last executing test programs: 1m9.867540878s ago: executing program 1 (id=1748): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4) 1m9.718208907s ago: executing program 1 (id=1749): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setuid(0x0) 1m9.699366578s ago: executing program 1 (id=1751): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) 1m9.521975778s ago: executing program 1 (id=1752): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m9.225742636s ago: executing program 1 (id=1757): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ffffffd}]}) 1m8.493357428s ago: executing program 1 (id=1768): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x5, 0x1}]}, 0x10) 1m8.325667628s ago: executing program 32 (id=1768): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x5, 0x1}]}, 0x10) 50.366664962s ago: executing program 5 (id=2036): socket$kcm(0x11, 0x2, 0x300) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) 50.295145616s ago: executing program 5 (id=2038): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 50.142262965s ago: executing program 5 (id=2040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) 50.141988925s ago: executing program 5 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 49.973913415s ago: executing program 5 (id=2047): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000400)={@id={0x2, 0x0, @a}, 0x1, r1, '\x00', @auto=[0x3e]}) 49.438223786s ago: executing program 5 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 49.281325675s ago: executing program 33 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 3.688380146s ago: executing program 2 (id=2865): r0 = socket(0x2b, 0x801, 0x0) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) 3.627403109s ago: executing program 2 (id=2867): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@generic="7fbf294dc222b224cae2328382"]}, 0x24}}, 0x0) 3.495085767s ago: executing program 2 (id=2871): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x2f, &(0x7f0000000a80)="4dcee4f8a34467aece1a5c5d6de32e8a894d8be320ef484456e3273086b674459e35911a9421d7648f1b194db9518d"}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) 2.653555946s ago: executing program 4 (id=2879): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x7, {0x7, 0x23, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.164843994s ago: executing program 0 (id=2893): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0xf}) fallocate(r0, 0x0, 0x0, 0x400001) 2.114150737s ago: executing program 0 (id=2895): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070d0903001f000000fe050000000200000800040001000000", 0x24) 2.047009581s ago: executing program 0 (id=2897): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x8, r1, 0x0, 0x0, 0x1}}, 0x20) 1.942613987s ago: executing program 0 (id=2908): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1.942088457s ago: executing program 6 (id=2899): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x380000, @empty, 0xe4}, 0x1c) 1.89226755s ago: executing program 6 (id=2900): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000540)={0x2, 0x110000002000003, 0x1, 0x0, 0x1, 0x0, [{0x5, 0xc, 0x80000000, '\x00', 0x280c}]}) 1.322241543s ago: executing program 6 (id=2901): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.321914314s ago: executing program 0 (id=2903): quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0xee00, 0x0) syz_mount_image$cramfs(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x1000000, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x156, &(0x7f0000000440)="$eJzszr9LAnEYx/HPef6IUhQysIYSGjoU8zyxLUIj6SA7KFwaItCLAk1RiBsraGvoD7jBEprEofoDzFoqhbC/ofGgIXA0vn2FKJqan9dyd+/n4eFWFrsSfIAIbrlULFf0alXPBze0THrz+pZ3F4CBl70VyxW2nOe9lQT22NMOWMc833uA3f2CPp8rFdi3lQQkAKkx1h2QwXdHWfPz3diwSbNAe4I35Y8WH7YpO5Dy8sbuDS6AOQGw4fveBwAjeMN/VI2ErrZFnKrhmXEBMMxws/G03nlUI6Fp/UxJT9bdARFZ/eFyhK0b5mtUjLxEm41et5NZ0zJaN64oC3E5JsuJnvbcURNH57Cvug+BrV/3nE4AWeBEAEwBaHzNrZbgAdCu9bWi1+UH8H7gAwTDtO7Y5K1d6wM/J7mdgKO+5PfZIEoQQAghhBBCCCGE/NNnAAAA//+qXmS0") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 1.304050605s ago: executing program 0 (id=2905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) 1.085479087s ago: executing program 3 (id=2910): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0xfc, @buffer={0x0, 0x20, 0x0}, &(0x7f0000000180)="290788a1ae9a", 0x0, 0x3, 0x10, 0x3, 0x0}) 1.03040889s ago: executing program 6 (id=2911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 982.279423ms ago: executing program 3 (id=2912): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x6b]}}]}) 941.078116ms ago: executing program 3 (id=2913): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006800010025bd7000000000000a00000000000000060007000300000008000500", @ANYRES32=r1, @ANYBLOB="100008800c01000000000000000000"], 0x38}}, 0x8000) 938.074496ms ago: executing program 6 (id=2914): r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0x4) 802.418614ms ago: executing program 6 (id=2915): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 769.485955ms ago: executing program 3 (id=2916): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 687.344301ms ago: executing program 3 (id=2917): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000200000000005000000000800040001000000", 0x24) 598.062116ms ago: executing program 3 (id=2918): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) read$FUSE(r0, &(0x7f0000003200)={0x2020}, 0x2020) 449.311764ms ago: executing program 2 (id=2919): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) 411.504706ms ago: executing program 4 (id=2920): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x20, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) dup2(r0, r1) 348.36757ms ago: executing program 2 (id=2921): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'multiq3\x00', [0x4f29, 0x5, 0x1, 0x601, 0x1, 0x6, 0xfff, 0x5c952399, 0x9, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x801a44b, 0x20003, 0x400201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x408, 0x4, 0x8000000, 0x1]}) 263.148025ms ago: executing program 4 (id=2922): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private0, 0x71, r1}) 181.16543ms ago: executing program 4 (id=2923): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) 180.52173ms ago: executing program 2 (id=2924): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa1f, &(0x7f0000000d00)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjRpFESDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvogURSrK57NYzdvveZuZnUe73J0n/ClbWVkpn1tcvvTDnawsj57zk9988eVn9eent7I3e/J68eNkIEk16ftDea70T0wuzM/2yOhmciXJ7aRIsi+NaQf71yxdSfG/efLe8u0U38/hNskGNtk4elrhz9pun38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBImpgcHR0rMjM9d+ntamflEOBdtq9m93U56nfxda9ii6SoPzMwsDrU9+FD9zY/W//neJ5rLD3XGPl7IJ888ezBN57pq6ym71KhHfHhx5/cfHd5+doH91b1tw3sa7arPr9vx6p3//ZuLdmF2tz04vz07LkLter04nz17OnToycvTi1Wp6ZTW7y8uFSbrU4s1M4tzS9UhyZeqY6dPXuqWhu5PH9p7sLkyExtdeWZvxkfHT1dfWvkH2rnFhbn506+NbI4cXF6ZmZ67kIZU99cjzlTPxH/fnqpulQ7N1utXr+xfO1Ur0rWg8babinWBo33yml8dHx8bGx8fOz062dfPzM62rdhxeg62RCx+yctu+dH23rthgdUafb/mcl05nIpb6fa9jGRySxkPrMdtjet9v8nTta6ltva/6/28ofvbT6Ssv9/obH0Qqf+v0Ndej9WVho5bzX96uPDfJxPcjPvZjnLuZYPHjC/NjX6/YPWsfmoPnhrNz4upJa5TGcx85nObM6Va6rNNdWczemczmjeycVMZTHVTGU6M6llMZezmKXUyjNqIgup5VyWMp+FVDOUibySasZyNmdzKtXUMpLLmc+lzOVCJnOuzOV6bpT7/VS3fboaNHY/QeNdgra5/195FP8nyMO27ddw2KqVZv+/t2PAyurc0MSO1QoAAADYTn/9sxw49PRPf5X05/nyc/mp6Zna6G5XCwAAANhG5df1nqtP+utzz6fw/h8AAAAeN0X5G7siyWCONuYav4TaEx8CAAAAwGOi/Pv/C/XJYH3uaIq7d0K5stt1AwAAALZH73vs94wohldv/1u92phebUY07/M7ODU9UxuZmJ95YywvlXcZKH9psCG3PUnRX/784NUca0QdG2xMB9fmOFCPGht5Yyyv5nizIUMv1icvDrWJHG9EvtyIfLlL5Kl6JAA87o536Y/vt/9/NcONiOEjfXuT9B1p07OO6lkB4FHRe4ydnhHF3957/9/fzHZN//90rv+u8ZWCkbyX97Ocqxkuf21QfuNgTa7/9HnzM4O7X0MYzXCPTwNWY39+ppLhHp8HDLYM9DLc4xOBRmz+OTn18A8EAOyg4x364c30/8Mt7/+z8f3/3aGFrvlJIQA8Eu6OYP8QZ3a7jQDAWnppAAAAAAAAAAAAAAAAAAAAAAAAAAAA2H7berf/gXVritxf8l83x/V7uMMQbJjZ39wHW8/n/5LsXJ2LbS6rsg35rCTZqeO1czM5mGx5r7Y9jfcm2f129Zzpa74kbr67vFtXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZSkexpt76S7EsymuTkztfq4bm12xXYeX/XulDcyZ18lAO7Vx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdT8/7/lTSmTzRWpa+SnEhyJck/7nYdt9Od3a7ANtm/xXQt9/+vH/OsFOlrHPYU/ROTC/Oz9cNfjv1Q+eaLLz+rP1uS77u/QpqjLFTWDS7RLGF9+A+eXJ17qkw1OHntw5v//v6/VSfPp5K9Ob80NTM5e2HhzXtJni2+SqppPFet1vc/T/zk8zaV+qre0vbWlztV7pzJjeX+VbvU3cvt5sbytfF6SUu1t5f+419vfNSy6ekcS14cSobWlvQv9WeHko6lv1tpxbfFfxcH8p1cKY9/fW8UK0X9EP1F2f79128sXxt57/3lqx3qdDBHk1xNBrrX6dOWzUfL60lb5VlX6a+XOloG1f851KONXbXkONahDU+Vp8xgsw17O7ahVbVzG0ot+73SbnujRqc61OiZvNTmSK/sqx+UTjV6qfuRbq/4tvhlcTG/yH+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7dueGd95G++e1+1bztMDZv1P2tevJWW63/zWG3T9Wil6Ho9ailxc6+LdSWuOyu6vC7KruvQuhTNq0+nNM16HmpEdajnX+a1pO9It6viht76tR5XlLvp32y/eauv/+8VQ/ltbhn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePQVyZ526yvJiSQHV5erycomst3XaUNlsNhsFbfVrbv/PBYqm01Q3MmdfJQDD6c6AAAAAAAAAOy085PffPHlZ/Vnsb+5qvn3/WrSl+Rg8f/7M7kwP9sjo/7kSpLb9fmBNtu7/Lm/ni5P3lu+XV86vNmWAAD3648BAAD//73fX0g=") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="6717a676614119e75a8dcc0c9e538bdb0371a16fa270dabd5b6634edeec1726bc97870c38b3d9acca48a1af6ba9dd7cdf69341a5cf35e178258aed8d8e34108416ebe41b5af3877ed4a579a898dc3fa7", 0xfffffda1}], 0x1) 58.380877ms ago: executing program 4 (id=2925): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x0, 0x6}) 0s ago: executing program 4 (id=2926): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) kernel console output (not intermixed with test programs): 6 [ 143.514523][ T7787] erofs: (device loop3): mounted with root inode @ nid 36. [ 143.526285][ T4249] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 143.573389][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.587307][ T4249] usb 5-1: Product: syz [ 143.592717][ T4249] usb 5-1: Manufacturer: syz [ 143.597903][ T4249] usb 5-1: SerialNumber: syz [ 143.634133][ T4249] usb 5-1: config 0 descriptor?? [ 143.707077][ T4249] hub 5-1:0.0: bad descriptor, ignoring hub [ 143.720133][ T4249] hub: probe of 5-1:0.0 failed with error -5 [ 143.753310][ T4249] f81232 5-1:0.0: f81534a converter detected [ 143.869662][ T7810] netlink: 'syz.3.1534': attribute type 27 has an invalid length. [ 143.930117][ T4249] usb 5-1: f81534a converter now attached to ttyUSB0 [ 143.975661][ T7818] loop1: detected capacity change from 0 to 736 [ 144.246105][ T4249] usb 5-1: USB disconnect, device number 11 [ 144.259931][ T4249] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 144.290963][ T7831] tipc: Enabling of bearer rejected, failed to enable media [ 144.302884][ T4249] f81232 5-1:0.0: device disconnected [ 144.402809][ T7835] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1545'. [ 144.426081][ T7835] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1545'. [ 144.511462][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 144.547338][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 144.561635][ T7843] netlink: 'syz.1.1549': attribute type 12 has an invalid length. [ 144.966540][ T4448] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.143105][ T7846] set_capacity_and_notify: 1 callbacks suppressed [ 145.143120][ T7846] loop3: detected capacity change from 0 to 40427 [ 145.193791][ T7846] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 145.209548][ T7846] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 145.233555][ T7846] F2FS-fs (loop3): invalid crc value [ 145.239883][ T4448] usb 2-1: Using ep0 maxpacket: 16 [ 145.249418][ T7846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.302681][ T7846] F2FS-fs (loop3): Start checkpoint disabled! [ 145.326168][ T7846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 145.376658][ T4448] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.389398][ T4448] usb 2-1: config 0 has no interface number 0 [ 145.415846][ T4448] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.512038][ T144] attempt to access beyond end of device [ 145.512038][ T144] loop3: rw=2049, want=40976, limit=40427 [ 145.546691][ T4573] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.566909][ T4448] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 145.576898][ T4448] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 145.585122][ T4448] usb 2-1: Product: syz [ 145.600273][ T4448] usb 2-1: SerialNumber: syz [ 145.618441][ T4448] usb 2-1: config 0 descriptor?? [ 145.628096][ T7870] loop4: detected capacity change from 0 to 32768 [ 145.679568][ T4448] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 145.691685][ T7870] (syz.4.1560,7870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.709532][ T4448] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input33 [ 145.731632][ T7870] (syz.4.1560,7870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.815897][ T4573] usb 3-1: Using ep0 maxpacket: 32 [ 145.824057][ T7870] JBD2: Ignoring recovery information on journal [ 145.936538][ T4573] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.961336][ T4573] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 145.990741][ T4573] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.001711][ T7870] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 146.010624][ T4573] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 146.027231][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.044016][ T4573] usb 3-1: config 0 descriptor?? [ 146.121082][ T23] usb 2-1: USB disconnect, device number 10 [ 146.137252][ T23] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 146.185914][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 146.247500][ T7897] netlink: 'syz.0.1573': attribute type 4 has an invalid length. [ 146.392537][ T7905] loop3: detected capacity change from 0 to 256 [ 146.520138][ T4573] betop 0003:20BC:5500.001F: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0 [ 146.542831][ T4573] betop 0003:20BC:5500.001F: no inputs found [ 146.747176][ T4439] usb 3-1: USB disconnect, device number 12 [ 147.026066][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.221545][ T7948] loop4: detected capacity change from 0 to 1024 [ 147.281229][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 147.315003][ T7948] hfsplus: bad catalog entry type [ 147.408809][ T154] hfsplus: b-tree write err: -5, ino 4 [ 147.498048][ T7961] netlink: 'syz.1.1604': attribute type 298 has an invalid length. [ 147.586071][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 147.605428][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.662219][ T23] usb 1-1: Product: syz [ 147.682461][ T23] usb 1-1: Manufacturer: syz [ 147.700710][ T23] usb 1-1: SerialNumber: syz [ 147.730267][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 147.754678][ T7971] loop4: detected capacity change from 0 to 256 [ 147.796826][ T7971] exfat: Deprecated parameter 'utf8' [ 147.822827][ T7971] exfat: Deprecated parameter 'namecase' [ 147.848996][ T7973] netlink: 'syz.3.1610': attribute type 298 has an invalid length. [ 147.858244][ T7971] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001015b, chksum : 0xeba6baed, utbl_chksum : 0xe619d30d) [ 148.226030][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 148.236253][ T23] r8152-cfgselector 1-1: bad CDC descriptors [ 148.275991][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 148.297953][ T23] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 148.312619][ T7969] loop1: detected capacity change from 0 to 32768 [ 148.473458][ T7969] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 148.557968][ T4189] XFS (loop1): Unmounting Filesystem [ 149.057922][ T4241] kernel read not supported for file /dsp (pid: 4241 comm: kworker/1:4) [ 149.330814][ T8048] loop4: detected capacity change from 0 to 8 [ 149.455863][ T4241] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.636297][ T8066] loop3: detected capacity change from 0 to 512 [ 149.696087][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 149.770707][ T8066] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 149.791490][ T8066] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.825984][ T4241] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 149.837587][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.868057][ T4241] usb 2-1: config 0 descriptor?? [ 149.905536][ T8086] loop4: detected capacity change from 0 to 1024 [ 150.037479][ T154] hfsplus: b-tree write err: -5, ino 4 [ 150.047172][ T4573] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.347487][ T4241] a4tech 0003:09DA:022B.0020: item fetching failed at offset 5/7 [ 150.363058][ T4241] a4tech 0003:09DA:022B.0020: parse failed [ 150.369103][ T8109] netlink: 'syz.4.1670': attribute type 3 has an invalid length. [ 150.381206][ T4241] a4tech: probe of 0003:09DA:022B.0020 failed with error -22 [ 150.383068][ T8112] loop3: detected capacity change from 0 to 128 [ 150.456546][ T4573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.475547][ T4573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.486535][ T4573] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 150.497439][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.508313][ T4573] usb 3-1: config 0 descriptor?? [ 150.550113][ T4249] usb 2-1: USB disconnect, device number 11 [ 150.569281][ T8112] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.607313][ T8112] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.988180][ T4573] logitech 0003:046D:C294.0021: unbalanced collection at end of report description [ 150.998413][ T4573] logitech 0003:046D:C294.0021: parse failed [ 151.004806][ T4573] logitech: probe of 0003:046D:C294.0021 failed with error -22 [ 151.203969][ T4256] usb 3-1: USB disconnect, device number 13 [ 151.291638][ T8161] tipc: Started in network mode [ 151.297895][ T8161] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 151.305599][ T8161] tipc: Enabled bearer , priority 10 [ 151.325991][ T4241] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 151.475610][ T8171] loop1: detected capacity change from 0 to 4096 [ 151.513312][ T8171] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 151.603569][ T8171] ntfs: (device loop1): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 151.634152][ T8171] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 151.652543][ T8171] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 151.677921][ T8171] ntfs: volume version 3.1. [ 151.696058][ T4241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.714563][ T8171] ntfs: (device loop1): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 151.723790][ T4241] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.736440][ T8171] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 151.740393][ T4241] usb 5-1: too many endpoints for config 1 interface 1 altsetting 138: 250, using maximum allowed: 30 [ 151.763922][ T4241] usb 5-1: config 1 interface 1 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 151.767922][ T8171] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 151.793947][ T4241] usb 5-1: config 1 interface 1 has no altsetting 0 [ 151.936502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.966143][ T4241] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.986584][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.005522][ T4241] usb 5-1: Product: syz [ 152.014397][ T4241] usb 5-1: Manufacturer: syz [ 152.024988][ T4241] usb 5-1: SerialNumber: syz [ 152.118239][ T4241] usb 5-1: selecting invalid altsetting 0 [ 152.124233][ T4241] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 152.144812][ T4373] tipc: Subscription rejected, illegal request [ 152.161547][ T4241] usb 5-1: selecting invalid altsetting 0 [ 152.175426][ T4241] usbtest: probe of 5-1:1.1 failed with error -22 [ 152.275716][ T8203] loop3: detected capacity change from 0 to 16 [ 152.324061][ T4241] usb 5-1: USB disconnect, device number 12 [ 152.339332][ T4439] tipc: Node number set to 10005162 [ 152.374524][ T8203] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.571927][ T8222] damon: kdamond (8222) starts [ 152.678112][ T8228] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 152.826598][ T8239] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 152.911326][ T8247] loop3: detected capacity change from 0 to 256 [ 152.940515][ T8246] loop4: detected capacity change from 0 to 1024 [ 153.040852][ T8247] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x38eabd95, utbl_chksum : 0xe619d30d) [ 153.394161][ T8266] loop3: detected capacity change from 0 to 4096 [ 153.566387][ T4439] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.793397][ T8280] loop1: detected capacity change from 0 to 128 [ 153.817796][ T472] attempt to access beyond end of device [ 153.817796][ T472] loop4: rw=1, want=4788, limit=1024 [ 153.845252][ T472] attempt to access beyond end of device [ 153.845252][ T472] loop4: rw=1, want=7452, limit=1024 [ 153.864632][ T472] attempt to access beyond end of device [ 153.864632][ T472] loop4: rw=1, want=10740, limit=1024 [ 153.876082][ T8280] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.877724][ T8280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.894851][ T472] attempt to access beyond end of device [ 153.894851][ T472] loop4: rw=1, want=13188, limit=1024 [ 153.920634][ T8283] __nla_validate_parse: 2 callbacks suppressed [ 153.920649][ T8283] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1754'. [ 153.935260][ T8280] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 153.941667][ T472] attempt to access beyond end of device [ 153.941667][ T472] loop4: rw=1, want=13900, limit=1024 [ 153.955142][ T8280] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 154.102459][ T4189] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 154.129150][ T4189] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 154.156650][ T4439] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 154.172896][ T4439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.188462][ T4439] usb 3-1: Product: syz [ 154.192819][ T4439] usb 3-1: Manufacturer: syz [ 154.199189][ T4439] usb 3-1: SerialNumber: syz [ 154.242383][ T4439] usb 3-1: config 0 descriptor?? [ 154.317125][ T4439] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 154.343553][ T4439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.371272][ T4439] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 154.384220][ T4439] usb 3-1: media controller created [ 154.414206][ T4439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.489798][ T4439] DVB: Unable to find symbol mt352_attach() [ 154.500799][ T8298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.519910][ T8263] dvb-usb: bulk message failed: -22 (7/0) [ 154.584664][ T4439] DVB: Unable to find symbol nxt6000_attach() [ 154.591496][ T8296] loop4: detected capacity change from 0 to 32768 [ 154.599049][ T4439] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 154.688598][ T4439] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 154.736406][ T4439] dvb-usb: schedule remote query interval to 1000 msecs. [ 154.769741][ T4439] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 154.805844][ T4439] dvb-usb: bulk message failed: -22 (7/0) [ 154.819360][ T4439] dvb-usb: bulk message failed: -22 (7/0) [ 154.834269][ T4439] usb 3-1: USB disconnect, device number 14 [ 154.990234][ T4439] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 155.174760][ T8332] loop4: detected capacity change from 0 to 512 [ 155.220651][ T8334] loop3: detected capacity change from 0 to 8 [ 155.231508][ T8332] EXT4-fs (loop4): Ignoring removed orlov option [ 155.245603][ T8332] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.315126][ T8334] SQUASHFS error: lzo decompression failed, data probably corrupt [ 155.327420][ T8334] SQUASHFS error: Failed to read block 0x91: -5 [ 155.342696][ T8334] SQUASHFS error: Unable to read metadata cache entry [8f] [ 155.351371][ T8334] SQUASHFS error: Unable to read inode 0x11f [ 155.366267][ T8332] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.410943][ T8332] EXT4-fs (loop4): 1 orphan inode deleted [ 155.418238][ T8332] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,noinit_itable,debug_want_extra_isize=0x0000000000000052,stripe=0x0000000000000008,orlov,grpid,,errors=continue. Quota mode: none. [ 155.439633][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.498390][ T8343] lo speed is unknown, defaulting to 1000 [ 155.522659][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 155.649352][ T8352] ALSA: mixer_oss: invalid OSS volume '' [ 155.812715][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 156.019263][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.028697][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.063800][ T8343] device bridge_slave_0 entered promiscuous mode [ 156.087926][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.115877][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.135208][ T8343] device bridge_slave_1 entered promiscuous mode [ 156.177578][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.212143][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.226487][ T4439] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.290576][ T8343] team0: Port device team_slave_0 added [ 156.314460][ T8343] team0: Port device team_slave_1 added [ 156.341309][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.356498][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.435245][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.443083][ T8391] loop4: detected capacity change from 0 to 256 [ 156.482561][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.495956][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.521875][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.526921][ T8391] FAT-fs (loop4): Directory bread(block 64) failed [ 156.543263][ T8391] FAT-fs (loop4): Directory bread(block 65) failed [ 156.548551][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.553846][ T8391] FAT-fs (loop4): Directory bread(block 66) failed [ 156.569235][ T8391] FAT-fs (loop4): Directory bread(block 67) failed [ 156.583052][ T8391] FAT-fs (loop4): Directory bread(block 68) failed [ 156.594536][ T8343] device hsr_slave_0 entered promiscuous mode [ 156.601623][ T4573] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.605879][ T8391] FAT-fs (loop4): Directory bread(block 69) failed [ 156.620534][ T8343] device hsr_slave_1 entered promiscuous mode [ 156.623936][ T8391] FAT-fs (loop4): Directory bread(block 70) failed [ 156.633780][ T8391] FAT-fs (loop4): Directory bread(block 71) failed [ 156.636953][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.650763][ T8391] FAT-fs (loop4): Directory bread(block 72) failed [ 156.654262][ T8343] Cannot create hsr debugfs directory [ 156.658273][ T8391] FAT-fs (loop4): Directory bread(block 73) failed [ 156.836537][ T4439] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 156.845647][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.861951][ T4439] usb 4-1: Product: syz [ 156.866620][ T4439] usb 4-1: Manufacturer: syz [ 156.871229][ T4439] usb 4-1: SerialNumber: syz [ 156.876419][ T4573] usb 3-1: Using ep0 maxpacket: 32 [ 156.882785][ T4439] usb 4-1: config 0 descriptor?? [ 156.896044][ T8343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.924443][ T8343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.947156][ T8343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.957668][ T4439] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 156.973251][ T8343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.976968][ T4439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.008618][ T4573] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.025000][ T4439] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 157.034906][ T4439] usb 4-1: media controller created [ 157.041292][ T4573] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.044000][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.056285][ T4573] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 157.072171][ T4439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.081107][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.100494][ T4573] usb 3-1: config 0 descriptor?? [ 157.157996][ T8419] binder: 8418:8419 ioctl c018620c 200000000180 returned -22 [ 157.168308][ T8364] dvb-usb: bulk message failed: -22 (7/0) [ 157.182000][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.212181][ T4439] DVB: Unable to find symbol mt352_attach() [ 157.285146][ T4439] DVB: Unable to find symbol nxt6000_attach() [ 157.294301][ T4439] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 157.294531][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.349774][ T4439] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 157.375179][ T4439] dvb-usb: schedule remote query interval to 1000 msecs. [ 157.384612][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.401713][ T4439] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 157.423397][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.432607][ T4439] dvb-usb: bulk message failed: -22 (7/0) [ 157.451823][ T4439] dvb-usb: bulk message failed: -22 (7/0) [ 157.464034][ T8428] (unnamed net_device) (uninitialized): (slave veth1_to_bridge): Device is not bonding slave [ 157.477217][ T4439] usb 4-1: USB disconnect, device number 11 [ 157.510194][ T4448] Bluetooth: hci2: command 0x0409 tx timeout [ 157.533710][ T8428] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_bridge) [ 157.553061][ T4439] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 157.582016][ T4573] hid-generic 0003:07C0:1125.0022: hidraw0: USB HID v0.02 Device [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 157.593657][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.622369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.642476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.652876][ T8430] loop4: detected capacity change from 0 to 64 [ 157.717774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.732617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.743888][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.751233][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.762775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.771855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.782698][ T4249] usb 3-1: USB disconnect, device number 15 [ 157.817154][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.824303][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.832182][ T8437] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 157.848966][ T8430] attempt to access beyond end of device [ 157.848966][ T8430] loop4: rw=2049, want=268435470, limit=64 [ 157.908263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.916895][ T8430] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 158.027106][ T4448] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 158.086000][ T8439] loop3: detected capacity change from 0 to 32768 [ 158.147138][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.157428][ T8439] (syz.3.1821,8439,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.172581][ T8439] (syz.3.1821,8439,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.193029][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.204654][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.214016][ T8439] (syz.3.1821,8439,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x5984567b, computed 0x75cfa40e. Applying ECC. [ 158.228347][ T8439] (syz.3.1821,8439,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x5984567b, computed 0x65bd7f26 [ 158.241049][ T8439] (syz.3.1821,8439,1):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 28 [ 158.251545][ T8439] (syz.3.1821,8439,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 158.259953][ T8439] (syz.3.1821,8439,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 158.264759][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.269094][ T8439] (syz.3.1821,8439,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=9, slot=0 [ 158.269124][ T8439] (syz.3.1821,8439,1):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 158.269143][ T8439] (syz.3.1821,8439,1):ocfs2_mount_volume:1818 ERROR: status = -22 [ 158.275051][ T8439] (syz.3.1821,8439,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 158.305297][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.353200][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.410743][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.427655][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.433635][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.451100][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.457314][ T8444] loop3: detected capacity change from 0 to 64 [ 158.472749][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.473739][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.486208][ T4448] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 158.490594][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.506762][ T4448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.527286][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.536819][ T4448] usb 1-1: config 0 descriptor?? [ 158.546565][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.625561][ T144] tipc: Disabling bearer [ 158.670099][ T144] tipc: Disabling bearer [ 158.697003][ T144] tipc: Left network mode [ 158.896152][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.927327][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 158.943294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.954205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.961641][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.976376][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.021268][ T23] usb 5-1: config 0 descriptor?? [ 159.021580][ T4448] isku 0003:1E7D:319C.0023: item fetching failed at offset 5/7 [ 159.034517][ T4448] isku 0003:1E7D:319C.0023: parse failed [ 159.051307][ T4448] isku: probe of 0003:1E7D:319C.0023 failed with error -22 [ 159.208103][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.236645][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.270244][ T2401] usb 1-1: USB disconnect, device number 13 [ 159.285951][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.305202][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.324445][ T8343] device veth0_vlan entered promiscuous mode [ 159.334016][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.342269][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.376874][ T8343] device veth1_vlan entered promiscuous mode [ 159.403914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.419600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.430836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.442750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.454482][ T8343] device veth0_macvtap entered promiscuous mode [ 159.488185][ T8343] device veth1_macvtap entered promiscuous mode [ 159.513926][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.538382][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 159.545164][ T23] logitech-djreceiver 0003:046D:C71F.0024: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 159.564031][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.584303][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.602936][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.614244][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.633586][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.646991][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.657100][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.666120][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.674901][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.702074][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.743782][ T4241] usb 5-1: USB disconnect, device number 13 [ 159.778284][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.797400][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.822851][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.849035][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.859134][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.883920][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.894802][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.905676][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.915861][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.930416][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.948654][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.983786][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.003057][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.034052][ T8507] tipc: Started in network mode [ 160.040572][ T8507] tipc: Node identity 4246, cluster identity 4711 [ 160.047632][ T8507] tipc: Node number set to 16966 [ 160.053016][ T8507] tipc: Cannot configure node identity twice [ 160.062051][ T8343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.071368][ T8343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.091301][ T8343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.105827][ T2401] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.122628][ T8343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.151464][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1837'. [ 160.320854][ T8521] loop3: detected capacity change from 0 to 64 [ 160.491754][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.522150][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.621852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.630053][ T2401] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 160.641636][ T2401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.656264][ T8535] netlink: 'syz.2.1846': attribute type 3 has an invalid length. [ 160.674484][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.689785][ T2401] usb 1-1: Product: syz [ 160.695155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.713627][ T2401] usb 1-1: Manufacturer: syz [ 160.742186][ T2401] usb 1-1: SerialNumber: syz [ 160.759803][ T8542] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1847'. [ 160.786568][ T2401] usb 1-1: config 0 descriptor?? [ 160.803375][ T144] device hsr_slave_0 left promiscuous mode [ 160.821514][ T144] device hsr_slave_1 left promiscuous mode [ 160.832127][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.853607][ T2401] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 160.876640][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.901615][ T2401] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.920917][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.928844][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.936633][ T2401] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 160.946147][ T2401] usb 1-1: media controller created [ 160.970267][ T2401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.988122][ T144] device bridge_slave_1 left promiscuous mode [ 160.997093][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.021449][ T144] device bridge_slave_0 left promiscuous mode [ 161.029638][ T2401] DVB: Unable to find symbol mt352_attach() [ 161.045925][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.058443][ T8501] dvb-usb: bulk message failed: -22 (7/0) [ 161.081736][ T2401] DVB: Unable to find symbol nxt6000_attach() [ 161.091181][ T144] device veth1_macvtap left promiscuous mode [ 161.092994][ T2401] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 161.098018][ T144] device veth0_macvtap left promiscuous mode [ 161.113031][ T144] device veth1_vlan left promiscuous mode [ 161.152038][ T2401] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 161.172599][ T2401] dvb-usb: schedule remote query interval to 1000 msecs. [ 161.180410][ T2401] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 161.190923][ T2401] dvb-usb: bulk message failed: -22 (7/0) [ 161.196765][ T2401] dvb-usb: bulk message failed: -22 (7/0) [ 161.223922][ T2401] usb 1-1: USB disconnect, device number 14 [ 161.262401][ T2401] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 161.389509][ T144] team0 (unregistering): Port device team_slave_1 removed [ 161.410880][ T144] team0 (unregistering): Port device team_slave_0 removed [ 161.454351][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.474640][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.551870][ T144] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 161.580996][ T144] bond0 (unregistering): Released all slaves [ 161.615935][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 161.656786][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.405900][ T4573] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 162.499234][ T8618] program syz.4.1874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.927361][ T8633] kernel read not supported for file / -Ö9÷mZr†ś7łĎüâW)ës“§Ç!QŹöěĄfsől{T‡rŇ)r§ÖOšő2:"ôŔT+Íźv|ŤŐ˛ (pid: 8633 comm: syz.4.1880) [ 162.986157][ T4573] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 163.005675][ T4573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.024693][ T26] audit: type=1800 audit(1769554873.997:119): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1880" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=46559 res=0 errno=0 [ 163.076245][ T4573] usb 6-1: Product: syz [ 163.080452][ T4573] usb 6-1: Manufacturer: syz [ 163.085099][ T4573] usb 6-1: SerialNumber: syz [ 163.133069][ T4573] usb 6-1: config 0 descriptor?? [ 163.162154][ T26] audit: type=1804 audit(1769554874.017:120): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1880" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=46559 res=1 errno=0 [ 163.207635][ T4573] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 163.243037][ T4573] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.286306][ T4573] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 163.315852][ T4573] usb 6-1: media controller created [ 163.349126][ T4573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.406099][ T4241] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 163.411745][ T8587] dvb-usb: bulk message failed: -22 (7/0) [ 163.529962][ T4573] DVB: Unable to find symbol mt352_attach() [ 163.637361][ T4573] DVB: Unable to find symbol nxt6000_attach() [ 163.643497][ T4573] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 163.699394][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 163.737229][ T4573] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 163.760487][ T4573] dvb-usb: schedule remote query interval to 1000 msecs. [ 163.776340][ T4241] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.784748][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.812120][ T8659] binder: 8657:8659 ioctl c018620c 200000000180 returned -22 [ 163.816797][ T4573] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 163.875826][ T4573] dvb-usb: bulk message failed: -22 (7/0) [ 163.891999][ T8664] loop3: detected capacity change from 0 to 512 [ 163.898922][ T4241] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.901150][ T4573] dvb-usb: bulk message failed: -22 (7/0) [ 163.912636][ T4241] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.944456][ T4241] usb 5-1: Manufacturer: syz [ 163.984546][ T8664] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.984732][ T4573] usb 6-1: USB disconnect, device number 2 [ 164.032921][ T4241] usb 5-1: config 0 descriptor?? [ 164.048567][ T8664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 164.079353][ T8664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.093331][ T8664] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1887: bad orphan inode 267 [ 164.107454][ T8664] EXT4-fs (loop3): Remounting filesystem read-only [ 164.114004][ T8664] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,grpquota. Quota mode: writeback. [ 164.148555][ T8664] System zones: 1-12 [ 164.152527][ T8664] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 164.207137][ T4573] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 164.305882][ T4241] rc_core: IR keymap rc-hauppauge not found [ 164.311867][ T4241] Registered IR keymap rc-empty [ 164.341750][ T4241] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 164.403836][ T4241] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 164.586853][ T8693] binder: 8692:8693 ioctl c018620c 200000000180 returned -22 [ 164.715880][ T4256] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.905237][ T23] usb 5-1: USB disconnect, device number 14 [ 165.116083][ T4256] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 165.124392][ T4256] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 165.179494][ T4256] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 165.216473][ T4256] usb 4-1: config 220 has no interface number 2 [ 165.223078][ T4256] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 165.267264][ T4256] usb 4-1: config 220 interface 0 has no altsetting 0 [ 165.292460][ T4256] usb 4-1: config 220 interface 76 has no altsetting 0 [ 165.316328][ T4256] usb 4-1: config 220 interface 1 has no altsetting 0 [ 165.510211][ T4256] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 165.524858][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.542154][ T4256] usb 4-1: Product: syz [ 165.550905][ T4256] usb 4-1: Manufacturer: syz [ 165.561067][ T4256] usb 4-1: SerialNumber: syz [ 165.972344][ T4256] usb 4-1: selecting invalid altsetting 0 [ 165.988174][ T4256] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 166.006193][ T4256] usb 4-1: No valid video chain found. [ 166.126962][ T4256] usb 4-1: selecting invalid altsetting 0 [ 166.133514][ T4256] usbtest: probe of 4-1:220.1 failed with error -22 [ 166.172847][ T4256] usb 4-1: USB disconnect, device number 12 [ 166.292749][ T8740] loop4: detected capacity change from 0 to 32768 [ 166.314489][ T8740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1912 (8740) [ 166.411321][ T8740] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 166.475848][ T8740] BTRFS info (device loop4): force clearing of disk cache [ 166.495608][ T8740] BTRFS info (device loop4): enabling auto defrag [ 166.516170][ T8740] BTRFS info (device loop4): max_inline at 0 [ 166.555092][ T8740] BTRFS info (device loop4): enabling disk space caching [ 166.585825][ T8740] BTRFS info (device loop4): disk space caching is enabled [ 166.607371][ T8740] BTRFS info (device loop4): has skinny extents [ 166.885359][ T8740] BTRFS info (device loop4): enabling ssd optimizations [ 166.897249][ T8740] BTRFS info (device loop4): clearing free space tree [ 166.904713][ T8740] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.920679][ T8740] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.281018][ T8801] loop3: detected capacity change from 0 to 32768 [ 167.523613][ T8801] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 167.731485][ T4190] XFS (loop3): Unmounting Filesystem [ 168.525843][ T8896] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 168.729695][ T8919] netlink: 'syz.4.1958': attribute type 29 has an invalid length. [ 168.765141][ T8919] netlink: 'syz.4.1958': attribute type 29 has an invalid length. [ 168.817832][ T8928] netlink: 'syz.4.1958': attribute type 29 has an invalid length. [ 168.828342][ T8926] loop5: detected capacity change from 0 to 256 [ 168.896168][ T8896] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 168.918844][ T8896] usb 1-1: config 0 has no interface number 0 [ 168.930648][ T8926] FAT-fs (loop5): Directory bread(block 64) failed [ 168.951111][ T8926] FAT-fs (loop5): Directory bread(block 65) failed [ 168.963436][ T8896] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 168.986847][ T8926] FAT-fs (loop5): Directory bread(block 66) failed [ 169.009290][ T8926] FAT-fs (loop5): Directory bread(block 67) failed [ 169.021457][ T8926] FAT-fs (loop5): Directory bread(block 68) failed [ 169.028249][ T8926] FAT-fs (loop5): Directory bread(block 69) failed [ 169.039246][ T8926] FAT-fs (loop5): Directory bread(block 70) failed [ 169.054402][ T8926] FAT-fs (loop5): Directory bread(block 71) failed [ 169.061504][ T8926] FAT-fs (loop5): Directory bread(block 72) failed [ 169.068777][ T8926] FAT-fs (loop5): Directory bread(block 73) failed [ 169.158287][ T8896] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 169.184754][ T8896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.218092][ T8896] usb 1-1: Product: syz [ 169.226527][ T8896] usb 1-1: Manufacturer: syz [ 169.237923][ T8896] usb 1-1: SerialNumber: syz [ 169.264693][ T8896] usb 1-1: config 0 descriptor?? [ 169.286171][ T8887] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.308295][ T8896] usb-storage 1-1:0.20: USB Mass Storage device detected [ 169.392225][ T8896] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 169.529963][ T8971] loop5: detected capacity change from 0 to 64 [ 169.552115][ T8896] scsi host1: usb-storage 1-1:0.20 [ 169.602882][ T8971] hfs: unable to locate alternate MDB [ 169.638153][ T8971] hfs: continuing without an alternate MDB [ 169.729816][ T4573] usb 1-1: USB disconnect, device number 15 [ 170.018337][ T8998] sctp: [Deprecated]: syz.4.1985 (pid 8998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.018337][ T8998] Use struct sctp_sack_info instead [ 170.148514][ T9000] loop5: detected capacity change from 0 to 4096 [ 170.196935][ T9000] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 170.323189][ T9000] ntfs: volume version 3.1. [ 170.323294][ T9014] loop4: detected capacity change from 0 to 1024 [ 170.365933][ T9019] kernel read not supported for file / -Ö9÷mZr†ś7łĎüâW)ës“§Ç!QŹöěĄfsől{T‡rŇ)r§ÖOšő2:"ôŔT+Íźv|ŤŐ˛ (pid: 9019 comm: syz.2.1990) [ 170.420761][ T26] audit: type=1800 audit(1769554881.407:121): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1990" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=47008 res=0 errno=0 [ 170.582192][ T26] audit: type=1804 audit(1769554881.407:122): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1990" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=47008 res=1 errno=0 [ 170.657358][ T8898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.768480][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 170.895904][ T8898] usb 1-1: Using ep0 maxpacket: 16 [ 171.016017][ T8898] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.025141][ T8898] usb 1-1: config 0 has no interface number 0 [ 171.085971][ T8898] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 171.124528][ T8898] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.175831][ T8898] usb 1-1: config 0 interface 41 has no altsetting 0 [ 171.187024][ T8896] Bluetooth: hci0: command 0x041f tx timeout [ 171.336122][ T8898] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 171.345193][ T8898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.375022][ T8898] usb 1-1: Product: syz [ 171.379436][ T8898] usb 1-1: Manufacturer: syz [ 171.384041][ T8898] usb 1-1: SerialNumber: syz [ 171.438479][ T8898] usb 1-1: config 0 descriptor?? [ 171.456949][ T9021] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.465155][ T9021] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.549484][ T9049] loop3: detected capacity change from 0 to 32768 [ 171.593270][ T26] audit: type=1800 audit(1769554882.577:123): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2007" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 171.653530][ T9061] loop4: detected capacity change from 0 to 32768 [ 171.719683][ T8898] dm9601: probe of 1-1:0.41 failed with error -71 [ 171.766210][ T8898] sr9700: probe of 1-1:0.41 failed with error -71 [ 171.827284][ T8898] usb 1-1: USB disconnect, device number 16 [ 171.860412][ T9] read_mapping_page failed! [ 171.897469][ T9] ERROR: (device loop4): txCommit: [ 171.897469][ T9] [ 171.946813][ T9] jfs_write_inode: jfs_commit_inode failed! [ 172.106154][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2028'. [ 172.274226][ T9107] loop3: detected capacity change from 0 to 256 [ 172.492042][ T9107] FAT-fs (loop3): Directory bread(block 64) failed [ 172.515953][ T9107] FAT-fs (loop3): Directory bread(block 65) failed [ 172.526349][ T9107] FAT-fs (loop3): Directory bread(block 66) failed [ 172.551081][ T9107] FAT-fs (loop3): Directory bread(block 67) failed [ 172.573511][ T9107] FAT-fs (loop3): Directory bread(block 68) failed [ 172.596096][ T9107] FAT-fs (loop3): Directory bread(block 69) failed [ 172.617148][ T9107] FAT-fs (loop3): Directory bread(block 70) failed [ 172.631032][ T9107] FAT-fs (loop3): Directory bread(block 71) failed [ 172.653066][ T9107] FAT-fs (loop3): Directory bread(block 72) failed [ 172.663153][ T9107] FAT-fs (loop3): Directory bread(block 73) failed [ 172.680352][ T9097] loop4: detected capacity change from 0 to 40427 [ 172.729332][ T9097] F2FS-fs (loop4): invalid crc value [ 172.755270][ T9097] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.760629][ T9103] loop5: detected capacity change from 0 to 32768 [ 172.889233][ T9097] F2FS-fs (loop4): Start checkpoint disabled! [ 172.942890][ T9097] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 173.075926][ T1111] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 173.456009][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.473442][ T9147] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2048'. [ 173.488888][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.518481][ T1111] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 173.552445][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.582211][ T1111] usb 1-1: config 0 descriptor?? [ 173.777898][ T9166] loop3: detected capacity change from 0 to 64 [ 173.900334][ T472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.025305][ T472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.064179][ T9181] loop3: detected capacity change from 0 to 64 [ 174.079863][ T1111] samsung 0003:0419:0001.0025: unknown main item tag 0x0 [ 174.109820][ T1111] samsung 0003:0419:0001.0025: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 174.190697][ T472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.305614][ T8894] usb 1-1: USB disconnect, device number 17 [ 174.334132][ T9184] fido_id[9184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.353522][ T472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.618748][ T9194] FAT-fs (loop3): Directory bread(block 64) failed [ 174.625324][ T9194] FAT-fs (loop3): Directory bread(block 65) failed [ 174.681898][ T9190] lo speed is unknown, defaulting to 1000 [ 174.707875][ T9194] FAT-fs (loop3): Directory bread(block 66) failed [ 174.721481][ T9194] FAT-fs (loop3): Directory bread(block 67) failed [ 174.726082][ T8896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 174.739340][ T9174] set_capacity_and_notify: 1 callbacks suppressed [ 174.739353][ T9174] loop4: detected capacity change from 0 to 40427 [ 174.741704][ T9194] FAT-fs (loop3): Directory bread(block 68) failed [ 174.764584][ T9194] FAT-fs (loop3): Directory bread(block 69) failed [ 174.771619][ T9194] FAT-fs (loop3): Directory bread(block 70) failed [ 174.789783][ T9194] FAT-fs (loop3): Directory bread(block 71) failed [ 174.797903][ T9194] FAT-fs (loop3): Directory bread(block 72) failed [ 174.805064][ T9194] FAT-fs (loop3): Directory bread(block 73) failed [ 174.831429][ T9174] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 174.876395][ T9174] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.962669][ T9174] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.036982][ T9212] loop3: detected capacity change from 0 to 256 [ 175.061710][ T9174] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.102974][ T9212] FAT-fs (loop3): Directory bread(block 64) failed [ 175.115024][ T9174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.116199][ T8896] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 175.132382][ T9212] FAT-fs (loop3): Directory bread(block 65) failed [ 175.139282][ T9212] FAT-fs (loop3): Directory bread(block 66) failed [ 175.146663][ T9212] FAT-fs (loop3): Directory bread(block 67) failed [ 175.153264][ T9212] FAT-fs (loop3): Directory bread(block 68) failed [ 175.163474][ T9190] chnl_net:caif_netlink_parms(): no params data found [ 175.169360][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.190376][ T8896] usb 3-1: config 0 descriptor?? [ 175.209971][ T9212] FAT-fs (loop3): Directory bread(block 69) failed [ 175.232896][ T9212] FAT-fs (loop3): Directory bread(block 70) failed [ 175.266904][ T9212] FAT-fs (loop3): Directory bread(block 71) failed [ 175.308599][ T9212] FAT-fs (loop3): Directory bread(block 72) failed [ 175.315177][ T9212] FAT-fs (loop3): Directory bread(block 73) failed [ 175.446992][ T8896] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 175.472531][ T8896] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 175.624332][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.676008][ T8896] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 175.683567][ T8896] [drm] Initialized udl on minor 2 [ 175.685849][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.712031][ T9190] device bridge_slave_0 entered promiscuous mode [ 175.776029][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 175.782317][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 175.804843][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 175.816576][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.823742][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.857165][ T9190] device bridge_slave_1 entered promiscuous mode [ 175.876620][ T8896] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 175.894550][ T8896] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 175.925531][ T8896] usb 3-1: USB disconnect, device number 16 [ 175.950108][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.983886][ T1111] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 176.002367][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.010977][ T1111] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 176.032448][ T1111] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 176.142140][ T9190] team0: Port device team_slave_0 added [ 176.153485][ T9190] team0: Port device team_slave_1 added [ 176.247967][ T9259] loop4: detected capacity change from 0 to 256 [ 176.296276][ T9259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 176.332158][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.386019][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.422872][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.435544][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.442936][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.471336][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.565579][ T472] device hsr_slave_0 left promiscuous mode [ 176.575906][ T8894] Bluetooth: hci2: command 0x0409 tx timeout [ 176.596633][ T472] device hsr_slave_1 left promiscuous mode [ 176.613973][ T472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.621610][ T472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.647385][ T472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.665021][ T472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.687570][ T472] device bridge_slave_1 left promiscuous mode [ 176.694094][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.728305][ T472] device bridge_slave_0 left promiscuous mode [ 176.743693][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.844090][ T472] device veth1_macvtap left promiscuous mode [ 176.856379][ T472] device veth0_macvtap left promiscuous mode [ 176.862494][ T472] device veth1_vlan left promiscuous mode [ 176.876163][ T472] device veth0_vlan left promiscuous mode [ 177.175077][ T472] team0 (unregistering): Port device team_slave_1 removed [ 177.193132][ T472] team0 (unregistering): Port device team_slave_0 removed [ 177.204942][ T472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.223515][ T472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.289540][ T472] bond0 (unregistering): Released all slaves [ 177.408923][ T9190] device hsr_slave_0 entered promiscuous mode [ 177.435614][ T9190] device hsr_slave_1 entered promiscuous mode [ 177.611269][ T9301] netlink: 'syz.2.2099': attribute type 3 has an invalid length. [ 177.631708][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 177.866755][ T9313] netem: change failed [ 177.905208][ T9319] [U] VÔ3¸ÂFŮľ"SÇÁ/ÉĘ4:ĂXTZ“WˇT‘’LWµ«= [ 177.920363][ T9319] [U] J"—E:ŔĆ" [ 177.942526][ T9190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.965122][ T9190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.066516][ T9190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.088359][ T9190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.196661][ T9336] loop3: detected capacity change from 0 to 16 [ 178.223960][ T9336] erofs: (device loop3): mounted with root inode @ nid 36. [ 178.562424][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.645021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.666364][ T4444] Bluetooth: hci2: command 0x041b tx timeout [ 178.676798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.750005][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.788891][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.806729][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.856035][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.863131][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.929492][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.942711][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.977466][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.020662][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.027816][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.089828][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.152306][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.186246][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.240496][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.280213][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.322530][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.380821][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.411281][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.463006][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.481803][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.520294][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.547584][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.682543][ T9366] loop3: detected capacity change from 0 to 32768 [ 179.834502][ T9366] XFS (loop3): Mounting V5 Filesystem [ 179.885280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.915071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.964422][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.997201][ T9366] XFS (loop3): Starting recovery (logdev: internal) [ 180.055706][ T9366] XFS (loop3): Ending recovery (logdev: internal) [ 180.234988][ T4190] XFS (loop3): Unmounting Filesystem [ 180.326436][ T9371] loop4: detected capacity change from 0 to 32768 [ 180.389406][ T9371] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2121 (9371) [ 180.612797][ T9371] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.655456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.686455][ T9371] BTRFS info (device loop4): setting nodatacow, compression disabled [ 180.702505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.751363][ T4573] Bluetooth: hci2: command 0x040f tx timeout [ 180.759812][ T9371] BTRFS info (device loop4): force clearing of disk cache [ 180.844669][ T9190] device veth0_vlan entered promiscuous mode [ 180.848557][ T9371] BTRFS info (device loop4): enabling ssd optimizations [ 180.876823][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.894460][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.921859][ T9371] BTRFS info (device loop4): using spread ssd allocation scheme [ 180.930362][ T9190] device veth1_vlan entered promiscuous mode [ 180.952377][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.971732][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.985303][ T9371] BTRFS info (device loop4): turning off barriers [ 181.002313][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.036464][ T9371] BTRFS info (device loop4): disabling free space tree [ 181.060068][ T9371] BTRFS info (device loop4): not using ssd optimizations [ 181.084658][ T9442] netlink: 'syz.3.2132': attribute type 2 has an invalid length. [ 181.102381][ T9371] BTRFS info (device loop4): not using spread ssd allocation scheme [ 181.127947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.149352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.176353][ T9371] BTRFS info (device loop4): has skinny extents [ 181.183811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.244922][ T9190] device veth0_macvtap entered promiscuous mode [ 181.365695][ T9190] device veth1_macvtap entered promiscuous mode [ 181.416540][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.452293][ T9475] loop3: detected capacity change from 0 to 256 [ 181.526455][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.544449][ T9477] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 181.597023][ T9371] BTRFS info (device loop4): clearing free space tree [ 181.611451][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.625875][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 181.665347][ T9477] nbd: illegal input index 65544 [ 181.670761][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.670997][ T9371] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.732253][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.739885][ T9475] exfat: Deprecated parameter 'utf8' [ 181.789508][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.806579][ T9371] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.806697][ T9475] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6c34595, utbl_chksum : 0xe619d30d) [ 181.834430][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.868504][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.904659][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.954794][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.978918][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.003970][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.047450][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.062721][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.073942][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.094983][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.114481][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.149394][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.193179][ T9190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.245918][ T9190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.254659][ T9190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.290254][ T9190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.401776][ T4283] kernel write not supported for file /sg0 (pid: 4283 comm: kworker/0:7) [ 182.568216][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.610342][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.663863][ T9501] team0: Device vxcan3 is of different type [ 182.869624][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 183.191754][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.191815][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.197437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.293643][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.293703][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.300292][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.377599][ T9532] loop3: detected capacity change from 0 to 2048 [ 183.501759][ T9532] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 184.039767][ T9553] loop6: detected capacity change from 0 to 32768 [ 184.196768][ T9553] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 184.261184][ T4439] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 184.272770][ T4439] XFS (loop6): Unmount and run xfs_repair [ 184.289752][ T4439] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 184.320149][ T4439] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 184.396183][ T4439] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 10 00 ................ [ 184.455826][ T4439] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 184.509338][ T4439] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 184.541978][ T4439] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 184.583362][ T4439] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 184.615943][ T4439] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 184.640867][ T4439] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 184.653313][ T9553] XFS (loop6): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 185.152204][ T9625] loop3: detected capacity change from 0 to 1024 [ 185.886944][ T9683] loop3: detected capacity change from 0 to 256 [ 186.022205][ T9683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.297134][ T9706] netem: incorrect ge model size [ 186.302143][ T9706] netem: change failed [ 186.370820][ T9650] loop6: detected capacity change from 0 to 32768 [ 186.470257][ T9650] XFS: noikeep mount option is deprecated. [ 186.576769][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 186.598009][ T9650] XFS (loop6): Mounting V5 Filesystem [ 186.638382][ T9678] loop4: detected capacity change from 0 to 32768 [ 186.656820][ T1111] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 186.688432][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 186.783180][ T9678] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 186.826717][ T9650] XFS (loop6): Ending clean mount [ 186.861334][ T9650] XFS (loop6): Quotacheck needed: Please wait. [ 186.955032][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 187.032165][ T9650] XFS (loop6): Quotacheck: Done. [ 187.176797][ T1111] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 187.196201][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.204229][ T1111] usb 1-1: Product: syz [ 187.255301][ T1111] usb 1-1: Manufacturer: syz [ 187.263408][ T1111] usb 1-1: SerialNumber: syz [ 187.292822][ T1111] usb 1-1: config 0 descriptor?? [ 187.342064][ T9190] XFS (loop6): Unmounting Filesystem [ 187.349952][ T1111] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 187.509352][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 187.621256][ T9751] loop3: detected capacity change from 0 to 40427 [ 187.650741][ T8898] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 187.725551][ T9785] netlink: 'syz.2.2245': attribute type 2 has an invalid length. [ 187.744139][ T9751] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 187.771483][ T9751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.843031][ T9751] F2FS-fs (loop3): invalid crc value [ 187.906075][ T8898] usb 5-1: Using ep0 maxpacket: 16 [ 187.915125][ T9751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.992586][ T1111] usb 1-1: USB disconnect, device number 18 [ 188.047879][ T9751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 188.061920][ T9751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 188.186600][ T8898] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.221385][ T8898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.256519][ T8898] usb 5-1: Product: syz [ 188.260732][ T8898] usb 5-1: Manufacturer: syz [ 188.282723][ T8898] usb 5-1: SerialNumber: syz [ 188.307711][ T8898] r8152-cfgselector 5-1: config 0 descriptor?? [ 188.566339][ T8898] r8152-cfgselector 5-1: Unknown version 0x0000 [ 188.607430][ T8898] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 188.631491][ T4234] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 188.749277][ T9800] loop6: detected capacity change from 0 to 32768 [ 188.815023][ T8898] usb 5-1: USB disconnect, device number 15 [ 188.997631][ T9800] XFS (loop6): Mounting V5 Filesystem [ 189.013863][ T9849] loop3: detected capacity change from 0 to 1024 [ 189.046140][ T4234] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 189.055210][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.055936][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.181881][ T4234] usb 3-1: config 0 descriptor?? [ 189.193771][ T9] hfsplus: b-tree write err: -5, ino 4 [ 189.210320][ T9800] XFS (loop6): Ending clean mount [ 189.230139][ T9800] XFS (loop6): Quotacheck needed: Please wait. [ 189.426018][ T9800] XFS (loop6): Quotacheck: Done. [ 189.561596][ T9190] XFS (loop6): Unmounting Filesystem [ 189.687858][ T4234] smartjoyplus 0003:0925:8866.0026: unbalanced collection at end of report description [ 189.726423][ T4234] smartjoyplus 0003:0925:8866.0026: parse failed [ 189.751027][ T9876] loop3: detected capacity change from 0 to 4096 [ 189.758020][ T4234] smartjoyplus: probe of 0003:0925:8866.0026 failed with error -22 [ 189.796661][ T9876] ntfs3: loop3: ino=3, Correct links count -> 2. [ 189.895224][ T8896] usb 3-1: USB disconnect, device number 17 [ 189.974979][ T9876] ntfs3: loop3: failed to convert "0000" to iso8859-13 [ 190.006435][ T9876] ntfs3: loop3: failed to convert name for inode 1e. [ 190.231308][ T9873] loop4: detected capacity change from 0 to 32768 [ 190.292023][ T9873] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.332443][ T9873] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.342158][ T4234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 190.358040][ T4234] Bluetooth: hci0: Injecting HCI hardware error event [ 190.368638][ T4199] Bluetooth: hci0: hardware error 0x00 [ 190.415232][ T9873] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 190.694676][ T9873] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 190.724866][ T9912] loop6: detected capacity change from 0 to 8192 [ 190.842947][ T9912] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 190.872928][ T9912] REISERFS (device loop6): using ordered data mode [ 190.896075][ T4438] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 190.926832][ T9912] reiserfs: using flush barriers [ 190.964408][ T9912] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.026805][ T9912] REISERFS (device loop6): checking transaction log (loop6) [ 191.056854][ T9912] REISERFS (device loop6): Using r5 hash to sort names [ 191.077023][ T9912] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 191.108586][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2291'. [ 191.188063][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2291'. [ 191.222075][ T9912] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "noload" [ 191.254293][ T9948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2291'. [ 191.306299][ T4438] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.315432][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.392934][ T4438] usb 1-1: config 0 descriptor?? [ 191.662608][ T4438] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 191.742762][ T4438] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 191.887797][ T4438] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 191.895296][ T4438] [drm] Initialized udl on minor 2 [ 191.970917][ T9982] team0: Device vxcan3 is of different type [ 192.089911][ T4438] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.106218][ T4438] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 192.132597][ T4438] usb 1-1: USB disconnect, device number 19 [ 192.151921][ T4256] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 192.169424][ T4256] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 192.194846][ T4256] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 192.336303][ T8898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 192.489330][T10009] loop4: detected capacity change from 0 to 256 [ 192.556974][T10009] exfat: Deprecated parameter 'utf8' [ 192.562341][T10009] exfat: Deprecated parameter 'utf8' [ 192.576373][ T8898] usb 7-1: Using ep0 maxpacket: 16 [ 192.659731][T10009] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 192.696240][ T8898] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.717433][ T8898] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.770749][ T8898] usb 7-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.814847][ T8898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.825684][T10032] xt_HMARK: spi-set and port-set can't be combined [ 192.833530][ T8898] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 192.856361][ T8898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.884737][ T8898] usb 7-1: config 0 descriptor?? [ 193.047378][T10046] tipc: Enabling not permitted [ 193.093016][T10052] loop4: detected capacity change from 0 to 24 [ 193.100747][T10046] tipc: Enabling of bearer rejected, failed to enable media [ 193.266728][ T1111] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 193.389655][ T8898] kye 0003:0458:0153.0027: hidraw0: USB HID v0.0a Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0 [ 193.561659][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.629617][ T8898] usb 7-1: USB disconnect, device number 2 [ 193.716470][ T8895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.806755][ T1111] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 193.816004][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 193.822257][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.831096][ T1111] usb 3-1: Product: syz [ 193.835510][ T1111] usb 3-1: Manufacturer: syz [ 193.840981][ T1111] usb 3-1: SerialNumber: syz [ 193.864878][ T1111] usb 3-1: config 0 descriptor?? [ 193.907284][ T1111] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 193.928502][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.938712][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 193.950672][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 193.962759][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.977032][ T1111] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 193.986632][ T8895] usb 4-1: Using ep0 maxpacket: 32 [ 193.996496][ T1111] usb 3-1: media controller created [ 194.014120][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.082360][ T1111] DVB: Unable to find symbol mt352_attach() [ 194.106431][ T8895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.114454][ T8895] usb 4-1: config 0 has no interface number 0 [ 194.127708][T10044] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 194.163203][ T1111] DVB: Unable to find symbol nxt6000_attach() [ 194.170201][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 194.185800][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192124][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.203608][ T1111] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 194.213539][ T23] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 194.222929][ T23] usb 5-1: Product: syz [ 194.228007][ T23] usb 5-1: Manufacturer: syz [ 194.236848][ T23] usb 5-1: SerialNumber: syz [ 194.251579][T10113] loop6: detected capacity change from 0 to 64 [ 194.264400][ T1111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 194.299057][ T23] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41 [ 194.309216][ T1111] dvb-usb: schedule remote query interval to 1000 msecs. [ 194.312956][ T26] audit: type=1800 audit(1769554905.307:124): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2351" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 194.317229][ T8895] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 194.347597][ T1111] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 194.360648][ T1111] dvb-usb: bulk message failed: -22 (7/0) [ 194.380320][ T1111] dvb-usb: bulk message failed: -22 (7/0) [ 194.390798][ T8895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.405353][ T1111] usb 3-1: USB disconnect, device number 18 [ 194.413036][ T8895] usb 4-1: Product: syz [ 194.418060][ T8895] usb 4-1: Manufacturer: syz [ 194.422681][ T8895] usb 4-1: SerialNumber: syz [ 194.441691][ T8895] usb 4-1: config 0 descriptor?? [ 194.456620][T10115] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2354'. [ 194.472325][T10115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2354'. [ 194.508160][ T23] usb 5-1: USB disconnect, device number 16 [ 194.523343][ T8895] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 194.557883][ T8895] usb 4-1: selecting invalid altsetting 1 [ 194.564285][ T8895] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 194.582648][ T1111] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 194.619301][ T8895] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.636486][ T8895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 194.642589][T10124] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2357'. [ 194.651633][ T8895] usb 4-1: media controller created [ 194.677847][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2357'. [ 194.703313][ T8895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.752662][T10130] loop6: detected capacity change from 0 to 256 [ 194.769971][T10130] exfat: Deprecated parameter 'namecase' [ 194.777255][ T23] appletouch 5-1:1.0: input: appletouch disconnected [ 194.826393][T10130] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 195.181268][T10155] loop6: detected capacity change from 0 to 512 [ 195.272327][T10155] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 195.324380][T10155] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.352520][T10155] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2369: bg 0: block 248: padding at end of block bitmap is not set [ 195.395430][T10155] Quota error (device loop6): write_blk: dquota write failed [ 195.403254][T10155] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 195.414068][T10155] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.2369: Failed to acquire dquot type 1 [ 195.439745][T10155] EXT4-fs (loop6): 1 truncate cleaned up [ 195.460271][T10155] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,bsdgroups,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 195.482802][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.523862][T10155] EXT4-fs (loop6): shut down requested (0) [ 195.796385][T10071] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 195.851622][ T8895] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 195.876545][ T8895] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.907880][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 195.916412][ T8895] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 196.036555][ T8895] usb 4-1: USB disconnect, device number 13 [ 196.080472][T10213] nbd: must specify a size in bytes for the device [ 196.154062][T10219] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2402'. [ 196.315919][ T4234] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.756258][ T4234] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 196.771321][ T4234] usb 5-1: config 0 has no interface number 0 [ 196.773969][T10269] program syz.2.2424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.809737][ T4234] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 196.813411][T10270] loop6: detected capacity change from 0 to 1024 [ 196.829408][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.854900][ T4234] usb 5-1: config 0 descriptor?? [ 196.933898][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 196.961614][T10270] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.2425: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.014412][T10282] loop3: detected capacity change from 0 to 2048 [ 197.017821][T10270] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 197.042085][T10270] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.2425: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.045059][T10282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.087087][T10282] NILFS (loop3): mounting unchecked fs [ 197.094335][T10270] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 197.095258][ T7605] udevd[7605]: incorrect nilfs2 checksum on /dev/loop3 [ 197.104236][T10270] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.2425: Failed to acquire dquot type 0 [ 197.120041][ T4256] usb 5-1: USB disconnect, device number 17 [ 197.124561][T10270] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 197.148569][T10270] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.2425: mark_inode_dirty error [ 197.165448][T10270] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 197.196520][T10270] EXT4-fs (loop6): 1 orphan inode deleted [ 197.205632][T10282] NILFS (loop3): recovery complete [ 197.206890][T10270] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 197.234451][ T4373] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.247922][T10270] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.2425: Invalid inode table block 1 in block_group 0 [ 197.262031][T10294] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.274134][ T4373] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 197.283460][T10270] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 197.293675][ T4373] EXT4-fs error (device loop6): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 197.357987][ T9190] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.405387][ T9190] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 197.431198][ T9190] EXT4-fs error (device loop6): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 197.733143][T10322] loop3: detected capacity change from 0 to 1024 [ 197.884665][T10334] loop4: detected capacity change from 0 to 256 [ 197.900300][T10322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.936694][ T1111] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 198.177426][ T1111] usb 7-1: Using ep0 maxpacket: 32 [ 198.247458][T10350] loop3: detected capacity change from 0 to 1024 [ 198.252938][T10352] loop4: detected capacity change from 0 to 1024 [ 198.287349][T10350] EXT4-fs (loop3): Ignoring removed orlov option [ 198.296752][ T1111] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 198.318132][ T1111] usb 7-1: config 0 has no interface number 0 [ 198.348107][T10352] hfsplus: bad catalog entry type [ 198.351535][T10350] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 198.392691][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 198.404502][T10356] sch_fq: defrate 4294967295 ignored. [ 198.490056][T10362] CUSE: DEVNAME unspecified [ 198.516662][ T1111] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 198.535024][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.537361][T10364] binder: 10363:10364 ioctl 4018620d 0 returned -22 [ 198.553431][T10364] binder: 10363:10364 ioctl c0046209 0 returned -22 [ 198.560309][ T1111] usb 7-1: Product: syz [ 198.560329][ T1111] usb 7-1: Manufacturer: syz [ 198.560341][ T1111] usb 7-1: SerialNumber: syz [ 198.600797][ T1111] usb 7-1: config 0 descriptor?? [ 198.647529][ T1111] smsc95xx v2.0.0 [ 198.672207][ T1111] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 198.701418][ T1111] smsc95xx: probe of 7-1:0.67 failed with error -22 [ 198.859990][ T1111] usb 7-1: USB disconnect, device number 3 [ 198.951525][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 198.963555][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2479'. [ 198.990707][T10391] netlink: 'syz.3.2479': attribute type 13 has an invalid length. [ 199.007394][T10391] netlink: 'syz.3.2479': attribute type 11 has an invalid length. [ 199.049098][T10398] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.136981][T10402] mkiss: ax0: crc mode is auto. [ 199.466656][T10424] netlink: 'syz.4.2492': attribute type 8 has an invalid length. [ 199.620686][T10435] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 199.687564][T10435] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2497'. [ 199.759377][T10437] loop6: detected capacity change from 0 to 4096 [ 199.772014][T10437] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 199.793623][ T4256] Bluetooth: hci2: command 0x0411 tx timeout [ 199.836583][ T4234] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 199.858384][T10440] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2499'. [ 199.903688][T10437] ntfs: (device loop6): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 199.922884][T10442] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 199.942153][T10442] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2497'. [ 199.965550][T10437] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 199.991342][T10437] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 200.022965][ T26] audit: type=1400 audit(1769554911.007:125): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10448 comm="syz.3.2502" [ 200.058422][T10437] ntfs: volume version 3.1. [ 200.108731][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 200.269354][T10455] loop3: detected capacity change from 0 to 2048 [ 200.277698][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.295293][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.307920][ T4234] usb 1-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 200.344879][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.375104][ T4234] usb 1-1: config 0 descriptor?? [ 200.391865][T10455] EXT4-fs (loop3): Unrecognized mount option "obj_role=seclabel" or missing value [ 200.563004][T10466] loop4: detected capacity change from 0 to 512 [ 200.625628][T10466] EXT4-fs error (device loop4): __ext4_iget:4912: inode #11: block 1: comm syz.4.2509: invalid block [ 200.685191][T10466] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2509: couldn't read orphan inode 11 (err -117) [ 200.738910][T10475] loop3: detected capacity change from 0 to 1024 [ 200.754218][T10466] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 200.891862][ T4234] logitech-hidpp-device 0003:046D:C082.0028: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.0-1/input0 [ 200.905147][ T9] hfsplus: b-tree write err: -5, ino 4 [ 201.032520][T10493] loop6: detected capacity change from 0 to 1024 [ 201.089317][ T4234] usb 1-1: USB disconnect, device number 20 [ 201.153681][T10493] hfsplus: bad catalog entry type [ 201.187555][T10501] fido_id[10501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 201.236388][ T1111] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.264696][ T9] hfsplus: b-tree write err: -5, ino 4 [ 201.331069][T10508] loop6: detected capacity change from 0 to 512 [ 201.373583][T10508] EXT4-fs (loop6): Ignoring removed orlov option [ 201.392957][T10508] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 201.435945][T10508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 201.460002][T10508] EXT4-fs error (device loop6): ext4_iget_extra_inode:4566: inode #15: comm syz.6.2528: corrupted in-inode xattr [ 201.495842][ T4256] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 201.498620][ T1111] usb 4-1: Using ep0 maxpacket: 8 [ 201.518503][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2532'. [ 201.520866][T10508] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2528: couldn't read orphan inode 15 (err -117) [ 201.528072][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 201.551083][T10508] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 201.669384][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 201.691983][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.722688][ T1111] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.732932][T10526] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 201.758799][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 201.808582][ T1111] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 201.854149][ T1111] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 201.882310][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.917064][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.937785][ T1111] usb 4-1: config 0 descriptor?? [ 201.958928][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.986297][ T4256] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.004742][ T4199] Bluetooth: hci5: urb ffff88802c5c2200 submission failed (90) [ 202.089960][ T4256] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 202.130699][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.171264][ T4256] usb 5-1: config 0 descriptor?? [ 202.190965][ T1111] usb 4-1: USB disconnect, device number 14 [ 202.325184][T10568] sp0: Synchronizing with TNC [ 202.700032][ T4256] hid-multitouch 0003:0EEF:72D0.0029: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 202.909652][ T1111] usb 5-1: USB disconnect, device number 18 [ 202.933015][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 202.965133][T10602] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 202.981529][T10576] loop6: detected capacity change from 0 to 32768 [ 203.020735][T10576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2553 (10576) [ 203.058813][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 203.074185][T10576] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 203.083681][T10576] BTRFS info (device loop6): force clearing of disk cache [ 203.115319][T10576] BTRFS info (device loop6): enabling auto defrag [ 203.133784][T10576] BTRFS info (device loop6): enabling ssd optimizations [ 203.152389][T10576] BTRFS info (device loop6): max_inline at 0 [ 203.186500][T10576] BTRFS info (device loop6): enabling disk space caching [ 203.202421][T10576] BTRFS info (device loop6): disk space caching is enabled [ 203.226591][T10576] BTRFS info (device loop6): has skinny extents [ 203.244346][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 203.430401][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 203.510890][T10576] BTRFS info (device loop6): clearing free space tree [ 203.530813][T10576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.558261][T10576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.890635][T10658] netlink: 'syz.3.2579': attribute type 29 has an invalid length. [ 203.938593][T10658] netlink: 'syz.3.2579': attribute type 29 has an invalid length. [ 203.960077][T10661] loop4: detected capacity change from 0 to 16 [ 203.981246][T10660] netlink: 'syz.3.2579': attribute type 29 has an invalid length. [ 204.043486][T10661] erofs: (device loop4): mounted with root inode @ nid 36. [ 204.187310][T10661] overlayfs: failed to get redirect (-117) [ 205.049350][T10708] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2593'. [ 205.243741][T10666] loop3: detected capacity change from 0 to 32768 [ 205.298016][T10666] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 205.325993][T10666] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 205.367276][T10666] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 205.573354][T10666] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 205.604344][T10740] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 206.366370][ T4234] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 206.786655][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.815948][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 206.836882][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 206.874026][T10814] loop6: detected capacity change from 0 to 512 [ 206.989072][ T4234] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.006230][ T4234] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.068938][T10814] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2629: inode has both inline data and extents flags [ 207.093461][ T4234] usb 5-1: Manufacturer: syz [ 207.127769][ T4234] usb 5-1: config 0 descriptor?? [ 207.165724][T10814] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2629: couldn't read orphan inode 15 (err -117) [ 207.234425][T10814] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.402932][ T4234] usb 5-1: USB disconnect, device number 19 [ 207.851959][T10866] device ipvlan2 entered promiscuous mode [ 208.261329][T10893] usb usb8: usbfs: process 10893 (syz.2.2653) did not claim interface 0 before use [ 208.330269][T10897] Process accounting resumed [ 208.350916][ T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 208.376754][T10853] loop3: detected capacity change from 0 to 32768 [ 208.516650][T10853] XFS (loop3): Mounting V5 Filesystem [ 208.609284][T10925] netlink: 'syz.0.2665': attribute type 29 has an invalid length. [ 208.617708][T10925] netlink: 'syz.0.2665': attribute type 29 has an invalid length. [ 208.630001][T10925] netlink: 'syz.0.2665': attribute type 29 has an invalid length. [ 208.684880][T10853] XFS (loop3): Ending clean mount [ 208.726859][ T23] usb 7-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.753656][ T23] usb 7-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 208.759385][T10936] loop4: detected capacity change from 0 to 256 [ 208.783667][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 208.801397][ T23] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 208.840739][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.850857][T10936] FAT-fs (loop4): Directory bread(block 64) failed [ 208.875256][T10936] FAT-fs (loop4): Directory bread(block 65) failed [ 208.893195][ T23] usb 7-1: config 0 descriptor?? [ 208.936526][T10881] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.943893][T10936] FAT-fs (loop4): Directory bread(block 66) failed [ 208.953437][T10936] FAT-fs (loop4): Directory bread(block 67) failed [ 208.983018][ T4190] XFS (loop3): Unmounting Filesystem [ 208.985484][T10936] FAT-fs (loop4): Directory bread(block 68) failed [ 209.011109][T10936] FAT-fs (loop4): Directory bread(block 69) failed [ 209.049343][T10936] FAT-fs (loop4): Directory bread(block 70) failed [ 209.073063][T10936] FAT-fs (loop4): Directory bread(block 71) failed [ 209.100300][T10936] FAT-fs (loop4): Directory bread(block 72) failed [ 209.123791][T10936] FAT-fs (loop4): Directory bread(block 73) failed [ 209.288471][T10958] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2678'. [ 209.403994][ T23] itetech 0003:06CB:73F5.002A: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.6-1/input0 [ 209.589585][ T23] usb 7-1: USB disconnect, device number 4 [ 209.633848][T10969] fido_id[10969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 210.042978][T10993] loop4: detected capacity change from 0 to 4096 [ 210.384130][T11011] loop3: detected capacity change from 0 to 1024 [ 210.403020][T11014] vivid-008: disconnect [ 210.437774][T11013] vivid-008: reconnect [ 210.473751][T11011] hfsplus: bad catalog entry type [ 210.480057][T11008] loop6: detected capacity change from 0 to 4096 [ 210.527817][T11008] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 210.585440][ T4373] hfsplus: b-tree write err: -5, ino 4 [ 210.650542][T11008] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 210.777920][T11018] loop4: detected capacity change from 0 to 4096 [ 210.892104][T11025] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.082512][T11018] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 211.222280][T11037] loop6: detected capacity change from 0 to 2048 [ 211.302595][T11041] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.656687][T11059] loop6: detected capacity change from 0 to 2048 [ 211.717684][T11059] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.766429][T11071] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.993855][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'. [ 212.213705][T11101] loop4: detected capacity change from 0 to 128 [ 212.342056][ T26] audit: type=1326 audit(1769554923.327:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.2738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa7453eb9 code=0x0 [ 212.729152][T11139] tipc: Invalid UDP bearer configuration [ 212.729184][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 212.945916][ T4234] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.086441][ T8884] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 213.244026][T11154] unsupported nlmsg_type 40 [ 213.320442][T11158] netlink: 'syz.3.2761': attribute type 3 has an invalid length. [ 213.329111][ T4234] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 213.329137][ T4234] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 213.329153][ T4234] usb 5-1: config 0 has no interface number 0 [ 213.331433][ T8884] usb 7-1: Using ep0 maxpacket: 32 [ 213.446195][ T8884] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.446221][ T8884] usb 7-1: config 0 has no interface number 0 [ 213.453669][T11166] loop3: detected capacity change from 0 to 1024 [ 213.520862][ T4234] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 213.520890][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.520907][ T4234] usb 5-1: Product: syz [ 213.520919][ T4234] usb 5-1: Manufacturer: syz [ 213.520931][ T4234] usb 5-1: SerialNumber: syz [ 213.522642][ T4234] usb 5-1: config 0 descriptor?? [ 213.606434][ T8884] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 213.624647][ T8884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.624672][ T8884] usb 7-1: Product: syz [ 213.624686][ T8884] usb 7-1: Manufacturer: syz [ 213.624700][ T8884] usb 7-1: SerialNumber: syz [ 213.634988][ T8884] usb 7-1: config 0 descriptor?? [ 213.639789][T11166] hfsplus: request for non-existent node 262144 in B*Tree [ 213.639888][T11166] hfsplus: request for non-existent node 262144 in B*Tree [ 213.668274][ T8884] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 213.711784][ T8884] usb 7-1: selecting invalid altsetting 1 [ 213.711811][ T8884] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 213.713634][ T1111] Bluetooth: hci2: command 0x0405 tx timeout [ 213.716859][ T8884] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.717030][ T8884] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 213.717061][ T8884] usb 7-1: media controller created [ 213.749287][T11177] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2770'. [ 213.749324][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2770'. [ 213.751743][ T8884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.990876][ T4234] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 213.998562][ T4234] usb 5-1: No valid video chain found. [ 214.005399][T11191] netlink: 'syz.2.2778': attribute type 9 has an invalid length. [ 214.018760][T11191] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2778'. [ 214.061572][T11196] netlink: 'syz.2.2778': attribute type 9 has an invalid length. [ 214.062340][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 214.094994][T11196] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2778'. [ 214.171530][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2782'. [ 214.192810][ T1111] usb 5-1: USB disconnect, device number 20 [ 214.552870][T11205] loop3: detected capacity change from 0 to 32768 [ 214.590815][T11205] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2783 (11205) [ 214.634359][T11205] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 214.659376][T11205] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 214.681098][T11205] BTRFS info (device loop3): use zstd compression, level 3 [ 214.729042][T11205] BTRFS info (device loop3): using free space tree [ 214.742108][T11205] BTRFS info (device loop3): has skinny extents [ 214.836614][ T8884] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 214.868672][ T8884] zl10353_read_register: readreg error (reg=127, ret==-110) [ 214.908174][T11146] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 214.978376][ T8884] usb 7-1: USB disconnect, device number 5 [ 215.111985][T11205] BTRFS info (device loop3): enabling ssd optimizations [ 215.471148][T11261] device bridge0 entered promiscuous mode [ 215.515481][T11261] device macvlan2 entered promiscuous mode [ 215.715096][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2803'. [ 215.992069][T11284] netlink: 'syz.3.2796': attribute type 9 has an invalid length. [ 216.013915][T11284] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2796'. [ 216.060590][T11286] netlink: 'syz.3.2796': attribute type 9 has an invalid length. [ 216.074960][T11286] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2796'. [ 216.166091][ T23] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.406411][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 216.530953][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.560895][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.632061][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.673961][ T26] audit: type=1326 audit(1769554927.657:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.2825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa7453eb9 code=0x0 [ 216.680516][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.752808][ T23] usb 5-1: config 0 descriptor?? [ 217.115021][T11333] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 217.240263][ T23] microsoft 0003:045E:07DA.002B: collection stack underflow [ 217.253186][ T23] microsoft 0003:045E:07DA.002B: item 0 2 0 12 parsing failed [ 217.272152][ T23] microsoft 0003:045E:07DA.002B: parse failed [ 217.284055][ T23] microsoft: probe of 0003:045E:07DA.002B failed with error -22 [ 217.448947][ T23] usb 5-1: USB disconnect, device number 21 [ 217.476167][ T1111] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 217.796153][ T8898] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 217.846250][ T1111] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 217.860362][ T1111] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.870788][ T1111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 217.877958][ T1111] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 217.887360][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.898145][ T1111] usb 7-1: config 0 descriptor?? [ 218.168637][T11355] loop3: detected capacity change from 0 to 2048 [ 218.196613][ T8898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.221668][ T8898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.249839][ T8898] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 218.262366][ T8898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.268372][T11355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.273508][ T8898] usb 3-1: config 0 descriptor?? [ 218.322487][ T8898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 218.346685][ T8898] dvb-usb: bulk message failed: -22 (3/0) [ 218.352500][ T26] audit: type=1800 audit(1769554929.337:128): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2841" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 218.384122][ T1111] pantherlord 0003:0810:0002.002C: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0 [ 218.403413][ T8898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 218.413196][ T1111] pantherlord 0003:0810:0002.002C: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 218.446610][ T8898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 218.464365][ T8898] usb 3-1: media controller created [ 218.480246][ T8898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.520731][ T8898] dvb-usb: bulk message failed: -22 (6/0) [ 218.539608][ T8898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 218.540246][T11347] dvb-usb: bulk message failed: -22 (4/0) [ 218.578341][ T1108] usb 7-1: USB disconnect, device number 6 [ 218.601127][ T8898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 218.644523][ T8898] dvb-usb: schedule remote query interval to 150 msecs. [ 218.672733][ T8898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 218.743499][ T8898] usb 3-1: USB disconnect, device number 19 [ 218.801911][ T8898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 218.891567][T11376] loop3: detected capacity change from 0 to 4096 [ 219.005464][T11362] loop4: detected capacity change from 0 to 40427 [ 219.054273][T11362] F2FS-fs (loop4): invalid crc value [ 219.153787][T11362] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 219.462573][T11362] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.712285][ T4185] attempt to access beyond end of device [ 219.712285][ T4185] loop4: rw=2049, want=45104, limit=40427 [ 219.718155][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 219.785988][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.145934][ T1108] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 220.248265][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 220.257943][T11438] tipc: Started in network mode [ 220.262911][T11438] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 220.273123][T11438] tipc: Enabling of bearer rejected, failed to enable media [ 220.321470][T11426] loop6: detected capacity change from 0 to 32768 [ 220.395636][T11426] JBD2: Ignoring recovery information on journal [ 220.416518][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 220.442404][T11426] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 220.483401][T11426] (syz.6.2872,11426,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 220.524519][ T9190] ocfs2: Unmounting device (7,6) on (node local) [ 220.566082][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.574105][ T1108] usb 3-1: config 0 has no interface number 0 [ 220.736269][ T1108] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 220.769342][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.793822][ T1108] usb 3-1: Product: syz [ 220.805841][ T1108] usb 3-1: Manufacturer: syz [ 220.810479][ T1108] usb 3-1: SerialNumber: syz [ 220.837020][ T1108] usb 3-1: config 0 descriptor?? [ 220.877853][ T1108] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 220.899139][ T1108] usb 3-1: selecting invalid altsetting 1 [ 220.904904][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 220.912807][T11455] loop3: detected capacity change from 0 to 1024 [ 220.945436][ T1108] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.978413][ T1108] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 221.006230][ T4439] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 221.020830][ T1108] usb 3-1: media controller created [ 221.071075][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.451030][ T4439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.483044][ T4439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.532267][ T4439] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 221.570390][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.611335][ T4439] usb 5-1: config 0 descriptor?? [ 221.782639][T11489] loop6: detected capacity change from 0 to 32768 [ 221.809346][T11489] (syz.6.2900,11489,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.823889][T11489] (syz.6.2900,11489,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.857580][T11489] JBD2: Ignoring recovery information on journal [ 221.887745][T11489] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 221.970812][ T9190] ocfs2: Unmounting device (7,6) on (node local) [ 222.110497][ T4439] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 222.196307][T11423] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 222.256005][ T1108] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 222.263050][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.301029][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 222.308335][ T4444] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 222.316398][ T4439] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 222.323822][ T4439] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 222.365877][ T4439] pyra: probe of 0003:1E7D:2CF6.002D failed with error -71 [ 222.385701][ T4439] usb 5-1: USB disconnect, device number 22 [ 222.401416][ T1108] usb 3-1: USB disconnect, device number 20 [ 222.490455][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2913'. [ 222.563963][T11517] fido_id[11517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 222.650537][T11520] loop6: detected capacity change from 0 to 8192 [ 222.725680][T11520] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 222.764464][T11520] REISERFS (device loop6): using ordered data mode [ 222.776052][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.795828][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.812161][T11520] reiserfs: using flush barriers [ 222.815878][ T4444] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 222.826334][ T4444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.837380][ T4444] usb 1-1: config 0 descriptor?? [ 222.846571][T11520] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.864909][T11520] REISERFS (device loop6): checking transaction log (loop6) [ 222.875625][T11520] REISERFS (device loop6): Using r5 hash to sort names [ 222.905709][T11520] reiserfs: enabling write barrier flush mode [ 222.935663][T11520] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 222.969928][T11520] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 222.989383][T11520] REISERFS (device loop6): Remounting filesystem read-only [ 222.998166][T11520] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 223.028200][T11520] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 223.041693][T11527] loop3: detected capacity change from 0 to 32768 [ 223.065488][T11520] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 223.092726][T11520] REISERFS error (device loop6): zam-7001 reiserfs_find_entry: io error [ 223.095521][T11527] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2918 (11527) [ 223.116385][T11520] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 223.157975][T11520] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 223.185536][T11527] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 223.190009][T11520] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 223.215362][T11527] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.222246][T11520] REISERFS warning (device loop6): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 223.239591][T11527] BTRFS info (device loop3): use zstd compression, level 3 [ 223.239617][T11527] BTRFS info (device loop3): using free space tree [ 223.239631][T11527] BTRFS info (device loop3): has skinny extents [ 223.320028][ T4444] uclogic 0003:28BD:0042.002E: No inputs registered, leaving [ 223.321500][ T4444] uclogic 0003:28BD:0042.002E: hidraw0: USB HID v0.06 Device [HID 28bd:0042] on usb-dummy_hcd.0-1/input0 [ 223.351711][T11520] REISERFS warning (device loop6): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 223.461918][ T9190] ------------[ cut here ]------------ [ 223.461967][ T9190] kernel BUG at fs/reiserfs/journal.c:1913! [ 223.462003][ T9190] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 223.462023][ T9190] CPU: 0 PID: 9190 Comm: syz-executor Not tainted syzkaller #0 [ 223.462039][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.462051][ T9190] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 223.462075][ T9190] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 223.462088][ T9190] RSP: 0018:ffffc9000374fb80 EFLAGS: 00010293 [ 223.462104][ T9190] RAX: ffffffff82009dd2 RBX: 1ffff920006e9f74 RCX: ffff8880248f5940 [ 223.462116][ T9190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.462126][ T9190] RBP: ffffc9000374fc78 R08: ffffc9000374fbf7 R09: ffffc9000374fbc0 [ 223.462138][ T9190] R10: dffffc0000000000 R11: fffff520006e9f7f R12: ffffc90004259000 [ 223.462150][ T9190] R13: dffffc0000000000 R14: ffff888077918678 R15: 0000000000000000 [ 223.462161][ T9190] FS: 0000555561ac3500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 223.462176][ T9190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.462187][ T9190] CR2: 00007f2779f9a2f8 CR3: 00000000670ba000 CR4: 00000000003506f0 [ 223.462202][ T9190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.462211][ T9190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.462221][ T9190] Call Trace: [ 223.462227][ T9190] [ 223.462234][ T9190] ? journal_release+0x30/0x30 [ 223.462253][ T9190] ? do_raw_spin_unlock+0x11d/0x230 [ 223.462272][ T9190] journal_release+0x1b/0x30 [ 223.562888][T11527] BTRFS info (device loop3): enabling ssd optimizations [ 223.568817][ T9190] reiserfs_put_super+0x267/0x510 [ 223.568845][ T9190] ? hook_inode_free_security+0xa0/0xa0 [ 223.568859][ T9190] ? evict_inodes+0x642/0x6a0 [ 223.568874][ T9190] ? reiserfs_dirty_inode+0x260/0x260 [ 223.568894][ T9190] ? reiserfs_dirty_inode+0x260/0x260 [ 223.568909][ T9190] generic_shutdown_super+0x130/0x300 [ 223.568928][ T9190] kill_block_super+0x7c/0xe0 [ 223.568944][ T9190] deactivate_locked_super+0x93/0xf0 [ 223.568961][ T9190] cleanup_mnt+0x42d/0x4e0 [ 223.568978][ T9190] ? lockdep_hardirqs_on+0x94/0x140 [ 223.568997][ T9190] task_work_run+0x125/0x1a0 [ 223.569016][ T9190] exit_to_user_mode_loop+0x10f/0x130 [ 223.569032][ T9190] exit_to_user_mode_prepare+0xee/0x180 [ 223.569052][ T9190] syscall_exit_to_user_mode+0x16/0x40 [ 223.569068][ T9190] do_syscall_64+0x58/0xa0 [ 223.569082][ T9190] ? clear_bhb_loop+0x30/0x80 [ 223.569098][ T9190] ? clear_bhb_loop+0x30/0x80 [ 223.569113][ T9190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.569129][ T9190] RIP: 0033:0x7f94b58d1117 [ 223.569145][ T9190] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 223.569158][ T9190] RSP: 002b:00007fff85a2bb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 223.569177][ T9190] RAX: 0000000000000000 RBX: 00007f94b593971f RCX: 00007f94b58d1117 [ 223.569188][ T9190] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff85a2bc20 [ 223.569199][ T9190] RBP: 00007fff85a2bc20 R08: 00007fff85a2cc20 R09: 00000000ffffffff [ 223.569210][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff85a2ccb0 [ 223.569226][ T9190] R13: 00007f94b593971f R14: 000000000003687d R15: 00007fff85a2ccf0 [ 223.569243][ T9190] [ 223.569258][ T9190] Modules linked in: [ 223.581082][ T4444] usb 1-1: USB disconnect, device number 21 [ 223.590240][ T9190] ---[ end trace 5d6b009b6fccce04 ]--- [ 223.754193][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.832242][ T9190] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 223.832275][ T9190] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 e8 85 bd ff e9 f9 fc ff ff e8 ce 81 78 ff <0f> 0b e8 c7 81 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 223.832288][ T9190] RSP: 0018:ffffc9000374fb80 EFLAGS: 00010293 [ 223.832304][ T9190] RAX: ffffffff82009dd2 RBX: 1ffff920006e9f74 RCX: ffff8880248f5940 [ 223.865962][ T26] audit: type=1800 audit(1769554934.857:129): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2918" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 223.874113][ T9190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.911965][ T9190] RBP: ffffc9000374fc78 R08: ffffc9000374fbf7 R09: ffffc9000374fbc0 [ 223.911986][ T9190] R10: dffffc0000000000 R11: fffff520006e9f7f R12: ffffc90004259000 [ 223.911998][ T9190] R13: dffffc0000000000 R14: ffff888077918678 R15: 0000000000000000 [ 223.912009][ T9190] FS: 0000555561ac3500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 223.912024][ T9190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.912036][ T9190] CR2: 00007fad77f86000 CR3: 00000000670ba000 CR4: 00000000003506e0 [ 223.912050][ T9190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.912060][ T9190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.912091][ T9190] Kernel panic - not syncing: Fatal exception [ 223.912190][ T9190] Kernel Offset: disabled [ 223.985884][ T9190] Rebooting in 86400 seconds..