netlink: 17 bytes leftover after parsing attributes in process `syz.4.17728'. [ 1706.765757][T17191] usb 1-1: USB disconnect, device number 40 [ 1706.851492][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.497306][T10557] lo speed is unknown, defaulting to 1000 [ 1707.611712][T17191] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1707.684741][T10566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17741'. [ 1707.816213][T17191] usb 6-1: not running at top speed; connect to a high speed hub [ 1707.833033][T17191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.879214][T17191] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1707.888355][T17191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.988255][T17191] uvcvideo 6-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1708.039686][T17191] usb 6-1: Found UVC 1.00 device (046d:0825) [ 1708.046828][T17191] uvcvideo 6-1:1.1: No supported video formats found. [ 1708.079229][T17191] uvcvideo 6-1:1.1: Failed to initialize the device (-22). [ 1708.213496][T17191] usb 6-1: USB disconnect, device number 24 [ 1708.408428][T10559] loop4: detected capacity change from 0 to 32768 [ 1708.443732][T10559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.17739 (10559) [ 1708.491420][T10559] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1708.523389][T10559] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1708.532828][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1708.553205][T10559] BTRFS info (device loop4): using free space tree [ 1708.760386][T10600] lo speed is unknown, defaulting to 1000 [ 1708.855308][T10559] BTRFS info (device loop4): enabling ssd optimizations [ 1708.987666][T10616] loop5: detected capacity change from 0 to 512 [ 1709.013317][ T4284] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1709.118272][T10616] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1709.187872][T10616] ext4 filesystem being mounted at /847/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1709.281381][T10616] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.17757: corrupted inode contents [ 1709.378775][T10616] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #2: comm syz.5.17757: mark_inode_dirty error [ 1709.420600][T10616] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.17757: bg 0: block 401: padding at end of block bitmap is not set [ 1709.903099][ T648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1709.955390][ T383] EXT4-fs (loop5): unmounting filesystem. [ 1710.808168][T10668] Process accounting resumed [ 1712.240557][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17814'. [ 1713.178551][T10735] loop0: detected capacity change from 0 to 32768 [ 1713.204858][T10735] add_index: next_index = 0. Resetting! [ 1713.249169][T17251] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1713.437846][T10763] loop4: detected capacity change from 0 to 1024 [ 1713.466639][T17251] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1713.482680][T17251] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1713.503550][T17251] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.535747][T17251] usb 4-1: config 220 has no interface number 2 [ 1713.544035][T10763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1713.571131][T17251] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1713.638947][T10767] loop2: detected capacity change from 0 to 1024 [ 1713.655298][T17251] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1713.693878][T17251] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1713.705140][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 1713.730204][T17251] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1713.756840][T17251] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1713.784118][T17251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.792216][T17251] usb 4-1: Product: syz [ 1713.796992][T17251] usb 4-1: Manufacturer: syz [ 1713.802302][T17251] usb 4-1: SerialNumber: syz [ 1713.858625][T10767] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.17831: lblock 2 mapped to illegal pblock 2 (length 1) [ 1713.906974][T10767] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1713.926526][T10767] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.17831: lblock 0 mapped to illegal pblock 48 (length 1) [ 1713.997977][T10767] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1714.008504][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1714.034812][T10767] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.17831: Failed to acquire dquot type 0 [ 1714.056410][T17251] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1714.064135][T10767] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1714.093931][T17251] usb 4-1: No valid video chain found. [ 1714.097700][T10767] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.17831: mark_inode_dirty error [ 1714.099610][T17251] usb 4-1: selecting invalid altsetting 0 [ 1714.136466][T10767] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1714.177189][T17251] usb 4-1: selecting invalid altsetting 0 [ 1714.183872][T10767] EXT4-fs (loop2): 1 orphan inode deleted [ 1714.189842][T17251] usbtest: probe of 4-1:220.1 failed with error -22 [ 1714.200623][T10767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1714.213003][ T648] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1714.234352][T17251] usb 4-1: USB disconnect, device number 33 [ 1714.255787][ T648] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1714.296868][T10757] loop5: detected capacity change from 0 to 32768 [ 1714.301667][ T648] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 1714.343251][T10767] EXT4-fs (loop2): unmounting filesystem. [ 1714.360370][T10767] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.17831: Invalid inode table block 1 in block_group 0 [ 1714.388402][T10767] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1714.423816][T10757] XFS (loop5): Mounting V5 Filesystem [ 1714.430414][T10767] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz.2.17831: mark_inode_dirty error [ 1714.592206][T10757] XFS (loop5): Ending clean mount [ 1714.632293][T10757] XFS (loop5): Quotacheck needed: Please wait. [ 1714.694098][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1714.880809][T10757] XFS (loop5): Quotacheck: Done. [ 1714.955791][T10797] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10797] [ 1715.038988][ T383] XFS (loop5): Unmounting Filesystem [ 1715.664097][T10791] loop4: detected capacity change from 0 to 32768 [ 1715.709671][T10791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.17836 (10791) [ 1715.773494][T10791] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1715.795403][T10791] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1715.820205][T10791] BTRFS info (device loop4): using free space tree [ 1715.860180][T16451] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1716.063563][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1716.067148][T16451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1716.097928][T16451] usb 4-1: not running at top speed; connect to a high speed hub [ 1716.112584][T10838] loop5: detected capacity change from 0 to 1764 [ 1716.121890][T10791] BTRFS info (device loop4): enabling ssd optimizations [ 1716.180623][T16451] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 1716.196544][T10838] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1716.236880][T16451] usb 4-1: config 0 has no interface number 0 [ 1716.260436][T16451] usb 4-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=45.70 [ 1716.284923][ T4284] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1716.287186][T16451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.335977][T16451] usb 4-1: Product: syz [ 1716.364308][T16451] usb 4-1: Manufacturer: syz [ 1716.380354][T16451] usb 4-1: SerialNumber: syz [ 1716.430511][T16451] usb 4-1: config 0 descriptor?? [ 1716.476202][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17860'. [ 1716.698294][T16451] rtsx_usb: probe of 4-1:0.102 failed with error -22 [ 1716.726364][T16451] usb 4-1: USB disconnect, device number 34 [ 1717.506648][T17251] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1717.576785][ T26] audit: type=1326 audit(2000000795.529:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.17875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1717.638246][ T26] audit: type=1326 audit(2000000795.529:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.17875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1717.688191][ T26] audit: type=1326 audit(2000000795.576:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.17875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1717.743972][T17251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.752749][T16451] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1717.773200][T17251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1717.794311][ T26] audit: type=1326 audit(2000000795.576:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.17875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1717.835910][T17251] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1717.856607][T17251] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.879601][T17251] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1717.900517][T17251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.909786][ T26] audit: type=1326 audit(2000000795.576:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.17875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fe39e159 code=0x7ffc0000 [ 1717.952429][T17251] usb 5-1: Product: syz [ 1717.957136][T17251] usb 5-1: Manufacturer: syz [ 1717.961798][T17251] usb 5-1: SerialNumber: syz [ 1717.987667][T16451] usb 1-1: Using ep0 maxpacket: 32 [ 1717.995711][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 1718.050618][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 1718.088068][T16451] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1718.105415][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.123577][T16451] usb 1-1: Product: syz [ 1718.142907][T16451] usb 1-1: Manufacturer: syz [ 1718.159490][T16451] usb 1-1: SerialNumber: syz [ 1718.169116][T16451] usb 1-1: config 0 descriptor?? [ 1718.216197][T17251] usb 5-1: Not enough endpoints found in device, aborting! [ 1718.343290][ T26] audit: type=1326 audit(2000000796.249:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.2.17884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1718.372754][T16455] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1718.408767][T16451] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input112 [ 1718.415542][ T26] audit: type=1326 audit(2000000796.249:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.2.17884" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1b7159e159 code=0x7ffc0000 [ 1718.467860][T17250] usb 5-1: USB disconnect, device number 38 [ 1718.578777][T16455] usb 6-1: Using ep0 maxpacket: 16 [ 1718.586210][T16455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.608479][T16455] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1718.621739][T16455] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1718.631923][T16455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.690168][T16455] usb 6-1: Product: syz [ 1718.697161][T16455] usb 6-1: Manufacturer: syz [ 1718.701836][T16455] usb 6-1: SerialNumber: syz [ 1718.718521][T16455] usb 6-1: config 0 descriptor?? [ 1718.728295][T16451] usb 1-1: USB disconnect, device number 41 [ 1718.749992][T16455] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 1718.756795][T16455] mcba_usb 6-1:0.0 can0: couldn't start device: -90 [ 1718.832990][T16455] mcba_usb: probe of 6-1:0.0 failed with error -90 [ 1718.989537][T17251] usb 6-1: USB disconnect, device number 25 [ 1719.485273][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1719.501881][T10936] netlink: 184 bytes leftover after parsing attributes in process `syz.2.17900'. [ 1719.740502][T10945] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10945 comm: syz.4.17903) [ 1719.807109][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1719.807128][ T26] audit: type=1800 audit(2000000797.623:581): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17903" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=154175 res=0 errno=0 [ 1720.568656][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17915'. [ 1720.627918][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17915'. [ 1720.743007][T10976] loop4: detected capacity change from 0 to 1024 [ 1720.781945][T10976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1720.854762][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1721.435826][T11000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17931'. [ 1721.453624][T17250] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1721.678122][T17250] usb 5-1: Using ep0 maxpacket: 16 [ 1721.690248][T17250] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1721.728049][T17250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.739207][T17250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1721.786241][T17250] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1721.824867][T17250] usb 5-1: string descriptor 0 read error: -22 [ 1721.831463][T17250] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1721.846165][T17250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.119722][T17250] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 1722.159506][ T4320] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1722.173326][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1722.347227][T17250] usb 5-1: USB disconnect, device number 39 [ 1722.367215][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.389179][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1722.416073][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1722.443540][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.462734][ T4320] usb 4-1: Product: syz [ 1722.468579][T11039] netlink: 'syz.5.17949': attribute type 1 has an invalid length. [ 1722.479150][ T4320] usb 4-1: Manufacturer: syz [ 1722.484588][ T4320] usb 4-1: SerialNumber: syz [ 1722.717874][ T4320] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1722.743419][ T4320] usb 4-1: USB disconnect, device number 35 [ 1723.684142][T11078] netlink: 'syz.3.17967': attribute type 9 has an invalid length. [ 1723.714405][T11078] netlink: 'syz.3.17967': attribute type 7 has an invalid length. [ 1723.750770][T11083] loop2: detected capacity change from 0 to 128 [ 1723.757217][T11078] netlink: 'syz.3.17967': attribute type 8 has an invalid length. [ 1723.984790][T11094] tmpfs: Bad value for 'mpol' [ 1725.210158][T17250] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1725.240239][T16451] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1725.443241][T17250] usb 5-1: Using ep0 maxpacket: 8 [ 1725.450202][T17250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.450239][T16451] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1725.474083][T17250] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1725.497516][T16451] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1725.517300][T17250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.517556][T16451] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.561048][T17250] usb 5-1: Product: syz [ 1725.565307][T17250] usb 5-1: Manufacturer: syz [ 1725.569950][T17250] usb 5-1: SerialNumber: syz [ 1725.579698][T16451] usb 1-1: config 220 has no interface number 2 [ 1725.604510][T16451] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1725.619013][T17250] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1725.655562][T11159] tc_dump_action: action bad kind [ 1725.664074][T16451] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1725.681608][T17250] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1725.684724][T16451] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1725.718525][T16451] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1725.741884][T16451] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1725.762315][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.781588][T16451] usb 1-1: Product: syz [ 1725.793744][T16451] usb 1-1: Manufacturer: syz [ 1725.809519][T16451] usb 1-1: SerialNumber: syz [ 1725.860208][T17250] usb 5-1: USB disconnect, device number 40 [ 1726.064377][T16451] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1726.070821][T16451] usb 1-1: No valid video chain found. [ 1726.104785][T16451] usb 1-1: selecting invalid altsetting 0 [ 1726.181730][T16451] usb 1-1: selecting invalid altsetting 0 [ 1726.187566][T16451] usbtest: probe of 1-1:220.1 failed with error -22 [ 1726.237693][T16451] usb 1-1: USB disconnect, device number 42 [ 1726.434141][T11179] tmpfs: Bad value for 'mpol' [ 1727.016325][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1727.075887][T11205] loop5: detected capacity change from 0 to 256 [ 1727.137058][T11207] netlink: 108 bytes leftover after parsing attributes in process `syz.4.18030'. [ 1727.636304][T11226] netlink: 'syz.4.18039': attribute type 17 has an invalid length. [ 1728.163819][T11245] loop4: detected capacity change from 0 to 1024 [ 1728.177737][T11247] netlink: 'syz.3.18049': attribute type 7 has an invalid length. [ 1728.295573][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18050'. [ 1728.385026][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1728.783219][T11235] loop5: detected capacity change from 0 to 32768 [ 1728.844865][T16451] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1729.071174][T16451] usb 1-1: Using ep0 maxpacket: 16 [ 1729.089901][T16451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.176451][T16451] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1729.205448][T16451] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1729.230272][T16451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.270852][T16451] usb 1-1: Product: syz [ 1729.285104][T16451] usb 1-1: Manufacturer: syz [ 1729.289797][T16451] usb 1-1: SerialNumber: syz [ 1729.333069][T16451] usb 1-1: config 0 descriptor?? [ 1729.396322][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18063'. [ 1729.401867][T16451] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 1729.433213][T16451] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 1729.532544][T16451] mcba_usb: probe of 1-1:0.0 failed with error -90 [ 1729.612205][ T5160] usb 1-1: USB disconnect, device number 43 [ 1730.226220][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18076'. [ 1730.245303][T11308] netlink: 'syz.4.18078': attribute type 3 has an invalid length. [ 1730.264621][T11308] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18078'. [ 1730.798265][T11333] loop4: detected capacity change from 0 to 64 [ 1731.744508][T11369] loop2: detected capacity change from 0 to 64 [ 1732.252482][T11390] x_tables: duplicate entry at hook 3 [ 1732.372468][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18119'. [ 1733.177617][ T7214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1733.302735][T11431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18136'. [ 1733.501456][ T4278] Bluetooth: hci2: Opcode 0x206c failed: -22 [ 1733.508546][ T4278] Bluetooth: hci2: Opcode 0x2046 failed: -22 [ 1734.140358][T11460] CIFS: Attempting to mount \\127.0.0.1\test [ 1734.177222][T11460] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1734.205340][T11460] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1734.745971][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18165'. [ 1734.755925][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18165'. [ 1735.669571][ T4278] Bluetooth: hci2: command 0x2046 tx timeout [ 1735.764702][T11522] loop4: detected capacity change from 0 to 4096 [ 1735.782741][T11522] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1735.840294][T11522] ntfs3: loop4: Failed to load $MFT. [ 1735.899301][T11533] IPv6: NLM_F_CREATE should be specified when creating new route [ 1735.941243][T11533] netlink: 6 bytes leftover after parsing attributes in process `syz.2.18184'. [ 1736.222284][T11541] Unknown vers= option specified: 3.0/ [ 1736.222284][T11541] [ 1736.251622][T11541] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 1736.600180][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1736.604220][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1736.958431][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18204'. [ 1737.259806][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18211'. [ 1737.501879][T11595] netlink: 112 bytes leftover after parsing attributes in process `syz.0.18215'. [ 1737.600319][T11600] netlink: 'syz.3.18218': attribute type 3 has an invalid length. [ 1738.265967][T11621] syz.5.18228: attempt to access beyond end of device [ 1738.265967][T11621] loop5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1738.387315][T11596] loop4: detected capacity change from 0 to 32768 [ 1738.459423][T11596] XFS (loop4): Mounting V5 Filesystem [ 1738.628335][T11596] XFS (loop4): Ending clean mount [ 1738.686052][ T5160] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1738.717290][ T4284] XFS (loop4): Unmounting Filesystem [ 1738.893329][ T5160] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1738.910647][ T5160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.947827][ T5160] usb 4-1: Product: syz [ 1738.952166][ T5160] usb 4-1: Manufacturer: syz [ 1738.998317][ T5160] usb 4-1: SerialNumber: syz [ 1739.304621][T11659] loop2: detected capacity change from 0 to 512 [ 1739.349551][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1739.376027][T11659] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1739.400927][T11659] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1739.439415][T11659] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1739.485248][T11659] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1739.509582][T11659] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1739.518622][T11659] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1739.535892][T11663] netlink: 7 bytes leftover after parsing attributes in process `syz.4.18237'. [ 1739.547171][T11663] netlink: 7 bytes leftover after parsing attributes in process `syz.4.18237'. [ 1739.579690][ T26] audit: type=1326 audit(2000000816.105:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz.0.18244" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7a39e159 code=0x7ffc0000 [ 1739.664209][T11659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18243: bg 0: block 34: padding at end of block bitmap is not set [ 1739.664734][T11666] loop4: detected capacity change from 0 to 256 [ 1739.716491][ T26] audit: type=1326 audit(2000000816.142:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz.0.18244" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdb7a39e159 code=0x7ffc0000 [ 1739.766818][T11659] Quota error (device loop2): write_blk: dquota write failed [ 1739.774451][T11659] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1739.799385][T11659] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.18243: Failed to acquire dquot type 1 [ 1739.823954][ T26] audit: type=1326 audit(2000000816.142:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz.0.18244" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7a39e159 code=0x7ffc0000 [ 1739.867243][T11659] EXT4-fs (loop2): 1 truncate cleaned up [ 1739.888439][T11659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1739.945984][ T26] audit: type=1326 audit(2000000816.142:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz.0.18244" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7a39e159 code=0x7ffc0000 [ 1739.974992][T11659] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1739.999339][T11659] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1740.003351][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18246'. [ 1740.036469][T11653] loop5: detected capacity change from 0 to 32768 [ 1740.081852][T11653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.18240 (11653) [ 1740.151430][T11653] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1740.161835][T11653] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1740.182598][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 1740.194539][ T5160] ath6kl: Failed to submit usb control message: -110 [ 1740.201412][ T5160] ath6kl: unable to send the bmi data to the device: -110 [ 1740.230833][ T5160] ath6kl: Unable to send get target info: -110 [ 1740.262895][T11653] BTRFS info (device loop5): using free space tree [ 1740.286285][ T5160] ath6kl: Failed to init ath6kl core: -110 [ 1740.392977][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18250'. [ 1740.427588][ T5160] ath6kl_usb: probe of 4-1:1.0 failed with error -110 [ 1740.447977][ T5160] usb 4-1: USB disconnect, device number 36 [ 1740.590246][T11653] BTRFS info (device loop5): enabling ssd optimizations [ 1740.686297][T11698] device sit0 entered promiscuous mode [ 1740.706000][ T383] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1740.721034][T11698] netlink: 'syz.2.18251': attribute type 1 has an invalid length. [ 1740.753299][T11698] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18251'. [ 1741.394714][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.506453][T11710] netlink: 'syz.3.18259': attribute type 1 has an invalid length. [ 1741.735872][T11717] netlink: 88 bytes leftover after parsing attributes in process `syz.3.18261'. [ 1741.764114][T11702] loop4: detected capacity change from 0 to 32768 [ 1741.809199][T11702] (syz.4.18255,11702,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1741.822919][ T5088] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1741.876482][T11702] (syz.4.18255,11702,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1741.926772][T11702] JBD2: Ignoring recovery information on journal [ 1742.028211][ T5088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.063600][T11702] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1742.075960][ T5088] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1742.145024][ T5088] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1742.176016][ T5088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.223150][ T5088] usb 3-1: Product: syz [ 1742.248186][ T5088] usb 3-1: Manufacturer: syz [ 1742.252871][ T5088] usb 3-1: SerialNumber: syz [ 1742.282251][T16451] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1742.483564][T16451] usb 1-1: Using ep0 maxpacket: 8 [ 1742.493480][T16451] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1742.513818][ T5088] ath6kl: Failed to submit usb control message: -71 [ 1742.520793][ T5088] ath6kl: unable to send the bmi data to the device: -71 [ 1742.528021][ T5088] ath6kl: Unable to send get target info: -71 [ 1742.546427][ T5088] ath6kl: Failed to init ath6kl core: -71 [ 1742.571524][T16451] usb 1-1: config 179 has no interface number 0 [ 1742.577913][T16451] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1742.619343][T16451] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1742.638899][ T5088] ath6kl_usb: probe of 3-1:1.0 failed with error -71 [ 1742.647338][T16451] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1742.660821][T11702] [ 1742.663210][T11702] ====================================================== [ 1742.666667][ T5088] usb 3-1: USB disconnect, device number 52 [ 1742.670262][T11702] WARNING: possible circular locking dependency detected [ 1742.670287][T11702] syzkaller #0 Not tainted [ 1742.687683][T11702] ------------------------------------------------------ [ 1742.694738][T11702] syz.4.18255/11702 is trying to acquire lock: [ 1742.700928][T11702] ffff88804e03b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 1742.710456][T11702] [ 1742.710456][T11702] but task is already holding lock: [ 1742.717851][T11702] ffff88805815e4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 1742.728279][T11702] [ 1742.728279][T11702] which lock already depends on the new lock. [ 1742.728279][T11702] [ 1742.738729][T11702] [ 1742.738729][T11702] the existing dependency chain (in reverse order) is: [ 1742.747813][T11702] [ 1742.747813][T11702] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1742.756395][T11702] down_read+0x42/0x2d0 [ 1742.761134][T11702] ocfs2_start_trans+0x3a4/0x6f0 [ 1742.766653][T11702] ocfs2_shutdown_local_alloc+0x1f3/0xac0 [ 1742.772948][T11702] ocfs2_dismount_volume+0x1ff/0x940 [ 1742.778902][T11702] generic_shutdown_super+0x130/0x340 [ 1742.784887][T11702] kill_block_super+0x7c/0xe0 [ 1742.790217][T11702] deactivate_locked_super+0x93/0xf0 [ 1742.796138][T11702] cleanup_mnt+0x471/0x4f0 [ 1742.801130][T11702] task_work_run+0x1d0/0x260 [ 1742.806376][T11702] exit_to_user_mode_loop+0xe6/0x110 [ 1742.812318][T11702] exit_to_user_mode_prepare+0xee/0x180 [ 1742.818459][T11702] syscall_exit_to_user_mode+0x16/0x40 [ 1742.824503][T11702] do_syscall_64+0x58/0xa0 [ 1742.828960][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1742.829488][T11702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.846489][T11702] [ 1742.846489][T11702] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1742.854042][T11702] ocfs2_start_trans+0x2a5/0x6f0 [ 1742.859569][T11702] ocfs2_xattr_set+0xe94/0x1390 [ 1742.864999][T11702] ocfs2_set_acl+0x4d4/0x580 [ 1742.870163][T11702] ocfs2_iop_set_acl+0x190/0x2b0 [ 1742.875674][T11702] posix_acl_xattr_set+0x388/0x3f0 [ 1742.881446][T11702] __vfs_setxattr+0x3d8/0x410 [ 1742.886705][T11702] __vfs_setxattr_noperm+0x126/0x5e0 [ 1742.892572][T11702] vfs_setxattr+0x167/0x2e0 [ 1742.897672][T11702] setxattr+0x2a3/0x330 [ 1742.902410][T11702] path_setxattr+0x147/0x290 [ 1742.907587][T11702] __x64_sys_setxattr+0xb7/0xd0 [ 1742.913027][T11702] do_syscall_64+0x4c/0xa0 [ 1742.918024][T11702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.924501][T11702] [ 1742.924501][T11702] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1742.935075][T11702] down_write+0x36/0x60 [ 1742.939781][T11702] ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 1742.946283][T11702] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 1742.953209][T11702] ocfs2_init_xattr_set_ctxt+0x314/0x7b0 [ 1742.959416][T11702] ocfs2_xattr_set+0xc71/0x1390 [ 1742.964910][T11702] ocfs2_set_acl+0x4d4/0x580 [ 1742.970039][T11702] ocfs2_iop_set_acl+0x190/0x2b0 [ 1742.975525][T11702] posix_acl_xattr_set+0x388/0x3f0 [ 1742.981203][T11702] __vfs_setxattr+0x3d8/0x410 [ 1742.986437][T11702] __vfs_setxattr_noperm+0x126/0x5e0 [ 1742.992288][T11702] vfs_setxattr+0x167/0x2e0 [ 1742.997346][T11702] setxattr+0x2a3/0x330 [ 1743.002052][T11702] path_setxattr+0x147/0x290 [ 1743.007182][T11702] __x64_sys_setxattr+0xb7/0xd0 [ 1743.012606][T11702] do_syscall_64+0x4c/0xa0 [ 1743.017557][T11702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.023991][T11702] [ 1743.023991][T11702] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1743.031843][T11702] __lock_acquire+0x2d18/0x7c40 [ 1743.037283][T11702] lock_acquire+0x1bb/0x4a0 [ 1743.042333][T11702] down_read+0x42/0x2d0 [ 1743.047027][T11702] ocfs2_init_acl+0x307/0x770 [ 1743.052239][T11702] ocfs2_mknod+0x18e0/0x2580 [ 1743.057363][T11702] ocfs2_mkdir+0x1b6/0x4b0 [ 1743.062337][T11702] vfs_mkdir+0x386/0x570 [ 1743.067113][T11702] do_mkdirat+0x1d8/0x440 [ 1743.071978][T11702] __x64_sys_mkdirat+0x85/0x90 [ 1743.077289][T11702] do_syscall_64+0x4c/0xa0 [ 1743.082264][T11702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.088704][T11702] [ 1743.088704][T11702] other info that might help us debug this: [ 1743.088704][T11702] [ 1743.098944][T11702] Chain exists of: [ 1743.098944][T11702] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 1743.098944][T11702] [ 1743.112878][T11702] Possible unsafe locking scenario: [ 1743.112878][T11702] [ 1743.120343][T11702] CPU0 CPU1 [ 1743.125716][T11702] ---- ---- [ 1743.131081][T11702] lock(&journal->j_trans_barrier); [ 1743.136369][T11702] lock(sb_internal#4); [ 1743.143150][T11702] lock(&journal->j_trans_barrier); [ 1743.151002][T11702] lock(&oi->ip_xattr_sem); [ 1743.155628][T11702] [ 1743.155628][T11702] *** DEADLOCK *** [ 1743.155628][T11702] [ 1743.163807][T11702] 8 locks held by syz.4.18255/11702: [ 1743.169104][T11702] #0: ffff888055072460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1743.178349][T11702] #1: ffff88804e03b488 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1743.189101][T11702] #2: ffff88804e163488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 1743.202847][T11702] #3: ffff88804e16ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 1743.216585][T11702] #4: ffff88804e165f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11e/0x2770 [ 1743.230526][T11702] #5: ffff888055072650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0x1273/0x2580 [ 1743.239869][T11702] #6: ffff88805815e4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 1743.250596][T11702] #7: ffff8880277e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 1743.260340][T11702] [ 1743.260340][T11702] stack backtrace: [ 1743.266264][T11702] CPU: 0 PID: 11702 Comm: syz.4.18255 Not tainted syzkaller #0 [ 1743.273826][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1743.283904][T11702] Call Trace: [ 1743.287206][T11702] [ 1743.290149][T11702] dump_stack_lvl+0x188/0x24e [ 1743.294860][T11702] ? load_image+0x410/0x410 [ 1743.299385][T11702] ? show_regs_print_info+0x12/0x12 [ 1743.304612][T11702] ? print_circular_bug+0x12b/0x1a0 [ 1743.309844][T11702] check_noncircular+0x296/0x330 [ 1743.314831][T11702] ? add_chain_block+0x9b0/0x9b0 [ 1743.319800][T11702] ? _find_first_zero_bit+0xd2/0x100 [ 1743.325140][T11702] ? add_lock_to_list+0x191/0x280 [ 1743.330318][T11702] __lock_acquire+0x2d18/0x7c40 [ 1743.335209][T11702] ? mutex_unlock+0x10/0x10 [ 1743.339757][T11702] ? verify_lock_unused+0x140/0x140 [ 1743.344990][T11702] ? verify_lock_unused+0x140/0x140 [ 1743.350224][T11702] ? __ocfs2_journal_access+0x65c/0x8b0 [ 1743.355818][T11702] lock_acquire+0x1bb/0x4a0 [ 1743.360374][T11702] ? ocfs2_init_acl+0x307/0x770 [ 1743.365284][T11702] ? __might_sleep+0xd0/0xd0 [ 1743.369985][T11702] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1743.375637][T11702] ? read_lock_is_recursive+0x10/0x10 [ 1743.381042][T11702] ? mutex_unlock+0x10/0x10 [ 1743.385571][T11702] ? do_raw_spin_lock+0x128/0x2f0 [ 1743.390626][T11702] down_read+0x42/0x2d0 [ 1743.394801][T11702] ? ocfs2_init_acl+0x307/0x770 [ 1743.399708][T11702] ocfs2_init_acl+0x307/0x770 [ 1743.404411][T11702] ? ocfs2_acl_chmod+0x330/0x330 [ 1743.409368][T11702] ? dquot_alloc_inode+0x889/0xa20 [ 1743.414525][T11702] ? ocfs2_journal_access+0x40/0x40 [ 1743.419741][T11702] ? ocfs2_block_signals+0x97/0xe0 [ 1743.424871][T11702] ? ocfs2_init_security_get+0x135/0x1a0 [ 1743.430536][T11702] ocfs2_mknod+0x18e0/0x2580 [ 1743.435144][T11702] ? ocfs2_mkdir+0x4b0/0x4b0 [ 1743.439771][T11702] ? __lock_acquire+0x1465/0x7c40 [ 1743.444813][T11702] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 1743.451010][T11702] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 1743.456745][T11702] ? __kmem_cache_free+0xb6/0x200 [ 1743.461783][T11702] ? __lock_acquire+0x7c40/0x7c40 [ 1743.466855][T11702] ? do_raw_spin_lock+0x128/0x2f0 [ 1743.471899][T11702] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 1743.477843][T11702] ? __lock_acquire+0x7c40/0x7c40 [ 1743.482894][T11702] ? __rwlock_init+0x140/0x140 [ 1743.487710][T11702] ? ocfs2_lookup+0x51c/0xae0 [ 1743.492400][T11702] ? do_raw_spin_unlock+0x11d/0x230 [ 1743.497609][T11702] ? put_pid+0xda/0x120 [ 1743.501781][T11702] ocfs2_mkdir+0x1b6/0x4b0 [ 1743.506215][T11702] ? make_kgid+0x650/0x650 [ 1743.510705][T11702] ? ocfs2_symlink+0x2810/0x2810 [ 1743.515765][T11702] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 1743.520715][T11702] ? ocfs2_getattr+0x360/0x360 [ 1743.525550][T11702] ? inode_permission+0xef/0x480 [ 1743.530508][T11702] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 1743.535626][T11702] ? security_inode_mkdir+0xb3/0x100 [ 1743.540975][T11702] vfs_mkdir+0x386/0x570 [ 1743.545244][T11702] do_mkdirat+0x1d8/0x440 [ 1743.549592][T11702] ? vfs_mkdir+0x570/0x570 [ 1743.554024][T11702] __x64_sys_mkdirat+0x85/0x90 [ 1743.558834][T11702] do_syscall_64+0x4c/0xa0 [ 1743.563303][T11702] ? clear_bhb_loop+0x60/0xb0 [ 1743.568036][T11702] ? clear_bhb_loop+0x60/0xb0 [ 1743.572749][T11702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.578665][T11702] RIP: 0033:0x7f95ed99cfc7 [ 1743.583107][T11702] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.602757][T11702] RSP: 002b:00007f95ee882e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1743.611208][T11702] RAX: ffffffffffffffda RBX: 00007f95ee882ee0 RCX: 00007f95ed99cfc7 [ 1743.619192][T11702] RDX: 00000000000001ff RSI: 00002000000017c0 RDI: 00000000ffffff9c [ 1743.627191][T11702] RBP: 0000200000000040 R08: 0000200000000040 R09: 0000000000000000 [ 1743.635205][T11702] R10: 0000200000000040 R11: 0000000000000246 R12: 00002000000017c0 [ 1743.643192][T11702] R13: 00007f95ee882ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1743.651189][T11702] [ 1743.660073][T16451] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1743.670301][T16451] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1743.683778][T16451] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1743.690703][T16451] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1743.699888][T16451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.715759][T16451] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input113 [ 1743.789612][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 1743.946076][T16451] usb 1-1: USB disconnect, device number 44 [ 1743.952072][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1743.963927][T16451] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1744.507734][T11728] Process accounting paused [ 1745.500146][ T648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1748.923193][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1751.661721][ T373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration