last executing test programs: 15m25.987442875s ago: executing program 3 (id=1805): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000180)='\x991\"', 0x0) 15m25.915465479s ago: executing program 3 (id=1807): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)=0x9) 15m25.781630929s ago: executing program 3 (id=1810): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15m25.582080262s ago: executing program 3 (id=1814): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15m25.219581708s ago: executing program 3 (id=1820): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r0, 0x7) 15m24.790338887s ago: executing program 3 (id=1827): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xa08084, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) 15m24.490979938s ago: executing program 32 (id=1827): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xa08084, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo/Hma4en99Pmql6+lRNn/K/qy+uqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vavZyNej4iPj0fcf3Bnvbn5/D778f0//+MPPzn2o7//aXjmv3+51X9j2nK3b//2P3+9+2TbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9WT3W0XEbHZXqd5z+BwPAAcMZvxSdddoEPyL9ogIo513QlgoVVdd4BDcf/BnfUq5Vu1Xw/WdtrzuSB78t+sdq/vmDadZfwck3k9vraiH89N6c/KnPqwSHL+vfH8r+y0j9Jyh53/vEzLf7Rz6VNxcv798fzHpPyXt38f6fx7E/MvVc5/sL/8d2z25Q8AAAAAAAss////iY6P/y4dpPMHOIjwqOO/awfpAwAAAAAAAAAsgCcd/2+X8f8AAABgYTWf1Ru/O/7wtmnfxdbcfrmKeGZseaAw6WKZ1a77AQAAAAAAAAAAAAAlGeycw3u5ihhGxDOrq3VdNz9t4/XjetL1j7rStx9K1vWTPAAA7Pj4+Ni1/FXEckRcTt/1N1xdXa3r5ZXVerVeWcrvZ0dLy/VK63Ntnja3LY328YZ4MKqbP7bcWq9t1uflWe3jf6+5r1Hd30fH5qPDwAEgInZeje57RXrK1PWz0fW7HI4G+//Tx/7PfnT9OAUAAAAOX13XdZW+zvtkOubf67pTAMBc5Nf/8eMCarVarVarn766rZ7sbruIiM32Os17BsPxA8ARsxmfdN0FOiT/og0i4oWuOwEstKrrDnAo7j+4s16lfKv260Ea3z2fC7In/81qe728/qTpLOPnmMzr8bUV/XhuSn+en1MfFknOvzee/5Wd9lFa7qD5T8u1q3OMpuXfbOeJDvrTtZx/fzz/MYe9/8/LVvQm5l+qnP/gsfLvyx8AAAAAABZY/v//Ewt1/Hd00M2Z6VHHf9cO7V4BAAAAAAAA4HDdf3BnPV/3mo//f2HCcq7/fDrl/Cv5Fynn3xvL/6tjy/Vb8/fefpj/vx/cWf/jrX/9f57uN/+lPFOlR1aVHhFVuqdqkKZPsnWftTXsj5p7Gla9fnMPa7t//3psxNk9y/bSv0c9fDeubbef29Pe9HS43V73d9rP72kf7Lbn9S/saR+mM53qldx+Otbj53E93tlub9qWZmz/8oz2ekZ7zr9v/y9Szn/Q+mnyX03t1di0ce+j3mf2+/Z00v28de2Lvzl7+Jsz01b0d7etrdm+lzroz/a/ybFR/PLmxo3Tt6/eunXjXKTJnlvPR5p8znL+w/Sz+/z/8k57ft5v76/3Pho9dv6LYisGU/N/uTXfbO8rc+5bF3L+o/ST838ntU/e/49y/tP3/1c76A8AAAAAAAAAAAAAAAA8Sl3X25eIvhURF9P1P11dmwkAzFd+/a+TfPu86v6c70+tPuJ1tWD9mWv9ab1Y/VGrj2LdVk/2ZruIiL+112neM/x60h8DABbZpxHxz647QWfkX7D8fX/N9NSeb/kFnnY3P/jwp1evX9+4cbPrngAAAAAAAAAAB5XH/1xrjf98qq7ru2PL7Rn/9e1Ye9LxPwd5ZneA0SkDVX/OpyRt9Ub9Xmu48RejPT53e4Ti4e7co8b/Hsy4v+GM9tGM9qUZ7csz2ide6NGS83+xNd75qYg4OTb8egnjv46PeV+CnP9Lrcdzk/9XxpZr51///ijn39uT/5lb7//izM0PPnzt2vtX39t4b+NnF86dO3vh4sVLly6deffa9Y2zO7877PHhyvnnsa9z/pQh558zl39Zcv5fSrX8y5Lz/3Kq5V+WnH9+vyf/suT882cf+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvP/eqrlX5ac/2upln9Zcv6nUy3/suT8z6R6n/mvHHa/mI+cfz7CZf8vS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzfz3V8i9Lzv8bqZZ/WXL+F1Mt/7Lk/L+ZavmXJed/KdXyL0vO/1upln9Zcv7fTrX8y5LzfyPV8i9Lzv87qZZ/WXL+3021/MuS8/9equVflpz/m6mWf1kefv//os7kS+wXpT9mzJQw0/UzEwAAAAAAAAAAAAAwbh6nE3e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb27jZHjru8APvfoswOJgZA6qSEXx4SQOLmznfiBNsWEx4anEgiFPmC7vrM5cGzHZ5dAI9lRoETCqAjRNrxoCwi1kaoKq+IFrQDlBWpVqRK0L+gbRIWK1KgKKCBVaivIVTvz//9vd29u9863d96d+Xwk++fbnZ35z+x/5/Z35+8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS75Q2znxrKsqzxJ/9ra5a9qPHvzZNb89tee7VHCAAAAKzVL/K/n78u3XBoBQ9qWuYfX/mdry0sLCxk7x/547HPLyykOyazbGxTluX3RZd/+IGh5mWCJ7KJoeGmr4e7bH6ky/2jXe4f63L/eJf7N3W5f6LL/UsOwBKbi5/H5Cvbmf9za3FIs+uzsfy+nSWPemJo0/Bw/FlObih/zMLY8WwuO5nNZtMtyxfLDuXLf+OWxrbemsVtDTdta3tjhvz0sWNxDEPhGO9s2dbiOqMfvz6b/NlPHzv2l+eeu7Gsdj0MLesrxnn7jsY4PxFuKcY6lG1KxySOc7hpnNtLnpORlnEO5Y9r/Lt9nM+vcJwji8PcUO3P+UQ2nP/7u/lxGm3+sV46TtvDbf9za5ZlFxeH3b7Mkm1lw9mWlluGF5+fiWJGNtbRmEovzUZXNU9vWcE8bdSZna3ztP01EZ//W8LjRpcZQ/PT9OPHx5ue958vXMk8jRp7vdxrpX0O9vq10i9zMM6L7+Y7/WTpHNwZ9v+x25afg6Vzp2QOpv1umoM7us3B4fGRfMzpSRjKH7M4B3e3LD+Sb2kor8/e1nkOTp17+MzU/Mc+ftfcw0dPzJ6YPbV39+7pvfv2HThwYOr43MnZ6eLvKzza/W9LNpxeAzvCsYuvgVe3Lds8VRe+NL7k/Hulr8OJDq/DrW3L9vp1ONq+c0Mb84JcOqeL18Z7Gwd94tJwtsxrLH9+7lj76zDtd9PrcLTpdVj6PaXkdTi6gtdhY5kzd6zsPcto05+yMSz/vWBtc3Br0xxsfz/SPgd7/X6kX+bgRJgX379j+e8F28N4n9y12vcjI0vmYNrdcO5p3JLe708cyEvZvLypccc149n5+dmzdz969Ny5s7uzUDbEy5rmSvt83dK0T9mS+Tq86vl6aO6VT95UcvvWcKwm7mr8NbHsc9VY5p67Oz9X+Xe38uPZcuueLJQe2+jjWfbdvHE8x7PsC99+/MFvPvaFNyx7PBv95iem1v5ePPWlTeffsWXOv7Hvf6HYXlrVEyNjo8XrdyQdnbGW83HrUzWan7uG8m0/P7Wy8/FY+LPR5+PrO5yPt7Ut2+vz8Vj7zsXz8VC3n3asTfvzORHmycnpzufjxjLb9qx2To52PB/fGupQOP6vCZ1C6oua5s5y8zZta3R0LOzXaNxC6zzd27L8WOjNGtt6es+VzdPbby3WNZL2btFGzdPJtmV7PU/Tz76Wm6dD3X76dmXan8+JMC+u39t5njaWeeaetZ87N8d/Np07x7vNwbGR8caYx9IkzM/32cLmOAfvzo5lp7OT2Ux+73g+n4bybe26d2VzcDz82ehz5bYOc/D2tmV7PQfT97Hl5t7Q6NKd74H253MizIun7u08BxvLvHF/b9+73h5uScs0vXdt//nacj/zuqntMK3XXBkN4/z2/s4/m20sc/LAavvMzsfpznDLNSXHqf31u9xraibbmOO0LYzzuQPLH6fGeBrLfP7gCufToSzLLjxyf/7z3vD7lb89/72vtfzepex3Ohceuf8nLz7+D6sZPwCD74WibCm+1zX9Zmolv/8HAAAABkLs+4dDTfT/AAAAUBmx74//KzzR/wMAAEBlxL5/NNSkJv3/tjc+N/fChSwl8xeCeH86DA8Uy8WM63T4enJhUeP2+78y+99/f2Fl2x7OsuznD/xB6fLbHojjKkyGcV5+U+vtS3ztrhVt+8hDF9J2m/PrXwzrj/uz0mlQFsGdzrLsG9d9Jt/O5Acu5fWZB47k9cGLTz7RWOb5g8XX8fHPvqxY/s9C+PfQ8aMtj382HIcfhTr9tvLjER/31Uuv2b7/fYvbi48b2nFtvttPfbBYb/ycnM8+USwfj/Ny4//mp5/+amP5R19VPv4Lw+Xjfzqs9yuh/u8riuWbn4PG1/Fxnwzjb2yvMUPj4+7+8rdKx3/5U8XyZ95cLHck1Lj928PXO9/83Fzz8Xp06GjLfmVvKZaL25/+3h/l98f1xfW3j3/i8KWW49E+P57512I9U23Lx9vjdqK/a9t+Yz3N8zNu/+k/PNJynLtt//KDz76isd727d/ZttyZR+7It7+4vtZPbPrzT36mdHtxPIf+5kzL/hx6d3gdh+0/9cEwH8P9/3e5WF/7pysceXfr+Scu/8WtF1r2J3rrz4rtX37dibxumti85ZoXvfjaizc3jl2WfXdTsb5u2z/xF6dbxv+lG4rjEe+PGf327S8nbv/sR3edOj1/fm4mHdXHrss/O+ftxXjieK8L59b2rw+fPveh2bOT05PTWTZZ3Y/Qu2JfDvUnRbnYeemFJWfQOx4Kz+dNf/qNLbf9y6fj7f/23uL2S28rvm+9Oiz32XD71vD8rW77Sz11yw3563vomTDChaWfF7wW23f+14EVLRj2v/19QZzvZ17+ofw4NO7Lv2/E1/Uax/+DmWI9Xw/HdSF8MvOOGxa317x8/GyES+8pXu9rPn7hNBef178Kz/c7flSsP44r7u8PwvuYb21rPd/F+fH1C8Pt688/xeNiOJ9kF4v741LxeF96/obS4cXPIcku3ph//bm0nhtXtZvLmf/Y/NTJuVPnH506Nzt/bmr+Yx8//PDp86fOHc4/y/Pwh7s9fvH8tCU/P83M7rsny89Wp4uyzq72+M88dGxm//RtM7PHj54/fu6hM7NnTxybnz82OzN/29Hjx2c/2u3xczP37d5zcO/+PbtOzM3cd+Dgwb0Hd82dOt0YRjGoLvZNf2TXqbOH84fM33fPwd333nvP9K6HT8/M3rd/enrX+W6Pz7837Wo8+vd3nZ09efTc3MOzu+bnPj573+6D+/bt6fppgA+fOT4/OXX2/Kmp8/OzZ6eKfZk8l9/c+N7X7fFU0/y/F+9n2w0VH8SXvevOfenzWRu+8viyqyoWafsA0efCZ9H800vOHFjJ17HvHws1qUn/DwAAAHUQ+/7xUBP9PwAAAFRG7Ps3hZro/wEAAKAyYt8/EWpSk/6/cvn/bRdWtH35/8HL/2fy//L/bftzxfn/9/Rb/r84X8j/98Za8/fy/4H8v/y//L/8v/w/PdBv+f/Y92/Oslr2/wAAAFAHse/fEmqi/wcAAIDKiH3/NaEm+n8AAACojNj3vyjUpCb9v/y//L/8v/y//H/59leR/9+UrYD8/8aQ/++s5vn/4a4DkP+fyuqV/7/Yy/HXN/9f9FDy/5Tpt/x/7PtfHGpSk/4fAAAAKuU/y2+Off+1oSb6fwAAAKiM2PdfF2qi/wcAAIDKiH3/1lCTmvT/8v/y//L/8v/y/+Xbd/3/wST/31nN8//dyf+7/r/8v+v/01P9lv+Pff9LQk1q0v8DAABAHcS+/6WhJvp/AAAA6D+jV/aw2Pe/LNRkSf9/hRsAAAAArrrY91+ftQXBa/L7f/l/+X/5f/l/+f/y7a88/z+Syf/3D/n/zuT/u5D/l/+X/5f/p6f6Lf+f9/3ZRPbyUJOa9P8AAABQB7HvvyHURP8PAAAAlRH7/l8KNdH/AwAAQGXEvn9bqElN+n/5/0rm/xtPk/y//P+y269A/j8/WfdP/n9dr/8/GwKb8v8rJP/fmfx/F/L/8v/y//L/9FS/5f9j339jqElN+n8AAACog9j33xRqov8HAACAyoh9/y+Hmuj/AQAAoDJi37891KQm/b/8f5/n/2Ny1PX/5f8X8/+PyP8XapL/d/3/VZL/70z+vwv5f/l/+X/5f3qq3/L/se9/RahJTfp/AAAAqIPY978y1ET/DwAAAJUR+/6bQ030/wAAAFAZse+fDDWpSf8v/9/n+f8ru/6//H+18/+ruv7/zfL/8v81I//fmfx/F/L/8v/y//L/9FS/5f9j339LqElN+n8AAACog9j37wg10f8DAABAZcS+/9ZQE/0/AAAAVEbs+3eGmtSk/5f/l/+X/692/r9s+/L/8v9VJv/fmfx/F/L/8v/y//L/9FS/5f9j3/+qUJOa9P8AAABQB7Hvvy3URP8PAAAAlRH7/leHmuj/AQAAoDJi3397qElN+n/5f/l/+X/5/5rn/y/I/1eL/H9n8v9dyP/3Ij//Dvl/+X/5f6J+y//Hvv81oSY16f8BAACgDmLff0eoif4fAAAAKiP2/XeGmuj/AQAAoDJi378r1KQm/b/8v/y//L/8f83z/67/XzF9kP+fWMv25f/l/yuQ/3f9f/l/+X+Sq5X/z7Ly/H/s++8KNalJ/w8AAAB1EPv+u0NN9P8AAAAwgDaX3hr7/qlQE/0/AAAAVEbs+6dDTWrS/8v/y//L/9c6/39x1fn/mxfXK/9fkP/vL+uW/x/OXP9f/l/+v4tBy/+3/3awP/L/Y/L/VMoV5f+/Wrqqnlz/P/b9u0NNatL/AwAAQB3Evn9PqIn+HwAAACoj9v17Q030/wAAAFAZse+/J9SkJv2//P/G5f9HM/l/+f++y/+7/r/8f+X0wfX/17T9wcv/x12U/5f/H7z8f6/H7/r/8v8sdUX5/3I9yf/Hvv/eUJOa9P8AAABQB7Hv3xdqov8HAACAyoh9//5QE/0/AAAAVEbs+w+EmtSk/5f/d/1/+X/5f/n/8u3L/w8m+f/OXP+/C/l/+X/5f/l/eqrf8v+x7z8YalKT/h8AAADqIPb9rw010f8DAABAZcS+/1dCTfT/AAAAUBmx7//VUJOa9P/y//L/8v/y//L/5duX/x9M8v+dyf93If8v/y//L/9PT/Vb/j/2/feFmtSk/wcAAIA6iH3/r4Wa6P8BAACgMmLf/7pQE/0/AAAAVEbs+w+FmtSk/5f/X2H+f3Pn9cn/t45f/r98fsj/y//L/68/+f/O5P+7kP+X/69g/v9x+X+uon7L/8e+//WhJjXp/wEAAKAOYt9/f6iJ/h8AAAAqI/b9bwg10f8DAABAZcS+/42hJjXp/+X/Xf9f/l/+X/6/fPvy/4NJ/r8z+f8u5P/l/yuY/9+A6/+Phyr/zxIrzf/H91Xrnf+Pff+bQk1q0v8DAABAHcS+/82hJvp/AAAAqIzY978l1ET/DwAAAJUR+/63hprUpP+X/5f/l/+X/5f/L9++/P9gkv/vTP6/C/l/+f8Byf9/r+TxVzH/n3P9f8r02/X/Y9//66EmNen/AQAAoA5i3/9AqIn+HwAAACoj9v1vCzXR/wMAAEBlxL7/7aEmNen/e5f/H5f/byP/L//fPj/k/+X/5f/Xn/x/ZwOW///FteF2+f+C/P86jX/yc8WBH6D8f5nS/P8Pl8v/L2xqf7z8P+uh3/L/se9/R6hJTfp/AAAAqIPY978z1ET/DwAAAJUR+/53hZro/wEAAGDwLRTxgdj3/0aoSU36f9f/b4xjMb28zvn/v5b/l/+X/5f/l/9fX/L/nQ1Y/t/1/9vI//f3+Psy/+/6/1xl/Zb/j33/u0NNatL/AwAAQB3Evv/BUBP9PwAAAFRG7PvfE2qi/wcAAIDKiH3/e0NNatL/y/+7/r/8/4Dn/yezLJP/l/8nkf/vTP6/C/l/+f9+y///h/w/g63f8v+x738o1KQm/T8AAADUQez73xdqov8HAACAyoh9/2+Gmuj/AQAAoDJi3//+UJOa9P/y/4OS/5+U/5f/d/3/tv2R/5f/LyP/39nG5/9X94ZK/l/+f5DH7/r/8v8s1W/5/9j3fyDUZOXfriZWvCQAAABwVcS+/7dCTWry+38AAACog9j3/3aoif4fAAAAKiP2/b8TalKT/l/+f1Dy/67/n8n/y/+37Y/8v/x/mY3L/8czj/y/6//L/0fy//L/8v+067f8f+z7fzfUpCb9PwAAANRB7Ps/GGqi/wcAAICBUPZ/stvFvv9wqEn3/n/V/6cPAAAAuDpi338k1KQmv/+X/5f/l//v0/z/n+z45+9/551Hdsv/y//L/6/Khl7/v/Hid/1/+X/5/0T+X/6/NP+/Sf6/ztYh/z/WfONq8/+x7z8aalKT/h8AAADqIPb9vxdqov8HAACAyoh9/7FQE/0/AAAAVEbs+2dCTWrS/8v/y//L//dp/n+V1/8fCtvph/x/PB7y/616lv+PJ135/1Ibmv9/32JOXP5/tfn/8dJb5f9XnP/P37jJ//fX+OX/Xf+fpXqV/x9ZzP+3WG3+P/b9s6EmNen/AQAAoA5C3z98vKiLd+j/AQAAoDJi338i1ET/DwAAAJUR+/4PhZrUpP+X/5f/l/+vRv7f9f8Xl698/t/1/zuS/++sf/L/5eT/Xf9/kMcv/y//z1LrcP3/FqvN/8e+fy7UpCb9PwAAANRB7Ps/HGqi/wcAAIDKiH3/R0JN9P8AAABQGbHvPxlq8v/s3dmT5fVZx/HT2FPMFBeWVVZ54YXcW/4FXMC1/gFeeOONVZRV4gLuC4P7ivuGC7ivuIAibriCCmpCQvaQlSRkTwhJCElqUsw8zzOnu0//Tvf06enf+T6v10UeGTM5nXGcySfDu75N9r/+X/+v/9f/6/9Xf/7l/n/36r+u/n876P+n6f/X0P/r//X/+n82am79f+7+b4pbmux/AAAA6CB3/x1xi/0PAAAAw8jd/81xi/0PAAAAw8jd/y1xS5P9r//X/w/b/9+q/z/s8/X/3v8fmf5/mv5/jS3q/7/0vP5/bl+//l//z0Fz6/9z939r3NJk/wMAAEAHufu/LW6x/wEAAGAYufvvjFvsfwAAABhG7v674pYm+39f/7+z6Nn/Z8ar/x+p//f+/6Gfr//X/4/s+vb/97zyK5/+X//v/f+g/9f/6//Zb279f+7+b49bmux/AAAA6CB3/3fELfY/AAAADCN3/3fGLfY/AAAADCN3/3fFLU32/8ne/98dpf8vG+j/d7JF1//r//f//ND/6//1/6fP+//TOvX/dz5z0x0vPPLljx7n8/X/+n/9v/6fzZpb/5+7/7vjlib7HwAAADrI3f89cYv9DwAAAMPI3f+9cYv9DwAAAEN4/qsWtfu/L25psv9P1v8P8/5/8f6//v/yN+j/9f/6/62l/5/Wqf+/ls/X/+v/r+Hrr98G9f/6fw6aW/+fu//745Ym+x8AAAA6yN3/A3GL/Q8AAADDyN1/d9xi/wMAAMAwcvdfjFua7H/9/+n3/5/X/299/39uof+/Qv+v/58//f80/f8a+n/9v/f/9f9s1Nz6/9z998QtTfY/AAAAdJC7/wfjFvsfAAAAhpG7/4fiFvsfAAAAhpG7/4fjlib7X//v/X/9v/f/9f+rP1//v530/9P0/2vo/0/az5/T/+v/9f8sO2b///LEL9sb6f9z9/9I3NJk/wMAAEAHuft/NG6x/wEAAGAYuft/LG6x/wEAAGAYuft/PG5psv/1//p//b/+X/+/+vP1/9tJ/z9tNv3/zu7Kb9b/b33/7/1//b/+nz3m9v5/7v6fiFua7H8AAADoIHf/T8Yt9j8AAAAMI3f/T8Ut9j8AAAAMI3f/T8ctTfa//l//r//X/+v/V3/+VP//6NLXp/+fl432/zv6f+//6//1//p//T8nMbf+P3f/z8QtTfY/AAAAdJC7/964xf4HAACAYeTu/9m4ZWn/7/97UQEAAIDtkrv/5+KWJn/+v7r/v/q/1/8fzXXq/3f1//r/K//3vvKvqP+f7P9v8/5/T97/n7a+/89fUfX/+n/9/0b6/8XOKP3/hXXfX//PKnPr/3P3/3zc0mT/AwAAQAe5+38hbrH/AQAAYBi5+38xbrH/AQAAYBi5+38pbmmy/73/v1X9v/f/e/X/D5zz/v9lc3z/f3Hd+/9d/f8R6f+nef9/Df2//t/7/97/Z6Pm1v/n7v/luKXJ/gcAAIAOcvf/Stxi/wMAAMB2WP57Bw55xD93/6/GLfY/AAAADCN3/6/FLU32/+D9/62H/dP0//r/5R+vmfb/h77/r/+/olf/7/3/o9L/T9P/r6H/P41+fnew/v/+w77/HPr/u/X/zMye/v+xq99+Vv1/7v5fj1ua7H8AAADoIHf/fXGL/Q8AAADDyN3/G3GL/Q8AAADDyN3/m3FLk/1/6v3/hcM/2/v/+n/9v/5f/6//3zT9/zT9/xr7+/9X/qOh/t/7/97/1/9zzfb0/0vOqv/P3f9bcUuT/Q8AAAAd5O7/7bjF/gcAAIBh5O6/P26x/wEAAGAYufsfiFua7P/B3/8/lP5f/7/846X/1/+v+nz9/3bS/0/T/6/h/X/9/1n0//ETQP/PiObW/+fu/524pcn+BwAAgA5y9/9u3GL/AwAAwDBy9/9e3GL/AwAAwDBy9/9+3NJk/+v/T7f/z2/X/+v/F/p//b/+/7po2//vrPqd6KBD+v+nbr/4NXu/Rf+v/x+y/3/uVL9+7//r/zloFv3/pav/6TJ3/x/ELU32PwAAAHSQu/8P4xb7HwAAAIaRu/+P4hb7HwAAAIaRu/+P45Ym+3+p/8/kQv/v/X/9v/5f/6//31pt+/8j8v7/tJfi36/+f9T+/3S/fv2//p+DZtH/L/117v4/iVua7H8AAADoIHf/n8Yt9j8AAAAMI3f/n8Ut9j8AAAAMI3f/n8ctTfa/9/979P83LvT/+n/9v/6/B/3/NP3/Gt7/1//r//X/bNTc+v/c/Q/GLU32PwAAAHSQu/8v4hb7HwAAAIaRu/8v4xb7HwAAAIaRu/+v4pYm+1//f0j/vxir//f+v/5/of/X/zeh/5921v3/qt8vl12X/v+hiS9gVf9/6Ub9/5b3/+eP+P31//p/Nm9u/X/u/r+OW5rsfwAAAOggd/9DcYv9DwAAAMPI3f9w3GL/AwAAwDBy9/9N3NJk/+v/e7z/r//X/y/0//r/JvT/01b3/zcc/Cbv/3v/f6D+3/v/+n/Oztz6/9z9fxu3NNn/AAAA0EHu/kfiFvsfAAAAhpG7/+/iFvsfAAAAhpG7/9G4pcn+1//r//X/+n/9/+rP1/9vp9Pr/xcD9/8r6P/1//p//b/+nw2YW/+fu//v45Ym+x8AAAA6yN3/D3GL/Q8AAADDyN3/j3GL/Q8AAADDyN3/T3FLk/1/Vv3/bfp//b/+X/+v/68fVf3/5nj/f5r+fw39v/5f/6//Z6Pm1v/n7v/nuKXJ/gcAAIAOcvc/FrfY/wAAADCM3P3/ErfY/wAAADCM3P3/Grc02f/e/9f/7+3/F4uZ9//5/6T6f/3/CP3/+YX+f+P0/9P0/2vo/8fs/29YDNT/Xzj0++v/maO59f+5+/8tbmmy/wEAAKCD3P3/HrfY/wAAADCM3P3/EbfY/wAAADCM3P3/Gbc02f/6f/2/9//H6f8ff3H1z0f9/2z7//pR1f9vjv5/mv5/Df3/mP2/9//1/5yZufX/ufsfj1ua7H8AAADoIHf/E/v/DNX+BwAAgGE8cfkfzy/+K26x/wEAAGAYufv/O25psv/1//p//f84/b/3/6/Q//d2Rv3/zqY+X/+v/9f/b+/Xr//X/3PQ3Pr/3P3/E7c02f8AAADQQe7+J+MW+x8AAACGkbv/qbjF/gcAAIBh5O7/37ilyf7X/+v/9f/b2f+f1/8P3//nV6b/P565vP9/yy1f/bT+X/+v/9f/6//1/93Nrf/P3f9/cUuT/Q8AAAAd5O7//7jF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv8P9v/nFlcK1StW9f/RqOn/l+j/9379+v/VPz+8/6//9/7/6ZtL/+/9/2v7+ufW/9+l/9f/n1b/f/PB76//Z0Rz6/9z9z8dtzTZ/wAAANBB7v7XxC32PwAAAMzYqr8T+3C5+18bt9j/AAAAMIzc/c/ELU32v/f/9f/6f/2//n/156/r/5P+f170/9P0/2t4/1//3+j9//j9r36dqv7/i/T/bM7c+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/b7T/313+Nv2//n/fzw/9/2D9v/f/50n/P03/v4b+X//fqP/fz/v/nIa59f+5+98UtzTZ/wAAANBB7v43xy1H2v8XTumrAgAAADYpd/9b4hZ//g8AAADDyN3/1rilyf6fa/9/93b2/3vo/+fS/3+9/n/f5+v/9f8j0//n7+ir6f/X0P8ft59/afkv9P/6f/0/+82t/8/d/2zc0mT/AwAAQAe5+98Wt9j/AAAAMIzc/W+PW+x/AAAAGEbu/nfELU32/1z7/y19/3+POfb/O4uO/b/3/y//9c6O/l//34L+f5r+f43N9v/3NOj/99D/6//1/+w3t/4/d/8745Ym+x8AAAC21dd+5Tc+e9R/bu7+d8Ut9j8AAAAMI3f/u+MW+x8AAACGkbv/ubilyf7X//fq/3u+/6//9/6//r8T/f80/f8a3v/X/+v/9f9s1Nz6/9z974lblobf7rH/XQIAAABzkrv/vXFLkz//BwAAgA5y978vbjmw/y8d8e9qBwAAAOYmd//zcUuTP/8/cf+/2NH/n2b/v9D/6//1//p//f9x6P+nnbD/v7Sj/9f/T9D/6//1/yy7MMP+P3f/++OWJvsfAAAABrXnv1HI3f+BuMX+BwAAgGHk7v9g3GL/AwAAwDBy938obmmy/73/P/P+/5re/79Q/5P+v3n/f+/5lZ+v/9f/j0z/f6gvidvp/f9LX6z/P5az7ue3/evX/+v/OWhu/X/u/g/HLU32PwAAAHSQu/8jcYv9DwAAAMPI3f/RuMX+BwAAgGHk7v9Y3NJk/+v/R+z/vf+v/5/+/HH6/y+76eKTX/cNDz+o/+eq69n/58+FLen/Lzvh+//b1v8f5/Pvu/yP+n/9v/7/2P3/zXH1/6wyt/4/d//H45Ym+x8AAAA6yN3/Qtxi/wMAAMAwcvd/Im6x/wEAAGAYuftfjFua7P+t6v+/Qv8/cv+fP9Zn0P9f3L7+P5vi7v2/9//1/wd5/3+a/n8N/b/+X//v/X82am79f+7+T8YtTfY/AAAAdJC7/1Nxi/0PAAAAw8jd/+m4xf4HAACAYeTufyluabL/t6r/9/7/0P1/upb+Pz/f+//6/4X+vz39/5Ldg9+k/19D/6//1//r/9moufX/ufs/E7c02f8AAADQQe7+l+MW+x8AAACGkbv/s3GL/Q8AAADDyN3/ubilyf7X/+v/R+j/T/j+/9n0/6/8cqP/1//r/zdO/z9N/7+G/l//377/v13/z0bNrf/P3f+FAAAA//9/pV3V") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) 4.144727709s ago: executing program 4 (id=16975): r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f0000000140)="df", 0x1}) 4.026058988s ago: executing program 4 (id=16977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f616463617336af1e4deaf374"], 0x38}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 3.944090603s ago: executing program 4 (id=16979): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022130000000b44a24289141d8db132857f66"], 0x0}, 0x0) 2.022333038s ago: executing program 4 (id=17005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.158204254s ago: executing program 0 (id=17016): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) 1.010392144s ago: executing program 0 (id=17018): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 930.745409ms ago: executing program 4 (id=17020): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0, 0x40000000, 0x0, {0x3}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 896.005741ms ago: executing program 1 (id=17021): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000340)) 844.388715ms ago: executing program 2 (id=17022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x11}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "56f493"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) 718.374053ms ago: executing program 1 (id=17023): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x6, 0xd59f80, 0x5, 0x4, 0x19ef, 0x3, 0x5, 0x4, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) 711.155493ms ago: executing program 1 (id=17024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000003"], 0xd0}}, 0x571f68543cec8180) 704.654634ms ago: executing program 2 (id=17025): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 571.303692ms ago: executing program 2 (id=17026): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, r0) 570.454853ms ago: executing program 0 (id=17027): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 568.365933ms ago: executing program 1 (id=17028): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000200)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 426.338692ms ago: executing program 1 (id=17029): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) 425.984712ms ago: executing program 2 (id=17030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 425.681222ms ago: executing program 0 (id=17031): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 343.843137ms ago: executing program 0 (id=17032): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 334.056728ms ago: executing program 1 (id=17033): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 250.273374ms ago: executing program 2 (id=17034): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 177.408108ms ago: executing program 0 (id=17035): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x5}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 140.39711ms ago: executing program 2 (id=17036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 4 (id=17037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): (loop0): Directory bread(block 70) failed [ 1001.779173][ T7177] FAT-fs (loop0): Directory bread(block 71) failed [ 1001.801847][ T7177] FAT-fs (loop0): Directory bread(block 72) failed [ 1001.829205][ T7177] FAT-fs (loop0): Directory bread(block 73) failed [ 1002.530082][ T7191] loop0: detected capacity change from 0 to 32768 [ 1002.544621][ T7191] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.15673 (7191) [ 1002.563943][ T787] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1002.597114][ T7191] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1002.618336][ T7191] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1002.637139][ T7191] BTRFS info (device loop0): using free space tree [ 1002.706336][ T7191] BTRFS info (device loop0): enabling ssd optimizations [ 1002.724001][ T7191] BTRFS info (device loop0): auto enabling async discard [ 1002.768062][ T787] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1002.792625][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.806168][ T28] audit: type=1800 audit(1002.794:12702): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15673" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1002.833885][ T787] usb 2-1: Product: syz [ 1002.838112][ T787] usb 2-1: Manufacturer: syz [ 1002.872138][ T787] usb 2-1: SerialNumber: syz [ 1002.889278][ T787] usb 2-1: config 0 descriptor?? [ 1002.904198][ T5775] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1002.911103][ T787] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1002.948379][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1002.969789][ T787] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1002.983779][ T787] usb 2-1: media controller created [ 1003.001985][ T7216] loop4: detected capacity change from 0 to 2048 [ 1003.075539][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1003.150198][ T7216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.193250][ T787] DVB: Unable to find symbol mt352_attach() [ 1003.260949][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.311937][ T787] DVB: Unable to find symbol nxt6000_attach() [ 1003.321744][ T787] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1003.359361][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 1003.377909][ T787] dvb-usb: schedule remote query interval to 1000 msecs. [ 1003.387493][ T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1003.397947][ T787] dvb-usb: bulk message failed: -22 (7/0) [ 1003.426227][ T787] dvb-usb: bulk message failed: -22 (7/0) [ 1003.486476][ T787] usb 2-1: USB disconnect, device number 104 [ 1003.694526][ T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1003.818160][ T7232] netlink: 'syz.4.15683': attribute type 2 has an invalid length. [ 1003.832806][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15683'. [ 1004.255451][ T787] kernel write not supported for file bpf-map (pid: 787 comm: kworker/0:2) [ 1004.378155][ T7252] sp0: Synchronizing with TNC [ 1004.399082][ T7251] [U] è` [ 1004.764913][ T7250] loop0: detected capacity change from 0 to 40427 [ 1004.781270][ T7250] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1004.794702][ T7250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1004.814148][ T7250] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1004.850221][ T7250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1004.961691][ T7250] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1004.972189][ T7250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1005.017697][ T28] audit: type=1800 audit(1005.004:12703): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15691" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1005.046479][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15697'. [ 1005.163975][ T787] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1005.405271][ T787] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1005.424927][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.443232][ T787] usb 5-1: Product: syz [ 1005.453900][ T787] usb 5-1: Manufacturer: syz [ 1005.458548][ T787] usb 5-1: SerialNumber: syz [ 1005.498229][ T787] usb 5-1: config 0 descriptor?? [ 1005.516586][ T787] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1005.558275][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1005.579659][ T787] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1005.607914][ T787] usb 5-1: media controller created [ 1005.651814][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.751430][ T787] DVB: Unable to find symbol mt352_attach() [ 1005.853984][ T787] DVB: Unable to find symbol nxt6000_attach() [ 1005.878811][ T787] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1005.897162][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 1005.925754][ T787] dvb-usb: schedule remote query interval to 1000 msecs. [ 1005.932939][ T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1005.947758][ T787] dvb-usb: bulk message failed: -22 (7/0) [ 1005.963808][ T787] dvb-usb: bulk message failed: -22 (7/0) [ 1005.992104][ T787] usb 5-1: USB disconnect, device number 88 [ 1006.064597][ T5806] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1006.140630][ T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1006.264084][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 1006.275743][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.308473][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.328643][ T5806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1006.358856][ T5806] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1006.372755][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.392347][ T5806] usb 1-1: config 0 descriptor?? [ 1006.596048][ T7297] loop4: detected capacity change from 0 to 512 [ 1006.670738][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.763838][ T787] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1006.772162][ T7297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1006.812544][ T7297] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1006.882967][ T5806] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input68 [ 1006.929593][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.939696][ T5806] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1006.954199][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1007.002254][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.025173][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.060704][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.101392][ T787] usb 2-1: New USB device found, idVendor=56f8, idProduct=07da, bcdDevice= 0.00 [ 1007.115834][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.129968][ T787] usb 2-1: config 0 descriptor?? [ 1007.197987][T27758] usb 1-1: USB disconnect, device number 88 [ 1007.615265][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.623006][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.657192][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.673229][ T7302] loop4: detected capacity change from 0 to 32768 [ 1007.684123][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.691927][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.703883][ T7302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.15713 (7302) [ 1007.715768][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.761928][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.764006][ T7302] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1007.790457][ T7302] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1007.799531][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.809863][ T7302] BTRFS info (device loop4): setting nodatasum [ 1007.824458][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.852663][ T787] hid-multitouch 0003:56F8:07DA.0005: unknown main item tag 0x0 [ 1007.862197][ T7302] BTRFS info (device loop4): force zlib compression, level 3 [ 1007.871485][ T787] hid-multitouch 0003:56F8:07DA.0005: hidraw0: USB HID v0.00 Device [HID 56f8:07da] on usb-dummy_hcd.1-1/input0 [ 1007.892320][ T7302] BTRFS info (device loop4): turning on flush-on-commit [ 1007.910031][ T7302] BTRFS info (device loop4): max_inline at 4096 [ 1007.930272][ T787] usb 2-1: USB disconnect, device number 105 [ 1007.933767][ T7302] BTRFS info (device loop4): using free space tree [ 1008.068395][ T7315] fido_id[7315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1008.103575][ T7302] BTRFS info (device loop4): enabling ssd optimizations [ 1008.207238][ T9775] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1008.470881][ T5762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5762) [ 1009.028521][ T787] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1009.163803][T27758] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1009.183823][ T5806] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1009.217458][ T7344] loop4: detected capacity change from 0 to 40427 [ 1009.236196][ T7344] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 1009.241195][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1009.245129][ T7344] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1009.254992][ T787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1009.275326][ T7344] F2FS-fs (loop4): Image doesn't support compression [ 1009.282322][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.304252][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1009.317721][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.326540][ T787] usb 1-1: Product: syz [ 1009.330968][ T787] usb 1-1: Manufacturer: syz [ 1009.336008][ T787] usb 1-1: SerialNumber: syz [ 1009.343991][T27758] usb 3-1: Using ep0 maxpacket: 32 [ 1009.351710][ T787] hub 1-1:1.0: bad descriptor, ignoring hub [ 1009.360567][ T787] hub: probe of 1-1:1.0 failed with error -5 [ 1009.364999][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 1009.384896][T27758] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.403561][T27758] usb 3-1: config 0 has no interface number 0 [ 1009.414368][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.434076][T27758] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.446519][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.457739][T27758] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.469005][ T5806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.482602][T27758] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1009.492027][ T5806] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1009.504074][T27758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.528208][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.544884][T27758] usb 3-1: config 0 descriptor?? [ 1009.557648][ T5806] usb 2-1: config 0 descriptor?? [ 1009.579796][ T787] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1010.027145][T27758] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1010.042747][ T5806] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input69 [ 1010.057522][ T787] usb 1-1: USB disconnect, device number 89 [ 1010.064906][T27758] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1010.088483][ T787] usblp0: removed [ 1010.115674][ T5806] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1010.205763][T27758] ft260 0003:0403:6030.0007: failed to retrieve chip version [ 1010.223543][T27758] ft260: probe of 0003:0403:6030.0007 failed with error -71 [ 1010.246820][T27758] usb 3-1: USB disconnect, device number 93 [ 1010.320881][ T5806] usb 2-1: USB disconnect, device number 106 [ 1010.370677][ T7363] loop4: detected capacity change from 0 to 32768 [ 1010.386277][ T7363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15733 (7363) [ 1010.425655][ T7363] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1010.439156][ T7363] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1010.449650][ T7363] BTRFS info (device loop4): using free space tree [ 1010.503367][ T7363] BTRFS info (device loop4): enabling ssd optimizations [ 1010.510575][ T7363] BTRFS info (device loop4): auto enabling async discard [ 1010.757140][ T9775] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1010.962641][ T7389] mkiss: ax0: crc mode is auto. [ 1011.191919][ T7393] loop0: detected capacity change from 0 to 4096 [ 1011.205691][ T7393] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1011.333809][ T5806] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1011.352975][ T7393] ntfs3: loop0: failed to convert "c46c" to default [ 1011.529626][ T5806] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.538388][ T5806] usb 2-1: config 0 has no interface number 0 [ 1011.548001][ T5806] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1011.586285][ T5806] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1011.613026][ T5806] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1011.643041][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.668508][ T5806] usb 2-1: config 0 descriptor?? [ 1011.691892][ T7392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1011.716783][ T5806] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1011.971163][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1011.984133][T26894] usb 2-1: USB disconnect, device number 107 [ 1012.104235][ T5806] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1012.266264][ T7418] netlink: 'syz.4.15750': attribute type 1 has an invalid length. [ 1012.302314][ T5806] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1012.318018][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1012.329841][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.345154][ T5806] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1012.358925][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1012.366107][ T5806] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1012.383775][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.403125][ T5806] usb 1-1: config 0 descriptor?? [ 1012.450433][ T7422] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1012.550107][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15754'. [ 1012.856474][ T5806] ryos 0003:1E7D:3138.0008: ignoring exceeding usage max [ 1012.874739][ T5806] ryos 0003:1E7D:3138.0008: unbalanced delimiter at end of report description [ 1012.897932][ T5806] ryos 0003:1E7D:3138.0008: parse failed [ 1012.912933][ T5806] ryos: probe of 0003:1E7D:3138.0008 failed with error -22 [ 1012.937906][ T7436] loop4: detected capacity change from 0 to 256 [ 1012.999303][ T7436] FAT-fs (loop4): Directory bread(block 64) failed [ 1013.022055][ T7436] FAT-fs (loop4): Directory bread(block 65) failed [ 1013.040349][ T7436] FAT-fs (loop4): Directory bread(block 66) failed [ 1013.047307][ T7436] FAT-fs (loop4): Directory bread(block 67) failed [ 1013.058232][ T7436] FAT-fs (loop4): Directory bread(block 68) failed [ 1013.072467][ T5806] usb 1-1: USB disconnect, device number 90 [ 1013.088226][ T7436] FAT-fs (loop4): Directory bread(block 69) failed [ 1013.096383][ T7436] FAT-fs (loop4): Directory bread(block 70) failed [ 1013.105107][ T7436] FAT-fs (loop4): Directory bread(block 71) failed [ 1013.111966][ T7436] FAT-fs (loop4): Directory bread(block 72) failed [ 1013.134603][ T7436] FAT-fs (loop4): Directory bread(block 73) failed [ 1013.297931][ T7441] vivid-007: ================= START STATUS ================= [ 1013.329431][ T7441] vivid-007: Enable Output Cropping: true grabbed [ 1013.348209][ T7441] vivid-007: Enable Output Composing: true grabbed [ 1013.364688][ T7441] vivid-007: Enable Output Scaler: true grabbed [ 1013.379855][ T7441] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1013.414726][ T7441] vivid-007: Transmit Mode: HDMI grabbed [ 1013.434328][ T7441] vivid-007: Display Present: true inactive [ 1013.440352][ T7441] vivid-007: Hotplug Present: 0x00000001 [ 1013.486518][ T7441] vivid-007: RxSense Present: 0x00000001 [ 1013.492242][ T7441] vivid-007: EDID Present: 0x00000001 [ 1013.518427][ T7441] vivid-007: ================== END STATUS ================== [ 1013.778756][ T7451] loop0: detected capacity change from 0 to 2048 [ 1013.835321][ T7451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.872375][ T7457] loop4: detected capacity change from 0 to 512 [ 1013.950171][ T7457] EXT4-fs: inline encryption not supported [ 1014.060515][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.108971][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.317841][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.612700][ T7479] loop0: detected capacity change from 0 to 512 [ 1014.666383][ T7479] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.15775: inode has both inline data and extents flags [ 1014.764800][ T7479] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.15775: couldn't read orphan inode 15 (err -117) [ 1014.817287][ T7488] mkiss: ax0: crc mode is auto. [ 1014.835229][ T7479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.978145][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.286945][ T7503] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15789'. [ 1015.296470][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15789'. [ 1015.311423][ T7503] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15789'. [ 1015.506942][ T7492] loop4: detected capacity change from 0 to 40427 [ 1015.529605][ T7492] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1015.544143][ T7492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1015.554650][ T7492] F2FS-fs (loop4): invalid crc value [ 1015.667196][ T7492] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1015.676861][ T7492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1015.781283][ T9775] syz-executor: attempt to access beyond end of device [ 1015.781283][ T9775] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1015.797590][ T9775] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1016.077733][ T7510] loop0: detected capacity change from 0 to 32768 [ 1016.198343][ T7510] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1016.460491][ T7510] XFS (loop0): Ending clean mount [ 1016.565236][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15798'. [ 1016.624139][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1017.187435][ T7549] loop0: detected capacity change from 0 to 4096 [ 1017.195609][ T7549] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1017.230804][ T7549] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1017.242633][ T7549] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1017.254309][ T7549] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1017.269754][ T7549] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1017.355442][ T7549] ntfs: volume version 3.1. [ 1017.441168][ T7549] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 1017.475198][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15807'. [ 1017.494150][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15807'. [ 1017.513990][ T7549] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 1017.557656][ T7556] netlink: 'syz.1.15807': attribute type 15 has an invalid length. [ 1017.567615][ T7556] netlink: 'syz.1.15807': attribute type 18 has an invalid length. [ 1017.719780][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15809'. [ 1017.754781][ T7552] loop4: detected capacity change from 0 to 32768 [ 1017.773865][ T7552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15805 (7552) [ 1017.773924][ T787] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1017.814422][ T7552] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1017.840394][ T7552] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1017.862138][ T7552] BTRFS info (device loop4): using free space tree [ 1017.901984][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15812'. [ 1018.018379][ T7552] BTRFS info (device loop4): enabling ssd optimizations [ 1018.036163][ T787] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1018.050316][ T7552] BTRFS info (device loop4): auto enabling async discard [ 1018.064487][ T787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1018.101028][ T787] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1018.134596][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.161109][ T787] usb 3-1: Product: syz [ 1018.183997][ T787] usb 3-1: Manufacturer: syz [ 1018.193925][ T787] usb 3-1: SerialNumber: syz [ 1018.214486][ T787] usb 3-1: config 0 descriptor?? [ 1018.233165][ T787] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1018.272826][ T9775] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1018.466272][ T7600] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1018.684155][ T5762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5762) [ 1018.846384][ T787] gspca_sunplus: reg_r err -71 [ 1018.851719][ T787] sunplus: probe of 3-1:0.0 failed with error -71 [ 1018.879538][ T787] usb 3-1: USB disconnect, device number 94 [ 1019.219794][ T7621] loop4: detected capacity change from 0 to 256 [ 1019.237615][ T7621] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1019.580458][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15830'. [ 1019.970265][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15838'. [ 1020.000907][ T7641] loop4: detected capacity change from 0 to 4096 [ 1020.040118][ T7641] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1020.149989][ T7641] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1020.201933][ T7651] loop0: detected capacity change from 0 to 256 [ 1020.264500][ T5806] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1020.288551][ T7651] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8fd401e1, utbl_chksum : 0xe619d30d) [ 1020.439911][ T7655] netlink: 'syz.4.15844': attribute type 5 has an invalid length. [ 1020.480866][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15844'. [ 1020.484603][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 1020.511870][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.519048][ T7655] ip6erspan1: entered promiscuous mode [ 1020.530467][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.542184][ T5806] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1020.552113][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.581131][ T5806] usb 2-1: config 0 descriptor?? [ 1020.605429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.055005][ T5806] cherry 0003:046A:0027.0009: unknown main item tag 0x3 [ 1021.072615][ T5806] cherry 0003:046A:0027.0009: unknown main item tag 0x1 [ 1021.098871][ T5806] cherry 0003:046A:0027.0009: bogus close delimiter [ 1021.123404][ T5806] cherry 0003:046A:0027.0009: item 0 0 2 10 parsing failed [ 1021.142504][ T5806] cherry: probe of 0003:046A:0027.0009 failed with error -22 [ 1021.171989][ T7674] loop0: detected capacity change from 0 to 4096 [ 1021.223770][ T7677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.316707][ T7674] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1021.341856][ T5806] usb 2-1: USB disconnect, device number 108 [ 1021.406917][ T7674] Remounting filesystem read-only [ 1021.727251][ T7681] loop4: detected capacity change from 0 to 4096 [ 1021.779342][ T7681] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 1021.806542][ T7681] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1021.996159][ T3446] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 1022.007042][ T9775] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 1022.031856][ T9775] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1022.053265][ T9775] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 1022.072757][ T49] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 1022.252204][ T7697] loop4: detected capacity change from 0 to 2048 [ 1022.296891][ T7697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1022.470615][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.554640][ T787] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1022.773892][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 1022.789412][ T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.813871][ T787] usb 2-1: config 0 has no interface number 0 [ 1022.820191][ T787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.841303][ T787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.863491][ T787] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1022.893817][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.920308][ T787] usb 2-1: config 0 descriptor?? [ 1023.069505][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15876'. [ 1023.213445][ T7710] loop0: detected capacity change from 0 to 32768 [ 1023.293397][ T7710] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 1023.293397][ T7710] [ 1023.321971][ T7710] ERROR: (device loop0): dbDiscardAG: -EIO [ 1023.321971][ T7710] [ 1023.355948][ T787] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1023.374600][ T787] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1023.549103][ T787] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 1023.577508][ T787] ft260: probe of 0003:0403:6030.000A failed with error -71 [ 1023.620491][ T787] usb 2-1: USB disconnect, device number 109 [ 1023.634862][ T7731] loop4: detected capacity change from 0 to 512 [ 1023.752383][ T7731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.905682][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.593858][T26894] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1024.784030][T26894] usb 5-1: Using ep0 maxpacket: 32 [ 1024.802386][T26894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.829043][T26894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.846934][T26894] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1024.866362][T26894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.891847][T26894] usb 5-1: config 0 descriptor?? [ 1025.338064][T26894] hid (null): bogus close delimiter [ 1025.370701][T26894] nintendo 0003:057E:200E.000B: bogus close delimiter [ 1025.380283][T26894] nintendo 0003:057E:200E.000B: item 0 2 2 10 parsing failed [ 1025.394848][T26894] nintendo 0003:057E:200E.000B: HID parse failed [ 1025.424487][T26894] nintendo 0003:057E:200E.000B: probe - fail = -22 [ 1025.431409][T26894] nintendo: probe of 0003:057E:200E.000B failed with error -22 [ 1025.546926][ T9] usb 5-1: USB disconnect, device number 89 [ 1025.573849][ T5806] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1025.643880][ T787] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1025.763856][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 1025.772569][ T5806] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1025.785686][ T5806] usb 1-1: config 0 has no interface number 0 [ 1025.792111][ T5806] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.807956][ T5806] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.818323][ T5806] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1025.832895][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.845692][ T787] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.847711][ T5806] usb 1-1: config 0 descriptor?? [ 1025.873768][ T787] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.893729][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1025.900547][ T787] usb 2-1: New USB device found, idVendor=1a34, idProduct=08fb, bcdDevice= 0.00 [ 1025.920228][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.944120][ T787] usb 2-1: config 0 descriptor?? [ 1026.309428][ T5806] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 1026.343811][ T5806] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 1026.400358][ T787] hid-generic 0003:1A34:08FB.000D: item fetching failed at offset 0/1 [ 1026.422964][ T787] hid-generic: probe of 0003:1A34:08FB.000D failed with error -22 [ 1026.507543][ T5806] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 1026.534159][ T5806] ft260: probe of 0003:0403:6030.000C failed with error -71 [ 1026.564603][ T5806] usb 1-1: USB disconnect, device number 91 [ 1026.647465][T26894] usb 2-1: USB disconnect, device number 110 [ 1027.231036][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15915'. [ 1027.313208][ T7809] netlink: 134700 bytes leftover after parsing attributes in process `syz.2.15916'. [ 1027.339201][ T7809] openvswitch: netlink: Message has 5 unknown bytes. [ 1027.625519][ T7803] loop4: detected capacity change from 0 to 40427 [ 1027.658226][ T7803] F2FS-fs (loop4): invalid crc value [ 1027.686458][ T7803] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1027.710900][ T7819] loop0: detected capacity change from 0 to 8192 [ 1027.799313][ T7819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1027.818892][ T7819] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1027.829038][ T7819] REISERFS (device loop0): using ordered data mode [ 1027.838741][ T7819] reiserfs: using flush barriers [ 1027.844523][ T7803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1027.853834][ T7819] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1027.870952][ T7819] REISERFS (device loop0): checking transaction log (loop0) [ 1027.944796][ T7819] REISERFS (device loop0): Using r5 hash to sort names [ 1027.962430][ T7819] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1028.046044][ T9775] syz-executor: attempt to access beyond end of device [ 1028.046044][ T9775] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1028.083817][ T9775] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1028.111634][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15925'. [ 1028.714158][ T787] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1028.861415][ T7856] program syz.2.15937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.913825][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 1028.937461][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.971975][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.985020][ T787] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1028.994832][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.025614][ T787] usb 1-1: config 0 descriptor?? [ 1029.073982][T26894] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1029.273769][T26894] usb 5-1: Using ep0 maxpacket: 32 [ 1029.285336][T26894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1029.303733][T26894] usb 5-1: config 0 has no interface number 0 [ 1029.310072][T26894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.333787][ T5806] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1029.341764][T26894] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.352131][T26894] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1029.361956][T26894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.372576][T26894] usb 5-1: config 0 descriptor?? [ 1029.457452][ T787] cherry 0003:046A:0027.000E: unknown main item tag 0x3 [ 1029.469512][ T787] cherry 0003:046A:0027.000E: unknown main item tag 0x1 [ 1029.477283][ T787] cherry 0003:046A:0027.000E: bogus close delimiter [ 1029.489238][ T787] cherry 0003:046A:0027.000E: item 0 0 2 10 parsing failed [ 1029.498274][ T787] cherry: probe of 0003:046A:0027.000E failed with error -22 [ 1029.534001][ T5806] usb 3-1: Using ep0 maxpacket: 16 [ 1029.541907][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1029.551589][ T5806] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1029.566512][ T5806] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1029.576730][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.592260][ T5806] usb 3-1: Product: syz [ 1029.597354][ T5806] usb 3-1: Manufacturer: syz [ 1029.602432][ T5806] usb 3-1: SerialNumber: syz [ 1029.687972][ T787] usb 1-1: USB disconnect, device number 92 [ 1029.803545][T26894] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1029.813189][T26894] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1029.840457][ T5806] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1029.853509][ T5806] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1030.005087][T26894] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 1030.025925][T26894] ft260: probe of 0003:0403:6030.000F failed with error -71 [ 1030.045050][T26894] usb 5-1: USB disconnect, device number 90 [ 1030.298816][ T5806] usb 3-1: USB disconnect, device number 95 [ 1030.348375][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.467388][ T7876] loop0: detected capacity change from 0 to 16 [ 1030.493156][ T7876] erofs: (device loop0): mounted with root inode @ nid 36. [ 1030.531177][ T7876] overlayfs: failed to get redirect (-117) [ 1030.789450][ T787] kernel write not supported for file /input/mice (pid: 787 comm: kworker/0:2) [ 1031.053274][ T7888] loop0: detected capacity change from 0 to 128 [ 1031.148425][ T7888] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1031.289645][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.413898][ T787] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1031.554867][ T7906] loop4: detected capacity change from 0 to 512 [ 1031.577750][ T7906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1031.605279][ T7906] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.15962: invalid indirect mapped block 9 (level 0) [ 1031.605650][ T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1031.673473][ T7906] EXT4-fs (loop4): 1 truncate cleaned up [ 1031.701300][ T7906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.729316][ T787] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1031.759977][ T787] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.780904][ T787] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1031.808121][ T28] audit: type=1800 audit(1031.794:12704): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15962" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1031.815348][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1031.861281][ T787] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1031.882446][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.903347][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.939559][ T787] usb 3-1: config 0 descriptor?? [ 1032.337197][ T7935] loop4: detected capacity change from 0 to 4096 [ 1032.379534][ T787] hid-alps 0003:044E:120C.0010: unbalanced collection at end of report description [ 1032.407242][ T787] hid-alps 0003:044E:120C.0010: parse failed [ 1032.413586][ T787] hid-alps: probe of 0003:044E:120C.0010 failed with error -22 [ 1032.661913][ T787] usb 3-1: USB disconnect, device number 96 [ 1032.963085][ T5806] kernel read not supported for file /dsp (pid: 5806 comm: kworker/1:4) [ 1033.091233][ T7957] loop0: detected capacity change from 0 to 512 [ 1033.114368][ T7957] EXT4-fs: Ignoring removed oldalloc option [ 1033.131999][ T7957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1033.204566][ T7957] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1033.242087][ T7957] EXT4-fs (loop0): 1 truncate cleaned up [ 1033.249692][ T7957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.366808][ T7964] sp0: Synchronizing with TNC [ 1033.450297][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.594010][ T5806] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1033.784044][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 1033.804174][ T5806] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1033.818831][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.832417][ T5806] usb 5-1: Product: syz [ 1033.838159][ T5806] usb 5-1: Manufacturer: syz [ 1033.843018][ T5806] usb 5-1: SerialNumber: syz [ 1033.854236][ T5806] usb 5-1: config 0 descriptor?? [ 1033.862764][ T5806] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1033.880966][ T5806] dvb-usb: bulk message failed: -22 (2/0) [ 1033.895862][ T5806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1033.912278][ T5806] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1033.931094][ T5806] usb 5-1: media controller created [ 1033.977997][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1034.010542][ T5806] usb 5-1: selecting invalid altsetting 7 [ 1034.016521][ T5806] cxusb: set interface failed [ 1034.021769][ T5806] dvb-usb: bulk message failed: -22 (1/0) [ 1034.082825][ T5806] DVB: Unable to find symbol lgdt330x_attach() [ 1034.091028][ T5806] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1034.243233][ T28] audit: type=1326 audit(1034.224:12705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.276066][ T5806] rc_core: IR keymap rc-dvico-portable not found [ 1034.299960][ T28] audit: type=1326 audit(1034.254:12706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.308119][ T5806] Registered IR keymap rc-empty [ 1034.354169][ T5806] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1034.366998][ T28] audit: type=1326 audit(1034.264:12707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4725f5d04e code=0x7ffc0000 [ 1034.393993][ T5806] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input70 [ 1034.408717][ T28] audit: type=1326 audit(1034.264:12708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4725f5d04e code=0x7ffc0000 [ 1034.432103][ T28] audit: type=1326 audit(1034.264:12709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.454477][ T5806] dvb-usb: schedule remote query interval to 100 msecs. [ 1034.473406][ T5806] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1034.491802][ T28] audit: type=1326 audit(1034.264:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.548694][ T28] audit: type=1326 audit(1034.274:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.549945][ T5806] usb 5-1: USB disconnect, device number 91 [ 1034.580057][T26894] dvb-usb: bulk message failed: -22 (1/0) [ 1034.592890][ T28] audit: type=1326 audit(1034.274:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1034.743491][ T5806] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1035.171488][ T8006] loop4: detected capacity change from 0 to 65 [ 1035.195327][ T8006] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1035.241114][ T7993] loop0: detected capacity change from 0 to 32768 [ 1036.473815][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16026'. [ 1036.613176][ T8039] loop4: detected capacity change from 0 to 32768 [ 1036.654104][ T8039] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.726372][ T8039] XFS (loop4): Ending clean mount [ 1036.740275][ T8039] XFS (loop4): Quotacheck needed: Please wait. [ 1036.810693][ T8039] XFS (loop4): Quotacheck: Done. [ 1037.105322][ T9775] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1037.302064][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16033'. [ 1037.324258][ T8068] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16033'. [ 1038.287328][ T8108] loop4: detected capacity change from 0 to 512 [ 1038.310847][ T8108] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.16051: corrupted in-inode xattr: bad e_name length [ 1038.334180][ T8108] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.16051: couldn't read orphan inode 15 (err -117) [ 1038.353102][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.367554][T26894] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1038.419945][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.563833][T26894] usb 3-1: Using ep0 maxpacket: 32 [ 1038.579452][T26894] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1038.589155][T26894] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1038.603016][T26894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1038.614312][T26894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1038.625263][T26894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1038.644309][T26894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1038.658840][T26894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1038.669486][T26894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1038.683008][T26894] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1038.695757][T26894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.707463][T26894] usb 3-1: config 0 descriptor?? [ 1038.789497][ T8120] loop4: detected capacity change from 0 to 1024 [ 1038.819581][ T8120] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1038.827252][ T8120] hfsplus: xattr searching failed [ 1038.864903][ T3468] hfsplus: b-tree write err: -5, ino 25 [ 1038.874127][ T3468] hfsplus: b-tree write err: -5, ino 4 [ 1038.880052][ T3468] hfsplus: b-tree write err: -5, ino 2 [ 1038.938036][T26894] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1038.967019][T26894] usb 3-1: USB disconnect, device number 97 [ 1038.976341][T26894] usblp0: removed [ 1039.306463][ T5806] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1039.480063][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16067'. [ 1039.497998][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 1039.515402][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.537579][T26894] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1039.550470][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.579993][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1039.602790][ T5806] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1039.619134][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.640172][ T5806] usb 5-1: config 0 descriptor?? [ 1039.753943][T26894] usb 3-1: Using ep0 maxpacket: 16 [ 1039.766748][T26894] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1039.778959][T26894] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1039.789922][T26894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1039.803425][T26894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.819729][T26894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1039.830720][T26894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1039.846452][T26894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1039.857782][T26894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.873810][T26894] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 0.40 [ 1039.886108][T26894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.897138][T26894] usb 3-1: config 0 descriptor?? [ 1039.906563][T26894] port100 3-1:0.0: NFC: Could not get supported command types [ 1040.075668][ T5806] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1040.095380][ T5806] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1040.105752][ T5806] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1040.118625][T26894] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x054C pid 0x06C1 [ 1040.130842][ T5806] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1040.142788][ T5806] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1040.154270][T26894] usb 3-1: USB disconnect, device number 98 [ 1040.168334][ T5806] input: HID 0955:7214 Haptics as /devices/virtual/input/input71 [ 1040.185811][T26894] usblp0: removed [ 1040.259143][ T5806] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 1040.267853][ T5806] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1040.348188][ T788] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1040.369124][ T5806] usb 5-1: USB disconnect, device number 92 [ 1040.375597][ T788] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1040.388655][ T788] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1040.405849][ T788] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1040.750221][ T8184] loop0: detected capacity change from 0 to 256 [ 1040.758291][ T8184] exfat: Deprecated parameter 'namecase' [ 1040.779684][ T8184] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1041.003872][T26894] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1041.197241][T26894] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1041.223876][T26894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.241259][T26894] usb 2-1: config 0 descriptor?? [ 1041.259420][T26894] cp210x 2-1:0.0: cp210x converter detected [ 1041.556619][ T8208] loop0: detected capacity change from 0 to 1024 [ 1041.615745][ T8208] hfsplus: bad catalog entry type [ 1041.660474][ T42] hfsplus: b-tree write err: -5, ino 25 [ 1041.666423][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1041.672024][ T42] hfsplus: b-tree write err: -5, ino 2 [ 1041.888288][T26894] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1041.911054][T26894] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1041.924220][T26894] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1041.935203][T26894] usb 2-1: USB disconnect, device number 111 [ 1041.954343][T26894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1041.962734][T26894] cp210x 2-1:0.0: device disconnected [ 1042.642817][ T28] audit: type=1326 audit(1042.624:12713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.694133][ T28] audit: type=1326 audit(1042.624:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.716201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.748772][ T28] audit: type=1326 audit(1042.634:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.801707][ T28] audit: type=1326 audit(1042.634:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.834499][ T28] audit: type=1326 audit(1042.634:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.858303][ T28] audit: type=1326 audit(1042.634:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.883766][ T28] audit: type=1326 audit(1042.634:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.16115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x7ffc0000 [ 1042.893968][T26894] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1043.173917][T26894] usb 2-1: Using ep0 maxpacket: 32 [ 1043.189878][T26894] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1043.201767][T26894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.215432][T26894] usb 2-1: Product: syz [ 1043.230677][T26894] usb 2-1: Manufacturer: syz [ 1043.236954][T26894] usb 2-1: SerialNumber: syz [ 1043.242332][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16125'. [ 1043.247855][T26894] usb 2-1: config 0 descriptor?? [ 1043.277669][T26894] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1043.286320][T26894] dvb-usb: bulk message failed: -22 (2/0) [ 1043.298750][T26894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1043.310325][T26894] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1043.319456][T26894] usb 2-1: media controller created [ 1043.371101][T26894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.450434][T26894] usb 2-1: selecting invalid altsetting 7 [ 1043.476899][T26894] cxusb: set interface failed [ 1043.481730][T26894] dvb-usb: bulk message failed: -22 (1/0) [ 1043.546545][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16129'. [ 1043.623920][T26894] DVB: Unable to find symbol lgdt330x_attach() [ 1043.644124][T26894] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1043.692938][ T8277] sp0: Synchronizing with TNC [ 1043.776873][T26894] rc_core: IR keymap rc-dvico-portable not found [ 1043.791238][T26894] Registered IR keymap rc-empty [ 1043.805276][T26894] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1043.826988][T26894] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input72 [ 1043.841731][T26894] dvb-usb: schedule remote query interval to 100 msecs. [ 1043.849226][T26894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1043.874614][T26894] usb 2-1: USB disconnect, device number 112 [ 1043.935999][ T8285] loop4: detected capacity change from 0 to 512 [ 1043.978527][T26894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1044.008759][ T8285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.127857][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.997795][ T8297] loop0: detected capacity change from 0 to 32768 [ 1045.060025][ T8297] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1045.161613][ T8297] XFS (loop0): Ending clean mount [ 1045.199450][ T8297] XFS (loop0): Quotacheck needed: Please wait. [ 1045.368578][ T8297] XFS (loop0): Quotacheck: Done. [ 1045.520561][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1045.540457][ T8349] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16159'. [ 1046.213885][ T788] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1046.368463][ T8380] sp0: Synchronizing with TNC [ 1046.415803][ T788] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1046.427878][ T788] usb 3-1: config 0 has no interface number 0 [ 1046.434529][ T788] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1046.445814][ T788] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1046.465242][ T788] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1046.477688][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.486981][ T788] usb 3-1: Product: syz [ 1046.492045][ T788] usb 3-1: Manufacturer: syz [ 1046.504099][ T788] usb 3-1: SerialNumber: syz [ 1046.519870][ T788] usb 3-1: config 0 descriptor?? [ 1046.534558][ T8363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1046.543761][ T788] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1046.572524][ T788] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1046.716649][ T8388] loop4: detected capacity change from 0 to 1024 [ 1046.911179][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1046.939668][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1046.956079][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1046.976730][ T49] hfsplus: b-tree write err: -5, ino 20 [ 1047.080079][ T9] usb 3-1: USB disconnect, device number 99 [ 1047.087457][ T8394] netlink: 'syz.1.16182': attribute type 4 has an invalid length. [ 1047.103322][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1047.118647][ T8394] netlink: 'syz.1.16182': attribute type 3 has an invalid length. [ 1047.144583][ T9] cyberjack 3-1:0.69: device disconnected [ 1047.154269][ T8394] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.16182'. [ 1047.231190][ T788] hid-generic 0002:0001:0D97.0012: item fetching failed at offset 0/2 [ 1047.254922][ T788] hid-generic: probe of 0002:0001:0D97.0012 failed with error -22 [ 1047.321895][ T8403] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1047.351641][ T8404] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.361357][ T8404] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.370362][ T8404] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.379161][ T8404] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.549868][ T8412] loop4: detected capacity change from 0 to 4096 [ 1047.578485][ T8412] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1048.806015][ T8436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16201'. [ 1048.861657][ T8430] loop4: detected capacity change from 0 to 32768 [ 1049.054059][ T8430] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1049.363503][ T8430] XFS (loop4): Ending clean mount [ 1049.424747][ T8461] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16209'. [ 1049.449813][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16209'. [ 1049.490341][ T9775] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1049.537711][ T787] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1049.758767][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1049.801894][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.824001][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.843811][ T787] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1049.853305][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.906871][ T787] usb 2-1: config 0 descriptor?? [ 1050.337540][ T787] ntrig 0003:1B96:0008.0013: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 1050.477977][ T8478] loop4: detected capacity change from 0 to 32768 [ 1050.546094][ T787] usb 2-1: USB disconnect, device number 113 [ 1050.554886][ T28] audit: type=1800 audit(1050.534:12720): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16217" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 1050.790426][ T28] audit: type=1326 audit(1050.774:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.16223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x0 [ 1051.785499][ T8504] loop4: detected capacity change from 0 to 40427 [ 1051.804851][ T8504] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1051.812745][ T8504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1051.854528][ T8504] F2FS-fs (loop4): invalid crc value [ 1051.896281][ T8504] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1052.013726][ T8504] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1052.020868][ T8504] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1052.713811][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16240'. [ 1052.723469][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16240'. [ 1052.743921][ T8540] nbd: socks must be embedded in a SOCK_ITEM attr [ 1053.150033][ T8547] loop4: detected capacity change from 0 to 512 [ 1053.175906][ T8547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.193836][ T8547] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1053.260242][ T8547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1053.302852][ T8547] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4057: comm syz.4.16244: Allocating blocks 41-42 which overlap fs metadata [ 1053.339672][ T8547] Quota error (device loop4): write_blk: dquota write failed [ 1053.347962][ T8547] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1053.357985][ T8547] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4057: comm syz.4.16244: Allocating blocks 41-42 which overlap fs metadata [ 1053.376024][ T8547] Quota error (device loop4): write_blk: dquota write failed [ 1053.399409][ T8547] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1053.425983][ T8547] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.16244: Failed to acquire dquot type 1 [ 1053.478506][ T8547] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1053.510820][ T8547] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #12: comm syz.4.16244: corrupted inode contents [ 1053.528436][ T8547] EXT4-fs error (device loop4): ext4_dirty_inode:6136: inode #12: comm syz.4.16244: mark_inode_dirty error [ 1053.562600][ T8547] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #12: comm syz.4.16244: corrupted inode contents [ 1053.598317][ T8547] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.16244: mark_inode_dirty error [ 1053.657698][ T8547] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #12: comm syz.4.16244: corrupted inode contents [ 1053.700152][ T8547] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1053.732909][ T8547] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #12: comm syz.4.16244: corrupted inode contents [ 1053.765112][ T8547] EXT4-fs error (device loop4): ext4_truncate:4294: inode #12: comm syz.4.16244: mark_inode_dirty error [ 1053.799131][ T8547] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1053.816575][ T8547] EXT4-fs (loop4): 1 truncate cleaned up [ 1053.831819][ T8547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.910752][ T8547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1053.933436][ T8547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1054.001105][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.219681][ T8580] trusted_key: encrypted_key: key trusted:syz not found [ 1054.473770][ T788] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1054.493026][ T8577] loop4: detected capacity change from 0 to 32768 [ 1054.504507][ T8577] XFS: attr2 mount option is deprecated. [ 1054.558591][ T8577] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1054.629543][ T8577] XFS (loop4): Ending clean mount [ 1054.641403][ T8577] XFS (loop4): Quotacheck needed: Please wait. [ 1054.676638][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.713904][ T788] usb 2-1: config 0 has no interfaces? [ 1054.717497][ T8577] XFS (loop4): Quotacheck: Done. [ 1054.749785][ T788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.792255][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.818557][ T788] usb 2-1: config 0 descriptor?? [ 1054.866336][ T9775] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1054.918645][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.033549][ T788] usb 2-1: USB disconnect, device number 114 [ 1055.088559][ T28] audit: type=1326 audit(1055.074:12722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.0.16265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4725f9c819 code=0x0 [ 1055.243843][ T787] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1055.433770][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 1055.441552][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.453551][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.463360][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1055.476958][ T787] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1055.486147][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.497366][ T787] usb 3-1: config 0 descriptor?? [ 1055.775613][ T8607] netdevsim netdevsim1 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.785464][ T8607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.795265][ T8607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.804432][ T8607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.925972][ T787] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 1055.929298][ T8611] netem: change failed [ 1055.944395][ T787] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 1055.969047][ T787] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 1055.983728][ T787] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 1055.991202][ T787] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 1056.022306][ T787] input: HID 0955:7214 Haptics as /devices/virtual/input/input73 [ 1056.049859][ T787] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 1056.058236][ T787] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1056.173525][ T8] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1056.224170][ T787] usb 3-1: USB disconnect, device number 100 [ 1056.245309][ T8] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1056.301593][ T8] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1056.349216][ T8] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1057.032056][ T8645] loop0: detected capacity change from 0 to 256 [ 1057.053094][ T8645] exfat: Deprecated parameter 'utf8' [ 1057.067483][ T8645] exfat: Deprecated parameter 'namecase' [ 1057.122146][ T8645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 1057.230436][ T8627] loop4: detected capacity change from 0 to 32768 [ 1057.405485][ T787] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1057.562151][ T8652] loop4: detected capacity change from 0 to 4096 [ 1057.605782][ T787] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1057.636034][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.649462][ T8652] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1057.665256][ T787] usb 2-1: config 0 has no interface number 0 [ 1057.672128][ T8652] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1057.697401][ T8652] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1057.727637][ T787] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 1057.737391][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.750322][ T787] usb 2-1: Product: syz [ 1057.751541][ T8652] ntfs: volume version 3.1. [ 1057.755093][ T787] usb 2-1: Manufacturer: syz [ 1057.768749][ T787] usb 2-1: SerialNumber: syz [ 1057.777119][ T787] usb 2-1: config 0 descriptor?? [ 1057.791197][ T787] cdc_acm 2-1:0.123: More than one union descriptor, skipping ... [ 1058.003537][ T787] usb 2-1: USB disconnect, device number 115 [ 1058.132697][ T9775] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1058.494256][ T788] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1058.683842][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 1058.695762][ T788] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1058.709622][ T788] usb 5-1: config 0 has no interface number 0 [ 1058.727572][ T788] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1058.742063][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.763812][ T788] usb 5-1: Product: syz [ 1058.768185][ T788] usb 5-1: Manufacturer: syz [ 1058.773349][ T788] usb 5-1: SerialNumber: syz [ 1058.795428][ T788] usb 5-1: config 0 descriptor?? [ 1058.814008][ T788] smsc95xx v2.0.0 [ 1059.304121][ T787] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1059.440772][ T788] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1059.458298][ T788] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1059.468813][ T788] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1059.485830][ T788] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 1059.497767][ T788] usb 5-1: USB disconnect, device number 93 [ 1059.522284][ T787] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1059.534435][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.542665][ T787] usb 3-1: Product: syz [ 1059.548169][ T787] usb 3-1: Manufacturer: syz [ 1059.552993][ T787] usb 3-1: SerialNumber: syz [ 1059.569268][ T787] usb 3-1: config 0 descriptor?? [ 1059.578218][ T787] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 101 [ 1059.819378][ T8698] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.188870][ T787] i2c i2c-2: failure reading functionality [ 1060.229170][ T787] i2c i2c-2: connected i2c-tiny-usb device [ 1060.249073][ T8713] loop4: detected capacity change from 0 to 256 [ 1060.253181][ T787] usb 3-1: USB disconnect, device number 101 [ 1060.326567][ T8713] FAT-fs (loop4): Directory bread(block 64) failed [ 1060.348616][ T8713] FAT-fs (loop4): Directory bread(block 65) failed [ 1060.365592][ T8713] FAT-fs (loop4): Directory bread(block 66) failed [ 1060.384087][ T8713] FAT-fs (loop4): Directory bread(block 67) failed [ 1060.406131][ T8713] FAT-fs (loop4): Directory bread(block 68) failed [ 1060.428185][ T8713] FAT-fs (loop4): Directory bread(block 69) failed [ 1060.444088][ T8713] FAT-fs (loop4): Directory bread(block 70) failed [ 1060.464054][ T8713] FAT-fs (loop4): Directory bread(block 71) failed [ 1060.471108][ T8713] FAT-fs (loop4): Directory bread(block 72) failed [ 1060.503802][ T8713] FAT-fs (loop4): Directory bread(block 73) failed [ 1061.152812][ T8725] loop4: detected capacity change from 0 to 128 [ 1061.166845][ T8725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1061.173517][ T8725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1061.222417][ T8725] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1061.248708][ T8725] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1061.562445][ T9775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1061.956494][ T8739] loop0: detected capacity change from 0 to 32768 [ 1061.976387][ T8739] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1062.098239][ T8739] XFS (loop0): Ending clean mount [ 1062.245748][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1062.436391][ T8772] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1063.340034][ T8806] loop4: detected capacity change from 0 to 128 [ 1063.385120][ T8806] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1063.462018][ T8806] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1063.734087][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1063.883480][ T28] audit: type=1326 audit(1063.864:12723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1063.983856][ T28] audit: type=1326 audit(1063.864:12724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1064.032765][ T28] audit: type=1326 audit(1063.884:12725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1064.093749][ T28] audit: type=1326 audit(1063.884:12726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1064.160242][ T28] audit: type=1326 audit(1063.884:12727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1064.217879][ T28] audit: type=1326 audit(1063.884:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.1.16365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f273539c819 code=0x7ffc0000 [ 1064.629602][ T8841] loop4: detected capacity change from 0 to 256 [ 1064.655530][ T8819] loop0: detected capacity change from 0 to 32768 [ 1064.667859][ T8841] exfat: Deprecated parameter 'utf8' [ 1064.689952][ T8819] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.16341 (8819) [ 1064.742125][ T8841] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1064.758920][ T8819] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1064.803135][ T8819] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1064.853814][ T8819] BTRFS info (device loop0): enabling auto defrag [ 1064.880905][ T8819] BTRFS info (device loop0): use no compression [ 1064.903089][ T8819] BTRFS info (device loop0): max_inline at 4096 [ 1064.943311][ T8819] BTRFS info (device loop0): using free space tree [ 1065.090311][ T8819] BTRFS info (device loop0): enabling ssd optimizations [ 1065.103906][ T8819] BTRFS info (device loop0): auto enabling async discard [ 1065.302054][ T8871] bridge0: entered promiscuous mode [ 1065.394616][ T8873] tipc: Started in network mode [ 1065.410046][ T8873] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 1065.429845][ T8873] tipc: Enabling of bearer rejected, failed to enable media [ 1065.575128][ T5775] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1065.643455][ T8876] loop4: detected capacity change from 0 to 8192 [ 1065.658874][ T8876] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1065.699352][ T8876] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1065.714229][ T8876] REISERFS (device loop4): using ordered data mode [ 1065.720788][ T8876] reiserfs: using flush barriers [ 1065.759079][ T8876] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1065.822435][ T8876] REISERFS (device loop4): checking transaction log (loop4) [ 1065.894595][ T8876] REISERFS (device loop4): Using r5 hash to sort names [ 1065.908603][ T8876] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1066.093778][T26894] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1066.290415][T26894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1066.340601][T26894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.383218][T26894] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1066.398014][T26894] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1066.425609][T26894] usb 2-1: Manufacturer: syz [ 1066.443484][T26894] usb 2-1: config 0 descriptor?? [ 1066.752757][ T8901] binder: 8900:8901 ioctl c0306201 0 returned -14 [ 1066.760896][ T8901] binder: 8900:8901 ioctl c00c6211 0 returned -14 [ 1066.881481][T26894] cougar 0003:060B:700A.0015: item fetching failed at offset 3/5 [ 1066.890539][T26894] cougar 0003:060B:700A.0015: parse failed [ 1066.896920][T26894] cougar: probe of 0003:060B:700A.0015 failed with error -22 [ 1067.115303][ T8] usb 2-1: USB disconnect, device number 116 [ 1067.354802][ T8913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16398'. [ 1067.405995][ T8915] loop4: detected capacity change from 0 to 4096 [ 1067.471016][ T8918] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.947625][ T8935] loop0: detected capacity change from 0 to 256 [ 1068.049862][ T8935] FAT-fs (loop0): Directory bread(block 64) failed [ 1068.064623][ T8935] FAT-fs (loop0): Directory bread(block 65) failed [ 1068.081660][ T8935] FAT-fs (loop0): Directory bread(block 66) failed [ 1068.098405][ T8935] FAT-fs (loop0): Directory bread(block 67) failed [ 1068.126533][ T8935] FAT-fs (loop0): Directory bread(block 68) failed [ 1068.159525][ T8935] FAT-fs (loop0): Directory bread(block 69) failed [ 1068.194716][ T8935] FAT-fs (loop0): Directory bread(block 70) failed [ 1068.214066][ T8935] FAT-fs (loop0): Directory bread(block 71) failed [ 1068.226795][ T8935] FAT-fs (loop0): Directory bread(block 72) failed [ 1068.234699][ T8935] FAT-fs (loop0): Directory bread(block 73) failed [ 1068.803369][ T8966] hugetlbfs: Bad value 'ß' for mount option 'size' [ 1068.803369][ T8966] [ 1068.813240][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16424'. [ 1068.952964][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16427'. [ 1069.168772][ T8976] loop4: detected capacity change from 0 to 8192 [ 1069.200460][ T8976] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1069.269877][ T8976] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1069.330679][ T8976] REISERFS (device loop4): using ordered data mode [ 1069.378674][ T8976] reiserfs: using flush barriers [ 1069.403861][ T8976] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1069.435767][ T8976] REISERFS (device loop4): checking transaction log (loop4) [ 1069.663227][ T8976] REISERFS (device loop4): Using tea hash to sort names [ 1069.681170][ T8976] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1070.158552][ T9002] tipc: Enabling of bearer rejected, failed to enable media [ 1070.450435][ T9013] loop4: detected capacity change from 0 to 8 [ 1070.881716][ T9030] loop4: detected capacity change from 0 to 1024 [ 1071.040436][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1071.052494][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1071.070198][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1071.347134][ T9044] loop4: detected capacity change from 0 to 128 [ 1071.404005][ T9044] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1071.453981][ T9044] hpfs: filesystem error: improperly stopped [ 1071.460568][ T9044] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1071.508294][ T9044] hpfs: You really don't want any checks? You are crazy... [ 1071.530398][ T9044] hpfs: Code page index out of array [ 1071.548621][ T9044] hpfs: code page support is disabled [ 1071.561890][ T9044] hpfs: hpfs_map_4sectors(): unaligned read [ 1071.572407][ T9044] hpfs: hpfs_map_4sectors(): unaligned read [ 1071.599093][ T9044] hpfs: filesystem error: unable to find root dir [ 1071.625565][ T9044] hpfs: hpfs_map_4sectors(): unaligned read [ 1072.060543][ T9064] loop4: detected capacity change from 0 to 4096 [ 1072.097405][ T9064] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1072.335001][ T9074] program syz.2.16474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.428445][ T9070] loop0: detected capacity change from 0 to 4096 [ 1072.447961][ T9070] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1072.539959][ T9070] ntfs: volume version 3.1. [ 1072.644110][ T9070] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 1072.688066][ T9070] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1073.653884][ T8] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1073.756361][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16487'. [ 1073.843721][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1073.853018][ T8] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1073.865820][ T8] usb 3-1: config 0 has no interface number 0 [ 1073.876215][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1073.885939][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.895059][ T8] usb 3-1: Product: syz [ 1073.899256][ T8] usb 3-1: Manufacturer: syz [ 1073.903961][ T8] usb 3-1: SerialNumber: syz [ 1073.923737][ T8] usb 3-1: config 0 descriptor?? [ 1073.932485][ T8] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1074.150493][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1074.184494][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1074.312786][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16492'. [ 1074.392493][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 1074.595478][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1074.609381][ T8] usb 3-1: USB disconnect, device number 102 [ 1074.626464][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1074.642350][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1074.658047][ T8] quatech2 3-1:0.51: device disconnected [ 1074.703780][T26894] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1074.885922][T26894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.899708][T26894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1074.909992][T26894] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1074.923566][T26894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.945599][T26894] usb 2-1: config 0 descriptor?? [ 1074.960860][T26894] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1074.971828][T26894] dvb-usb: bulk message failed: -22 (3/0) [ 1074.981843][T26894] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1074.999777][T26894] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1075.009819][T26894] usb 2-1: media controller created [ 1075.018519][T26894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1075.032800][T26894] dvb-usb: bulk message failed: -22 (6/0) [ 1075.046577][T26894] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1075.057526][T26894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input74 [ 1075.094316][T26894] dvb-usb: schedule remote query interval to 150 msecs. [ 1075.106826][T26894] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1075.201960][ T9135] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1075.269334][T26894] dvb-usb: bulk message failed: -22 (1/0) [ 1075.277992][T26894] dvb-usb: error while querying for an remote control event. [ 1075.290016][ T788] usb 2-1: USB disconnect, device number 117 [ 1075.309478][ T9137] netlink: 'syz.2.16503': attribute type 3 has an invalid length. [ 1075.340507][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1075.504358][ T9145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.515649][ T9145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.527370][ T9145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.538730][ T9145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.798280][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16512'. [ 1076.086660][ T9170] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 1077.157099][ T9200] loop4: detected capacity change from 0 to 512 [ 1077.184788][ T9200] EXT4-fs: Ignoring removed bh option [ 1077.217424][ T9200] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1077.232443][ T9188] loop0: detected capacity change from 0 to 32768 [ 1077.254254][ T9188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.16525 (9188) [ 1077.321534][ T9200] EXT4-fs (loop4): 1 truncate cleaned up [ 1077.338581][ T9188] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1077.355466][ T9188] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1077.361275][ T9200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.364784][ T9188] BTRFS info (device loop0): setting nodatasum [ 1077.383112][ T9188] BTRFS info (device loop0): force zlib compression, level 3 [ 1077.392675][ T9188] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1077.402131][ T9188] BTRFS info (device loop0): use lzo compression, level 0 [ 1077.409540][ T9188] BTRFS info (device loop0): turning on flush-on-commit [ 1077.416834][ T9188] BTRFS info (device loop0): enabling auto defrag [ 1077.423329][ T9188] BTRFS info (device loop0): max_inline at 4096 [ 1077.429867][ T9188] BTRFS info (device loop0): using free space tree [ 1077.559803][ T9188] BTRFS info (device loop0): enabling ssd optimizations [ 1077.624548][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.664553][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1078.094205][ T8] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1078.342342][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1078.353899][ T8] usb 3-1: config 0 has no interface number 0 [ 1078.360667][ T8] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1078.413822][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.470851][ T8] usb 3-1: config 0 descriptor?? [ 1078.488288][ T8] usb 3-1: selecting invalid altsetting 1 [ 1078.505516][ T9245] loop0: detected capacity change from 0 to 1024 [ 1078.514097][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 1078.530830][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1078.537858][ T9245] EXT4-fs: Ignoring removed orlov option [ 1078.566109][ T9245] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1078.618637][ T9245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.719192][ T8] DVB: Unable to find symbol cx22700_attach() [ 1078.762348][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.817006][ T9239] loop4: detected capacity change from 0 to 32768 [ 1078.834203][ T8] DVB: Unable to find symbol tda10046_attach() [ 1078.840635][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1078.894975][ T8] usb 3-1: USB disconnect, device number 103 [ 1079.235141][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16548'. [ 1079.929699][ T9274] loop4: detected capacity change from 0 to 64 [ 1080.141499][ T9253] loop0: detected capacity change from 0 to 40427 [ 1080.168939][ T9253] F2FS-fs (loop0): invalid crc value [ 1080.182335][ T9253] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1080.283811][T26894] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1080.293134][ T9253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1080.451937][ T9253] syz.0.16547: attempt to access beyond end of device [ 1080.451937][ T9253] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1080.478739][ T9253] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1080.479983][T26894] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1080.511584][T26894] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1080.525047][T26894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1080.543888][T26894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1080.555252][T26894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1080.569145][T26894] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1080.578559][T26894] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1080.587055][T26894] usb 3-1: Product: syz [ 1080.591472][T26894] usb 3-1: Manufacturer: syz [ 1080.610518][T26894] cdc_wdm 3-1:1.0: skipping garbage [ 1080.618083][T26894] cdc_wdm 3-1:1.0: skipping garbage [ 1080.634291][T26894] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1080.640575][T26894] cdc_wdm 3-1:1.0: Unknown control protocol [ 1080.814212][ T9278] loop4: detected capacity change from 0 to 32768 [ 1080.884676][ T9278] XFS (loop4): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1080.971970][ T8] usb 3-1: USB disconnect, device number 104 [ 1081.128230][ T9278] XFS (loop4): Ending clean mount [ 1081.281488][ T9297] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16560'. [ 1081.340341][ T9775] XFS (loop4): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1081.850618][ T9314] loop4: detected capacity change from 0 to 256 [ 1082.101750][ T28] audit: type=1326 audit(1082.084:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.4.16574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1082.174376][ T28] audit: type=1326 audit(1082.084:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.4.16574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1082.229292][ T28] audit: type=1326 audit(1082.084:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.4.16574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1082.237636][ T9323] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1082.258080][ T28] audit: type=1326 audit(1082.084:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.4.16574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1082.295942][ T9323] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1082.303337][ T9323] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1082.312941][ T9323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1082.321618][ T9323] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1082.329614][ T9323] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1082.336798][ T9323] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1082.344132][ T9323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1082.350901][ T9323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1082.358099][ T9323] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1082.367082][ T9323] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1082.376952][ T9323] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 1082.385010][ T9323] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1082.517588][ T9335] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1082.525078][ T9335] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1082.531880][ T9335] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1082.538649][ T9335] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1082.546052][ T9335] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1082.553966][ T8] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1082.573851][T26894] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1082.720485][ T9341] IPVS: Unknown mcast interface: veth0_to_bond [ 1082.765668][T26894] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1082.765960][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1082.790301][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1082.794250][T26894] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.811615][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1082.830072][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1082.834364][T26894] usb 2-1: config 220 has no interface number 2 [ 1082.846907][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1082.863888][T26894] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1082.884930][T26894] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1082.895097][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1082.896226][T26894] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1082.912404][T26894] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1082.920072][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1082.939437][ T8] usb 5-1: Product: syz [ 1082.940964][T26894] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1082.945777][ T8] usb 5-1: Manufacturer: syz [ 1082.965897][T26894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.975479][T26894] usb 2-1: Product: syz [ 1082.978444][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1082.979674][T26894] usb 2-1: Manufacturer: syz [ 1083.003773][T26894] usb 2-1: SerialNumber: syz [ 1083.009180][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1083.030554][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1083.043897][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 1083.235942][T26894] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1083.246850][T26894] usb 2-1: No valid video chain found. [ 1083.252696][T26894] usb 2-1: selecting invalid altsetting 0 [ 1083.283464][T26894] usb 2-1: selecting invalid altsetting 0 [ 1083.299841][T26894] usbtest: probe of 2-1:220.1 failed with error -22 [ 1083.324203][T26894] usb 2-1: USB disconnect, device number 118 [ 1083.331383][ T8] usb 5-1: USB disconnect, device number 94 [ 1083.383378][ T9357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1083.390308][ T9357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1083.402902][ T9357] vhci_hcd vhci_hcd.0: Device attached [ 1083.416020][ T9358] vhci_hcd: connection closed [ 1083.424013][ T49] vhci_hcd: stop threads [ 1083.433315][ T49] vhci_hcd: release socket [ 1083.438162][ T49] vhci_hcd: disconnect device [ 1084.159064][ T9371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.16598'. [ 1084.171721][ T9371] xt_time: unknown flags 0xf4 [ 1084.235034][ T8] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1084.439713][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1084.451258][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1084.469712][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1084.480305][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1084.512710][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1084.551111][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1084.571218][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1084.589476][ T8] usb 5-1: Product: syz [ 1084.597198][ T8] usb 5-1: Manufacturer: syz [ 1084.612058][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1084.621969][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1084.622216][ T9381] ptrace attach of "./syz-executor exec"[5774] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[9381] [ 1084.631914][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1084.683719][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 1084.891487][ T8] usb 5-1: USB disconnect, device number 95 [ 1084.914501][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1084.923592][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1085.521993][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16617'. [ 1085.783205][ T28] audit: type=1326 audit(1085.764:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1085.852365][ T28] audit: type=1326 audit(1085.794:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1085.913334][ T28] audit: type=1326 audit(1085.804:12735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1085.964013][ T28] audit: type=1326 audit(1085.804:12736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1086.003879][ T28] audit: type=1326 audit(1085.804:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1086.041916][ T28] audit: type=1326 audit(1085.804:12738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9415 comm="syz.4.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f8d3cb9c819 code=0x7ffc0000 [ 1086.336773][ T9422] loop0: detected capacity change from 0 to 4096 [ 1086.366499][ T9422] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1086.468224][ T9422] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1086.496029][ T9422] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1087.213392][ T9424] loop4: detected capacity change from 0 to 40427 [ 1087.246848][ T9424] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 1087.283051][ T9424] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1087.303906][ T9424] F2FS-fs (loop4): Image doesn't support compression [ 1087.332850][ T9424] F2FS-fs (loop4): invalid crc value [ 1087.340263][ T9424] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1087.475086][ T9424] F2FS-fs (loop4): Start checkpoint disabled! [ 1087.497524][ T9424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1087.569766][ T9434] loop0: detected capacity change from 0 to 40427 [ 1087.613089][ T9434] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1087.635690][ T9424] syz.4.16624: attempt to access beyond end of device [ 1087.635690][ T9424] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1087.643281][ T9434] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1087.703239][ T9434] F2FS-fs (loop0): invalid crc value [ 1087.711686][ T9424] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1087.727520][ T9434] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1087.879634][ T9434] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1087.902341][ T9434] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1088.102758][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1088.149883][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1088.758323][ T9457] loop4: detected capacity change from 0 to 512 [ 1088.887988][ T9457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.074824][ T9457] EXT4-fs error (device loop4): ext4_get_first_dir_block:3584: inode #12: comm syz.4.16639: Directory block failed checksum [ 1089.142423][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.753728][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1089.943743][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1089.964729][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 1089.972784][ T9] usb 5-1: config 0 has no interface number 0 [ 1089.993904][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.005459][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.023769][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1090.043934][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.064755][ T9] usb 5-1: config 0 descriptor?? [ 1090.650635][ T9502] openvswitch: netlink: Actions may not be safe on all matching packets [ 1090.701323][ T9] usb 5-1: USB disconnect, device number 96 [ 1091.063794][T26894] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1091.256979][T26894] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.285703][T26894] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1091.309303][T26894] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1091.321281][T26894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.332129][T26894] usb 3-1: Product: syz [ 1091.339434][T26894] usb 3-1: Manufacturer: syz [ 1091.346593][T26894] usb 3-1: SerialNumber: syz [ 1091.359230][T26894] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1091.370651][T26894] usb 3-1: selecting invalid altsetting 0 [ 1091.389870][T26894] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1091.451081][ T9512] CUSE: unknown device info "" [ 1091.464001][ T9512] CUSE: unknown device info "" [ 1091.469085][ T9512] CUSE: unknown device info "" [ 1091.483747][ T9512] CUSE: zero length info key specified [ 1091.579507][T26894] usb 3-1: USB disconnect, device number 105 [ 1091.752441][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16665'. [ 1091.803600][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16665'. [ 1092.191727][ T9535] netlink: 'syz.4.16672': attribute type 62 has an invalid length. [ 1093.036012][ T9538] loop4: detected capacity change from 0 to 40427 [ 1093.050627][ T9538] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1093.075703][ T9538] F2FS-fs (loop4): invalid crc value [ 1093.090454][ T9538] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1093.210069][ T9538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1093.299756][ T9775] syz-executor: attempt to access beyond end of device [ 1093.299756][ T9775] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1093.319653][ T9775] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1093.732406][ T9575] loop0: detected capacity change from 0 to 32768 [ 1093.778424][ T9575] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1093.864573][ T9575] XFS (loop0): Ending clean mount [ 1093.878730][ T9575] XFS (loop0): Quotacheck needed: Please wait. [ 1094.019256][ T9575] XFS (loop0): Quotacheck: Done. [ 1094.163553][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1094.419120][ T9599] loop4: detected capacity change from 0 to 4096 [ 1094.476045][ T9599] ntfs: volume version 3.1. [ 1094.657720][ T8] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1094.832839][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16704'. [ 1094.855973][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1094.881035][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.909876][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.932830][ T8] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1094.950184][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.968643][ T8] usb 2-1: Product: syz [ 1094.987123][ T8] usb 2-1: Manufacturer: syz [ 1095.000902][ T8] usb 2-1: SerialNumber: syz [ 1095.030279][ T8] usb 2-1: selecting invalid altsetting 1 [ 1095.038280][ T8] usb 2-1: unit 6 not found! [ 1095.230652][ T8] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 1095.488364][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1095.518921][ T8] usb 2-1: USB disconnect, device number 119 [ 1095.543238][ T9628] loop4: detected capacity change from 0 to 4096 [ 1095.580101][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.662834][ T9631] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.663543][ T9628] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1095.764175][ T9628] NILFS (loop4): mounting fs with errors [ 1095.899215][ T9628] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1095.942665][ T9628] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1095.953914][ T9628] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 1096.235709][ T9643] netlink: 'syz.2.16720': attribute type 9 has an invalid length. [ 1096.579902][ T9635] loop0: detected capacity change from 0 to 32768 [ 1096.614399][ T9635] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1096.753837][ T5762] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1097.806710][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16746'. [ 1097.987040][ T9704] loop4: detected capacity change from 0 to 512 [ 1098.022653][ T9704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.162474][ T9775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.433533][ T9719] loop0: detected capacity change from 0 to 4096 [ 1098.489018][ T9722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1098.914020][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1099.134519][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1099.157439][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.190030][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.213731][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1099.232822][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.253953][ T9] usb 5-1: config 0 descriptor?? [ 1099.407461][ T9730] loop0: detected capacity change from 0 to 40427 [ 1099.425479][ T9730] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1099.433356][ T9730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1099.459497][ T9730] F2FS-fs (loop0): invalid crc value [ 1099.485649][ T9730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1099.628424][ T9730] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1099.643871][ T9730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1099.707588][ T9] ft260 0003:0403:6030.0017: item fetching failed at offset 0/2 [ 1099.742158][ T9] ft260 0003:0403:6030.0017: failed to parse HID [ 1099.756731][ T9] ft260: probe of 0003:0403:6030.0017 failed with error -22 [ 1099.967531][ T9] usb 5-1: USB disconnect, device number 97 [ 1100.051952][ T9749] netlink: 'syz.1.16768': attribute type 1 has an invalid length. [ 1100.293525][ T9755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16770'. [ 1100.708840][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16777'. [ 1100.736870][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16777'. [ 1100.761203][ T9770] netlink: 'syz.1.16777': attribute type 19 has an invalid length. [ 1100.783770][ T9770] netlink: 'syz.1.16777': attribute type 20 has an invalid length. [ 1101.487146][ T9801] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 1102.198621][ T9819] loop4: detected capacity change from 0 to 4096 [ 1102.259592][ T9823] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.386852][ T9819] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 1102.489640][ T9812] loop0: detected capacity change from 0 to 40427 [ 1102.507833][ T9812] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 1102.545510][ T9812] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1102.574945][ T9812] F2FS-fs (loop0): Image doesn't support compression [ 1102.601559][ T9812] F2FS-fs (loop0): invalid crc value [ 1102.624872][ T9812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1102.767319][ T9812] F2FS-fs (loop0): Start checkpoint disabled! [ 1102.799584][ T9812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1103.942172][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16826'. [ 1103.947092][ T9878] loop4: detected capacity change from 0 to 4096 [ 1103.971321][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16826'. [ 1104.057728][ T9886] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1104.223025][ T9890] ipvlan2: entered promiscuous mode [ 1104.235656][ T9890] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1104.602960][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16836'. [ 1104.668067][ T9904] loop0: detected capacity change from 0 to 4096 [ 1104.738303][ T9909] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1104.765495][ T9910] loop4: detected capacity change from 0 to 256 [ 1105.160474][ T9924] netlink: 'syz.2.16845': attribute type 2 has an invalid length. [ 1105.667173][ T9920] loop0: detected capacity change from 0 to 32768 [ 1105.695132][ T9920] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.16843 (9920) [ 1105.764680][ T9920] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1105.793840][ T9920] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1105.843878][ T9920] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1105.882914][ T9920] BTRFS info (device loop0): use zstd compression, level 3 [ 1105.905732][ T9920] BTRFS info (device loop0): using free space tree [ 1106.057534][ T9920] BTRFS info (device loop0): enabling ssd optimizations [ 1106.093831][ T9920] BTRFS info (device loop0): auto enabling async discard [ 1106.249515][ T9970] binder: 9969:9970 ioctl 4018620d 0 returned -22 [ 1106.272562][ T9970] binder: 9969:9970 ioctl c0306201 200000000300 returned -11 [ 1106.428989][ T5775] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1107.100790][ T9985] loop0: detected capacity change from 0 to 256 [ 1107.210278][ T9985] FAT-fs (loop0): Directory bread(block 64) failed [ 1107.222550][ T9985] FAT-fs (loop0): Directory bread(block 65) failed [ 1107.260873][ T9985] FAT-fs (loop0): Directory bread(block 66) failed [ 1107.294478][ T9985] FAT-fs (loop0): Directory bread(block 67) failed [ 1107.301186][ T9985] FAT-fs (loop0): Directory bread(block 68) failed [ 1107.343793][ T9985] FAT-fs (loop0): Directory bread(block 69) failed [ 1107.350687][ T9985] FAT-fs (loop0): Directory bread(block 70) failed [ 1107.380220][ T9977] loop4: detected capacity change from 0 to 32768 [ 1107.387038][ T9985] FAT-fs (loop0): Directory bread(block 71) failed [ 1107.396445][ T9985] FAT-fs (loop0): Directory bread(block 72) failed [ 1107.403033][ T9985] FAT-fs (loop0): Directory bread(block 73) failed [ 1107.864591][T10005] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1108.106128][T10011] loop4: detected capacity change from 0 to 4096 [ 1108.255125][T10011] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1108.336293][T10011] ntfs3: loop4: ino=5, "/" attr_set_size [ 1108.535040][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16886'. [ 1108.959286][T10020] loop0: detected capacity change from 0 to 32768 [ 1108.996972][T10020] (syz.0.16883,10020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.018067][T10020] (syz.0.16883,10020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1109.092028][T10020] JBD2: Ignoring recovery information on journal [ 1109.187435][T10020] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1109.512477][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 1109.516204][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16903'. [ 1110.091966][T10076] loop0: detected capacity change from 0 to 2048 [ 1110.134462][T10076] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1110.174219][ T5762] udevd[5762]: incorrect nilfs2 checksum on /dev/loop0 [ 1110.191278][T10081] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1110.591150][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16918'. [ 1111.081799][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16932'. [ 1111.099125][T10120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1111.247524][T10124] loop0: detected capacity change from 0 to 4096 [ 1111.812051][T10154] loop0: detected capacity change from 0 to 256 [ 1111.923070][ T5759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1112.185923][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16954'. [ 1112.274050][ T788] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1112.473787][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 1112.491611][ T788] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1112.508032][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.527309][ T788] usb 2-1: Product: syz [ 1112.531636][ T788] usb 2-1: Manufacturer: syz [ 1112.552335][ T788] usb 2-1: SerialNumber: syz [ 1112.561331][ T788] usb 2-1: config 0 descriptor?? [ 1112.572288][ T788] gspca_main: se401-2.14.0 probing 047d:5003 [ 1112.703850][T26894] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1112.924434][T26894] usb 5-1: not running at top speed; connect to a high speed hub [ 1112.973567][T26894] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1112.990182][ T788] gspca_se401: Wrong descriptor type [ 1112.999608][T26894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.021172][T26894] usb 5-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 1113.031145][T26894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.043807][T26894] usb 5-1: Product: syz [ 1113.048140][T26894] usb 5-1: Manufacturer: syz [ 1113.052745][T26894] usb 5-1: SerialNumber: syz [ 1113.198838][ T9] usb 2-1: USB disconnect, device number 120 [ 1113.308094][T26894] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 1113.348222][T26894] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1113.362475][T26894] usb 5-1: USB disconnect, device number 98 [ 1113.399438][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.916510][T10210] netlink: 'syz.1.16973': attribute type 13 has an invalid length. [ 1113.941112][T10210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16973'. [ 1114.479426][T10233] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1114.514143][T26894] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1114.705848][T26894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.731274][T26894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.754303][T26894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.769030][T26894] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.779218][T26894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.803350][T26894] usb 5-1: config 0 descriptor?? [ 1115.233979][T26894] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1115.273077][T26894] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1115.437005][ T8] usb 5-1: USB disconnect, device number 99 [ 1115.674494][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1115.876914][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1115.901823][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1115.911893][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.921143][ T9] usb 2-1: Product: syz [ 1115.926023][ T9] usb 2-1: Manufacturer: syz [ 1115.930665][ T9] usb 2-1: SerialNumber: syz [ 1115.956516][ T9] usb 2-1: config 0 descriptor?? [ 1115.986942][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1116.011592][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1116.027703][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1116.069080][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1116.093674][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1116.127668][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1116.144361][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1116.152934][ T9] usb 2-1: media controller created [ 1116.211527][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.250986][ T9] usb 2-1: selecting invalid altsetting 3 [ 1116.263783][ T9] ttusb2: set interface to alts=3 failed [ 1116.342345][ T9] DVB: Unable to find symbol tda10086_attach() [ 1116.357862][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.364459][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1116.388058][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1116.404236][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1116.433845][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1116.439818][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1116.462450][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1116.518560][ T9] usb 2-1: USB disconnect, device number 121 [ 1116.587697][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1116.974516][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17015'. [ 1117.340199][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17022'. [ 1117.426305][T10320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17024'. [ 1117.445337][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17024'. [ 1117.842210][T10338] loop0: detected capacity change from 0 to 1024 [ 1117.897084][T10338] hfsplus: bad catalog entry type [ 1117.934748][T29461] hfsplus: b-tree write err: -5, ino 25 [ 1117.950299][T29461] hfsplus: b-tree write err: -5, ino 4 [ 1117.964054][T29461] hfsplus: b-tree write err: -5, ino 2 [ 1118.052757][T10346] [ 1118.055134][T10346] ====================================================== [ 1118.062264][T10346] WARNING: possible circular locking dependency detected [ 1118.069382][T10346] syzkaller #0 Not tainted [ 1118.073905][T10346] ------------------------------------------------------ [ 1118.080933][T10346] syz.2.17036/10346 is trying to acquire lock: [ 1118.087144][T10346] ffffffff9768ff58 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.097561][T10346] [ 1118.097561][T10346] but task is already holding lock: [ 1118.104948][T10346] ffff888143bf0ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1118.115440][T10346] [ 1118.115440][T10346] which lock already depends on the new lock. [ 1118.115440][T10346] [ 1118.125983][T10346] [ 1118.125983][T10346] the existing dependency chain (in reverse order) is: [ 1118.135012][T10346] [ 1118.135012][T10346] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1118.143343][T10346] __mutex_lock+0x136/0xcc0 [ 1118.148395][T10346] nf_tables_dumpreset_obj+0x72/0xa0 [ 1118.154227][T10346] netlink_dump+0x747/0xe50 [ 1118.159374][T10346] __netlink_dump_start+0x5f1/0x810 [ 1118.165209][T10346] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1118.171486][T10346] nf_tables_getobj_reset+0x1e1/0x630 [ 1118.177397][T10346] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 1118.182964][T10346] netlink_rcv_skb+0x241/0x4d0 [ 1118.188334][T10346] nfnetlink_rcv+0x2c9/0x24a0 [ 1118.193656][T10346] netlink_unicast+0x751/0x8d0 [ 1118.199036][T10346] netlink_sendmsg+0x8d0/0xbf0 [ 1118.204331][T10346] ____sys_sendmsg+0x5ba/0x960 [ 1118.209650][T10346] ___sys_sendmsg+0x2a6/0x360 [ 1118.214924][T10346] __se_sys_sendmsg+0x1c2/0x2b0 [ 1118.220501][T10346] do_syscall_64+0x55/0xa0 [ 1118.225535][T10346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.231977][T10346] [ 1118.231977][T10346] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1118.240220][T10346] __mutex_lock+0x136/0xcc0 [ 1118.245245][T10346] __netlink_dump_start+0xf4/0x810 [ 1118.251080][T10346] ip_set_dump+0x15c/0x1f0 [ 1118.256279][T10346] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 1118.261849][T10346] netlink_rcv_skb+0x241/0x4d0 [ 1118.267327][T10346] nfnetlink_rcv+0x2c9/0x24a0 [ 1118.272785][T10346] netlink_unicast+0x751/0x8d0 [ 1118.278372][T10346] netlink_sendmsg+0x8d0/0xbf0 [ 1118.283837][T10346] ____sys_sendmsg+0x5ba/0x960 [ 1118.289148][T10346] ___sys_sendmsg+0x2a6/0x360 [ 1118.294568][T10346] __se_sys_sendmsg+0x1c2/0x2b0 [ 1118.300068][T10346] do_syscall_64+0x55/0xa0 [ 1118.305065][T10346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.311554][T10346] [ 1118.311554][T10346] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1118.319405][T10346] __lock_acquire+0x2df1/0x7d40 [ 1118.325067][T10346] lock_acquire+0x19e/0x420 [ 1118.330283][T10346] __mutex_lock+0x136/0xcc0 [ 1118.335420][T10346] ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.341342][T10346] set_match_v1_checkentry+0x71/0x230 [ 1118.347617][T10346] xt_check_match+0x429/0xaf0 [ 1118.352882][T10346] __nft_match_init+0x67a/0x8d0 [ 1118.358283][T10346] nf_tables_newrule+0x176c/0x2880 [ 1118.363960][T10346] nfnetlink_rcv+0x113e/0x24a0 [ 1118.369271][T10346] netlink_unicast+0x751/0x8d0 [ 1118.374678][T10346] netlink_sendmsg+0x8d0/0xbf0 [ 1118.380086][T10346] ____sys_sendmsg+0x5ba/0x960 [ 1118.385485][T10346] ___sys_sendmsg+0x2a6/0x360 [ 1118.390706][T10346] __se_sys_sendmsg+0x1c2/0x2b0 [ 1118.396094][T10346] do_syscall_64+0x55/0xa0 [ 1118.401034][T10346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.407457][T10346] [ 1118.407457][T10346] other info that might help us debug this: [ 1118.407457][T10346] [ 1118.417855][T10346] Chain exists of: [ 1118.417855][T10346] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1118.417855][T10346] [ 1118.432423][T10346] Possible unsafe locking scenario: [ 1118.432423][T10346] [ 1118.439958][T10346] CPU0 CPU1 [ 1118.445332][T10346] ---- ---- [ 1118.450788][T10346] lock(&nft_net->commit_mutex); [ 1118.455812][T10346] lock(nlk_cb_mutex-NETFILTER); [ 1118.463358][T10346] lock(&nft_net->commit_mutex); [ 1118.470897][T10346] lock(nfnl_subsys_ipset); [ 1118.475536][T10346] [ 1118.475536][T10346] *** DEADLOCK *** [ 1118.475536][T10346] [ 1118.483690][T10346] 1 lock held by syz.2.17036/10346: [ 1118.488878][T10346] #0: ffff888143bf0ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1118.499721][T10346] [ 1118.499721][T10346] stack backtrace: [ 1118.505618][T10346] CPU: 1 PID: 10346 Comm: syz.2.17036 Not tainted syzkaller #0 [ 1118.513175][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1118.523315][T10346] Call Trace: [ 1118.526596][T10346] [ 1118.529554][T10346] dump_stack_lvl+0x18c/0x250 [ 1118.534260][T10346] ? load_image+0x420/0x420 [ 1118.538773][T10346] ? show_regs_print_info+0x20/0x20 [ 1118.543971][T10346] ? print_circular_bug+0x12b/0x1a0 [ 1118.549341][T10346] check_noncircular+0x2fc/0x400 [ 1118.554375][T10346] ? print_deadlock_bug+0x5d0/0x5d0 [ 1118.559796][T10346] ? lockdep_lock+0xf5/0x230 [ 1118.564503][T10346] ? _find_first_zero_bit+0xd3/0x100 [ 1118.569794][T10346] __lock_acquire+0x2df1/0x7d40 [ 1118.574672][T10346] ? mark_lock+0x94/0x320 [ 1118.579146][T10346] ? verify_lock_unused+0x140/0x140 [ 1118.584787][T10346] ? __lock_acquire+0x1273/0x7d40 [ 1118.589842][T10346] lock_acquire+0x19e/0x420 [ 1118.594353][T10346] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.599963][T10346] ? __might_sleep+0xe0/0xe0 [ 1118.604652][T10346] ? read_lock_is_recursive+0x20/0x20 [ 1118.610060][T10346] __mutex_lock+0x136/0xcc0 [ 1118.614557][T10346] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.620096][T10346] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.625815][T10346] ? ip_set_pernet+0x23/0x230 [ 1118.630503][T10346] ? mutex_lock_nested+0x20/0x20 [ 1118.635534][T10346] ? ip_set_pernet+0x23/0x230 [ 1118.640310][T10346] ? ip_set_pernet+0x23/0x230 [ 1118.645014][T10346] ip_set_nfnl_get_byindex+0x67/0x230 [ 1118.650498][T10346] set_match_v1_checkentry+0x71/0x230 [ 1118.655879][T10346] xt_check_match+0x429/0xaf0 [ 1118.660568][T10346] ? flush_work+0x20/0x20 [ 1118.664945][T10346] ? xt_check_proc_name+0x270/0x270 [ 1118.670142][T10346] ? __stack_depot_save+0x1f/0x630 [ 1118.675335][T10346] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1118.681334][T10346] __nft_match_init+0x67a/0x8d0 [ 1118.686365][T10346] ? ___sys_sendmsg+0x2a6/0x360 [ 1118.691254][T10346] ? nft_match_large_dump+0x50/0x50 [ 1118.696583][T10346] ? nf_tables_newrule+0x150e/0x2880 [ 1118.702054][T10346] ? rcu_is_watching+0x15/0xb0 [ 1118.706835][T10346] ? nf_tables_newrule+0x150e/0x2880 [ 1118.712120][T10346] ? __kmalloc+0xe2/0x230 [ 1118.716536][T10346] nf_tables_newrule+0x176c/0x2880 [ 1118.721661][T10346] ? nf_tables_delchain+0x1060/0x1060 [ 1118.727058][T10346] ? __lock_acquire+0x7d40/0x7d40 [ 1118.732186][T10346] ? mutex_unlock+0x10/0x10 [ 1118.736767][T10346] ? __nla_parse+0x40/0x50 [ 1118.741183][T10346] nfnetlink_rcv+0x113e/0x24a0 [ 1118.745958][T10346] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1118.751527][T10346] ? verify_lock_unused+0x140/0x140 [ 1118.756868][T10346] ? __lock_acquire+0x7d40/0x7d40 [ 1118.761896][T10346] ? netlink_deliver_tap+0x2e/0x1b0 [ 1118.767179][T10346] netlink_unicast+0x751/0x8d0 [ 1118.771951][T10346] netlink_sendmsg+0x8d0/0xbf0 [ 1118.776767][T10346] ? netlink_getsockopt+0x590/0x590 [ 1118.782005][T10346] ? aa_sock_msg_perm+0x94/0x150 [ 1118.787121][T10346] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1118.792411][T10346] ? security_socket_sendmsg+0x80/0xa0 [ 1118.797873][T10346] ? netlink_getsockopt+0x590/0x590 [ 1118.803186][T10346] ____sys_sendmsg+0x5ba/0x960 [ 1118.807988][T10346] ? __asan_memset+0x22/0x40 [ 1118.812766][T10346] ? __sys_sendmsg_sock+0x30/0x30 [ 1118.818015][T10346] ? __import_iovec+0x5f2/0x850 [ 1118.823054][T10346] ? import_iovec+0x73/0xa0 [ 1118.827635][T10346] ___sys_sendmsg+0x2a6/0x360 [ 1118.832307][T10346] ? __sys_sendmsg+0x2a0/0x2a0 [ 1118.837110][T10346] __se_sys_sendmsg+0x1c2/0x2b0 [ 1118.841978][T10346] ? __x64_sys_sendmsg+0x80/0x80 [ 1118.846944][T10346] ? lockdep_hardirqs_on+0x98/0x150 [ 1118.852181][T10346] do_syscall_64+0x55/0xa0 [ 1118.856682][T10346] ? clear_bhb_loop+0x40/0x90 [ 1118.861530][T10346] ? clear_bhb_loop+0x40/0x90 [ 1118.866391][T10346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.872337][T10346] RIP: 0033:0x7f220239c819 [ 1118.876874][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.896479][T10346] RSP: 002b:00007f220328d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1118.905006][T10346] RAX: ffffffffffffffda RBX: 00007f2202615fa0 RCX: 00007f220239c819 [ 1118.913364][T10346] RDX: 0000000024044010 RSI: 0000200000000140 RDI: 0000000000000003 [ 1118.921337][T10346] RBP: 00007f2202432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1118.929420][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.937409][T10346] R13: 00007f2202616038 R14: 00007f2202615fa0 R15: 00007ffc882ec408 [ 1118.945936][T10346] [ 1118.949398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.960109][T26894] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1118.976359][T10346] set match dimension is over the limit! [ 1119.153786][T26894] usb 2-1: Using ep0 maxpacket: 32 [ 1119.160595][T26894] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1119.168949][T26894] usb 2-1: config 0 has no interface number 0 [ 1119.177132][T26894] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1119.186327][T26894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.194526][T26894] usb 2-1: Product: syz [ 1119.198727][T26894] usb 2-1: Manufacturer: syz [ 1119.203432][T26894] usb 2-1: SerialNumber: syz [ 1119.209743][T26894] usb 2-1: config 0 descriptor?? [ 1119.216734][T26894] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1119.420051][T26894] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1119.431505][T26894] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1119.822851][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1119.831646][T26894] usb 2-1: USB disconnect, device number 122 [ 1119.839634][T26894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1119.854850][T26894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1119.867107][T26894] quatech2 2-1:0.51: device disconnected