last executing test programs: 3.086890103s ago: executing program 1 (id=4370): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 2.926368074s ago: executing program 1 (id=4373): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44001, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @local, 0x3}, 0x1c) 2.832473206s ago: executing program 1 (id=4376): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0], 0x9, 0xc56, &(0x7f0000001bc0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.602074436s ago: executing program 4 (id=4379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000014000780080008000000008908000640000001250500010006000005050005000200000005000400000000000900020073797a310000000010000300686173683a6970"], 0x5c}}, 0x0) 2.4080634s ago: executing program 1 (id=4382): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRESOCT, @ANYBLOB='.'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) 2.364988206s ago: executing program 4 (id=4384): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) 2.144517245s ago: executing program 3 (id=4388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0x1, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.09583303s ago: executing program 4 (id=4389): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0, 0x1f}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 1.979380775s ago: executing program 4 (id=4392): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.977115646s ago: executing program 3 (id=4393): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="1c0000005e007f62516aebc7c4c1c98bf2d4ec6959d29e195410c0e1", 0x1c}], 0x1}, 0x4010) 1.853726322s ago: executing program 3 (id=4396): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0, @mcast1, @remote, 0x5, 0x5, 0xff, 0x0, 0x1, 0x879301b8}) 1.818838446s ago: executing program 1 (id=4397): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) 1.743700306s ago: executing program 4 (id=4398): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x180400d, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@gc_merge}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpointhdFsable\xbb\xb7\xc7\x98\xc0)\xc7\xde\x9c\xb5o5\xe6\xb3nArRQZ\xf9*\xa1\xe3\xee\x12\x93\xe9\x13E\x93\x8f\xe9\xd5`\xac\x00\x1a\xc9\xf4vY\xc86\xe3\xef\xaey\xf7\xa8\r\xb7K\x97P\x89A\xb5\xd4Ah\x90]\x1b\x1e\x12X\xc7\x96w+\xe9d\x02S\xed\x1fa\xado\xa3\xce\xabUUJ\tyS\xec\xe1\xe1\xb6]\xbf\xfb{\xc5\xe3\x10\xed\x84\x98\xe8C\x82\x88P\xa2\x905Yb\xd5;\x0f\\\xcb\xfd\a\x81\xf5\xce\xa8\xf5n\xc7\x03M,\xa4)\xbeCC\x9f&\xe9'}}, {@alloc_mode_def}, {@fsync_mode_posix}, {@nouser_xattr}, {@atgc}, {@noacl}, {@noquota}, {@background_gc_on}, {@jqfmt_vfsold}, {@io_bits={'io_bits', 0x3d, 0xa}}]}, 0xfd, 0x551d, &(0x7f00000079c0)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6qtrrDQNNlufz+YPPO+8+aZZ0IpPDMhAbiw5pPffy2FG+FKMb4eQr5fKrbcegwvhRBuhhCmjm2lYv7viUshhKshhBvD5CFMF2uGh768Pbi19ss7v333w+WZa199++Nkrhh4GrwcQujsxP39ToxZM8aHxXxt0MpjZ3VQxHigPRePd7I4v59u5Rn2a0franlcacb12c5ebxi327X6MDZb2/n8TjeesDdoHuXJ3/CwtpuPG+lWHlu9LI/Nw3jeg8P4v+2w1495GkW+T/L0od8/inE+PUjj9ew8ymO92y/mY96skR4M46CIxelCPWs38jq2TvFBP+XebXX3DpJButtrZd1krVJ9pVK9U67uZo20n66Wa53GndVkodkeLiv301pnvZllzXZaqWedxWShWa+Xq9Vk4W661ap1k2q1slJZKq8tFnu3kzfvf5C0G8nCML7e6u71W+1esp3tJvEdi8lyZeXVxeRWNXlvYzPZfHDv3sbm+x/d/fD+axtvv1Es+k9ZycLy0vJyubpUXq4uXqDr/6woeoTXD6dSmnQBAOfP8f5/Wv8PjMlp+v/Oo2L82P5/90EIZ9//B/3/SJyr/vei9/9ncP1wKvp/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAL66fZr9/Kd+bj+Fox/1wx9UIxLoUQpkIIfz7GdLh0Iud0kWf2f9bP/quG70shzzA8x+ViuxpCWC+2P54/608BAAAAnl3ffHrzi9itx5f5SRfEOMWbNlPXPx5RvrkQwuz8zyPKNjV8eXFEyfK/75lwMKJs+Q2suREli7fcZkaV7YlMnwhzx0IphqmxlgMAAIzFyU5gvF0IAAAA4/T5pAtgMkrh6FHm0bPg/Jv3/zwQvHJiBAAAAJxDpUkXAAAAAJy5vP/3+38AAADwbIu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFzv3cJg5EcQB+Nnhh/2nRau/byt6gjC0hxxwjCkgTFJADNaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzPy9yU3EAwF+SydRWxXGVOayIgge92Om0tvYmHpTFg3+CsGynde3UH+0ebCniXrzJnnsRPYoIynrr/9BzC73UWw9zqCAeR5JJZtJ20VnBJN39fODlfRNC3vclsOw3L7sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcm7izjJNr1ZHBfHbj+4vpH1dx7pMzd37q5mLYujOpN+Mrxc3Yn6zSUCAADA4ZGU9X0I4V66u5b1cS+v/9PynKzm//7ZWVzW84/W/WVf1v5Z++3X+y/OB+rNxskuen5zPDrxeCqd/2+W7fbcv57Rye98/u4lyR9I/MH2C5M0v5/Rt7duvdfNwyN1ZAsA/BfHy74Iyt+Hsn7YZGIAHBqdSuFd1v9Jr9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOow2Q5Pl3EUQljtLOLMnQfXN/bqb+7cXS3bmRs3dsLXi2tml0hDCOc3x6MTtc6m3a5cvXZxfTweXa4/eCWE0NTo7xTTv/jREieH0Mj92X/wVzvSaFsQFw+7Lfk8GUGDP5QAADiQ0qJldf29dHctOxathDD94eH6//VKHJas/+9/fOZ2daxq/T+sbYbtN9i69PngytVrb25eWr8wujD69K2Tw7eHp86ePn12kL8rGXhjAgAAwL5Np9PpfKdbtGr9H688vv5/rBKHJev/L74bflUdOFH/72mx6Nd0JgAAAIfb86/++Ue0x/Go2w1frm9tXR7OtvP9k7NtA6nu25GiVev/ZKXprAAAAIA6TLajh9b/z1XisOT6/zM/vvRz9ZpJCOFosf5/fOOz8bn6ptNqdfw5cdNzBAAAoFlHi1Zd/0/z7//j+ScPcQjhjddmcfFvAP+x/k+L+j95/5ufqmNVv/8/Vd8UWynuz+5H3vdD6PSbzggAAICD7KmiZcX+7+nu2ie/HPuw6/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9HQAA//9XJECI") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.727986408s ago: executing program 3 (id=4400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x801, 0x70bd29, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}, @IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.717634639s ago: executing program 1 (id=4401): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.551884491s ago: executing program 3 (id=4403): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x7}}, {@showassoc}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x92fb}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@session={'session', 0x3d, 0x56}}, {}]}, 0x1, 0x54e, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1.542719812s ago: executing program 0 (id=4404): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@authinfo={0x18, 0x84, 0x6, {0x5}}], 0x18, 0x20040000}], 0x1, 0x800) 1.424475517s ago: executing program 0 (id=4405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x44, 0x31, 0x10b, 0x0, 0x25dedbfc, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffe0f}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20000000) 1.303778403s ago: executing program 3 (id=4406): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) 1.283681425s ago: executing program 0 (id=4407): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000440)={0x24, @short}, 0x8) 1.176934549s ago: executing program 0 (id=4408): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3, 0x0, 0x0, 0xf}]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x28) 1.031573317s ago: executing program 0 (id=4409): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, 0x0}, 0x0) 970.449406ms ago: executing program 0 (id=4410): bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001008000000904000002bd22f00009202303001200000009058a32"], 0x0) 556.820609ms ago: executing program 4 (id=4412): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 309.58201ms ago: executing program 2 (id=4414): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x48}}, 0x0) 259.366637ms ago: executing program 2 (id=4415): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 160.45087ms ago: executing program 2 (id=4416): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) 135.426883ms ago: executing program 2 (id=4417): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180100001e00010026bd7000000000000601008008000100e0000001140003"], 0x118}], 0x1}, 0x0) 87.512719ms ago: executing program 2 (id=4418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x4}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=4419): syz_mount_image$sysv(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0xa1ccc0, &(0x7f0000000100)=ANY=[], 0x40, 0x9e9b, &(0x7f000000d000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) kernel console output (not intermixed with test programs): 1048613 res=0 errno=0 [ 214.607185][ T9914] XFS (loop2): Mounting V5 Filesystem [ 214.667815][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 214.744282][ T9950] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.955510][ T9914] XFS (loop2): Ending clean mount [ 214.977892][ T9914] XFS (loop2): Quotacheck needed: Please wait. [ 215.091725][ T9914] XFS (loop2): Quotacheck: Done. [ 215.251478][ T4328] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.262847][ T4194] XFS (loop2): Unmounting Filesystem [ 215.275517][ T9975] loop4: detected capacity change from 0 to 8 [ 215.431571][ T9975] SQUASHFS error: Unable to read inode 0xe3 [ 215.644618][ T9985] loop4: detected capacity change from 0 to 512 [ 215.661692][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 215.682179][ T4328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 215.692967][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 215.722086][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 215.728560][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.741273][ T4328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 215.798144][ T9985] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 215.840054][ T9985] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.852721][ T4328] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 215.905801][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.959361][ T4328] usb 2-1: config 0 descriptor?? [ 216.167540][T10004] netlink: 'syz.0.2563': attribute type 32 has an invalid length. [ 216.277335][ T9996] loop2: detected capacity change from 0 to 32768 [ 216.284252][ T4328] hdpvr 2-1:0.0: firmware version 0x1e dated [ 216.291689][T10006] loop3: detected capacity change from 0 to 4096 [ 216.338725][T10006] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 216.354193][ T9996] (syz.2.2550,9996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.395052][ T9996] (syz.2.2550,9996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.483770][ T9996] (syz.2.2550,9996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x260dde0a. Applying ECC. [ 216.511420][ T4328] hdpvr 2-1:0.0: device init failed [ 216.516720][ T4328] hdpvr: probe of 2-1:0.0 failed with error -12 [ 216.590272][ T4328] usb 2-1: USB disconnect, device number 12 [ 216.675456][ T9996] JBD2: Ignoring recovery information on journal [ 216.779526][ T9996] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 216.810835][ T9996] (syz.2.2550,9996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x260dde0a. Applying ECC. [ 216.849919][ T9996] (syz.2.2550,9996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0x21691dd7. Applying ECC. [ 216.878789][ T9996] (syz.2.2550,9996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0xf9f42755. Applying ECC. [ 216.921444][ T9996] (syz.2.2550,9996,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4d558a87, computed 0xa2f9d76d [ 216.961326][ T9996] (syz.2.2550,9996,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 216.999275][ T9996] (syz.2.2550,9996,1):ocfs2_read_quota_block:150 ERROR: status = -5 [ 217.017718][ T9996] (syz.2.2550,9996,1):ocfs2_load_local_quota_bitmaps:269 ERROR: status = -5 [ 217.037147][ T9996] (syz.2.2550,9996,1):ocfs2_local_read_info:758 ERROR: status = -5 [ 217.047406][ T9996] (syz.2.2550,9996,1):ocfs2_enable_quotas:940 ERROR: status = -5 [ 217.066284][ T9996] (syz.2.2550,9996,1):ocfs2_fill_super:1144 ERROR: status = -5 [ 217.110136][ T9996] ocfs2: Unmounting device (7,2) on (node local) [ 217.169969][T10017] loop4: detected capacity change from 0 to 32768 [ 217.186669][T10019] loop0: detected capacity change from 0 to 32768 [ 217.194171][T10024] loop1: detected capacity change from 0 to 1024 [ 217.211746][T10017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2568 (10017) [ 217.289225][T10019] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 217.289225][T10019] [ 217.323067][T10017] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 217.357133][T10019] ialloc: diAlloc returned -5! [ 217.372601][T10017] BTRFS info (device loop4): using free space tree [ 217.379172][T10017] BTRFS info (device loop4): has skinny extents [ 217.386944][ T144] hfsplus: b-tree write err: -5, ino 4 [ 217.671873][T10037] loop0: detected capacity change from 0 to 256 [ 217.726383][T10023] loop3: detected capacity change from 0 to 32768 [ 217.741594][T10017] BTRFS info (device loop4): enabling ssd optimizations [ 217.807190][T10023] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2571 (10023) [ 217.847063][T10023] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 217.874755][T10023] BTRFS info (device loop3): using free space tree [ 217.894297][T10037] FAT-fs (loop0): Directory bread(block 64) failed [ 217.921310][T10023] BTRFS info (device loop3): has skinny extents [ 217.930409][T10037] FAT-fs (loop0): Directory bread(block 65) failed [ 217.976010][T10037] FAT-fs (loop0): Directory bread(block 66) failed [ 218.000008][T10037] FAT-fs (loop0): Directory bread(block 67) failed [ 218.039271][T10037] FAT-fs (loop0): Directory bread(block 68) failed [ 218.067829][T10037] FAT-fs (loop0): Directory bread(block 69) failed [ 218.074613][T10037] FAT-fs (loop0): Directory bread(block 70) failed [ 218.095426][T10037] FAT-fs (loop0): Directory bread(block 71) failed [ 218.191583][T10037] FAT-fs (loop0): Directory bread(block 72) failed [ 218.245724][T10037] FAT-fs (loop0): Directory bread(block 73) failed [ 218.325576][T10023] BTRFS info (device loop3): enabling ssd optimizations [ 218.599295][T10023] BTRFS error (device loop3): balance: invalid convert metadata profile raid0 [ 218.967231][T10086] loop0: detected capacity change from 0 to 4096 [ 219.080616][T10086] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 219.600523][T10121] loop0: detected capacity change from 0 to 2048 [ 219.680257][T10121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.701640][ T6787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 219.951357][ T6787] usb 2-1: Using ep0 maxpacket: 16 [ 220.251805][ T6787] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.281372][ T6787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.289461][ T6787] usb 2-1: Product: syz [ 220.310725][ T6787] usb 2-1: Manufacturer: syz [ 220.325952][ T6787] usb 2-1: SerialNumber: syz [ 220.346829][ T6787] r8152-cfgselector 2-1: config 0 descriptor?? [ 220.501712][T10161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.509038][T10161] IPv6: NLM_F_CREATE should be set when creating new route [ 220.516399][T10161] IPv6: NLM_F_CREATE should be set when creating new route [ 220.607471][T10131] loop0: detected capacity change from 0 to 32768 [ 220.626551][T10163] loop4: detected capacity change from 0 to 64 [ 220.696372][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.741394][ T7256] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.749892][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.809208][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x260dde0a. Applying ECC. [ 220.829948][T10131] JBD2: Ignoring recovery information on journal [ 220.861319][ T6787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 220.869026][ T6787] r8152-cfgselector 2-1: bad CDC descriptors [ 220.896827][ T6787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 220.904496][ T6787] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 220.940250][T10157] loop3: detected capacity change from 0 to 32768 [ 220.954467][T10131] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 220.979988][T10157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2611 (10157) [ 220.999321][T10131] (syz.0.2599,10131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x260dde0a. Applying ECC. [ 221.022652][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0x21691dd7. Applying ECC. [ 221.063993][T10157] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 221.092999][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0xf9f42755. Applying ECC. [ 221.121540][T10157] BTRFS info (device loop3): using free space tree [ 221.133367][T10131] (syz.0.2599,10131,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4d558a87, computed 0xa2f9d76d [ 221.141343][ T7256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 221.155695][T10157] BTRFS info (device loop3): has skinny extents [ 221.159394][T10131] (syz.0.2599,10131,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 221.170975][T10131] (syz.0.2599,10131,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 221.179357][T10131] (syz.0.2599,10131,0):ocfs2_load_local_quota_bitmaps:269 ERROR: status = -5 [ 221.188529][T10131] (syz.0.2599,10131,0):ocfs2_local_read_info:758 ERROR: status = -5 [ 221.196781][T10131] (syz.0.2599,10131,0):ocfs2_enable_quotas:940 ERROR: status = -5 [ 221.206247][T10131] (syz.0.2599,10131,0):ocfs2_fill_super:1144 ERROR: status = -5 [ 221.222951][T10131] ocfs2: Unmounting device (7,0) on (node local) [ 221.243722][ T7256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 221.265502][ T7256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 221.276121][ T7256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 221.286686][ T7256] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 221.296819][ T7256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.310179][ T7256] usb 3-1: config 0 descriptor?? [ 221.335967][T10157] BTRFS info (device loop3): enabling ssd optimizations [ 221.401422][ T6793] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.571489][ T7256] hdpvr 3-1:0.0: firmware version 0x1e dated [ 221.667642][ T6793] usb 5-1: Using ep0 maxpacket: 8 [ 221.801375][ T7256] hdpvr 3-1:0.0: device init failed [ 221.806784][ T7256] hdpvr: probe of 3-1:0.0 failed with error -12 [ 221.835038][ T7256] usb 3-1: USB disconnect, device number 14 [ 221.891661][ T6793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.999467][ T6793] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 222.010496][ T6793] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 222.029537][ T6793] usb 5-1: config 4 has no interface number 0 [ 222.036307][T10194] loop1: detected capacity change from 0 to 32768 [ 222.066725][T10194] XFS: attr2 mount option is deprecated. [ 222.149618][T10194] XFS (loop1): Mounting V5 Filesystem [ 222.251598][ T6793] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 222.260728][ T6793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.269360][ T6793] usb 5-1: Product: syz [ 222.274018][ T6793] usb 5-1: Manufacturer: syz [ 222.278658][ T6793] usb 5-1: SerialNumber: syz [ 222.303232][T10194] XFS (loop1): Ending clean mount [ 222.318367][T10194] XFS (loop1): Quotacheck needed: Please wait. [ 222.445038][T10194] XFS (loop1): Quotacheck: Done. [ 222.465942][T10131] loop0: detected capacity change from 0 to 32768 [ 222.547375][T10131] JBD2: Ignoring recovery information on journal [ 222.586656][ T4188] XFS (loop1): Unmounting Filesystem [ 222.681715][ T6793] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 222.688169][ T6793] usb 5-1: No valid video chain found. [ 222.722221][T10131] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 222.755484][ T6793] usb 5-1: USB disconnect, device number 14 [ 222.907556][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 222.907913][T10217] loop2: detected capacity change from 0 to 32768 [ 223.000568][T10217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2626 (10217) [ 223.113177][T10217] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 223.149629][T10217] BTRFS info (device loop2): force clearing of disk cache [ 223.192237][T10228] binder: Bad value for 'max' [ 223.203890][T10217] BTRFS info (device loop2): setting nodatacow, compression disabled [ 223.265904][T10217] BTRFS info (device loop2): enabling auto defrag [ 223.305248][T10217] BTRFS info (device loop2): turning on sync discard [ 223.322029][T10217] BTRFS info (device loop2): using free space tree [ 223.328603][T10217] BTRFS info (device loop2): has skinny extents [ 223.391927][T10235] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 223.520048][T10230] loop4: detected capacity change from 0 to 8192 [ 223.635613][T10230] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 223.674142][T10217] BTRFS info (device loop2): enabling ssd optimizations [ 223.681329][ T7266] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.694976][T10230] REISERFS (device loop4): using ordered data mode [ 223.743390][T10230] reiserfs: using flush barriers [ 223.760619][T10230] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.800789][T10230] REISERFS (device loop4): checking transaction log (loop4) [ 223.849583][T10230] REISERFS (device loop4): Using r5 hash to sort names [ 223.864036][T10230] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 224.016688][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4176) [ 224.049171][T10274] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2646'. [ 224.058952][T10272] netlink: 'syz.1.2645': attribute type 5 has an invalid length. [ 224.111503][T10274] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.123777][T10272] device ip6erspan0 entered promiscuous mode [ 224.222056][ T7266] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 224.231163][ T7266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.259474][ T7266] usb 1-1: Product: syz [ 224.264095][ T7266] usb 1-1: Manufacturer: syz [ 224.268748][ T7266] usb 1-1: SerialNumber: syz [ 224.281433][T10278] netlink: 'syz.3.2648': attribute type 3 has an invalid length. [ 224.292544][ T7266] usb 1-1: config 0 descriptor?? [ 224.333550][ T7266] ch341 1-1:0.0: ch341-uart converter detected [ 224.551497][ T7266] usb 1-1: failed to receive control message: -71 [ 224.558079][ T7266] ch341-uart: probe of ttyUSB0 failed with error -71 [ 224.600896][ T7266] usb 1-1: USB disconnect, device number 13 [ 224.643922][ T7266] ch341 1-1:0.0: device disconnected [ 224.945693][T10309] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2659'. [ 225.335965][T10330] loop3: detected capacity change from 0 to 128 [ 225.441602][T10330] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 225.471377][ T1106] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.506335][T10295] loop2: detected capacity change from 0 to 32768 [ 225.577629][T10295] XFS: attr2 mount option is deprecated. [ 225.711418][ T1106] usb 5-1: Using ep0 maxpacket: 16 [ 225.757774][T10295] XFS (loop2): Mounting V5 Filesystem [ 225.820070][T10331] loop0: detected capacity change from 0 to 32768 [ 225.881532][T10331] find_entry called with index = 0 [ 225.927771][T10295] XFS (loop2): Ending clean mount [ 225.934259][T10331] find_entry called with index >= next_index [ 225.949713][T10295] XFS (loop2): Quotacheck needed: Please wait. [ 225.996735][ T1106] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 226.014975][T10295] XFS (loop2): Quotacheck: Done. [ 226.051376][ T1106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.080633][ T1106] usb 5-1: Product: syz [ 226.095080][T10353] loop1: detected capacity change from 0 to 4096 [ 226.101026][ T1106] usb 5-1: Manufacturer: syz [ 226.106574][ T1106] usb 5-1: SerialNumber: syz [ 226.122978][ T1106] r8152-cfgselector 5-1: config 0 descriptor?? [ 226.156261][ T4194] XFS (loop2): Unmounting Filesystem [ 226.175883][T10353] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 226.294181][T10353] ntfs3: loop1: failed to convert "c46c" to macceltic [ 226.501153][T10364] netlink: 'syz.0.2680': attribute type 5 has an invalid length. [ 226.542663][T10364] device ip6erspan0 entered promiscuous mode [ 226.550211][T10365] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 226.591438][ T1106] r8152-cfgselector 5-1: Unknown version 0x0000 [ 226.597844][ T1106] r8152-cfgselector 5-1: bad CDC descriptors [ 226.635022][T10365] team0: Device veth1_vlan failed to register rx_handler [ 226.661952][ T1106] r8152-cfgselector 5-1: Unknown version 0x0000 [ 226.687962][ T1106] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 227.099047][T10391] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2699'. [ 227.430573][T10403] loop3: detected capacity change from 0 to 1764 [ 227.508187][T10403] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.532589][T10418] loop2: detected capacity change from 0 to 512 [ 227.593765][T10418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.624036][T10423] loop1: detected capacity change from 0 to 128 [ 227.711127][T10418] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2713: inode has both inline data and extents flags [ 227.738852][T10418] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2713: couldn't read orphan inode 15 (err -117) [ 227.761302][T10423] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.807761][T10418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.827637][T10423] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.875389][T10423] EXT4-fs warning (device loop1): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 227.920434][T10423] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 228.161588][T10452] xt_TCPMSS: Only works on TCP SYN packets [ 228.292036][T10461] netlink: 'syz.1.2732': attribute type 30 has an invalid length. [ 228.422819][T10469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2736'. [ 228.432282][T10469] unsupported nlmsg_type 40 [ 228.459182][T10436] loop4: detected capacity change from 0 to 32768 [ 228.476000][T10470] loop2: detected capacity change from 0 to 256 [ 228.541344][ T7266] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 228.680892][T10436] XFS (loop4): Mounting V5 Filesystem [ 228.801474][ T7266] usb 4-1: Using ep0 maxpacket: 32 [ 228.921476][ T7266] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 228.929631][ T7266] usb 4-1: config 0 has no interface number 0 [ 228.978485][T10436] XFS (loop4): Ending clean mount [ 228.999628][T10436] XFS (loop4): Quotacheck needed: Please wait. [ 229.133979][ T7266] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 229.189197][ T7266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.199117][T10436] XFS (loop4): Quotacheck: Done. [ 229.221876][ T7266] usb 4-1: Product: syz [ 229.231508][ T7266] usb 4-1: Manufacturer: syz [ 229.236204][ T7266] usb 4-1: SerialNumber: syz [ 229.262769][ T7266] usb 4-1: config 0 descriptor?? [ 229.303692][ T7266] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 229.350636][ T7266] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 229.371829][ T4190] XFS (loop4): Unmounting Filesystem [ 229.426531][T10502] loop2: detected capacity change from 0 to 4096 [ 229.521522][ T7266] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 229.528981][ T7266] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 229.539245][T10510] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.558206][T10502] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 229.594991][T10513] 9pnet: Could not find request transport: 0xffffffffffffffff [ 229.748959][T10502] ntfs3: loop2: failed to convert "c46c" to macceltic [ 229.770535][ T7266] usb 4-1: USB disconnect, device number 17 [ 230.232490][T10542] loop4: detected capacity change from 0 to 128 [ 230.253237][T10543] loop2: detected capacity change from 0 to 256 [ 230.444710][T10542] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.504854][T10560] loop1: detected capacity change from 0 to 16 [ 230.511762][T10542] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.539683][T10551] loop0: detected capacity change from 0 to 4096 [ 230.547983][T10542] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 230.559656][T10542] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 230.647922][T10560] erofs: (device loop1): mounted with root inode @ nid 36. [ 230.739487][T10564] netlink: 'syz.2.2775': attribute type 30 has an invalid length. [ 230.923064][T10559] loop3: detected capacity change from 0 to 32768 [ 231.018568][T10559] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 231.098733][T10559] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.209476][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 231.218161][T10583] sctp: [Deprecated]: syz.4.2782 (pid 10583) Use of int in maxseg socket option. [ 231.218161][T10583] Use struct sctp_assoc_value instead [ 231.246661][T10585] loop1: detected capacity change from 0 to 256 [ 231.417074][T10595] netlink: 'syz.4.2790': attribute type 30 has an invalid length. [ 231.571340][ T7266] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.766426][T10611] loop4: detected capacity change from 0 to 64 [ 231.789913][T10602] loop1: detected capacity change from 0 to 4096 [ 231.818361][T10611] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 231.859781][T10611] MINIX-fs: bad superblock or unable to read bitmaps [ 231.900272][T10617] sctp: [Deprecated]: syz.3.2799 (pid 10617) Use of int in maxseg socket option. [ 231.900272][T10617] Use struct sctp_assoc_value instead [ 232.091491][ T7266] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 232.111685][ T7266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.140304][ T7266] usb 3-1: Product: syz [ 232.170779][ T7266] usb 3-1: Manufacturer: syz [ 232.178915][T10628] loop4: detected capacity change from 0 to 256 [ 232.182305][ T7266] usb 3-1: SerialNumber: syz [ 232.222515][T10631] netlink: get zone limit has 8 unknown bytes [ 232.227937][ T7266] usb 3-1: config 0 descriptor?? [ 232.294259][ T7266] go7007: probe of 3-1:0.0 failed with error -12 [ 232.513914][ T6782] usb 3-1: USB disconnect, device number 15 [ 232.883816][T10667] Cannot find del_set index 4 as target [ 232.916059][T10658] loop3: detected capacity change from 0 to 4096 [ 233.308647][T10683] loop4: detected capacity change from 0 to 2048 [ 233.406835][ T4174] Alternate GPT is invalid, using primary GPT. [ 233.427118][ T4174] loop4: p1 p2 p3 [ 233.540391][T10683] Alternate GPT is invalid, using primary GPT. [ 233.549061][T10683] loop4: p1 p2 p3 [ 233.639618][T10661] loop1: detected capacity change from 0 to 32768 [ 233.655474][T10690] loop3: detected capacity change from 0 to 8192 [ 233.763298][T10690] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 233.790461][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 233.802969][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 233.816062][ T7927] udevd[7927]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 233.847146][T10690] REISERFS (device loop3): using ordered data mode [ 233.871029][T10661] XFS (loop1): Mounting V5 Filesystem [ 233.891935][T10690] reiserfs: using flush barriers [ 233.926114][T10690] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.940400][ T7927] udevd[7927]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 233.953256][T10690] REISERFS (device loop3): checking transaction log (loop3) [ 233.960465][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 233.991932][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 234.149333][T10661] XFS (loop1): Ending clean mount [ 234.161744][T10661] XFS (loop1): Quotacheck needed: Please wait. [ 234.282797][T10714] loop2: detected capacity change from 0 to 4096 [ 234.293415][T10661] XFS (loop1): Quotacheck: Done. [ 234.307817][T10690] REISERFS (device loop3): Using tea hash to sort names [ 234.326739][T10690] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 234.431785][T10725] delete_channel: no stack [ 234.464524][ T4188] XFS (loop1): Unmounting Filesystem [ 235.002778][T10748] loop3: detected capacity change from 0 to 16 [ 235.051925][T10748] erofs: (device loop3): mounted with root inode @ nid 36. [ 235.402769][T10756] loop0: detected capacity change from 0 to 8192 [ 235.514496][T10756] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 235.612953][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.621320][T10756] REISERFS (device loop0): using ordered data mode [ 235.628291][T10756] reiserfs: using flush barriers [ 235.635390][T10756] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.696401][T10773] bond0: (slave rose0): Enslaving as an active interface with an up link [ 235.742456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 235.811707][T10756] REISERFS (device loop0): checking transaction log (loop0) [ 236.030830][T10789] loop1: detected capacity change from 0 to 16 [ 236.178349][T10789] erofs: (device loop1): mounted with root inode @ nid 36. [ 236.222779][T10756] REISERFS (device loop0): Using tea hash to sort names [ 236.244844][T10759] loop4: detected capacity change from 0 to 32768 [ 236.261037][T10756] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 236.306271][T10759] (syz.4.2864,10759,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.338474][T10751] loop2: detected capacity change from 0 to 32768 [ 236.378078][T10759] (syz.4.2864,10759,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.534309][T10751] XFS (loop2): Mounting V5 Filesystem [ 236.571449][ T6793] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 236.694820][T10759] JBD2: Ignoring recovery information on journal [ 236.860678][T10759] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 236.920887][T10824] netlink: 'syz.1.2882': attribute type 3 has an invalid length. [ 236.920930][T10751] XFS (loop2): Ending clean mount [ 236.954625][T10751] XFS (loop2): Quotacheck needed: Please wait. [ 237.086137][T10751] XFS (loop2): Quotacheck: Done. [ 237.110636][T10830] loop1: detected capacity change from 0 to 164 [ 237.182183][ T6793] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 237.201269][ T6793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.216421][ T4194] XFS (loop2): Unmounting Filesystem [ 237.223497][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 237.254940][ T6793] usb 4-1: Product: syz [ 237.259169][ T6793] usb 4-1: Manufacturer: syz [ 237.324984][T10839] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2889'. [ 237.339390][ T6793] usb 4-1: SerialNumber: syz [ 237.390272][ T6793] usb 4-1: config 0 descriptor?? [ 237.465482][ T6793] go7007: probe of 4-1:0.0 failed with error -12 [ 237.589040][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2892'. [ 237.732296][ T6787] usb 4-1: USB disconnect, device number 18 [ 238.474620][T10886] loop3: detected capacity change from 0 to 4096 [ 238.576909][T10886] EXT4-fs (loop3): inline encryption not supported [ 238.605055][T10886] EXT4-fs (loop3): Test dummy encryption mode enabled [ 238.642854][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2909'. [ 238.738595][T10886] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,usrquota,test_dummy_encryption=v1,data_err=ignore,,errors=continue. Quota mode: writeback. [ 238.831002][T10866] loop0: detected capacity change from 0 to 32768 [ 238.916967][T10866] (syz.0.2897,10866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.950682][T10866] (syz.0.2897,10866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.042968][T10866] JBD2: Ignoring recovery information on journal [ 239.167889][T10866] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 239.427443][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 240.164732][T10982] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.520921][T10960] loop1: detected capacity change from 0 to 32768 [ 240.566414][T10967] loop2: detected capacity change from 0 to 32768 [ 240.627366][T10975] loop3: detected capacity change from 0 to 32768 [ 240.648502][T10960] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 240.677492][T10994] loop0: detected capacity change from 0 to 256 [ 240.685757][T10960] BTRFS info (device loop1): using free space tree [ 240.692819][T10960] BTRFS info (device loop1): has skinny extents [ 240.704989][T10975] (syz.3.2939,10975,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.719230][T10975] (syz.3.2939,10975,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.732974][T10967] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 240.752127][T10994] exfat: Deprecated parameter 'utf8' [ 240.759127][T10994] exfat: Deprecated parameter 'namecase' [ 240.766783][T10967] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 240.819885][T10994] exfat: Deprecated parameter 'namecase' [ 240.831511][T10994] exfat: Deprecated parameter 'utf8' [ 240.913142][T10975] JBD2: Ignoring recovery information on journal [ 240.966674][T10994] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 241.007797][T10960] BTRFS info (device loop1): enabling ssd optimizations [ 241.050007][T10975] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 241.075103][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 241.292281][T10986] loop4: detected capacity change from 0 to 32768 [ 241.598514][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2957'. [ 241.617920][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2957'. [ 241.761581][T11036] loop0: detected capacity change from 0 to 256 [ 241.820884][T10986] XFS (loop4): Mounting V5 Filesystem [ 241.838424][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 241.986331][T10986] XFS (loop4): Ending clean mount [ 242.082042][ T4190] XFS (loop4): Unmounting Filesystem [ 242.164026][T11055] loop2: detected capacity change from 0 to 1024 [ 242.199610][T11059] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 242.227150][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 242.249780][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 242.262842][T11061] device bridge_slave_1 left promiscuous mode [ 242.271332][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.306319][T11063] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.323311][T11061] device bridge_slave_0 left promiscuous mode [ 242.351173][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.377447][T11055] hfsplus: invalid length 256 has been corrected to 255 [ 242.556719][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 242.607552][ T26] audit: type=1400 audit(1768606308.737:12): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11066 comm="syz.2.2972" [ 242.627846][T11059] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 242.664750][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 243.198775][T11102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2989'. [ 243.240849][T11102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2989'. [ 243.403065][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. [ 243.450449][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. [ 243.687070][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3008'. [ 243.747128][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3008'. [ 243.797073][T11141] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3008'. [ 243.851620][T11143] netlink: 'syz.3.3010': attribute type 3 has an invalid length. [ 244.420166][T11133] loop4: detected capacity change from 0 to 32768 [ 244.447336][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 244.478909][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 244.497677][T11177] device bridge_slave_1 left promiscuous mode [ 244.530570][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.539919][T11133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3003 (11133) [ 244.594608][T11177] device bridge_slave_0 left promiscuous mode [ 244.601013][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.638030][T11133] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 244.681332][T11133] BTRFS info (device loop4): using free space tree [ 244.687905][T11133] BTRFS info (device loop4): has skinny extents [ 244.966972][T11133] BTRFS info (device loop4): enabling ssd optimizations [ 245.428777][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4176) [ 245.565608][T11247] loop2: detected capacity change from 0 to 256 [ 245.641695][T11215] loop3: detected capacity change from 0 to 32768 [ 245.678737][T11248] loop0: detected capacity change from 0 to 1024 [ 245.775751][T11215] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 245.821444][T11215] BTRFS info (device loop3): using free space tree [ 245.844732][T11248] EXT4-fs error (device loop0): ext4_fill_super:4841: inode #2: comm syz.0.3050: iget: checksum invalid [ 245.848641][T11215] BTRFS info (device loop3): has skinny extents [ 245.869518][T11248] EXT4-fs (loop0): get root inode failed [ 245.891462][T11248] EXT4-fs (loop0): mount failed [ 246.302797][T11215] BTRFS info (device loop3): enabling ssd optimizations [ 246.586833][T11301] loop2: detected capacity change from 0 to 4096 [ 246.712750][T11301] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 246.971372][ T7265] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.203780][T11330] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 247.381438][ T7265] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.421527][ T7265] usb 5-1: not running at top speed; connect to a high speed hub [ 247.452854][T11344] device bridge_slave_1 left promiscuous mode [ 247.471820][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.484904][T11344] device bridge_slave_0 left promiscuous mode [ 247.509042][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.528140][ T7265] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 247.594296][T11342] loop0: detected capacity change from 0 to 4096 [ 247.701554][ T7265] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 247.714341][T11342] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 247.721490][ T7265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.729566][ T7265] usb 5-1: Product: syz [ 247.754682][ T7265] usb 5-1: Manufacturer: syz [ 247.759355][ T7265] usb 5-1: SerialNumber: syz [ 248.080678][ T7265] vmk80xx 5-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 248.099416][T11373] loop1: detected capacity change from 0 to 1024 [ 248.141477][ T7265] usb 5-1: USB disconnect, device number 16 [ 248.249062][T11374] loop3: detected capacity change from 0 to 4096 [ 248.302440][T11374] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.341527][T11373] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.3098: iget: checksum invalid [ 248.355913][T11379] program syz.0.3102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.369911][T11373] EXT4-fs (loop1): get root inode failed [ 248.387014][T11373] EXT4-fs (loop1): mount failed [ 248.446460][T11359] loop2: detected capacity change from 0 to 32768 [ 248.469125][T11374] ntfs: volume version 3.1. [ 248.521409][T11359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3096 (11359) [ 248.569151][T11359] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 248.599071][T11359] BTRFS info (device loop2): using free space tree [ 248.611365][T11359] BTRFS info (device loop2): has skinny extents [ 248.700650][T11391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.805686][T11400] loop4: detected capacity change from 0 to 64 [ 248.949445][T11359] BTRFS info (device loop2): enabling ssd optimizations [ 248.992066][T11410] loop1: detected capacity change from 0 to 2048 [ 249.106946][T11410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.124524][T11423] loop3: detected capacity change from 0 to 512 [ 249.388293][T11423] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 249.875673][T11453] program syz.2.3118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.050056][T11462] __nla_validate_parse: 6 callbacks suppressed [ 250.050075][T11462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3123'. [ 250.523063][T11494] loop1: detected capacity change from 0 to 256 [ 250.681494][T11494] FAT-fs (loop1): Directory bread(block 64) failed [ 250.688097][T11494] FAT-fs (loop1): Directory bread(block 65) failed [ 250.731390][T11494] FAT-fs (loop1): Directory bread(block 66) failed [ 250.738170][T11494] FAT-fs (loop1): Directory bread(block 67) failed [ 250.801485][T11494] FAT-fs (loop1): Directory bread(block 68) failed [ 250.808085][T11494] FAT-fs (loop1): Directory bread(block 69) failed [ 250.867557][T11515] loop0: detected capacity change from 0 to 64 [ 250.874131][T11494] FAT-fs (loop1): Directory bread(block 70) failed [ 250.880707][T11494] FAT-fs (loop1): Directory bread(block 71) failed [ 250.961451][T11494] FAT-fs (loop1): Directory bread(block 72) failed [ 250.968152][T11494] FAT-fs (loop1): Directory bread(block 73) failed [ 252.105250][T11597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.214829][T11604] loop1: detected capacity change from 0 to 256 [ 252.329045][T11604] exfat: Deprecated parameter 'namecase' [ 252.364285][T11604] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 252.476792][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.503027][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.521078][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.832278][T11627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.031437][T11637] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 253.991088][T11639] loop1: detected capacity change from 0 to 32768 [ 253.997862][T11683] netlink: 3620 bytes leftover after parsing attributes in process `syz.0.3232'. [ 254.050210][T11683] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3232'. [ 254.079988][T11683] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3232'. [ 254.110736][T11639] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 254.110736][T11639] [ 254.176325][T11639] ERROR: (device loop1): remounting filesystem as read-only [ 254.196103][T11684] loop2: detected capacity change from 0 to 8192 [ 254.228004][T11639] ialloc: diAlloc returned -5! [ 254.367459][T11684] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 254.421897][T11684] REISERFS (device loop2): using ordered data mode [ 254.428464][T11684] reiserfs: using flush barriers [ 254.450043][T11684] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.535026][T11684] REISERFS (device loop2): checking transaction log (loop2) [ 254.555280][T11684] REISERFS (device loop2): Using r5 hash to sort names [ 254.612277][T11684] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 255.033520][T11732] loop3: detected capacity change from 0 to 16 [ 255.170266][T11732] erofs: (device loop3): mounted with root inode @ nid 36. [ 255.368255][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3267'. [ 255.613468][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.619932][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.633493][T11773] xt_nat: multiple ranges no longer supported [ 255.909202][T11791] netlink: 3620 bytes leftover after parsing attributes in process `syz.1.3286'. [ 255.959140][T11791] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3286'. [ 255.989522][T11791] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3286'. [ 256.427122][T11779] loop2: detected capacity change from 0 to 32768 [ 256.481419][ T6782] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 256.674417][T11779] XFS (loop2): Mounting V5 Filesystem [ 256.780560][T11801] loop1: detected capacity change from 0 to 32768 [ 256.787332][ T6782] usb 1-1: Using ep0 maxpacket: 32 [ 256.869753][T11777] loop3: detected capacity change from 0 to 40427 [ 256.886629][T11777] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 256.895017][T11777] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.907414][T11801] JBD2: Ignoring recovery information on journal [ 256.921020][T11777] F2FS-fs (loop3): invalid crc value [ 256.926757][T11779] XFS (loop2): Ending clean mount [ 256.941908][T11779] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 256.958083][T11779] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 256.969882][T11779] XFS (loop2): Unmount and run xfs_repair [ 256.976060][T11779] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 256.983702][T11779] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 256.989095][T11777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.992613][T11779] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 256.992675][T11779] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 257.017187][T11779] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 257.027487][T11779] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 257.036730][T11779] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.045868][T11779] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.055276][ T6782] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 257.064897][T11779] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.073877][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 257.082311][T11779] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 257.093719][ T6782] usb 1-1: Product: syz [ 257.099878][ T6782] usb 1-1: config 0 descriptor?? [ 257.105202][T11779] XFS (loop2): Failed to initialize disk quotas. [ 257.176386][T11801] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.248536][T11777] F2FS-fs (loop3): recover fsync data on readonly fs [ 257.255650][T11801] (syz.1.3291,11801,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 257.268688][T11777] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 257.279322][T11801] (syz.1.3291,11801,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 7380380968984735596 failed -12 [ 257.279983][T11777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.298701][T11801] (syz.1.3291,11801,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 257.307629][T11801] (syz.1.3291,11801,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 257.319970][ T4194] XFS (loop2): Unmounting Filesystem [ 257.351864][T11801] (syz.1.3291,11801,0):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 257.363750][T11801] (syz.1.3291,11801,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 257.392866][ T6782] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 257.431636][T11777] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 257.440687][T11777] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 257.476334][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 257.650056][ T7266] usb 1-1: USB disconnect, device number 14 [ 258.014163][T11830] netlink: 'syz.1.3302': attribute type 4 has an invalid length. [ 258.039830][T11830] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3302'. [ 258.370256][T11851] cgroup: name respecified [ 258.779525][T11880] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.020640][T11898] loop1: detected capacity change from 0 to 512 [ 259.091629][ T7266] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.157443][T11904] loop3: detected capacity change from 0 to 512 [ 259.178074][T11904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.231403][ T21] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 259.271778][T11898] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 259.285097][T11904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3335: bg 0: block 384: padding at end of block bitmap is not set [ 259.311819][T11898] ext4 filesystem being mounted at /677/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.323864][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.330438][T11904] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 259.415338][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.430997][T11904] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.3335: attempt to clear invalid blocks 983260 len 1 [ 259.456028][T11898] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 259.484891][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.512388][T11904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.3335: Invalid inode table block 0 in block_group 0 [ 259.566189][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.592560][T11904] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 259.627115][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.635936][ T7266] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 259.646521][ T21] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 259.661013][ T21] usb 3-1: config 0 has no interface number 0 [ 259.669373][ T7266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.677853][ T21] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 259.689497][ T7266] usb 5-1: Product: syz [ 259.694096][ T7266] usb 5-1: Manufacturer: syz [ 259.699442][ T7266] usb 5-1: SerialNumber: syz [ 259.712654][T11904] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 259.721705][ T21] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 259.744451][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.751138][T11904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.3335: Invalid inode table block 0 in block_group 0 [ 259.759739][ T21] usb 3-1: config 0 interface 255 has no altsetting 0 [ 259.791473][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.795607][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.807402][ T7266] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.817584][T11904] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 259.826307][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.838149][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.872115][ T21] usb 3-1: config 0 descriptor?? [ 259.896805][T11904] EXT4-fs error (device loop3): ext4_truncate:4279: inode #11: comm syz.3.3335: mark_inode_dirty error [ 259.912957][ T21] cp210x 3-1:0.255: cp210x converter detected [ 259.932684][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.939282][T11904] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 259.968260][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 259.979329][T11904] EXT4-fs (loop3): 1 truncate cleaned up [ 259.991489][T11904] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: writeback. [ 260.039345][T11904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.3335: Invalid inode table block 0 in block_group 0 [ 260.049826][T11924] loop1: detected capacity change from 0 to 1764 [ 260.062156][T11904] EXT4-fs (loop3): Remounting filesystem read-only [ 260.095950][T11926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.137409][T11924] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 260.166401][T11924] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.351640][ T21] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 260.371046][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 260.414185][ T21] usb 3-1: USB disconnect, device number 16 [ 260.451616][ T7265] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.462859][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.471366][ T6782] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 260.487434][ T21] cp210x 3-1:0.255: device disconnected [ 260.759807][T11950] loop1: detected capacity change from 0 to 8192 [ 260.826081][T11950] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 260.838281][T11950] REISERFS (device loop1): using ordered data mode [ 260.846790][T11950] reiserfs: using flush barriers [ 260.857863][ T21] usb 5-1: USB disconnect, device number 17 [ 260.870469][T11950] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.888143][T11950] REISERFS (device loop1): checking transaction log (loop1) [ 260.903240][ T6782] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 260.912925][T11950] REISERFS (device loop1): Using r5 hash to sort names [ 260.920113][T11950] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 260.941971][ T6782] usb 4-1: config 0 has no interface number 0 [ 261.145876][T11965] loop2: detected capacity change from 0 to 4096 [ 261.163435][ T6782] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 261.173091][ T6782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.181125][ T6782] usb 4-1: Product: syz [ 261.185532][ T6782] usb 4-1: Manufacturer: syz [ 261.190167][ T6782] usb 4-1: SerialNumber: syz [ 261.212554][ T6782] usb 4-1: config 0 descriptor?? [ 261.261326][ T7671] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.272732][ T6782] ftdi_sio 4-1:0.117: FTDI USB Serial Device converter detected [ 261.293854][ T6782] usb 4-1: Detected FT232H [ 261.533932][ T7265] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 261.560284][ T7265] ath9k_htc: Failed to initialize the device [ 261.589101][ T21] usb 5-1: ath9k_htc: USB layer deinitialized [ 261.661448][ T7671] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 261.674465][ T7671] usb 1-1: config 0 has no interface number 0 [ 261.703822][ T6782] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 261.731092][ T7671] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 261.745970][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.759010][ T6782] ftdi_sio 4-1:0.117: GPIO initialisation failed: -71 [ 261.762009][ T7671] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 261.784454][ T6782] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 261.799998][ T7671] usb 1-1: config 0 interface 255 has no altsetting 0 [ 261.824645][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.833774][ T6782] usb 4-1: USB disconnect, device number 19 [ 261.834015][ T7671] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.870056][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.879562][ T7671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.896984][ T6782] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 261.910143][ T7671] usb 1-1: config 0 descriptor?? [ 261.919299][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.930267][ T6782] ftdi_sio 4-1:0.117: device disconnected [ 261.956313][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.978081][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 261.988905][ T7671] cp210x 1-1:0.255: cp210x converter detected [ 262.020945][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 262.032315][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 262.062279][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 262.082484][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 262.444710][ T7671] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 262.478467][ T7671] usb 1-1: cp210x converter now attached to ttyUSB0 [ 262.513021][ T7671] usb 1-1: USB disconnect, device number 15 [ 262.513659][T12025] loop1: detected capacity change from 0 to 64 [ 262.557228][ T7671] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.576117][ T7671] cp210x 1-1:0.255: device disconnected [ 262.588843][T12030] loop3: detected capacity change from 0 to 47 [ 262.796941][T12043] netlink: 'syz.2.3401': attribute type 4 has an invalid length. [ 262.835963][T12043] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 262.900861][T12045] loop3: detected capacity change from 0 to 164 [ 263.030615][ T6782] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 263.441575][ T6782] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 263.470277][ T6782] usb 2-1: config 0 has no interface number 0 [ 263.662534][ T6782] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 263.679654][ T6782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.700313][ T6782] usb 2-1: Product: syz [ 263.748725][ T6782] usb 2-1: Manufacturer: syz [ 263.771359][ T4328] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 263.780294][ T6782] usb 2-1: SerialNumber: syz [ 263.834110][ T6782] usb 2-1: config 0 descriptor?? [ 263.892454][ T6782] ftdi_sio 2-1:0.117: FTDI USB Serial Device converter detected [ 263.900973][ T6782] usb 2-1: Detected FT232H [ 264.183767][ T4328] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 264.213952][ T4328] usb 4-1: config 0 has no interface number 0 [ 264.220109][ T4328] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 264.251291][ T4328] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.271298][ T4328] usb 4-1: config 0 interface 255 has no altsetting 0 [ 264.288418][ T4328] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.308664][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.331423][ T6782] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 264.359681][ T4328] usb 4-1: config 0 descriptor?? [ 264.369468][ T6782] ftdi_sio 2-1:0.117: GPIO initialisation failed: -71 [ 264.387386][ T6782] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 264.408565][ T6782] usb 2-1: USB disconnect, device number 14 [ 264.416589][ T4328] cp210x 4-1:0.255: cp210x converter detected [ 264.475141][ T6782] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 264.495269][ T6782] ftdi_sio 2-1:0.117: device disconnected [ 264.664324][T12083] loop2: detected capacity change from 0 to 40427 [ 264.694753][T12083] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 264.738760][T12083] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 264.768691][T12083] F2FS-fs (loop2): invalid crc value [ 264.790369][T12083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 264.841371][ T4328] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 264.881074][ T4328] usb 4-1: cp210x converter now attached to ttyUSB0 [ 264.925728][ T4328] usb 4-1: USB disconnect, device number 20 [ 264.933702][T12083] F2FS-fs (loop2): recover fsync data on readonly fs [ 264.945402][ T4328] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.953748][T12083] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 264.962890][T12083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.975487][ T4328] cp210x 4-1:0.255: device disconnected [ 265.049548][T12083] F2FS-fs (loop2): Corrupted max_depth of 3: 255 [ 265.070637][T12083] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 265.444158][T12128] netlink: 'syz.3.3445': attribute type 13 has an invalid length. [ 265.671720][T12140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.821317][ T6798] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.071617][ T6798] usb 1-1: Using ep0 maxpacket: 32 [ 266.211549][ T6798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.346776][T12172] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 266.391520][ T6798] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 266.400675][ T6798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.410646][T12166] loop2: detected capacity change from 0 to 4096 [ 266.427462][ T6798] usb 1-1: Product: syz [ 266.437588][ T6798] usb 1-1: Manufacturer: syz [ 266.442300][ T6798] usb 1-1: SerialNumber: syz [ 266.468912][ T6798] usb 1-1: config 0 descriptor?? [ 266.476393][T12166] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 266.522623][ T6798] usb 1-1: bad CDC descriptors [ 266.537949][ T6798] usb 1-1: unsupported MDLM descriptors [ 266.593852][T12166] ntfs3: loop2: failed to convert "c46c" to maciceland [ 266.691533][ T7266] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.727907][ T6798] usb 1-1: USB disconnect, device number 16 [ 266.931326][ T7266] usb 2-1: Using ep0 maxpacket: 16 [ 267.042566][T12199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.052356][ T7266] usb 2-1: config 0 has no interfaces? [ 267.151528][ T7266] usb 2-1: config 0 has no interfaces? [ 267.231401][ T7266] usb 2-1: config 0 has no interfaces? [ 267.255811][T12207] __nla_validate_parse: 14 callbacks suppressed [ 267.255831][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.291371][ T7266] usb 2-1: string descriptor 0 read error: -71 [ 267.297670][ T7266] usb 2-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 267.307259][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.349661][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.359096][ T7266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.375584][T12212] sctp: [Deprecated]: syz.2.3484 (pid 12212) Use of int in maxseg socket option. [ 267.375584][T12212] Use struct sctp_assoc_value instead [ 267.393085][ T7266] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 267.394451][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.442688][ T7266] usb 2-1: no configuration chosen from 3 choices [ 267.449524][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.481437][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.491687][ T7266] usb 2-1: USB disconnect, device number 15 [ 267.525217][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.546581][T12219] Timeout policy `syz1' can only be used by L3 protocol number 34978 [ 267.547198][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.576495][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.601389][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 267.686061][T12225] loop2: detected capacity change from 0 to 512 [ 267.789649][T12225] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 267.818514][T12228] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.838639][T12225] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 267.838720][T12225] System zones: 0-1, 15-15, 18-18, 34-34 [ 267.839950][T12225] EXT4-fs (loop2): orphan cleanup on readonly fs [ 267.864027][T12225] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 267.874086][T12225] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.889581][T12225] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 267.904148][T12225] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3492: bg 0: block 40: padding at end of block bitmap is not set [ 267.975177][T12225] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 268.017662][T12225] EXT4-fs (loop2): 1 truncate cleaned up [ 268.034162][T12225] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 268.102797][ T7266] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 268.164585][T12225] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 268.462663][ T150] block nbd2: Attempted send on invalid socket [ 268.469720][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.492456][ T7266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.554590][ T7266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.685783][ T7266] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.705213][ T7266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 268.729320][ T7266] usb 4-1: SerialNumber: syz [ 268.881423][ T6798] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 268.973391][T12285] netlink: 'syz.4.3514': attribute type 3 has an invalid length. [ 269.109648][ T7266] usb 4-1: 0:2 : does not exist [ 269.134158][T12292] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 269.169586][ T7266] usb 4-1: USB disconnect, device number 21 [ 269.473173][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.496955][ T6798] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.518348][ T6798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.528647][ T6798] usb 1-1: Product: syz [ 269.541979][ T6798] usb 1-1: Manufacturer: syz [ 269.546698][ T6798] usb 1-1: SerialNumber: syz [ 269.629349][ T6798] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.674396][T12324] netlink: 'syz.1.3527': attribute type 3 has an invalid length. [ 269.852647][T12334] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 270.123033][T12350] loop1: detected capacity change from 0 to 256 [ 270.242178][T12350] FAT-fs (loop1): Directory bread(block 64) failed [ 270.261614][ T13] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.274847][T12350] FAT-fs (loop1): Directory bread(block 65) failed [ 270.316440][T12350] FAT-fs (loop1): Directory bread(block 66) failed [ 270.351572][T12350] FAT-fs (loop1): Directory bread(block 67) failed [ 270.393956][T12350] FAT-fs (loop1): Directory bread(block 68) failed [ 270.428740][T12364] netlink: 'syz.2.3543': attribute type 3 has an invalid length. [ 270.431688][T12350] FAT-fs (loop1): Directory bread(block 69) failed [ 270.471445][T12350] FAT-fs (loop1): Directory bread(block 70) failed [ 270.478040][T12350] FAT-fs (loop1): Directory bread(block 71) failed [ 270.501623][T12350] FAT-fs (loop1): Directory bread(block 72) failed [ 270.518582][T12350] FAT-fs (loop1): Directory bread(block 73) failed [ 270.764442][ T21] usb 1-1: USB disconnect, device number 17 [ 270.865290][T12332] loop3: detected capacity change from 0 to 32768 [ 271.029187][T12332] XFS (loop3): Mounting V5 Filesystem [ 271.174718][T12332] XFS (loop3): Ending clean mount [ 271.242845][T12332] XFS (loop3): Quotacheck needed: Please wait. [ 271.326875][T12332] XFS (loop3): Quotacheck: Done. [ 271.381565][ T13] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 271.411377][ T13] ath9k_htc: Failed to initialize the device [ 271.417777][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 271.536901][ T4193] XFS (loop3): Unmounting Filesystem [ 271.682311][T12437] Cannot find add_set index 2 as target [ 271.710661][T12439] loop2: detected capacity change from 0 to 64 [ 272.087641][T12458] netlink: 'syz.4.3579': attribute type 1 has an invalid length. [ 272.268236][T12465] __nla_validate_parse: 100 callbacks suppressed [ 272.268267][T12465] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3582'. [ 272.455086][T12472] kAFS: unparsable volume name [ 272.721461][ T7266] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 273.029810][T12459] loop2: detected capacity change from 0 to 32768 [ 273.233684][T12519] loop1: detected capacity change from 0 to 2048 [ 273.241586][ T7266] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 273.255146][ T7266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.272298][ T7266] usb 1-1: Product: syz [ 273.281026][ T7266] usb 1-1: Manufacturer: syz [ 273.291652][ T7266] usb 1-1: SerialNumber: syz [ 273.307379][ T7266] usb 1-1: config 0 descriptor?? [ 273.502569][T12459] XFS (loop2): Mounting V5 Filesystem [ 273.509061][T12536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.569364][T12519] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 273.572082][ T7266] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v139 fw v114.61.103 (1 channels) [ 273.623071][T12519] Remounting filesystem read-only [ 273.706168][T12459] XFS (loop2): Ending clean mount [ 273.745935][T12554] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 273.779019][T12459] XFS (loop2): Quotacheck needed: Please wait. [ 273.791615][ T7266] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 273.839391][ T7266] peak_usb 1-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 273.947836][T12459] XFS (loop2): Quotacheck: Done. [ 274.029915][T12565] kAFS: unparsable volume name [ 274.076813][ T7266] peak_usb: probe of 1-1:0.0 failed with error -71 [ 274.113906][ T7266] usb 1-1: USB disconnect, device number 18 [ 274.120599][ T4194] XFS (loop2): Unmounting Filesystem [ 274.207534][T12563] loop1: detected capacity change from 0 to 4096 [ 274.313023][T12563] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 274.401608][T12563] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 274.437222][T12579] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3618'. [ 274.506603][T12583] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 275.028197][T12609] netlink: 'syz.2.3615': attribute type 1 has an invalid length. [ 275.047643][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3615'. [ 275.060074][T12611] loop1: detected capacity change from 0 to 764 [ 275.168666][T12611] rock: directory entry would overflow storage [ 275.184544][T12611] rock: sig=0x4654, size=5, remaining=4 [ 275.234887][T12611] isofs: Unable to find the ".." directory for NFS. [ 275.281567][ T6782] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 275.486206][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'. [ 275.523517][T12633] loop1: detected capacity change from 0 to 64 [ 275.551508][ T6782] usb 1-1: Using ep0 maxpacket: 8 [ 275.810063][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 275.841685][ T6782] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 275.867588][ T6782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.893219][ T6782] usb 1-1: Product: syz [ 275.914657][ T6782] usb 1-1: Manufacturer: syz [ 275.929524][ T6782] usb 1-1: SerialNumber: syz [ 275.977296][ T6782] usb 1-1: config 0 descriptor?? [ 276.023734][ T6782] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 276.062314][ T6782] dvb-usb: bulk message failed: -22 (2/0) [ 276.068753][ T6782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.171760][ T6782] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 276.195622][ T6782] usb 1-1: media controller created [ 276.248379][ T6782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.352555][ T6782] dvb-usb: bulk message failed: -22 (1/0) [ 276.358449][ T6782] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 276.448846][ T6782] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 276.489802][ T6782] dvb-usb: schedule remote query interval to 50 msecs. [ 276.528767][ T6782] dvb-usb: bulk message failed: -22 (2/0) [ 276.557109][ T6782] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 276.593711][ T6782] usb 1-1: USB disconnect, device number 19 [ 276.704197][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 276.727055][ T6782] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 276.897385][T12705] loop2: detected capacity change from 0 to 16 [ 276.906841][T12704] loop1: detected capacity change from 0 to 1024 [ 276.981131][T12705] erofs: (device loop2): mounted with root inode @ nid 36. [ 277.003373][T12705] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 277.004817][T12703] loop3: detected capacity change from 0 to 4096 [ 277.022773][T12705] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -21 in[56, 4040] out[1851] [ 277.074277][T12704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.121406][T12705] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 277.285949][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 277.598804][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3694'. [ 277.775757][T12744] netlink: 'syz.1.3699': attribute type 1 has an invalid length. [ 277.787849][T12743] netlink: 'syz.2.3700': attribute type 6 has an invalid length. [ 277.963860][T12749] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 12749 comm: syz.2.3703) [ 278.499085][T12770] loop1: detected capacity change from 0 to 4096 [ 278.621120][T12770] ntfs: volume version 3.1. [ 278.900030][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 279.131932][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 279.404460][T12824] loop2: detected capacity change from 0 to 4096 [ 279.879464][T12847] netlink: 'syz.4.3749': attribute type 6 has an invalid length. [ 280.178215][T12813] loop3: detected capacity change from 0 to 32768 [ 280.299500][T12813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3733 (12813) [ 280.381388][T12813] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 280.420467][T12813] BTRFS info (device loop3): turning on flush-on-commit [ 280.446177][T12813] BTRFS info (device loop3): enabling ssd optimizations [ 280.464846][T12871] SET target dimension over the limit! [ 280.470453][T12813] BTRFS info (device loop3): using spread ssd allocation scheme [ 280.489234][T12813] BTRFS info (device loop3): disabling tree log [ 280.508997][T12813] BTRFS info (device loop3): turning on async discard [ 280.538914][T12813] BTRFS info (device loop3): force clearing of disk cache [ 280.571403][T12813] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 280.611277][T12813] BTRFS info (device loop3): use zstd compression, level 3 [ 280.644145][T12813] BTRFS info (device loop3): turning off async discard [ 280.681419][T12813] BTRFS info (device loop3): setting nodatacow, compression disabled [ 280.709430][T12813] BTRFS info (device loop3): using free space tree [ 280.717780][T12835] loop1: detected capacity change from 0 to 32768 [ 280.736671][T12813] BTRFS info (device loop3): has skinny extents [ 280.950891][T12896] loop2: detected capacity change from 0 to 1024 [ 281.032542][T12896] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.065293][T12813] BTRFS info (device loop3): clearing free space tree [ 281.076736][T12813] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 281.111413][T12813] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 281.177504][T12813] BTRFS info (device loop3): creating free space tree [ 281.194106][T12813] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 281.216828][T12813] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 281.283896][T12813] BTRFS info (device loop3): checking UUID tree [ 281.586993][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'. [ 281.635863][T12933] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3776'. [ 281.961351][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 281.971323][T12946] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 282.254522][T12952] loop1: detected capacity change from 0 to 4096 [ 282.321514][ T23] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 282.345655][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 282.382770][ T23] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.415934][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.443794][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.456781][ T7671] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 282.534798][ T23] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 282.587723][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.709853][T12964] loop1: detected capacity change from 0 to 1024 [ 282.726375][ T23] usb 1-1: USB disconnect, device number 20 [ 282.862711][T12964] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 283.011560][ T7671] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.049991][T12979] xt_TCPMSS: Only works on TCP SYN packets [ 283.052011][ T7671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.105782][ T7671] usb 3-1: Product: syz [ 283.110011][ T7671] usb 3-1: Manufacturer: syz [ 283.121431][ T7671] usb 3-1: SerialNumber: syz [ 283.192570][ T7671] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 283.249613][T12989] netlink: 'syz.3.3807': attribute type 10 has an invalid length. [ 283.299831][T12989] device macvlan0 entered promiscuous mode [ 283.364094][T12989] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 283.517979][T13004] loop3: detected capacity change from 0 to 764 [ 283.801663][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.825523][T13019] loop3: detected capacity change from 0 to 64 [ 284.027850][T13029] loop1: detected capacity change from 0 to 512 [ 284.077261][T13029] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 284.077261][T13029] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 284.077261][T13029] [ 284.131349][T13029] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.181828][T13029] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.3827: inode has both inline data and extents flags [ 284.210788][T13029] EXT4-fs (loop1): get root inode failed [ 284.219657][T13029] EXT4-fs (loop1): mount failed [ 284.250107][ T7671] usb 3-1: USB disconnect, device number 17 [ 284.539014][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 284.545706][T13058] xt_TCPMSS: Only works on TCP SYN packets [ 284.567189][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3841'. [ 284.601741][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3841'. [ 284.825236][T13079] loop2: detected capacity change from 0 to 256 [ 284.868544][T13081] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3851'. [ 284.891601][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 284.901101][ T21] ath9k_htc: Failed to initialize the device [ 284.926936][ T7671] usb 3-1: ath9k_htc: USB layer deinitialized [ 284.958981][T13079] FAT-fs (loop2): Directory bread(block 64) failed [ 284.976003][T13079] FAT-fs (loop2): Directory bread(block 65) failed [ 285.001548][T13079] FAT-fs (loop2): Directory bread(block 66) failed [ 285.023090][T13079] FAT-fs (loop2): Directory bread(block 67) failed [ 285.047464][T13079] FAT-fs (loop2): Directory bread(block 68) failed [ 285.071551][T13079] FAT-fs (loop2): Directory bread(block 69) failed [ 285.078239][T13079] FAT-fs (loop2): Directory bread(block 70) failed [ 285.095481][T13079] FAT-fs (loop2): Directory bread(block 71) failed [ 285.103922][T13079] FAT-fs (loop2): Directory bread(block 72) failed [ 285.117273][T13079] FAT-fs (loop2): Directory bread(block 73) failed [ 285.143462][T13099] loop3: detected capacity change from 0 to 64 [ 285.413457][ T7265] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 285.487848][T13119] loop2: detected capacity change from 0 to 2048 [ 285.551058][T13119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.677029][ T7265] usb 5-1: Using ep0 maxpacket: 8 [ 285.866863][T13139] netlink: 'syz.0.3880': attribute type 6 has an invalid length. [ 285.891521][T13139] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3880'. [ 285.971485][ T7265] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 285.986004][ T7265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.011439][ T7671] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 286.041777][ T7265] usb 5-1: Product: syz [ 286.046124][ T7265] usb 5-1: Manufacturer: syz [ 286.082179][ T7265] usb 5-1: SerialNumber: syz [ 286.089956][ T7265] usb 5-1: config 0 descriptor?? [ 286.153394][ T7265] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 286.168430][T13125] loop3: detected capacity change from 0 to 32768 [ 286.185593][ T7265] dvb-usb: bulk message failed: -22 (2/0) [ 286.227737][ T7265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.292014][ T7265] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 286.342991][ T7265] usb 5-1: media controller created [ 286.409438][ T7265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.441431][ T7265] dvb-usb: bulk message failed: -22 (1/0) [ 286.447308][ T7265] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 286.493053][ T7265] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 286.529606][ T7265] dvb-usb: schedule remote query interval to 50 msecs. [ 286.540872][ T7265] dvb-usb: bulk message failed: -22 (2/0) [ 286.551689][ T7671] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 286.560780][ T7671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.574680][ T7265] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 286.587829][ T7671] usb 3-1: Product: syz [ 286.595790][ T7671] usb 3-1: Manufacturer: syz [ 286.600428][ T7671] usb 3-1: SerialNumber: syz [ 286.629450][ T7265] usb 5-1: USB disconnect, device number 18 [ 286.637570][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 286.655702][ T7671] usb 3-1: config 0 descriptor?? [ 286.660898][ T21] dvb-usb: error while querying for an remote control event. [ 286.719712][ T7265] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 286.737290][ T7671] usb 3-1: selecting invalid altsetting 3 [ 286.752243][ T7671] comedi comedi5: could not set alternate setting 3 in high speed [ 286.760333][ T7671] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 286.812215][ T7671] usbdux: probe of 3-1:0.0 failed with error -22 [ 286.850359][T13141] loop1: detected capacity change from 0 to 32768 [ 286.925401][T13141] jfs_strtoUCS: char2uni returned -22. [ 286.937234][ T6793] usb 3-1: USB disconnect, device number 18 [ 286.937931][T13141] charset = cp949, char = 0xd4 [ 287.056107][T13152] netlink: 'syz.3.3886': attribute type 4 has an invalid length. [ 287.107046][T13152] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3886'. [ 287.428365][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.441961][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.808765][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3903'. [ 287.861553][ T7671] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 287.981469][ T23] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 287.990614][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.015770][ T23] usb 2-1: Product: syz [ 288.023513][ T23] usb 2-1: Manufacturer: syz [ 288.034203][ T23] usb 2-1: SerialNumber: syz [ 288.058278][ T23] usb 2-1: config 0 descriptor?? [ 288.102197][T13208] netlink: 'syz.4.3912': attribute type 6 has an invalid length. [ 288.146158][T13208] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3912'. [ 288.231495][ T7671] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 288.255491][ T7671] usb 4-1: config 0 has no interface number 1 [ 288.280360][ T7671] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 288.300934][ T7671] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 288.332374][ T23] usb-storage 2-1:0.0: USB Mass Storage device detected [ 288.391678][ T7671] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 288.433597][ T7671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.468849][T13224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.471858][ T7671] usb 4-1: SerialNumber: syz [ 288.485553][T13224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.505838][ T7671] usb 4-1: config 0 descriptor?? [ 288.538292][T13224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.555280][ T7671] usb 4-1: Found UVC 0.00 device (0002:0000) [ 288.567241][ T7671] usb 4-1: No valid video chain found. [ 288.593080][ T6793] usb 2-1: USB disconnect, device number 16 [ 288.759400][T13233] loop2: detected capacity change from 0 to 256 [ 288.784728][ T6798] usb 4-1: USB disconnect, device number 22 [ 288.828510][T13233] exfat: Deprecated parameter 'utf8' [ 288.837806][T13233] exfat: Deprecated parameter 'utf8' [ 288.866578][T13233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 289.224403][T13251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.251338][ T7671] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.301481][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 289.455534][T13265] netlink: 'syz.0.3937': attribute type 4 has an invalid length. [ 289.507079][T13267] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3941'. [ 289.511712][ T7671] usb 3-1: Using ep0 maxpacket: 32 [ 289.541387][T13265] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3937'. [ 289.701462][T13279] netlink: 'syz.1.3947': attribute type 10 has an invalid length. [ 289.722062][T13279] device veth1_vlan left promiscuous mode [ 289.731655][T13279] device macvlan0 entered promiscuous mode [ 289.772901][T13279] device veth1_vlan entered promiscuous mode [ 289.818882][T13279] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 289.841684][ T7671] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 289.850819][ T7671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.873227][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3951'. [ 289.886447][ T7671] usb 3-1: Product: syz [ 289.890669][ T7671] usb 3-1: Manufacturer: syz [ 289.908397][ T7671] usb 3-1: SerialNumber: syz [ 289.942493][ T7671] usb 3-1: config 0 descriptor?? [ 289.983618][ T7671] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 290.141357][ T6793] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 290.401980][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3964'. [ 290.411523][ T6793] usb 4-1: Using ep0 maxpacket: 32 [ 290.421411][ T7671] gspca_topro: reg_w err -71 [ 290.462558][ T7671] gspca_topro: Sensor soi763a [ 290.469563][T13320] netlink: 'syz.4.3966': attribute type 10 has an invalid length. [ 290.482187][T13320] device macvlan0 entered promiscuous mode [ 290.517364][ T7671] usb 3-1: USB disconnect, device number 19 [ 290.531260][T13320] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 290.541602][ T6793] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.559355][ T6793] usb 4-1: config 0 has no interface number 0 [ 290.566087][ T6793] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.584806][ T6793] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.791654][ T6793] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.812300][ T6793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.824356][ T6793] usb 4-1: Product: syz [ 290.838138][ T6793] usb 4-1: Manufacturer: syz [ 290.849978][ T6793] usb 4-1: SerialNumber: syz [ 290.865228][ T6793] usb 4-1: config 0 descriptor?? [ 290.933080][ T6793] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.005121][T13338] loop2: detected capacity change from 0 to 128 [ 291.025000][ T7671] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 291.077463][T13338] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 291.115028][T13338] sysv_free_block: flc_count > flc_size [ 291.126352][T13338] sysv_free_block: flc_count > flc_size [ 291.141700][T13338] sysv_free_block: flc_count > flc_size [ 291.151710][ T6793] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 291.161388][T13338] sysv_free_block: flc_count > flc_size [ 291.166988][T13338] sysv_free_block: flc_count > flc_size [ 291.173419][ T6793] quatech2: probe of 4-1:0.51 failed with error -90 [ 291.201054][T13338] sysv_free_block: flc_count > flc_size [ 291.221688][T13338] sysv_free_block: flc_count > flc_size [ 291.227306][T13338] sysv_free_block: flc_count > flc_size [ 291.243285][T13338] sysv_free_block: flc_count > flc_size [ 291.259121][T13338] sysv_free_block: flc_count > flc_size [ 291.281279][T13338] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 291.354008][ T7265] usb 4-1: USB disconnect, device number 23 [ 291.411558][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 291.440389][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 291.456309][T13353] netlink: 'syz.2.3980': attribute type 10 has an invalid length. [ 291.472032][T13353] device macvlan0 entered promiscuous mode [ 291.486216][T13353] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 291.532251][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 291.549355][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 291.624293][T13358] ieee802154 phy0 wpan0: encryption failed: -90 [ 291.651712][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 291.651748][ T7671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 291.716914][T13363] loop2: detected capacity change from 0 to 512 [ 291.725456][T13363] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 291.725485][T13363] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 291.725504][T13363] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 291.745349][T13363] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 291.745375][T13363] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 291.745487][T13363] EXT4-fs (loop2): failed to initialize system zone (-117) [ 291.745606][T13363] EXT4-fs (loop2): mount failed [ 291.826826][ T7671] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 291.826864][ T7671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.826887][ T7671] usb 1-1: Product: syz [ 291.826905][ T7671] usb 1-1: Manufacturer: syz [ 291.826922][ T7671] usb 1-1: SerialNumber: syz [ 291.828858][ T7671] usb 1-1: config 0 descriptor?? [ 291.872836][ T7671] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 291.872967][ T7671] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 291.953165][T13369] rdma_rxe: ignoring netdev event = 14 for lo [ 291.957298][T13369] infiniband syz2: set active [ 291.959137][T13369] infiniband syz2: set active [ 291.959504][T13369] infiniband syz2: set active [ 291.998397][T13369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.998638][T13369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.038702][T13369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.038794][ T6798] lo speed is unknown, defaulting to 1000 [ 292.041761][ T6789] lo speed is unknown, defaulting to 1000 [ 292.042047][ T6801] lo speed is unknown, defaulting to 1000 [ 292.042362][ T6793] lo speed is unknown, defaulting to 1000 [ 292.079174][ T6793] usb 1-1: USB disconnect, device number 21 [ 292.213165][T13381] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 292.697468][T13409] tmpfs: Bad value for 'mpol' [ 292.935815][ T7265] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 292.970555][T13416] loop3: detected capacity change from 0 to 4096 [ 292.976202][T13425] loop1: detected capacity change from 0 to 256 [ 293.038140][T13425] FAT-fs (loop1): Directory bread(block 64) failed [ 293.065126][T13416] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 293.093101][T13425] FAT-fs (loop1): Directory bread(block 65) failed [ 293.113838][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 293.123036][T13425] FAT-fs (loop1): Directory bread(block 66) failed [ 293.130331][T13425] FAT-fs (loop1): Directory bread(block 67) failed [ 293.155261][T13425] FAT-fs (loop1): Directory bread(block 68) failed [ 293.172361][T13425] FAT-fs (loop1): Directory bread(block 69) failed [ 293.179064][T13425] FAT-fs (loop1): Directory bread(block 70) failed [ 293.235224][T13425] FAT-fs (loop1): Directory bread(block 71) failed [ 293.241926][T13425] FAT-fs (loop1): Directory bread(block 72) failed [ 293.255697][T13425] FAT-fs (loop1): Directory bread(block 73) failed [ 293.396543][T13437] sctp: [Deprecated]: syz.2.4019 (pid 13437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.396543][T13437] Use struct sctp_sack_info instead [ 293.471624][ T7265] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 293.498088][ T7265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.536787][ T7265] usb 1-1: Product: syz [ 293.541022][ T7265] usb 1-1: Manufacturer: syz [ 293.557008][ T7265] usb 1-1: SerialNumber: syz [ 293.568369][T13447] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 293.578981][ T7265] usb 1-1: config 0 descriptor?? [ 293.629877][ T7265] usb 1-1: selecting invalid altsetting 3 [ 293.664520][ T7265] comedi comedi5: could not set alternate setting 3 in high speed [ 293.688920][ T7265] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 293.728724][ T7265] usbdux: probe of 1-1:0.0 failed with error -22 [ 293.746704][T13453] loop1: detected capacity change from 0 to 1024 [ 293.879802][ T6793] usb 1-1: USB disconnect, device number 22 [ 293.906909][T13447] device veth0_vlan left promiscuous mode [ 293.984407][T13447] device veth0_vlan entered promiscuous mode [ 294.033397][T13447] team0: Device veth0_vlan failed to register rx_handler [ 294.135704][T13465] ieee802154 phy0 wpan0: encryption failed: -90 [ 294.454169][T13480] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 294.521592][T13480] overlayfs: missing 'lowerdir' [ 294.734642][T13496] loop2: detected capacity change from 0 to 512 [ 294.834194][T13496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.866132][T13496] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.4046: inode has both inline data and extents flags [ 294.954607][T13474] loop3: detected capacity change from 0 to 32768 [ 294.968901][T13496] EXT4-fs (loop2): Remounting filesystem read-only [ 295.024715][T13474] JBD2: Ignoring recovery information on journal [ 295.076092][T13496] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4046: couldn't read orphan inode 15 (err -117) [ 295.089240][T13496] EXT4-fs (loop2): Remounting filesystem read-only [ 295.096102][T13496] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,grpquota,. Quota mode: writeback. [ 295.103129][T13474] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.238636][T13474] (syz.3.4036,13474,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 295.290961][T13491] loop1: detected capacity change from 0 to 32768 [ 295.329411][T13474] (syz.3.4036,13474,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 295.341415][T13474] (syz.3.4036,13474,0):ocfs2_mknod:298 ERROR: status = -2 [ 295.354232][T13491] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 295.403031][T13474] (syz.3.4036,13474,1):ocfs2_mknod:502 ERROR: status = -2 [ 295.410213][T13474] (syz.3.4036,13474,1):ocfs2_create:676 ERROR: status = -2 [ 295.440233][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 295.452984][T13491] JBD2: Ignoring recovery information on journal [ 295.521851][T13491] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 295.581453][ T6789] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 295.628875][T13491] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 295.711721][T13491] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 295.743417][T13491] OCFS2: File system is now read-only. [ 295.776817][T13491] (syz.1.4043,13491,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 295.802855][T13527] loop3: detected capacity change from 0 to 1024 [ 295.811477][T13491] (syz.1.4043,13491,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 295.850047][T13491] (syz.1.4043,13491,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 295.873719][T13527] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 295.880599][T13491] (syz.1.4043,13491,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 295.914415][T13491] (syz.1.4043,13491,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 295.959787][T13491] (syz.1.4043,13491,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 296.006646][T13491] (syz.1.4043,13491,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 296.024894][T13491] (syz.1.4043,13491,1):ocfs2_symlink:1941 ERROR: status = -30 [ 296.041804][T13491] (syz.1.4043,13491,1):ocfs2_symlink:2065 ERROR: status = -30 [ 296.148939][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 296.207214][ T6789] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 296.229547][ T6789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.249620][ T6789] usb 5-1: Product: syz [ 296.273006][T13546] loop3: detected capacity change from 0 to 1024 [ 296.294302][ T6789] usb 5-1: Manufacturer: syz [ 296.311411][ T6789] usb 5-1: SerialNumber: syz [ 296.342695][ T6789] usb 5-1: config 0 descriptor?? [ 296.387023][T13550] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 296.423043][ T6789] usb 5-1: selecting invalid altsetting 3 [ 296.428999][ T6789] comedi comedi5: could not set alternate setting 3 in high speed [ 296.452692][ T6789] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 296.477172][ T6789] usbdux: probe of 5-1:0.0 failed with error -22 [ 296.651940][ T6801] usb 5-1: USB disconnect, device number 19 [ 297.005828][ T7671] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 297.077496][T13587] netlink: 'syz.1.4087': attribute type 1 has an invalid length. [ 297.105581][T13587] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4087'. [ 297.247599][T13598] netlink: 'syz.2.4102': attribute type 1 has an invalid length. [ 297.271307][ T7671] usb 1-1: Using ep0 maxpacket: 32 [ 297.287499][T13603] netlink: 'syz.4.4094': attribute type 1 has an invalid length. [ 297.321400][T13598] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4102'. [ 297.488040][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'. [ 297.534188][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4100'. [ 297.551605][ T7671] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 297.565427][T13613] loop3: detected capacity change from 0 to 2048 [ 297.571981][ T7671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.580091][ T7671] usb 1-1: Product: syz [ 297.605093][ T7671] usb 1-1: Manufacturer: syz [ 297.609755][ T7671] usb 1-1: SerialNumber: syz [ 297.629703][ T7671] usb 1-1: config 0 descriptor?? [ 297.669520][T13613] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.685649][ T7671] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 297.921419][ T21] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 298.034532][T13600] loop1: detected capacity change from 0 to 32768 [ 298.077376][T13600] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 298.077376][T13600] [ 298.096863][ T23] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 298.111419][ T7671] gspca_topro: reg_w err -71 [ 298.165011][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 298.170415][ T7671] gspca_topro: Sensor soi763a [ 298.214782][ T7671] usb 1-1: USB disconnect, device number 23 [ 298.277738][T13636] loop1: detected capacity change from 0 to 1764 [ 298.301561][ T21] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 298.315465][ T21] usb 3-1: config 0 has no interface number 0 [ 298.328936][ T21] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.377141][ T21] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 298.556876][ T21] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 298.576372][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.585039][ T21] usb 3-1: Product: syz [ 298.589246][ T21] usb 3-1: Manufacturer: syz [ 298.599499][ T21] usb 3-1: SerialNumber: syz [ 298.610267][ T21] usb 3-1: config 0 descriptor?? [ 298.671645][ T23] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 298.680788][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.690807][ T21] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 298.733279][ T23] usb 4-1: Product: syz [ 298.738127][ T23] usb 4-1: Manufacturer: syz [ 298.748246][ T23] usb 4-1: SerialNumber: syz [ 298.760262][ T23] usb 4-1: config 0 descriptor?? [ 298.825100][ T23] usb 4-1: selecting invalid altsetting 3 [ 298.831062][ T23] comedi comedi5: could not set alternate setting 3 in high speed [ 298.877893][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 298.883571][ T23] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 298.903306][ T23] usbdux: probe of 4-1:0.0 failed with error -22 [ 298.914487][ T21] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 298.955162][ T21] quatech2: probe of 3-1:0.51 failed with error -90 [ 299.044969][ T6793] usb 4-1: USB disconnect, device number 24 [ 299.111433][ T6801] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 299.153481][ T13] usb 3-1: USB disconnect, device number 20 [ 299.308957][T13676] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 299.317095][T13676] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4140'. [ 299.356654][T13678] lo speed is unknown, defaulting to 1000 [ 299.510418][T13686] netlink: 'syz.0.4135': attribute type 10 has an invalid length. [ 299.521710][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 299.532351][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 299.581517][ T6793] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 299.622054][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 299.636456][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 299.665288][T13686] device veth0_vlan left promiscuous mode [ 299.692332][T13686] device veth0_vlan entered promiscuous mode [ 299.711160][T13686] team0: Device veth0_vlan failed to register rx_handler [ 299.731526][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 299.742380][ T6801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 299.861414][ T6793] usb 5-1: Using ep0 maxpacket: 32 [ 299.931654][ T6801] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 299.951116][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.972138][ T6801] usb 2-1: Product: syz [ 299.981609][ T6801] usb 2-1: Manufacturer: syz [ 300.000665][ T6801] usb 2-1: SerialNumber: syz [ 300.013036][ T6801] usb 2-1: config 0 descriptor?? [ 300.083353][ T6801] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 300.105648][ T6801] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 300.182799][ T6793] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 300.192424][ T6789] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 300.207081][ T6793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.224734][ T6793] usb 5-1: Product: syz [ 300.239190][ T6793] usb 5-1: Manufacturer: syz [ 300.251278][ T6793] usb 5-1: SerialNumber: syz [ 300.265186][ T6793] usb 5-1: config 0 descriptor?? [ 300.290712][T13716] loop2: detected capacity change from 0 to 512 [ 300.323934][ T21] usb 2-1: USB disconnect, device number 17 [ 300.334277][ T6793] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 300.410313][T13716] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 300.472629][ T6789] usb 4-1: Using ep0 maxpacket: 16 [ 300.781582][ T6793] gspca_topro: reg_w err -71 [ 300.786306][ T6789] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 300.795736][ T6789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.804018][ T6789] usb 4-1: Product: syz [ 300.808288][ T6789] usb 4-1: Manufacturer: syz [ 300.813290][ T6789] usb 4-1: SerialNumber: syz [ 300.821032][ T6789] r8152-cfgselector 4-1: config 0 descriptor?? [ 300.827542][ T6793] gspca_topro: Sensor soi763a [ 300.846408][ T6793] usb 5-1: USB disconnect, device number 20 [ 300.902155][T13728] loop2: detected capacity change from 0 to 8 [ 300.920091][T13727] netlink: 'syz.1.4154': attribute type 10 has an invalid length. [ 300.951988][T13728] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 300.983264][ T7927] udevd[7927]: incorrect cramfs checksum on /dev/loop2 [ 301.035434][T13728] cramfs: Error -3 while decompressing! [ 301.049244][ T7927] udevd[7927]: incorrect cramfs checksum on /dev/loop2 [ 301.075182][T13728] cramfs: ffffffff963ea0a8(26)->ffff88805bb7e000(4096) [ 301.104361][T13728] cramfs: Error 2 while decompressing! [ 301.113852][T13728] cramfs: ffffffff963ea0c2(26)->ffff888054940000(4096) [ 301.120871][T13728] cramfs: Error -3 while decompressing! [ 301.127106][T13728] cramfs: ffffffff963ea0dc(16)->ffff88805a272000(4096) [ 301.134563][T13728] cramfs: Error -3 while decompressing! [ 301.140677][T13728] cramfs: ffffffff963ea0a8(26)->ffff88805bb7e000(4096) [ 301.183191][T13727] device veth0_vlan left promiscuous mode [ 301.204861][T13727] device veth0_vlan entered promiscuous mode [ 301.214537][T13727] team0: Device veth0_vlan failed to register rx_handler [ 301.323241][ T6789] r8152-cfgselector 4-1: Unknown version 0x0000 [ 301.342929][ T6789] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 301.716099][T13751] loop1: detected capacity change from 0 to 2048 [ 301.827023][T13751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.170805][T13775] lo speed is unknown, defaulting to 1000 [ 302.211335][ T21] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 302.433341][T13785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4185'. [ 302.461356][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 302.741593][ T21] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 302.767823][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.796352][ T21] usb 4-1: Product: syz [ 302.800589][ T21] usb 4-1: Manufacturer: syz [ 302.816396][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4197'. [ 302.827058][ T21] usb 4-1: SerialNumber: syz [ 302.836434][ T21] usb 4-1: config 0 descriptor?? [ 302.861395][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4197'. [ 302.870398][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4197'. [ 302.896547][ T21] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 303.166552][T13825] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.224158][ T1693] block nbd1: Attempted send on invalid socket [ 303.230532][ T1693] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.251588][T13828] hpfs: hpfs_map_sector(): read error [ 303.321430][ T21] gspca_topro: reg_w err -71 [ 303.347967][T13835] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 303.361251][ T21] gspca_topro: Sensor soi763a [ 303.371796][ T21] usb 4-1: USB disconnect, device number 26 [ 303.391317][T13835] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 303.404224][T13835] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 303.424190][ T4176] udevd[4176]: setting owner of /dev/bus/usb/004/026 to uid=0, gid=0 failed: No such file or directory [ 303.442254][T13837] loop2: detected capacity change from 0 to 2048 [ 303.465493][T13835] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 303.472840][T13835] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 303.500801][T13837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.513712][T13835] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 303.551297][T13835] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 303.592189][T13835] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 303.645181][T13835] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 303.700518][T13835] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 303.714597][T13849] libceph: resolve '4..' (ret=-3): failed [ 303.730769][T13835] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 303.768213][T13835] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 303.833622][T13835] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 303.901887][T13835] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 303.937488][T13835] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 303.947801][T13859] netlink: 'syz.3.4217': attribute type 10 has an invalid length. [ 303.986372][T13862] loop1: detected capacity change from 0 to 256 [ 304.033660][T13859] device veth0_vlan left promiscuous mode [ 304.054410][T13859] device veth0_vlan entered promiscuous mode [ 304.086570][T13859] team0: Device veth0_vlan failed to register rx_handler [ 304.129889][T13862] FAT-fs (loop1): Directory bread(block 64) failed [ 304.159696][T13862] FAT-fs (loop1): Directory bread(block 65) failed [ 304.216298][T13862] FAT-fs (loop1): Directory bread(block 66) failed [ 304.231892][T13862] FAT-fs (loop1): Directory bread(block 67) failed [ 304.278863][T13862] FAT-fs (loop1): Directory bread(block 68) failed [ 304.311265][T13862] FAT-fs (loop1): Directory bread(block 69) failed [ 304.358083][T13862] FAT-fs (loop1): Directory bread(block 70) failed [ 304.405861][T13873] loop2: detected capacity change from 0 to 512 [ 304.413000][T13862] FAT-fs (loop1): Directory bread(block 71) failed [ 304.419653][T13862] FAT-fs (loop1): Directory bread(block 72) failed [ 304.437046][T13862] FAT-fs (loop1): Directory bread(block 73) failed [ 304.500260][T13873] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 304.568471][T13873] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.4227: bad orphan inode 15 [ 304.600987][T13881] loop3: detected capacity change from 0 to 64 [ 304.626722][T13873] ext4_test_bit(bit=14, block=4) = 1 [ 304.693099][T13881] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 304.706069][T13873] is_bad_inode(inode)=0 [ 304.720536][T13873] NEXT_ORPHAN(inode)=0 [ 304.750952][T13873] max_ino=32 [ 304.776313][T13881] minix_free_inode: bit 4 already cleared [ 304.791103][T13873] i_nlink=1 [ 304.800310][T13873] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,noblock_validity,,errors=continue. Quota mode: writeback. [ 304.910267][T13873] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.4227: Logical block already allocated [ 305.020387][T13891] loop3: detected capacity change from 0 to 8 [ 305.173200][T13891] SQUASHFS error: xz decompression failed, data probably corrupt [ 305.186755][T13891] SQUASHFS error: Failed to read block 0x108: -5 [ 305.239969][T13891] SQUASHFS error: Unable to read metadata cache entry [106] [ 305.252189][T13899] netlink: 'syz.4.4240': attribute type 10 has an invalid length. [ 305.261943][T13891] SQUASHFS error: Unable to read inode 0x11f [ 305.294875][T13901] loop2: detected capacity change from 0 to 256 [ 305.441068][T13899] device veth0_vlan left promiscuous mode [ 305.500426][T13899] device veth0_vlan entered promiscuous mode [ 305.525739][T13899] team0: Device veth0_vlan failed to register rx_handler [ 305.870392][T13924] libceph: resolve '4..' (ret=-3): failed [ 305.997827][T13931] xt_hashlimit: invalid rate [ 306.032795][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 306.058944][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 306.077862][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 306.127097][T13932] loop1: detected capacity change from 0 to 1764 [ 306.327511][T13939] loop2: detected capacity change from 0 to 4096 [ 306.545354][T13958] libceph: resolve '4..' (ret=-3): failed [ 306.709757][T13969] loop1: detected capacity change from 0 to 1024 [ 306.886961][T13969] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 307.159925][T13983] loop3: detected capacity change from 0 to 4096 [ 307.260534][T13997] libceph: resolve '4..' (ret=-3): failed [ 307.381137][T14001] device gre1 entered promiscuous mode [ 307.699616][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 307.956819][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 308.081893][ T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.110614][ T23] usb 1-1: config 179 has no interface number 0 [ 308.129603][T14035] netlink: 'syz.2.4307': attribute type 10 has an invalid length. [ 308.141138][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 308.179191][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 308.182871][T14035] device veth0_vlan left promiscuous mode [ 308.206410][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.230908][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 308.248684][ T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 308.263022][T14035] device veth0_vlan entered promiscuous mode [ 308.269910][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 308.282036][T14035] team0: Device veth0_vlan failed to register rx_handler [ 308.289367][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.321657][T14003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 308.721012][T14061] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 308.784370][ T6789] usb 1-1: USB disconnect, device number 24 [ 308.801268][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.844350][T14061] CIFS mount error: No usable UNC path provided in device string! [ 308.844350][T14061] [ 308.863255][T14061] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 309.039254][T14071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4324'. [ 309.398734][T14090] openvswitch: netlink: Actions may not be safe on all matching packets [ 309.438962][T14053] loop1: detected capacity change from 0 to 32768 [ 309.532840][T14053] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 309.668677][T14102] loop2: detected capacity change from 0 to 64 [ 309.786100][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 309.798415][T14102] attempt to access beyond end of device [ 309.798415][T14102] loop2: rw=0, want=2592, limit=64 [ 309.846632][T14102] Buffer I/O error on dev loop2, logical block 1295, async page read [ 309.860409][T14102] attempt to access beyond end of device [ 309.860409][T14102] loop2: rw=0, want=2592, limit=64 [ 309.926821][T14102] Buffer I/O error on dev loop2, logical block 1295, async page read [ 309.956587][ T26] audit: type=1800 audit(1768606376.087:13): pid=14102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4339" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 310.682702][T14161] binder: binder_mmap: 14159 200000001000-20000000b000 bad vm_flags failed -1 [ 310.730119][T14162] overlayfs: missing 'lowerdir' [ 311.126024][T14177] loop1: detected capacity change from 0 to 2048 [ 311.188459][T14181] IPv6: sit1: Disabled Multicast RS [ 311.251744][T14177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.446715][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4383'. [ 311.539071][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4383'. [ 312.094513][T14227] netlink: 'syz.3.4400': attribute type 8 has an invalid length. [ 312.132246][T14227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.281887][T14233] loop3: detected capacity change from 0 to 164 [ 312.337683][T14233] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 312.396293][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4405'. [ 312.405620][ T6798] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 312.676561][T14214] loop2: detected capacity change from 0 to 32768 [ 312.725975][T14214] (syz.2.4394,14214,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.761350][ T13] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 312.771665][T14214] (syz.2.4394,14214,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.833207][T14214] JBD2: Ignoring recovery information on journal [ 312.841486][ T6798] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 312.871352][ T6798] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.911927][T14214] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 313.021346][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 313.041752][ T6798] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.050910][ T6798] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.071645][ T6798] usb 2-1: Product: syz [ 313.076009][ T6798] usb 2-1: Manufacturer: syz [ 313.080668][ T6798] usb 2-1: SerialNumber: syz [ 313.094825][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 313.112328][ T6798] usb 2-1: config 0 descriptor?? [ 313.161526][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.171589][ T7266] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.180037][ T6798] usb 2-1: selecting invalid altsetting 0 [ 313.381588][ T13] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 313.390705][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.405007][T14228] usb 2-1: selecting invalid altsetting 0 [ 313.413107][T14228] usb 2-1: 0:0: usb_set_interface failed (-22) [ 313.419800][ T13] usb 4-1: Product: syz [ 313.424136][ T13] usb 4-1: Manufacturer: syz [ 313.428889][ T13] usb 4-1: SerialNumber: syz [ 313.439505][ T6798] usb 2-1: USB disconnect, device number 18 [ 313.455046][ T13] usb 4-1: config 0 descriptor?? [ 313.512348][ T13] usb 4-1: bad CDC descriptors [ 313.527756][ T13] usb 4-1: unsupported MDLM descriptors [ 313.551514][ T7266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 313.566678][ T7266] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 313.593670][ T7266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.611371][ T6789] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 313.650928][T14262] netlink: 'syz.2.4417': attribute type 3 has an invalid length. [ 313.659431][T14262] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4417'. [ 313.715971][ T6798] usb 4-1: USB disconnect, device number 27 [ 313.746256][T14266] loop2: detected capacity change from 0 to 128 [ 313.761481][ T7266] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 313.771054][ T7266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.780091][ T7266] usb 1-1: Product: syz [ 313.794700][T14266] attempt to access beyond end of device [ 313.794700][T14266] loop2: rw=0, want=6491538, limit=128 [ 313.796924][ T7266] usb 1-1: Manufacturer: syz [ 313.816756][ T7266] usb 1-1: SerialNumber: syz [ 313.825060][T14266] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 313.828672][ T7266] usb 1-1: config 0 descriptor?? [ 313.838796][T14266] ================================================================== [ 313.847521][T14266] BUG: KASAN: use-after-free in sysv_new_inode+0x1130/0x12c0 [ 313.854953][T14266] Read of size 2 at addr ffff88805a2831ce by task syz.2.4419/14266 [ 313.862887][T14266] [ 313.865271][T14266] CPU: 0 PID: 14266 Comm: syz.2.4419 Not tainted syzkaller #0 [ 313.872769][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.882906][T14266] Call Trace: [ 313.886220][T14266] [ 313.889184][T14266] dump_stack_lvl+0x188/0x250 [ 313.893909][T14266] ? show_regs_print_info+0x20/0x20 [ 313.899160][T14266] ? load_image+0x400/0x400 [ 313.903786][T14266] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 313.909282][T14266] ? mutex_lock_io_nested+0x60/0x60 [ 313.914507][T14266] print_address_description+0x60/0x2d0 [ 313.920189][T14266] ? sysv_new_inode+0x1130/0x12c0 [ 313.925264][T14266] kasan_report+0xdf/0x130 [ 313.929751][T14266] ? sysv_new_inode+0x1130/0x12c0 [ 313.934831][T14266] sysv_new_inode+0x1130/0x12c0 [ 313.939751][T14266] ? __rwlock_init+0x140/0x140 [ 313.944550][T14266] ? sysv_free_inode+0x7e0/0x7e0 [ 313.949550][T14266] sysv_mknod+0x4a/0xd0 [ 313.953758][T14266] ? sysv_lookup+0xe0/0xe0 [ 313.958219][T14266] path_openat+0x11db/0x2fa0 [ 313.962889][T14266] ? do_filp_open+0x410/0x410 [ 313.967621][T14266] do_filp_open+0x1e2/0x410 [ 313.972168][T14266] ? vfs_tmpfile+0x300/0x300 [ 313.976820][T14266] ? _raw_spin_unlock+0x24/0x40 [ 313.981702][T14266] ? alloc_fd+0x598/0x630 [ 313.986078][T14266] do_sys_openat2+0x150/0x4b0 [ 313.990798][T14266] ? __lock_acquire+0x7d10/0x7d10 [ 313.995864][T14266] ? do_sys_open+0xe0/0xe0 [ 314.000320][T14266] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.006321][T14266] ? lock_chain_count+0x20/0x20 [ 314.011214][T14266] ? vtime_user_exit+0x2c8/0x3e0 [ 314.016243][T14266] __x64_sys_openat+0x135/0x160 [ 314.021147][T14266] do_syscall_64+0x4c/0xa0 [ 314.025598][T14266] ? clear_bhb_loop+0x30/0x80 [ 314.030317][T14266] ? clear_bhb_loop+0x30/0x80 [ 314.035030][T14266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.040973][T14266] RIP: 0033:0x7f968068bcb9 [ 314.045423][T14266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.065184][T14266] RSP: 002b:00007f967e8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.073653][T14266] RAX: ffffffffffffffda RBX: 00007f9680906fa0 RCX: 00007f968068bcb9 [ 314.081685][T14266] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 314.089719][T14266] RBP: 00007f96806f9bf7 R08: 0000000000000000 R09: 0000000000000000 [ 314.097736][T14266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.105746][T14266] R13: 00007f9680907038 R14: 00007f9680906fa0 R15: 00007ffe01e59038 [ 314.113775][T14266] [ 314.116826][T14266] [ 314.119176][T14266] The buggy address belongs to the page: [ 314.124842][T14266] page:ffffea000168a0c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x5a283 [ 314.135215][T14266] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 314.135641][ T7266] adutux 1-1:0.0: interrupt endpoints not found [ 314.142377][T14266] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 314.142454][T14266] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 314.142466][T14266] page dumped because: kasan: bad access detected [ 314.142477][T14266] page_owner tracks the page as freed [ 314.142485][T14266] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 10975, ts 240404355835, free_ts 242020412454 [ 314.142514][T14266] get_page_from_freelist+0x1bbd/0x1ca0 [ 314.142543][T14266] __alloc_pages+0x1ee/0x480 [ 314.202933][T14266] alloc_pages_vma+0x393/0x7c0 [ 314.207746][T14266] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 314.213420][T14266] shmem_getpage_gfp+0x14f4/0x2d40 [ 314.214674][ T7266] usb 1-1: USB disconnect, device number 25 [ 314.218560][T14266] shmem_write_begin+0xcd/0x1a0 [ 314.218589][T14266] generic_perform_write+0x2b6/0x550 [ 314.234640][T14266] __generic_file_write_iter+0x25f/0x4e0 [ 314.240305][T14266] generic_file_write_iter+0xa6/0x1b0 [ 314.245902][T14266] vfs_write+0x745/0xd60 [ 314.250176][T14266] ksys_write+0x152/0x260 [ 314.254540][T14266] do_syscall_64+0x4c/0xa0 [ 314.259000][T14266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.264932][T14266] page last free stack trace: [ 314.269626][T14266] free_unref_page_prepare+0x637/0x6c0 [ 314.275127][T14266] free_unref_page_list+0x119/0x820 [ 314.280355][T14266] release_pages+0x186c/0x1be0 [ 314.285168][T14266] __pagevec_release+0x6d/0xe0 [ 314.289971][T14266] shmem_undo_range+0x62b/0x1930 [ 314.294946][T14266] shmem_evict_inode+0x220/0xa40 [ 314.300010][T14266] evict+0x4c9/0x8d0 [ 314.303940][T14266] __dentry_kill+0x431/0x650 [ 314.308569][T14266] dentry_kill+0xb8/0x290 [ 314.312930][T14266] dput+0xd8/0x1a0 [ 314.316683][T14266] __fput+0x5ee/0x930 [ 314.320708][T14266] task_work_run+0x125/0x1a0 [ 314.325338][T14266] exit_to_user_mode_loop+0x10f/0x130 [ 314.330738][T14266] exit_to_user_mode_prepare+0xee/0x180 [ 314.336295][T14266] syscall_exit_to_user_mode+0x16/0x40 [ 314.341790][T14266] do_syscall_64+0x58/0xa0 [ 314.346244][T14266] [ 314.348591][T14266] Memory state around the buggy address: [ 314.354240][T14266] ffff88805a283080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 314.362329][T14266] ffff88805a283100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 314.370418][T14266] >ffff88805a283180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 314.378508][T14266] ^ [ 314.384948][T14266] ffff88805a283200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 314.393041][T14266] ffff88805a283280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 314.401125][T14266] ================================================================== [ 314.409205][T14266] Disabling lock debugging due to kernel taint [ 314.420035][T14266] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.427267][T14266] CPU: 0 PID: 14266 Comm: syz.2.4419 Tainted: G B syzkaller #0 [ 314.436146][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.446229][T14266] Call Trace: [ 314.449556][T14266] [ 314.452511][T14266] dump_stack_lvl+0x188/0x250 [ 314.457228][T14266] ? show_regs_print_info+0x20/0x20 [ 314.462460][T14266] ? load_image+0x400/0x400 [ 314.467000][T14266] panic+0x2e5/0x810 [ 314.470931][T14266] ? bpf_jit_dump+0xd0/0xd0 [ 314.475479][T14266] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 314.481501][T14266] ? _raw_spin_unlock+0x40/0x40 [ 314.486386][T14266] ? sysv_new_inode+0x1130/0x12c0 [ 314.491447][T14266] check_panic_on_warn+0x80/0xa0 [ 314.496420][T14266] ? sysv_new_inode+0x1130/0x12c0 [ 314.501480][T14266] end_report+0x6d/0xf0 [ 314.505677][T14266] kasan_report+0x102/0x130 [ 314.510256][T14266] ? sysv_new_inode+0x1130/0x12c0 [ 314.515321][T14266] sysv_new_inode+0x1130/0x12c0 [ 314.520218][T14266] ? __rwlock_init+0x140/0x140 [ 314.525014][T14266] ? sysv_free_inode+0x7e0/0x7e0 [ 314.530017][T14266] sysv_mknod+0x4a/0xd0 [ 314.534183][T14266] ? sysv_lookup+0xe0/0xe0 [ 314.538625][T14266] path_openat+0x11db/0x2fa0 [ 314.543234][T14266] ? do_filp_open+0x410/0x410 [ 314.547921][T14266] do_filp_open+0x1e2/0x410 [ 314.552440][T14266] ? vfs_tmpfile+0x300/0x300 [ 314.557061][T14266] ? _raw_spin_unlock+0x24/0x40 [ 314.561924][T14266] ? alloc_fd+0x598/0x630 [ 314.566281][T14266] do_sys_openat2+0x150/0x4b0 [ 314.570972][T14266] ? __lock_acquire+0x7d10/0x7d10 [ 314.576027][T14266] ? do_sys_open+0xe0/0xe0 [ 314.580476][T14266] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.586468][T14266] ? lock_chain_count+0x20/0x20 [ 314.591348][T14266] ? vtime_user_exit+0x2c8/0x3e0 [ 314.596327][T14266] __x64_sys_openat+0x135/0x160 [ 314.601192][T14266] do_syscall_64+0x4c/0xa0 [ 314.605642][T14266] ? clear_bhb_loop+0x30/0x80 [ 314.610634][T14266] ? clear_bhb_loop+0x30/0x80 [ 314.615351][T14266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.621281][T14266] RIP: 0033:0x7f968068bcb9 [ 314.625761][T14266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.645395][T14266] RSP: 002b:00007f967e8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.653963][T14266] RAX: ffffffffffffffda RBX: 00007f9680906fa0 RCX: 00007f968068bcb9 [ 314.661973][T14266] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 314.669984][T14266] RBP: 00007f96806f9bf7 R08: 0000000000000000 R09: 0000000000000000 [ 314.677991][T14266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.686004][T14266] R13: 00007f9680907038 R14: 00007f9680906fa0 R15: 00007ffe01e59038 [ 314.694017][T14266] [ 314.697473][T14266] Kernel Offset: disabled [ 314.702354][T14266] Rebooting in 86400 seconds..