last executing test programs: 1m51.065976602s ago: executing program 3 (id=1727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 1m50.994873455s ago: executing program 3 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504fbffffe40000000000000000480001804400018009000100676174650000000034000280180002000000ed0000000000000000000000000000000000100005800c00018008e403000100000008000a"], 0x5c}}, 0x800) 1m50.842227253s ago: executing program 3 (id=1732): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x8000000000000001) 1m50.733815302s ago: executing program 3 (id=1735): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5ae, &(0x7f00000004c0)="$eJzs3EFv29YdAPBHx64NFwsKFGvSNEDZtIfsEFeSFwdGd4hG0zZbSRRIunBOQ7E4nTG7G5YNWHPLpVuBDTvtPPS6T7APs6/Qz+CBkpxIdhLViT2lwO8HWO9J/JPv/2iCf4gQGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAECUbjUYzCp2st7MbP1+yUeTdFyw/3t5/JpoJC2OvIQohqv/C0lK4Ovzo6ttPY39av9wIV4bvroSlulkKj958561P3p6fq1dciKLwgoTOxeKUER5+/ei3Xxwc7P3hohP5PziKzr7OVtrLyjzrtrfSOCvzeH1trfHx9mYZb2adtLxXVmk3Toq0XeVFfDO5G0JYX43TlXv5Tm9ro91J45vJz+Lm+vqdW61GYy3+dKWftosy73386UqZbGedTtbbGsTUi2+13g936gPxs6yKq7TdjeMH+wd7q9OSrIOaPySoNS2o1Wi1ms1Wq7l2e/32nUZjaXS0PvlgvnFCOLnK/MUftLx23hgdKIM3x+e4N87vLA4v5yj5x6xTAAAAAC5YNLjGHg2uy18d9DazTtqYiDmKZpYeAAAAcA4GX+2vjC4AhHA1RKe//wMAAAA/bn994T12IZoPZX8xOr5Vpb/7UXTYrnvtw0vDjy6d3GK1eS26PNrIoFmbH71L0uvRu8Ogd4+jvx81D6bkEUVFsRA9frUEwt/CtWHMtfvD9v7xkuEoy5tZJ11J8s4nzdBuX56r0t3qT1/t/zmEoji69G2vezkKD/YP9lZ+/buD+4NcHtdbeXw4+oXEqR9KTOayGMZy+eOT+x5HM747OeOFwYWYetbf9rrLw3Eb4/OfG64+d4b5fxPeG8a8tzxslyfnv1SP2Vx5xuzHs2j2dz9aHA32dOb/PUMW14cx129+WDcf3hwtWRjLojUti9b4/n+pffGcLMb3xeoLsjgK+wd7q6+YBcCsPDhZhYZ1Nzypu+FU3X2Js9yU6l6X8KnV/TdTR/kmfDCM+eDa/NNafOKM3phWVxo/sK6H8Ows/h1u/OufIeyEG8fBz6ux9bh/n6iq0eF39QrfnRp3aXL4KCwe/j688/DrR7f2D7/4cu/Lva9ardW1xs8bjdutsDCYxqhRewB4hrT4Plqu/hIVRdb/VXN9vdmuttO4yJPP4iLb2ErjrFelRbLd7m2lcb/IqzzJO3Xn82wjLeNyp9/PiyrezIu4n5fZ7uDJL/Ho0S9l2m33qiwp+520XaZxkveqdlLFG1mZxP2dX3aycjstBiuX/TTJNrOkXWV5Ly7znSJJV+K4TNOxwGwj7VXZZlZ3e3G/yLrt4l78ed7Z6abxRlomRdav8uEGj8fKept50R1sdmXWOxsAXhMPw+gJdk8eZXfmTliaEjPrOQIAk05W6cVZJwQAAAAAAAAAAAAAAJwyfrveL0aP9Dnj/X+Lr3b74Ll37r75rEXvzz6x8U4IYf5Chzh+cNLMZzrDTn08n9MGl+rOXLjYnN+aGrMw+q++7BBRCGF68E/qmFmdkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+f4XAAD//zv3jPE=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) 1m50.418566339s ago: executing program 3 (id=1745): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2) 1m49.97265584s ago: executing program 3 (id=1756): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) 1m49.842828083s ago: executing program 32 (id=1756): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) 3.645683721s ago: executing program 0 (id=4573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x184, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x170, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x1, 0x1f7c, 0xa}, 0x3}}, @TCA_MPLS_LABEL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_skbmod={0x108, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xda7}]}, {0xd1, 0x6, "f20b9bc34de215172117adebbbe1b04885aa80b4657eef301d4265e83046745ac24466fb9f6ef9b9d2d253d8ccf077a8f35ca6693afcc12beeff99a5ea1c22b1a54a8e3613dca79209826a8cd210370edcf8879b4527818f8cfeb2bac41ece8437dc403db2eef69385d532abc45f75062a6a13f9f97c8b3fcc7bf48f35e09b81d9f7af288a6e4970ebdbb264b19258281866b8827507e10b2a780e2a92923be6daa38c6c9722fd4d76b7bda2bf494ec1d35070fd32a2db786a4f5e621cbbdd416853fe479ba3c4e6d02a1764ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x2000c8d0) 3.583681613s ago: executing program 0 (id=4575): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000192c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x30, 0x1, "16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.146198122s ago: executing program 5 (id=4587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.193260085s ago: executing program 5 (id=4626): r0 = socket(0xa, 0x3, 0x87) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000100)="a038", 0x2}], 0x2, 0x0, 0x0, 0x8004}, 0x54814) 1.088037783s ago: executing program 5 (id=4630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 998.48017ms ago: executing program 5 (id=4631): open(&(0x7f0000002400)='./file0\x00', 0x4142, 0xba) mount$tmpfs(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d696e745784a065726c656176653d7374617469633a332d363a322f316535"]) 928.562992ms ago: executing program 5 (id=4634): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010002, &(0x7f0000000440)={[{@nodiscard}, {}, {@quota}, {@errors_continue}, {@usrquota}, {@discard}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x7fffffff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@usrquota}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@nointegrity}]}, 0x24, 0x628f, &(0x7f0000012f40)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 779.021879ms ago: executing program 4 (id=4637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000008400000001"], 0x18}}], 0x2, 0xc8844) 777.30788ms ago: executing program 1 (id=4638): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="180000000059df"], 0x18}}], 0x2, 0x0) 721.94547ms ago: executing program 4 (id=4640): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000023c0)=ANY=[], 0x33, 0x70c, &(0x7f0000000e80)="$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") 650.567712ms ago: executing program 1 (id=4641): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x707, 0x40, 0x3a, 0x5, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x0, 0xe, 0x2f, 0x0, @empty, @empty}}}}) 649.826883ms ago: executing program 2 (id=4642): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000240)={0x3, [0x5, 0x6, 0x1], [{0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x86d, 0x1, 0x0, 0x0, 0x1}, {0x7fff, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x794, 0x1, 0x1, 0x1, 0x1}, {0x6b8f2133, 0x401}, {0xedeb, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x6, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xfffff000, 0x10, 0x1, 0x0, 0x1, 0x1}, {0xffff, 0x40, 0x1, 0x1, 0x1, 0x1}, {0xc3fb, 0xfff, 0x0, 0x1, 0x1, 0x1}], 0x29c5}) 495.30228ms ago: executing program 0 (id=4643): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 495.060071ms ago: executing program 1 (id=4644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x8000000, 0x2, 0x4, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) 483.211453ms ago: executing program 4 (id=4645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) 457.346767ms ago: executing program 2 (id=4646): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x1641, @local, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000380)=0x90) 345.910118ms ago: executing program 1 (id=4647): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)) 345.752378ms ago: executing program 0 (id=4648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020101020000f9ffffffffffffff0001040019"], 0x18}, 0x1, 0x0, 0x0, 0x2000c098}, 0x0) 342.429358ms ago: executing program 2 (id=4649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@loopback, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0xfffffffffffffffc, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 295.111987ms ago: executing program 4 (id=4650): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 294.998417ms ago: executing program 0 (id=4651): msgget(0x3, 0x710) msgctl$IPC_RMID(0x0, 0x0) 277.57175ms ago: executing program 1 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) 248.346356ms ago: executing program 4 (id=4653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 183.003647ms ago: executing program 2 (id=4654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc3f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa00000000000000000000000000007fff2b00000000000000fc01000000000000000000000000000000000000000300000000000063ab000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000030000000000000000000000050000007f000001000000000000000000000000000000006c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 182.851697ms ago: executing program 0 (id=4655): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) 111.66253ms ago: executing program 2 (id=4656): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffffff], 'bond_slave_0\x00', 'caif0\x00', {}, {}, 0x1f, 0xd, 0x0, 0x58}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xaf, 0x8fbb, 0x3ff, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @loopback, [0xff, 0xffffffff, 0xffffff, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xff], 'vcan0\x00', 'dummy0\x00', {0xff}, {}, 0x3b, 0x43, 0x3, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 101.129042ms ago: executing program 1 (id=4666): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=[{0x11, '\x00', @data=0x10, 0x9}]}) 46.069102ms ago: executing program 4 (id=4657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000015c0)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x14) 45.355862ms ago: executing program 2 (id=4658): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000200)='\x00\x00') 0s ago: executing program 5 (id=4659): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0xffffffff, @value=0x100000001}) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.861068][ T4858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.882892][ T9023] xt_CT: No such helper "syz0" [ 156.889237][ T4858] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.911484][ T4858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.928407][ T9031] loop2: detected capacity change from 0 to 256 [ 156.940107][ T4858] usb 5-1: config 0 descriptor?? [ 156.991072][ T4858] hub 5-1:0.0: USB hub found [ 157.093020][ T9039] loop1: detected capacity change from 0 to 256 [ 157.229293][ T4858] hub 5-1:0.0: 3 ports detected [ 157.357812][ T9048] loop5: detected capacity change from 0 to 8192 [ 157.395730][ T9055] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.422394][ T9048] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 157.439286][ T4858] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 157.450431][ T4858] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 157.482931][ T9048] REISERFS (device loop5): using ordered data mode [ 157.499310][ T9060] __nla_validate_parse: 2 callbacks suppressed [ 157.499328][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 157.531283][ T9048] reiserfs: using flush barriers [ 157.556950][ T9048] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.579130][ T4858] usbhid 5-1:0.0: can't add hid device: -71 [ 157.585313][ T4858] usbhid: probe of 5-1:0.0 failed with error -71 [ 157.624872][ T9048] REISERFS (device loop5): checking transaction log (loop5) [ 157.632634][ T9064] loop2: detected capacity change from 0 to 4096 [ 157.639933][ T4858] usb 5-1: USB disconnect, device number 12 [ 157.700303][ T9064] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 157.762152][ T9068] netlink: 'syz.1.2131': attribute type 13 has an invalid length. [ 157.818365][ T9064] ntfs: volume version 3.1. [ 157.884045][ T9048] REISERFS (device loop5): Using tea hash to sort names [ 157.929793][ T9048] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 158.088299][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2137'. [ 158.164538][ T9084] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2138'. [ 158.330494][ T9086] loop2: detected capacity change from 0 to 4096 [ 158.512034][ T4197] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 158.557694][ T4197] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 159.091476][ T9159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2176'. [ 159.116594][ T9159] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2176'. [ 159.138501][ T9162] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 159.212607][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2181'. [ 159.221979][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.245778][ T9171] CIFS: VFS: Unable to allocate memory for devname [ 159.554288][ T9205] netlink: 'syz.0.2198': attribute type 3 has an invalid length. [ 159.599170][ T4856] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.599655][ T5492] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.652292][ T9213] loop0: detected capacity change from 0 to 256 [ 159.699891][ T9213] exfat: Deprecated parameter 'utf8' [ 159.705797][ T9213] exfat: Deprecated parameter 'utf8' [ 159.715293][ T9213] exfat: Deprecated parameter 'namecase' [ 159.744125][ T9213] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 159.759418][ T4228] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.776205][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.798136][ T4228] usb 6-1: Product: syz [ 159.808678][ T4228] usb 6-1: Manufacturer: syz [ 159.818824][ T4228] usb 6-1: SerialNumber: syz [ 159.878993][ T5492] usb 5-1: Using ep0 maxpacket: 16 [ 159.889486][ T4856] usb 2-1: Using ep0 maxpacket: 16 [ 159.943158][ T9226] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 159.999331][ T5492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.022444][ T5492] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.035773][ T5492] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 160.046300][ T5492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.050383][ T4856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.084849][ T4856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.092658][ T5492] usb 5-1: config 0 descriptor?? [ 160.119658][ T9232] loop0: detected capacity change from 0 to 2048 [ 160.142781][ T5492] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 160.270615][ T9232] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 160.283388][ T4856] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.303484][ T4856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.358988][ T4856] usb 2-1: Product: syz [ 160.363362][ T9232] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, [ 160.363391][ T4856] usb 2-1: Manufacturer: syz [ 160.377169][ T9232] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.412643][ T4856] usb 2-1: SerialNumber: syz [ 160.447077][ T4229] usb 5-1: USB disconnect, device number 13 [ 160.469440][ T4228] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.662314][ T9234] loop2: detected capacity change from 0 to 32768 [ 160.678020][ T9245] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 160.723119][ T9247] loop0: detected capacity change from 0 to 512 [ 160.747222][ T9234] XFS (loop2): Mounting V5 Filesystem [ 160.764733][ T9247] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 160.764733][ T9247] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 160.764733][ T9247] [ 160.788691][ T9247] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.802717][ T4856] usb 2-1: 0:2 : does not exist [ 160.828208][ T4856] usb 2-1: USB disconnect, device number 13 [ 160.857042][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.885513][ T9247] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.900085][ T9247] EXT4-fs (loop0): 1 truncate cleaned up [ 160.921465][ T4229] usb 6-1: USB disconnect, device number 2 [ 160.934350][ T9247] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpid,bsddf,stripe=0x0000000000000007,bsdgroups,noacl,,errors=continue. Quota mode: none. [ 161.044156][ T9234] XFS (loop2): Ending clean mount [ 161.081758][ T4197] XFS (loop2): Unmounting Filesystem [ 161.341634][ T9271] sctp: [Deprecated]: syz.4.2223 (pid 9271) Use of int in max_burst socket option deprecated. [ 161.341634][ T9271] Use struct sctp_assoc_value instead [ 161.550317][ T9285] xt_hl: Unknown TTL match mode: 255 [ 161.638731][ T9291] loop0: detected capacity change from 0 to 512 [ 161.718679][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 161.729312][ T4228] usb 6-1: Service connection timeout for: 256 [ 161.736235][ T4228] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 161.779298][ T4228] ath9k_htc: Failed to initialize the device [ 161.785597][ T4229] usb 6-1: ath9k_htc: USB layer deinitialized [ 161.823290][ T9291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.085479][ T9331] Unsupported ieee802154 address type: 0 [ 162.229326][ T9340] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 162.237125][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 162.642504][ T9377] ip_tables: iptables: counters copy to user failed while replacing table [ 163.055901][ T9345] loop5: detected capacity change from 0 to 32768 [ 163.167778][ T9345] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 163.207270][ T9375] loop0: detected capacity change from 0 to 32768 [ 163.268006][ T9345] XFS (loop5): Unmounting Filesystem [ 163.290770][ T9420] netlink: 'syz.2.2282': attribute type 2 has an invalid length. [ 163.434476][ T9421] loop4: detected capacity change from 0 to 4096 [ 163.495207][ T9421] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 163.537802][ T9375] XFS (loop0): Mounting V5 Filesystem [ 163.668520][ T9446] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2289'. [ 163.677844][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 163.787858][ T9375] XFS (loop0): Ending clean mount [ 163.865761][ T9451] netlink: 'syz.1.2292': attribute type 1 has an invalid length. [ 163.899170][ T9451] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.939679][ T4186] XFS (loop0): Unmounting Filesystem [ 164.155115][ T9466] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 164.673061][ T9503] device bond1 entered promiscuous mode [ 164.684252][ T9503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.730344][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 164.835948][ T9522] dlm: no locking on control device [ 164.941392][ T9526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 165.006730][ T9536] kcapi: manufacturer command 256 unknown. [ 165.131079][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2342'. [ 165.163136][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2342'. [ 165.182909][ T9552] netlink: 'syz.1.2342': attribute type 3 has an invalid length. [ 165.230935][ T9557] loop2: detected capacity change from 0 to 64 [ 165.295282][ T9563] ip6t_rpfilter: unknown options [ 165.335566][ T9568] loop4: detected capacity change from 0 to 164 [ 165.469802][ T9574] loop1: detected capacity change from 0 to 256 [ 165.553253][ T9574] exFAT-fs (loop1): bogus sectors bits per cluster : 41 [ 165.553253][ T9574] [ 165.633412][ T9574] exFAT-fs (loop1): failed to read boot sector [ 165.651358][ T9574] exFAT-fs (loop1): failed to recognize exfat type [ 165.894730][ T9601] netlink: 'syz.1.2361': attribute type 1 has an invalid length. [ 165.927229][ T9601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2361'. [ 166.041847][ T9617] xt_hashlimit: size too large, truncated to 1048576 [ 166.514425][ T9656] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 166.552288][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 166.792955][ T9675] loop2: detected capacity change from 0 to 4096 [ 166.859691][ T4856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 167.319643][ T4856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.432678][ T4856] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 167.464690][ T4856] usb 5-1: config 0 has no interface number 0 [ 167.481188][ T4856] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 167.502161][ T4856] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 167.532820][ T4856] usb 5-1: config 0 interface 86 has no altsetting 0 [ 167.595826][ T9710] loop2: detected capacity change from 0 to 4096 [ 167.642859][ T9680] loop5: detected capacity change from 0 to 32768 [ 167.693435][ T9723] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2413'. [ 167.711401][ T9710] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 167.728142][ T9721] loop0: detected capacity change from 0 to 1024 [ 167.749470][ T4856] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 167.779727][ T4856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.787789][ T4856] usb 5-1: Product: syz [ 167.813142][ T4856] usb 5-1: Manufacturer: syz [ 167.818168][ T4856] usb 5-1: SerialNumber: syz [ 167.874888][ T4856] usb 5-1: config 0 descriptor?? [ 167.928544][ T9721] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,norecovery,,errors=continue. Quota mode: none. [ 167.941700][ T9663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.965621][ T9663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.304148][ T4856] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 168.328475][ T4856] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 168.360132][ T4856] usb 5-1: USB disconnect, device number 14 [ 168.375673][ T4856] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 168.395773][ T4856] omninet 5-1:0.86: device disconnected [ 168.488702][ T9753] loop5: detected capacity change from 0 to 256 [ 168.531186][ T9753] exfat: Deprecated parameter 'utf8' [ 168.537694][ T9756] netlink: 'syz.1.2423': attribute type 2 has an invalid length. [ 168.551001][ T9753] exfat: Deprecated parameter 'namecase' [ 168.559134][ T4229] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.576209][ T9753] exfat: Deprecated parameter 'namecase' [ 168.656243][ T9753] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 168.687166][ T9760] damon: min_nr_regions (0) must be at least 3 [ 168.812225][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 168.893157][ T9769] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 168.929389][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 169.089520][ T4229] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 169.098672][ T4229] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 169.135942][ T4229] usb 3-1: Product: syz [ 169.141066][ T4229] usb 3-1: Manufacturer: syz [ 169.145716][ T4229] usb 3-1: SerialNumber: syz [ 169.339417][ T4856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.364659][ T9797] openvswitch: netlink: Key type 2481 is out of range max 29 [ 169.429163][ T4229] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 169.437485][ T4229] visor: probe of 3-1:1.0 failed with error -71 [ 169.489881][ T4229] usb 3-1: USB disconnect, device number 10 [ 169.781571][ T9827] xt_cgroup: no path or classid specified [ 169.799259][ T4856] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 169.829143][ T4856] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 169.868151][ T9830] loop0: detected capacity change from 0 to 512 [ 169.879127][ T4856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.951250][ T4856] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 170.071580][ T9830] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback. [ 170.307617][ T9867] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2462'. [ 170.334327][ T9867] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2462'. [ 170.351511][ T9869] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 170.515886][ T26] audit: type=1326 audit(170.466:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.4.2467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1427f159 code=0x0 [ 170.574066][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2469'. [ 170.617329][ T9884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2469'. [ 170.669791][ T9891] IPv6: Can't replace route, no match found [ 170.779888][ T9899] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 170.822189][ T9902] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 170.842547][ T9902] netlink: 'syz.2.2476': attribute type 9 has an invalid length. [ 170.887361][ T9904] loop0: detected capacity change from 0 to 4096 [ 171.017123][ T9913] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.047049][ T9904] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=16, inode=2050, rec_len=0, name_len=2 [ 171.069433][ T4856] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 171.142870][ T9904] Remounting filesystem read-only [ 171.279217][ T4856] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 171.312314][ T4856] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 171.340397][ T4856] usb 2-1: USB disconnect, device number 14 [ 171.578623][ T9955] netlink: 'syz.4.2496': attribute type 8 has an invalid length. [ 171.634901][ T9955] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2496'. [ 171.914264][ T9978] Cannot find add_set index 0 as target [ 172.208492][T10008] netlink: 'syz.1.2517': attribute type 49 has an invalid length. [ 172.858056][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'. [ 173.135882][T10046] loop5: detected capacity change from 0 to 32768 [ 173.199302][ T4856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.211997][T10046] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2532 (10046) [ 173.234878][T10046] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 173.251945][T10090] loop1: detected capacity change from 0 to 128 [ 173.258561][T10046] BTRFS info (device loop5): turning off barriers [ 173.265569][ T4249] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.275762][T10046] BTRFS info (device loop5): enabling auto defrag [ 173.283196][T10046] BTRFS info (device loop5): force zlib compression, level 3 [ 173.292327][T10046] BTRFS info (device loop5): enabling ssd optimizations [ 173.299758][T10046] BTRFS info (device loop5): using spread ssd allocation scheme [ 173.331359][T10046] BTRFS info (device loop5): using free space tree [ 173.337953][T10046] BTRFS info (device loop5): has skinny extents [ 173.424972][T10046] BTRFS info (device loop5): not using spread ssd allocation scheme [ 173.476177][T10046] BTRFS info (device loop5): using spread ssd allocation scheme [ 173.489240][ T4856] usb 5-1: Using ep0 maxpacket: 16 [ 173.637820][ T4564] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop5 scanned by udevd (4564) [ 173.650497][ T4856] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 173.658906][ T4856] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.678869][ T4856] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.699165][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.716632][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 173.730898][ T4856] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.739971][ T4856] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.748880][ T4856] usb 5-1: config 0 has no interface number 0 [ 173.756081][ T4856] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 173.767700][ T4856] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.778038][ T4856] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.792991][ T4856] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.810132][ T4856] usb 5-1: config 0 interface 125 has no altsetting 0 [ 173.817487][ T4856] usb 5-1: config 0 interface 125 has no altsetting 2 [ 173.955871][ T4249] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.970442][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.999061][ T4249] usb 3-1: Product: syz [ 174.003480][ T4249] usb 3-1: Manufacturer: syz [ 174.008151][ T4249] usb 3-1: SerialNumber: syz [ 174.013970][ T4856] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 174.029003][ T4856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.048318][ T4856] usb 5-1: Product: syz [ 174.054622][ T4249] usb 3-1: config 0 descriptor?? [ 174.066326][ T4856] usb 5-1: Manufacturer: syz [ 174.071652][ T4856] usb 5-1: SerialNumber: syz [ 174.082922][ T4856] usb 5-1: config 0 descriptor?? [ 174.122461][ T4856] usb 5-1: selecting invalid altsetting 2 [ 174.339003][ C1] usb 5-1: async_complete: urb error -71 [ 174.345510][ C1] usb 5-1: async_complete: urb error -71 [ 174.351280][ C1] usb 5-1: async_complete: urb error -71 [ 174.357064][ C1] usb 5-1: async_complete: urb error -71 [ 174.365968][ T4856] get_1284_register: usb error -71 [ 174.376211][ T4856] usb 5-1: USB disconnect, device number 15 [ 174.465784][ T4249] usb 3-1: USB disconnect, device number 11 [ 174.550191][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.637737][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 174.670775][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 174.696244][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 174.721667][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 174.746604][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 174.764796][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 174.775144][T10158] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.788433][T10148] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 174.830366][T10148] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 174.846844][T10148] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 175.027229][T10175] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 175.039312][T10174] loop2: detected capacity change from 0 to 256 [ 175.081775][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2579'. [ 175.119448][T10175] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 175.128043][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2579'. [ 175.238151][T10178] loop4: detected capacity change from 0 to 4096 [ 175.278191][T10184] loop1: detected capacity change from 0 to 256 [ 175.337868][T10178] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 175.370210][T10184] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 175.454925][T10178] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 175.471996][T10184] exFAT-fs (loop1): error, broken FAT chain. [ 175.478484][T10184] exFAT-fs (loop1): Filesystem has been set read-only [ 175.530778][T10184] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e4594e0 iblock : 0, err : -5) [ 175.652358][T10202] tmpfs: Bad value for 'mpol' [ 175.930113][T10226] x_tables: duplicate entry at hook 2 [ 175.998325][T10236] x_tables: duplicate entry at hook 1 [ 176.044765][T10238] loop2: detected capacity change from 0 to 512 [ 176.089725][T10238] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.127797][T10238] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.180054][T10238] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2612: inline data xattr refers to an external xattr inode [ 176.198827][T10240] loop4: detected capacity change from 0 to 4096 [ 176.199318][ T5492] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 176.207970][T10238] EXT4-fs (loop2): Remounting filesystem read-only [ 176.219854][T10238] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.2612: couldn't read orphan inode 12 (err -117) [ 176.236400][T10244] loop1: detected capacity change from 0 to 4096 [ 176.245332][T10238] EXT4-fs (loop2): Remounting filesystem read-only [ 176.256012][T10238] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,sysvgroups,prjquota,stripe=0x00000000000093a4,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 176.314014][T10240] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 176.386694][T10244] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 46) do not match. Run ntfsfix or chkdsk. [ 176.408251][T10240] ntfs3: loop4: Failed to load $Extend. [ 176.414606][T10244] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 176.439999][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 176.511410][T10244] ntfs: volume version 3.1. [ 176.567819][T10238] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 176.609313][ T5492] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.621600][T10238] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.2612: Directory hole found for htree leaf block 0 [ 176.648889][ T5492] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.697024][T10238] EXT4-fs (loop2): Remounting filesystem read-only [ 176.720599][T10261] loop4: detected capacity change from 0 to 8 [ 176.759371][ T5492] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 176.794848][ T5492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.815002][ T5492] usb 6-1: SerialNumber: syz [ 176.820646][T10261] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 176.891998][ T5492] usb 6-1: 0:2 : does not exist [ 176.982194][T10272] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 177.140191][ T1111] usb 6-1: USB disconnect, device number 3 [ 177.174732][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 177.297587][T10288] nvme nvme0: rdma connection establishment failed (-104) [ 177.486429][T10299] loop2: detected capacity change from 0 to 1024 [ 177.561053][T10299] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 177.568419][T10299] EXT4-fs (loop2): inline encryption not supported [ 177.599959][T10299] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 177.608001][T10299] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.689236][T10299] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,quota,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 177.807268][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2645'. [ 177.836237][T10310] loop4: detected capacity change from 0 to 4096 [ 177.845019][T10315] netlink: 'syz.0.2645': attribute type 6 has an invalid length. [ 177.875873][T10310] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 177.939125][T10310] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 177.944310][T10281] loop1: detected capacity change from 0 to 32768 [ 177.994297][T10310] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 178.006291][T10310] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 178.024790][T10281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2630 (10281) [ 178.037940][T10310] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 178.117295][T10281] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.144148][T10281] BTRFS info (device loop1): turning on sync discard [ 178.163194][T10310] ntfs: volume version 3.1. [ 178.186335][T10281] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.212835][T10310] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 178.239575][T10310] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 178.253789][T10281] BTRFS info (device loop1): use zstd compression, level 3 [ 178.286220][T10310] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 178.297409][T10281] BTRFS info (device loop1): turning on async discard [ 178.297437][T10281] BTRFS info (device loop1): setting nodatacow, compression disabled [ 178.297477][T10281] BTRFS info (device loop1): enabling all of the rescue options [ 178.297493][T10281] BTRFS info (device loop1): ignoring data csums [ 178.297508][T10281] BTRFS info (device loop1): ignoring bad roots [ 178.297522][T10281] BTRFS info (device loop1): disabling log replay at mount time [ 178.297552][T10281] BTRFS info (device loop1): enabling auto defrag [ 178.297868][T10281] BTRFS error (device loop1): nologreplay must be used with ro mount option [ 178.361591][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4176) [ 178.373746][T10281] BTRFS error (device loop1): open_ctree failed: -22 [ 178.578265][T10331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.211605][T10378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2675'. [ 179.645815][T10417] SQUASHFS error: xz decompression failed, data probably corrupt [ 179.662591][T10417] SQUASHFS error: Failed to read block 0x108: -5 [ 179.671637][T10417] SQUASHFS error: Unable to read metadata cache entry [106] [ 179.681421][T10417] SQUASHFS error: Unable to read inode 0x11f [ 179.780917][T10430] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2701'. [ 179.799524][T10428] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 179.837701][T10428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.859807][T10432] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 179.898287][T10432] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 179.927179][T10432] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 180.016302][T10438] netlink: 'syz.2.2705': attribute type 9 has an invalid length. [ 180.041117][T10440] comedi comedi3: rti802: I/O port conflict (0x1f,4) [ 180.096631][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 180.106299][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2707'. [ 180.191277][T10449] netlink: 'syz.5.2709': attribute type 13 has an invalid length. [ 180.209738][T10449] netlink: 'syz.5.2709': attribute type 12 has an invalid length. [ 180.290099][T10456] SET target dimension over the limit! [ 180.320568][T10459] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.342911][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2717'. [ 180.369586][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 180.385680][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 180.660446][T10489] syz.4.2730 (10489): /proc/10487/oom_adj is deprecated, please use /proc/10487/oom_score_adj instead. [ 180.773499][T10500] netlink: 'syz.1.2735': attribute type 1 has an invalid length. [ 181.019021][ T1111] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.106092][T10533] set_capacity_and_notify: 4 callbacks suppressed [ 181.106109][T10533] loop5: detected capacity change from 0 to 64 [ 181.195276][T10537] loop2: detected capacity change from 0 to 16 [ 181.276045][T10541] loop1: detected capacity change from 0 to 4096 [ 181.283313][T10537] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 181.301094][ T4564] udevd[4564]: incorrect cramfs checksum on /dev/loop2 [ 181.395267][ T1111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.423749][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.430439][T10541] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.451057][ T1111] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 181.470216][T10541] EXT4-fs (loop1): inline encryption not supported [ 181.487151][ T1111] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 181.504531][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.542299][T10541] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=204cc1a8, mo2=0002] [ 181.559173][T10541] System zones: 0-5 [ 181.577680][T10541] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,nobarrier,noinit_itable,norecovery,minixdf,nodelalloc,errors=remount-ro,usrjquota=,usrquota,inode_readahead_blks=0x0000000000000080,. Quota mode: writeback. [ 181.619167][T10554] __nla_validate_parse: 1 callbacks suppressed [ 181.619184][T10554] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2761'. [ 181.686810][T10559] loop5: detected capacity change from 0 to 2048 [ 181.759375][T10559] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 181.788519][T10559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.798533][ T1111] ttusb_dec_send_command: result bulk message failed: error -8 [ 181.810821][ T1111] ttusb-dec: probe of 5-1:1.0 failed with error -8 [ 181.840469][ T1111] usb 5-1: USB disconnect, device number 16 [ 182.253848][T10588] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2778'. [ 182.254731][T10583] loop2: detected capacity change from 0 to 4096 [ 182.269665][T10588] bridge_slave_1: default FDB implementation only supports local addresses [ 182.324521][T10583] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 182.324521][T10583] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 182.324521][T10583] [ 182.406573][T10583] EXT4-fs (loop2): Ignoring removed orlov option [ 182.449550][T10583] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d1,noacl,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 182.972883][ T5492] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.153141][T10655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2812'. [ 183.341949][ T5492] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.361200][ T5492] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.396516][ T5492] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.409711][ T4249] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.417509][ T5492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.439429][ T5492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.579270][ T5492] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.598172][ T5492] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.608890][ T5492] usb 2-1: Product: syz [ 183.626810][ T5492] usb 2-1: Manufacturer: syz [ 183.634475][T10695] loop0: detected capacity change from 0 to 128 [ 183.700344][ T5492] cdc_wdm 2-1:1.0: skipping garbage [ 183.705814][ T5492] cdc_wdm 2-1:1.0: skipping garbage [ 183.777583][T10695] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.801546][ T5492] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 183.827958][ T5492] cdc_wdm 2-1:1.0: Unknown control protocol [ 183.889466][ T4249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 183.984142][T10613] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 183.989860][ T4249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.006989][ T5492] usb 2-1: USB disconnect, device number 15 [ 184.009361][ T4249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.069229][T10706] netlink: 'syz.0.2836': attribute type 21 has an invalid length. [ 184.083375][T10697] loop2: detected capacity change from 0 to 32768 [ 184.150999][T10697] ERROR: (device loop2): dtSearch: stack overrun! [ 184.150999][T10697] [ 184.170686][T10697] ERROR: (device loop2): remounting filesystem as read-only [ 184.178281][T10697] btstack dump: [ 184.186929][T10697] bn = 0, index = 4 [ 184.194068][T10697] bn = 0, index = 4 [ 184.198526][T10697] bn = 0, index = 4 [ 184.207389][T10697] bn = 0, index = 4 [ 184.214756][T10697] bn = 0, index = 4 [ 184.223996][T10697] bn = 0, index = 4 [ 184.227871][ T4249] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 184.228002][T10697] bn = 0, index = 4 [ 184.244789][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.270736][T10697] bn = 0, index = 0 [ 184.274980][T10697] jfs_lookup: dtSearch returned -5 [ 184.284056][ T4249] usb 6-1: Product: syz [ 184.284082][ T4249] usb 6-1: Manufacturer: syz [ 184.284099][ T4249] usb 6-1: SerialNumber: syz [ 184.331952][ T4249] usb 6-1: selecting invalid altsetting 1 [ 184.332393][ T4249] usb 6-1: unit 6 not found! [ 184.391888][T10715] xt_CT: No such helper "snmp_trap" [ 184.538109][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.586678][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.619783][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.637895][T10726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2845'. [ 184.652617][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.675289][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.705658][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 184.769467][ T4249] usb 6-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 184.789449][ T4249] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 184.844499][ T4249] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 184.894848][ T4249] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 184.924417][ T4249] usb 6-1: USB disconnect, device number 4 [ 185.121426][T10761] netlink: 'syz.2.2862': attribute type 5 has an invalid length. [ 185.203062][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.546807][T10792] loop4: detected capacity change from 0 to 1764 [ 185.673867][T10792] ISOFS: unable to read i-node block [ 185.684383][T10792] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 185.732627][T10792] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 185.796062][T10817] loop1: detected capacity change from 0 to 256 [ 185.872385][T10813] loop5: detected capacity change from 0 to 4096 [ 185.923640][T10821] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 185.992755][T10813] EXT4-fs (loop5): Test dummy encryption mode enabled [ 186.039709][T10813] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 186.384226][T10847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 186.439069][ T4249] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.456476][T10853] tc_dump_action: action bad kind [ 186.719119][ T4249] usb 5-1: Using ep0 maxpacket: 8 [ 186.839547][ T4249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 186.881337][ T4249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.899749][ T4249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.001746][T10895] affs: No valid root block on device nbd5 [ 187.099670][ T4249] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 187.114850][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.133586][ T4249] usb 5-1: Product: syz [ 187.137909][ T4249] usb 5-1: Manufacturer: syz [ 187.162332][ T4249] usb 5-1: SerialNumber: syz [ 187.187896][ T4249] usb 5-1: config 0 descriptor?? [ 187.253806][ T4249] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 187.443310][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.471350][ T4249] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 187.485694][ T4249] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 187.506360][ T4249] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 187.636675][T10943] __nla_validate_parse: 19 callbacks suppressed [ 187.636693][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2951'. [ 187.672180][T10943] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 187.710128][ T5492] usb 5-1: USB disconnect, device number 17 [ 187.727484][T10948] netlink: 'syz.5.2953': attribute type 4 has an invalid length. [ 187.967061][T10967] netlink: 'syz.0.2963': attribute type 5 has an invalid length. [ 188.259890][T10999] overlayfs: unrecognized mount option "\" or missing value [ 188.266848][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2976'. [ 188.332776][T11003] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 188.545090][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 188.545105][ T26] audit: type=1400 audit(188.548:13): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11021 comm="syz.5.2987" [ 188.714446][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2994'. [ 188.749546][T11038] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.759243][T11040] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 188.777272][T11040] overlayfs: bad mount option "redirect_dir=nofollow\" [ 188.800548][T11044] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 188.944868][T11056] netlink: 'syz.5.3005': attribute type 13 has an invalid length. [ 188.956248][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3004'. [ 188.970429][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3004'. [ 189.316431][T11090] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 189.424083][T11099] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3025'. [ 189.478227][T11100] device vti0 entered promiscuous mode [ 189.593673][T11106] loop5: detected capacity change from 0 to 2048 [ 190.002876][T11102] loop1: detected capacity change from 0 to 32768 [ 190.015605][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3040'. [ 190.104534][T11131] loop4: detected capacity change from 0 to 4096 [ 190.112983][T11102] jfs_lookup: iget failed on inum 4 [ 190.236132][T11131] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.272016][T11131] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 190.315842][T11140] loop1: detected capacity change from 0 to 512 [ 190.379720][T11140] EXT4-fs (loop1): Ignoring removed orlov option [ 190.441128][T11140] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.583045][T11157] loop5: detected capacity change from 0 to 512 [ 190.603325][T11140] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2928: inode #15: comm syz.1.3045: corrupted xattr block 252 [ 190.644116][T11140] EXT4-fs (loop1): Remounting filesystem read-only [ 190.651255][T11140] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 190.660838][T11140] EXT4-fs (loop1): 1 orphan inode deleted [ 190.666810][T11140] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000002,init_itable=0x00000000000000fd,noquota,orlov,nodiscard,usrjquota=,init_itable=0x0000000000000009,init_itable=0x0000000000000003. Quota mode: none. [ 190.757581][T11140] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 4: comm syz.1.3045: lblock 0 mapped to illegal pblock 4 (length 1) [ 190.779347][T11157] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 190.843097][T11140] EXT4-fs (loop1): Remounting filesystem read-only [ 190.857600][T11157] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.3053: bad orphan inode 15 [ 190.870713][T11157] ext4_test_bit(bit=14, block=18) = 1 [ 190.876145][T11157] is_bad_inode(inode)=0 [ 190.880536][T11157] NEXT_ORPHAN(inode)=1023 [ 190.884899][T11157] max_ino=32 [ 190.888112][T11157] i_nlink=0 [ 190.893564][T11157] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.926661][T11157] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #12: comm syz.5.3053: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 61(61) [ 190.997163][T11162] loop4: detected capacity change from 0 to 4096 [ 191.157943][T11138] loop2: detected capacity change from 0 to 32768 [ 191.210945][T11162] ntfs: volume version 3.1. [ 191.238481][T11162] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 191.259139][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 191.281273][T11166] loop1: detected capacity change from 0 to 1024 [ 191.290161][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 191.296240][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 191.331428][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 191.347504][T11162] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 191.382391][T11162] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 191.421157][T11138] XFS (loop2): Mounting V5 Filesystem [ 191.434129][T11162] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 191.457871][T11162] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 191.473964][T11162] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 191.493917][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.531215][T11166] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 191.545852][T11162] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 191.558555][T11162] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 191.609123][T11162] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 191.702788][T11138] XFS (loop2): Ending clean mount [ 191.772362][T11138] XFS (loop2): Quotacheck needed: Please wait. [ 191.953764][T11138] XFS (loop2): Quotacheck: Done. [ 192.083178][ T4197] XFS (loop2): Unmounting Filesystem [ 192.385996][T11225] loop1: detected capacity change from 0 to 256 [ 192.408474][T11227] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3084'. [ 192.511483][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3085'. [ 192.578614][T11230] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.775370][T11240] device geneve3 entered promiscuous mode [ 193.078001][T11268] netlink: 'syz.1.3103': attribute type 5 has an invalid length. [ 193.096187][T11272] program syz.0.3106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.128681][T11268] netlink: 'syz.1.3103': attribute type 1 has an invalid length. [ 193.177926][T11268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.319085][T11288] netlink: 'syz.4.3113': attribute type 19 has an invalid length. [ 193.337339][T11288] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3113'. [ 193.539154][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 193.678853][T11322] Cannot find add_set index 3 as target [ 193.889355][ T4232] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.933693][T11347] loop1: detected capacity change from 0 to 256 [ 193.987617][T11347] xfs: Unexpected value for 'norecovery' [ 194.007728][T11352] vivid-001: disconnect [ 194.017171][T11351] vivid-001: reconnect [ 194.279652][T11372] device bond2 entered promiscuous mode [ 194.286506][T11372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.306925][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313382][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369573][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.489442][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.506292][T11389] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3163'. [ 194.514137][ T4232] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.736730][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 194.748747][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.778135][ T4232] usb 3-1: Product: syz [ 194.797770][ T4232] usb 3-1: Manufacturer: syz [ 194.810905][ T4232] usb 3-1: SerialNumber: syz [ 194.912625][T11423] loop5: detected capacity change from 0 to 2048 [ 194.984866][T11426] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.049122][ T5492] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 195.245395][ T4232] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 195.280660][ T4232] usb 3-1: USB disconnect, device number 12 [ 195.299319][ T5492] usb 5-1: Using ep0 maxpacket: 8 [ 195.337048][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.463818][ T5492] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.559296][ T5492] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 195.666284][T11469] lo speed is unknown, defaulting to 1000 [ 195.666472][T11469] lo speed is unknown, defaulting to 1000 [ 195.675051][T11469] lo speed is unknown, defaulting to 1000 [ 195.694629][T11469] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 195.723315][T11469] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.733917][ T5492] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 195.733951][ T5492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.733974][ T5492] usb 5-1: Product: syz [ 195.733991][ T5492] usb 5-1: Manufacturer: syz [ 195.734008][ T5492] usb 5-1: SerialNumber: syz [ 195.822456][T11469] lo speed is unknown, defaulting to 1000 [ 195.837955][T11469] lo speed is unknown, defaulting to 1000 [ 195.846944][T11469] lo speed is unknown, defaulting to 1000 [ 195.861776][T11469] lo speed is unknown, defaulting to 1000 [ 195.868606][T11469] lo speed is unknown, defaulting to 1000 [ 195.943843][T11477] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 196.081249][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 196.090614][ T5492] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.109206][ T5492] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 196.139157][ T5492] usb 5-1: unit 254 not found! [ 196.199243][ T5492] usb 5-1: USB disconnect, device number 18 [ 196.524479][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.703629][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 196.703646][ T26] audit: type=1400 audit(196.708:14): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11538 comm="syz.5.3235" [ 196.763519][T11543] overlayfs: unrecognized mount option "\" or missing value [ 196.827046][T11547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.938796][T11556] loop5: detected capacity change from 0 to 1024 [ 197.025402][T11556] hfsplus: failed to load root directory [ 197.098063][T11568] openvswitch: netlink: Message has 4 unknown bytes. [ 197.129653][T11567] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3250'. [ 197.386783][T11591] exfat: Deprecated parameter 'debug' [ 197.405880][T11591] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.439253][T11591] exFAT-fs (loop0): unable to read boot sector [ 197.459109][T11591] exFAT-fs (loop0): failed to read boot sector [ 197.465406][T11591] exFAT-fs (loop0): failed to recognize exfat type [ 197.606002][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3271'. [ 197.758238][ T26] audit: type=1107 audit(197.758:15): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 197.758238][ T26] ,”' [ 197.906251][T11635] loop1: detected capacity change from 0 to 64 [ 197.951610][T11635] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 198.914474][T11705] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 198.930601][T11707] xt_recent: hitcount (65535) is larger than allowed maximum (255) [ 198.969353][T11709] netlink: 'syz.5.3319': attribute type 10 has an invalid length. [ 198.986580][T11709] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3319'. [ 199.013515][T11709] device team0 entered promiscuous mode [ 199.039937][T11709] device team_slave_0 entered promiscuous mode [ 199.046388][T11709] device team_slave_1 entered promiscuous mode [ 199.087024][T11709] bridge0: port 3(team0) entered blocking state [ 199.113816][T11709] bridge0: port 3(team0) entered disabled state [ 199.122780][T11711] loop4: detected capacity change from 0 to 4096 [ 199.138762][T11709] bridge0: port 3(team0) entered blocking state [ 199.145184][T11709] bridge0: port 3(team0) entered forwarding state [ 199.248595][T11711] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 199.342123][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 199.561008][T11732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.595578][T11733] xt_TCPMSS: Only works on TCP SYN packets [ 199.666109][T11703] loop1: detected capacity change from 0 to 32768 [ 199.703885][T11703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3316 (11703) [ 199.767618][T11703] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 199.811410][T11703] BTRFS info (device loop1): use zlib compression, level 3 [ 199.846538][T11703] BTRFS info (device loop1): using free space tree [ 199.872705][T11703] BTRFS info (device loop1): has skinny extents [ 200.006086][T11769] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.134610][T11703] BTRFS info (device loop1): enabling ssd optimizations [ 200.188019][T11788] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3347'. [ 200.202558][T11787] loop4: detected capacity change from 0 to 512 [ 200.231025][T11773] loop0: detected capacity change from 0 to 8192 [ 200.271559][T11787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.344144][T11773] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 200.389273][T11773] REISERFS (device loop0): using ordered data mode [ 200.478268][T11773] reiserfs: using flush barriers [ 200.497719][T11773] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.519043][T11796] netlink: 'syz.2.3352': attribute type 21 has an invalid length. [ 200.530993][T11787] EXT4-fs (loop4): 1 truncate cleaned up [ 200.542624][T11796] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3352'. [ 200.545439][T11787] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.559143][ T4856] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.579329][T11773] REISERFS (device loop0): checking transaction log (loop0) [ 200.607403][T11773] REISERFS (device loop0): Using r5 hash to sort names [ 200.626042][T11773] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 200.642790][T11799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3353'. [ 200.663693][T11787] EXT4-fs error (device loop4): ext4_lookup:1857: inode #2: comm syz.4.3349: 'file0' linked to parent dir [ 200.836826][T11805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.849157][ T4856] usb 6-1: Using ep0 maxpacket: 8 [ 200.886117][T11805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.905822][T11805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.969404][T11809] SET target dimension over the limit! [ 200.990453][ T4856] usb 6-1: config 5 has an invalid interface number: 39 but max is 0 [ 200.991530][T11805] device vlan0 left promiscuous mode [ 200.998641][ T4856] usb 6-1: config 5 has no interface number 0 [ 201.026038][T11813] loop0: detected capacity change from 0 to 8 [ 201.034386][ T4856] usb 6-1: config 5 interface 39 has no altsetting 0 [ 201.076226][T11805] device wlan0 left promiscuous mode [ 201.106933][T11805] device bond1 left promiscuous mode [ 201.114226][T11813] SQUASHFS error: Failed to read block 0x2d7: -5 [ 201.122193][T11813] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 201.133998][ T26] audit: type=1800 audit(201.138:16): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3356" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 201.165651][T11805] device gtp0 left promiscuous mode [ 201.191088][T11805] device bond2 left promiscuous mode [ 201.240259][ T4856] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e300, bcdDevice=42.60 [ 201.254275][ T4856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.271426][ T4856] usb 6-1: Product: syz [ 201.280377][ T4856] usb 6-1: Manufacturer: syz [ 201.285340][ T4856] usb 6-1: SerialNumber: syz [ 201.452798][T11836] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.671142][ T4856] em28xx 6-1:5.39: audio device (eb1a:e300): interface 39, class 1 [ 201.701017][ T4856] usb 6-1: USB disconnect, device number 5 [ 201.926491][T11874] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3388'. [ 202.019595][T11880] blktrace: Concurrent blktraces are not allowed on loop7 [ 202.202231][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 202.229537][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 202.249195][T11892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3408'. [ 202.347703][T11906] loop4: detected capacity change from 0 to 256 [ 202.397328][T11910] ipt_CLUSTERIP: bad num_local_nodes 18 [ 202.423964][T11914] overlayfs: './file0' not a directory [ 202.469592][ T5492] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 202.560916][T11918] loop2: detected capacity change from 0 to 64 [ 202.839379][ T5492] usb 6-1: config 4 has an invalid interface number: 226 but max is 0 [ 202.858739][ T5492] usb 6-1: config 4 has no interface number 0 [ 202.871249][ T5492] usb 6-1: config 4 interface 226 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 202.902471][ T5492] usb 6-1: config 4 interface 226 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 202.928271][ T5492] usb 6-1: config 4 interface 226 has no altsetting 0 [ 202.944243][T11942] netlink: 'syz.0.3423': attribute type 10 has an invalid length. [ 202.959234][T11942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3423'. [ 202.977960][T11942] device team0 entered promiscuous mode [ 202.989387][T11942] device team_slave_0 entered promiscuous mode [ 203.006177][T11942] device team_slave_1 entered promiscuous mode [ 203.027990][T11942] bridge0: port 4(team0) entered blocking state [ 203.055495][T11942] bridge0: port 4(team0) entered disabled state [ 203.083862][T11942] bridge0: port 4(team0) entered blocking state [ 203.090266][T11942] bridge0: port 4(team0) entered forwarding state [ 203.097638][ T5492] usb 6-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=d1.38 [ 203.116854][ T5492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.139012][ T5492] usb 6-1: Product: syz [ 203.151908][ T5492] usb 6-1: Manufacturer: syz [ 203.176568][ T5492] usb 6-1: SerialNumber: syz [ 203.219416][T11894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.285193][T11954] mmap: syz.2.3429 (11954): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 203.432553][T11936] loop4: detected capacity change from 0 to 32768 [ 203.525077][ T5492] usb 6-1: USB disconnect, device number 6 [ 203.577101][T11936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3420 (11936) [ 203.621885][T11966] netlink: 'syz.0.3435': attribute type 16 has an invalid length. [ 203.636021][T11966] netlink: 'syz.0.3435': attribute type 17 has an invalid length. [ 203.666215][T11936] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 203.701134][T11936] BTRFS info (device loop4): enabling ssd optimizations [ 203.708125][T11936] BTRFS info (device loop4): using spread ssd allocation scheme [ 203.729749][T11936] BTRFS info (device loop4): force zlib compression, level 3 [ 203.756222][T11936] BTRFS info (device loop4): metadata ratio 1 [ 203.766820][T11966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.773002][T11936] BTRFS info (device loop4): turning on flush-on-commit [ 203.796795][T11968] loop2: detected capacity change from 0 to 16 [ 203.797857][T11966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.811909][T11936] BTRFS info (device loop4): setting nodatacow [ 203.841768][T11968] erofs: (device loop2): mounted with root inode @ nid 36. [ 203.851953][T11966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.859158][T11936] BTRFS info (device loop4): using free space tree [ 203.859211][T11936] BTRFS info (device loop4): has skinny extents [ 203.892035][T11968] attempt to access beyond end of device [ 203.892035][T11968] loop2: rw=524288, want=32, limit=16 [ 203.917166][T11966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.936367][T11968] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 204.046379][ T26] audit: type=1800 audit(204.048:17): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3436" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 204.416675][ T4564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4564) [ 204.529463][T12009] loop0: detected capacity change from 0 to 4096 [ 204.579005][ T4229] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.702087][T12009] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 204.819127][ T4229] usb 6-1: Using ep0 maxpacket: 8 [ 204.939572][ T4229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 205.109403][ T4229] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 205.118586][ T4229] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 205.144876][T12039] loop2: detected capacity change from 0 to 256 [ 205.145854][ T4229] usb 6-1: Product: syz [ 205.185011][ T4229] usb 6-1: Manufacturer: syz [ 205.197331][ T4229] usb 6-1: SerialNumber: syz [ 205.248302][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 205.263523][T12039] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda219aab, utbl_chksum : 0xe619d30d) [ 205.324512][T12039] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 205.336495][T12039] exFAT-fs (loop2): Filesystem has been set read-only [ 205.386882][T12054] loop1: detected capacity change from 0 to 256 [ 205.439122][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3470'. [ 205.481104][T12054] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 205.498634][ T4229] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 205.512903][ T4229] usb 6-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 205.526879][ T4229] usb 6-1: Handspring Visor / Palm OS: port 127, is for Console use [ 205.547153][ T4229] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 205.709298][ T4229] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 205.723479][ T4229] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 205.752318][ T4229] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 205.802132][ T4229] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 205.852819][ T4229] usb 6-1: USB disconnect, device number 7 [ 205.876010][ T4229] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 205.890426][ T4229] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 205.901186][ T4229] visor 6-1:1.0: device disconnected [ 205.960582][T12086] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3484'. [ 206.066048][T12095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3489'. [ 206.085762][T12095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3489'. [ 206.126554][T12097] netlink: 'syz.1.3490': attribute type 5 has an invalid length. [ 206.371653][T12117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.447468][T12121] loop1: detected capacity change from 0 to 256 [ 206.571001][T12132] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3507'. [ 206.598653][T12121] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda219aab, utbl_chksum : 0xe619d30d) [ 206.668058][T12121] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 206.702098][T12121] exFAT-fs (loop1): Filesystem has been set read-only [ 206.970337][T12162] loop0: detected capacity change from 0 to 16 [ 206.981563][T12161] netlink: 'syz.1.3522': attribute type 10 has an invalid length. [ 207.023731][T12161] team0: Cannot enslave team device to itself [ 207.077981][T12162] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.118579][T12162] attempt to access beyond end of device [ 207.118579][T12162] loop0: rw=524288, want=32, limit=16 [ 207.191041][T12162] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 207.211577][T12175] ecryptfs_parse_options: eCryptfs: unrecognized option [ecry/²áº_cipher=aes] [ 207.251801][ T26] audit: type=1800 audit(207.258:18): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3521" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 207.409598][T12175] Could not find key with description: [syz ] [ 207.415734][T12175] process_request_key_err: No key [ 207.429153][T12175] Could not find valid key in user session keyring for sig specified in mount option: [syz ] [ 207.440459][T12175] One or more global auth toks could not properly register; rc = [-2] [ 207.448725][T12175] Error parsing options; rc = [-2] [ 207.543993][T12195] loop0: detected capacity change from 0 to 1024 [ 207.616032][T12195] hfsplus: invalid length 1280 has been corrected to 255 [ 207.656355][T12195] hfsplus: invalid length 1280 has been corrected to 255 [ 207.711743][T12206] netlink: 'syz.1.3544': attribute type 5 has an invalid length. [ 208.219061][T11792] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 208.344256][T12263] loop5: detected capacity change from 0 to 64 [ 208.363578][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3571'. [ 208.392920][T12269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3573'. [ 208.431564][T12263] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 208.509099][T11792] usb 5-1: Using ep0 maxpacket: 32 [ 208.551189][T12277] netlink: 'syz.1.3577': attribute type 10 has an invalid length. [ 208.608220][T12277] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 208.639353][T11792] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 208.654708][T12280] device geneve2 entered promiscuous mode [ 208.668975][T11792] usb 5-1: config 0 has no interface number 0 [ 208.863706][T11792] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 208.880906][T11792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.894245][T12304] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.3590'. [ 208.899129][ T4249] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.917890][T11792] usb 5-1: Product: syz [ 208.922493][T11792] usb 5-1: Manufacturer: syz [ 208.932624][T11792] usb 5-1: SerialNumber: syz [ 208.946722][T11792] usb 5-1: config 0 descriptor?? [ 209.010742][T11792] smsc95xx v2.0.0 [ 209.199218][ T4249] usb 3-1: Using ep0 maxpacket: 32 [ 209.219475][T11792] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 209.235550][T12327] loop1: detected capacity change from 0 to 64 [ 209.235553][T11792] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 209.264226][T11792] usb 5-1: USB disconnect, device number 19 [ 209.339334][ T4249] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 209.359317][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.369797][ T4249] usb 3-1: config 0 descriptor?? [ 209.425987][ T4249] as10x_usb: device has been detected [ 209.436460][ T4249] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 209.476453][ T4249] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 209.577854][ T4249] as10x_usb: error during firmware upload part1 [ 209.593372][ T4249] Registered device nBox DVB-T Dongle [ 209.684157][T12339] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 209.705159][T11792] usb 3-1: USB disconnect, device number 13 [ 209.748571][T11792] Unregistered device nBox DVB-T Dongle [ 209.763766][T11792] as10x_usb: device has been disconnected [ 209.857719][T12346] device ip6tnl1 entered promiscuous mode [ 209.938815][T12354] loop4: detected capacity change from 0 to 512 [ 210.018125][T12354] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 210.061749][T12354] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz.4.3615: invalid size [ 210.184696][T12363] loop1: detected capacity change from 0 to 512 [ 210.207541][ T5492] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 210.310141][T12363] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 210.565816][T12373] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3621'. [ 210.579269][ T5492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.597528][ T5492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.739200][ T5492] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 210.761734][ T5492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 210.778149][ T5492] usb 6-1: Product: syz [ 210.783693][T12384] netlink: 'syz.1.3626': attribute type 2 has an invalid length. [ 210.789387][ T5492] usb 6-1: Manufacturer: syz [ 210.809002][T12384] netlink: 'syz.1.3626': attribute type 1 has an invalid length. [ 210.824745][T12384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3626'. [ 210.865819][ T5492] hub 6-1:1.0: USB hub found [ 210.893868][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3631'. [ 210.923804][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3631'. [ 211.089367][ T5492] hub 6-1:1.0: config failed, hub has too many ports! (err -19) [ 211.108760][ T5492] usbtouchscreen: probe of 6-1:1.0 failed with error -12 [ 211.193286][T12412] loop2: detected capacity change from 0 to 1764 [ 211.353631][T12412] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 211.423036][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3650'. [ 211.612492][ T4229] usb 6-1: USB disconnect, device number 8 [ 211.841451][T12449] loop2: detected capacity change from 0 to 1024 [ 211.918477][T12449] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 211.981371][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'. [ 211.992522][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'. [ 212.021790][T12457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3664'. [ 212.071574][T12464] netlink: 'syz.2.3667': attribute type 13 has an invalid length. [ 212.197378][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3672'. [ 212.254888][T12467] loop1: detected capacity change from 0 to 4096 [ 212.289138][ T4249] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 212.387972][T12482] loop2: detected capacity change from 0 to 1024 [ 212.401639][T12467] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 212.522160][T12482] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 212.542095][T12482] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 212.596032][T12482] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 212.636999][T12490] netlink: 'syz.1.3680': attribute type 25 has an invalid length. [ 212.639744][T12482] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.689419][ T4249] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 212.699515][ T4249] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.711489][T12490] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 212.728177][T12482] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 212.729417][ T4249] usb 5-1: config 0 has no interface number 0 [ 212.852066][ T4249] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 212.894101][ T4249] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 212.935153][ T4249] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.987463][T12485] loop5: detected capacity change from 0 to 32768 [ 213.062652][T12506] netlink: 'syz.1.3688': attribute type 3 has an invalid length. [ 213.078288][T12506] netlink: 'syz.1.3688': attribute type 3 has an invalid length. [ 213.146549][T12485] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.3678 (12485) [ 213.178559][ T4249] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 213.225918][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.233578][T12511] loop0: detected capacity change from 0 to 64 [ 213.283204][ T4249] usb 5-1: Product: syz [ 213.299769][ T4249] usb 5-1: Manufacturer: syz [ 213.304439][ T4249] usb 5-1: SerialNumber: syz [ 213.344856][T12485] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.348661][ T4249] usb 5-1: config 0 descriptor?? [ 213.370165][T12485] BTRFS info (device loop5): using free space tree [ 213.376764][T12485] BTRFS info (device loop5): has skinny extents [ 213.409447][T12461] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.478005][ T4249] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 213.692821][T12485] BTRFS info (device loop5): enabling ssd optimizations [ 213.700207][ T3060] usb 5-1: Failed to submit usb control message: -71 [ 213.708270][ T3060] usb 5-1: unable to send the bmi data to the device: -71 [ 213.716776][ T4857] usb 5-1: USB disconnect, device number 20 [ 213.739017][ T1111] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.748752][ T3060] usb 5-1: unable to get target info from device [ 213.777120][ T3060] usb 5-1: could not get target info (-71) [ 213.820191][ T3060] usb 5-1: could not probe fw (-71) [ 213.990436][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 214.109359][ T1111] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.130354][T12569] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.3707'. [ 214.140361][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.169019][ T1111] usb 3-1: config 0 has no interface number 0 [ 214.185557][ T1111] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.389238][ T1111] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.398378][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.442077][ T1111] usb 3-1: Product: syz [ 214.446357][ T1111] usb 3-1: Manufacturer: syz [ 214.463588][ T1111] usb 3-1: SerialNumber: syz [ 214.486975][ T1111] usb 3-1: config 0 descriptor?? [ 214.550868][ T1111] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 214.580895][T12592] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptf%_sig=syz] [ 214.609807][T12592] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 214.658840][T12592] Error parsing options; rc = [-22] [ 214.759273][ T1111] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 214.773686][ T1111] quatech2: probe of 3-1:0.51 failed with error -8 [ 214.972396][ T1111] usb 3-1: USB disconnect, device number 14 [ 215.000753][T12632] loop5: detected capacity change from 0 to 8 [ 215.355949][T12659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.388032][T12657] loop4: detected capacity change from 0 to 1024 [ 215.432676][T12657] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 215.448776][T12657] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 215.476840][T12657] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 215.487853][T12657] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.543964][T12657] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 215.732883][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.788757][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.829761][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.870400][T12686] loop1: detected capacity change from 0 to 512 [ 215.886821][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 215.908397][T12677] device geneve3 left promiscuous mode [ 215.917991][T12692] __nla_validate_parse: 1 callbacks suppressed [ 215.918007][T12692] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3764'. [ 215.969354][T12686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.038128][T12686] EXT4-fs (loop1): 1 truncate cleaned up [ 216.061944][T12686] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 216.164095][T12686] Invalid option length (771) for dns_resolver key [ 216.458092][T12730] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 216.679145][ T1108] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.730885][T12756] loop5: detected capacity change from 0 to 256 [ 216.781855][T12756] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 217.099316][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.127754][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.319228][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.328381][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.349132][ T1108] usb 3-1: Product: syz [ 217.353362][ T1108] usb 3-1: Manufacturer: syz [ 217.358673][ T1108] usb 3-1: SerialNumber: syz [ 217.389790][ T1108] usb 3-1: config 0 descriptor?? [ 217.432506][T12808] loop4: detected capacity change from 0 to 512 [ 217.442456][ T1108] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 217.454410][T12810] IPv6: NLM_F_REPLACE set, but no existing node found! [ 217.512693][T12808] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.3821: bad orphan inode 15 [ 217.528184][T12808] ext4_test_bit(bit=14, block=18) = 1 [ 217.535895][T12808] is_bad_inode(inode)=0 [ 217.540464][T12808] NEXT_ORPHAN(inode)=1023 [ 217.544898][T12808] max_ino=32 [ 217.548126][T12808] i_nlink=0 [ 217.558991][T12808] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2928: inode #15: comm syz.4.3821: corrupted xattr block 19 [ 217.585599][T12808] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 217.602016][T12808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.715609][T12808] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz.4.3821: Directory hole found for htree leaf block 0 [ 217.897331][ T1108] usb 3-1: USB disconnect, device number 15 [ 217.935080][T12833] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 12833 comm: syz.1.3832) [ 217.969376][ T26] audit: type=1800 audit(1241.984:19): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3832" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=60005 res=0 errno=0 [ 218.211173][T12846] loop4: detected capacity change from 0 to 8192 [ 218.279146][ T7047] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 218.308517][T12846] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 218.338493][T12846] REISERFS (device loop4): using ordered data mode [ 218.361563][T12846] reiserfs: using flush barriers [ 218.387142][T12846] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.429439][T12846] REISERFS (device loop4): checking transaction log (loop4) [ 218.447269][T12846] REISERFS (device loop4): Using r5 hash to sort names [ 218.457966][T12846] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 218.699518][ T7047] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 218.718006][ T7047] usb 6-1: config 0 has no interface number 0 [ 218.729291][ T7047] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 218.768968][ T7047] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.789236][ T7047] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 218.807014][T12856] loop1: detected capacity change from 0 to 32768 [ 218.814187][ T7047] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024 [ 218.840961][T12870] netlink: 'syz.4.3850': attribute type 10 has an invalid length. [ 218.887555][T12870] team0: Device hsr_slave_0 failed to register rx_handler [ 218.904545][T12856] XFS (loop1): Mounting V5 Filesystem [ 218.999435][ T7047] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 219.018779][ T7047] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 219.044711][ T7047] usb 6-1: Product: syz [ 219.052113][ T7047] usb 6-1: Manufacturer: syz [ 219.056763][ T7047] usb 6-1: SerialNumber: syz [ 219.077999][T12856] XFS (loop1): Ending clean mount [ 219.094809][ T7047] usb 6-1: config 0 descriptor?? [ 219.155726][ T4192] XFS (loop1): Unmounting Filesystem [ 219.162820][ T7047] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 219.228835][ T7047] xpad: probe of 6-1:0.237 failed with error -5 [ 219.342988][T12898] sock: sock_timestamping_bind_phc: sock not bind to device [ 219.417424][ T6083] usb 6-1: USB disconnect, device number 9 [ 219.701840][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 219.806927][T12932] loop2: detected capacity change from 0 to 22 [ 219.856733][T12932] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 219.887842][T12932] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 219.977295][T12937] sctp: [Deprecated]: syz.1.3879 (pid 12937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.977295][T12937] Use struct sctp_sack_info instead [ 220.046844][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3882'. [ 220.270437][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3893'. [ 220.303542][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3893'. [ 220.313823][T12967] netlink: 'syz.4.3894': attribute type 4 has an invalid length. [ 220.341144][T12967] netlink: 'syz.4.3894': attribute type 3 has an invalid length. [ 220.374953][T12967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3894'. [ 220.463566][T12978] netlink: 'syz.5.3899': attribute type 19 has an invalid length. [ 220.488547][T12978] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 220.516359][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3899'. [ 220.684694][T12999] netlink: 'syz.2.3910': attribute type 13 has an invalid length. [ 220.705729][T12989] loop4: detected capacity change from 0 to 4096 [ 220.835634][T13007] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 220.844128][T13008] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.917270][T13011] autofs4:pid:13011:autofs_fill_super: called with bogus options [ 221.281478][T13042] xt_connbytes: Forcing CT accounting to be enabled [ 221.305545][T13045] device ipip0 entered promiscuous mode [ 221.617600][T13076] loop1: detected capacity change from 0 to 128 [ 221.697541][T13076] FAT-fs (loop1): invalid media value (0x02) [ 221.718405][T13076] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 221.768280][T13076] FAT-fs (loop1): Can't find a valid FAT filesystem [ 221.897505][T13099] libceph: resolve '0' (ret=-3): failed [ 222.215400][T13126] netlink: 'syz.2.3968': attribute type 4 has an invalid length. [ 222.372439][T13146] netlink: 'syz.4.3978': attribute type 5 has an invalid length. [ 222.760398][T13180] device bridge4 entered promiscuous mode [ 222.865001][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 222.884420][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4000'. [ 223.065145][T13204] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4007'. [ 223.084829][T13204] unsupported nlmsg_type 40 [ 223.113087][T13207] loop0: detected capacity change from 0 to 128 [ 223.291628][T13217] xt_CT: No such helper "netbios-ns" [ 223.585836][T13236] netlink: 'syz.5.4023': attribute type 2 has an invalid length. [ 223.885379][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4031'. [ 224.017013][T13258] loop5: detected capacity change from 0 to 4096 [ 224.051457][T13266] device veth1_to_team entered promiscuous mode [ 224.058829][T13265] device veth1_to_team left promiscuous mode [ 224.546011][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4040'. [ 224.576024][T13270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.649135][T13282] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4044'. [ 224.672727][T13280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4042'. [ 224.701679][T13282] netlink: 'syz.2.4044': attribute type 1 has an invalid length. [ 225.253779][T13327] netlink: 'syz.5.4066': attribute type 10 has an invalid length. [ 225.330628][T13327] team0: Device hsr_slave_0 failed to register rx_handler [ 225.692128][T13363] netlink: 'syz.1.4084': attribute type 3 has an invalid length. [ 225.700349][T13363] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 225.754328][T13366] loop1: detected capacity change from 0 to 512 [ 225.855912][T13366] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 225.879165][T12576] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 225.903976][T13366] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz.1.4086: invalid size [ 225.996424][T13383] loop2: detected capacity change from 0 to 4096 [ 226.017889][T13385] lo speed is unknown, defaulting to 1000 [ 226.037857][T13385] lo speed is unknown, defaulting to 1000 [ 226.047100][T13385] lo speed is unknown, defaulting to 1000 [ 226.299655][T12576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.327172][T12576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.454910][T13385] infiniband syz1: set active [ 226.461015][T13385] infiniband syz1: added lo [ 226.480625][T12576] usb 6-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 226.495480][T12576] usb 6-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 226.505374][T12576] usb 6-1: Manufacturer: syz [ 226.514138][ T7047] lo speed is unknown, defaulting to 1000 [ 226.537223][T12576] usb 6-1: config 0 descriptor?? [ 226.561899][T13385] RDS/IB: syz1: added [ 226.568847][T13385] smc: adding ib device syz1 with port count 1 [ 226.581979][T13385] smc: ib device syz1 port 1 has pnetid [ 226.592714][ T7047] lo speed is unknown, defaulting to 1000 [ 226.602822][T13385] lo speed is unknown, defaulting to 1000 [ 226.642230][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 226.652708][T13408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4104'. [ 226.759170][ T7047] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.852058][T13385] lo speed is unknown, defaulting to 1000 [ 226.889099][T12576] usbhid 6-1:0.0: can't add hid device: -71 [ 226.895227][T12576] usbhid: probe of 6-1:0.0 failed with error -71 [ 226.936370][T12576] usb 6-1: USB disconnect, device number 10 [ 226.956334][T13420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4110'. [ 227.019182][ T7047] usb 2-1: Using ep0 maxpacket: 16 [ 227.147154][T13385] lo speed is unknown, defaulting to 1000 [ 227.169324][ T7047] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 227.188619][ T7047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.235513][ T7047] usb 2-1: config 0 descriptor?? [ 227.312653][ T7047] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 227.343586][T13412] loop0: detected capacity change from 0 to 32768 [ 227.376040][T13385] lo speed is unknown, defaulting to 1000 [ 227.421151][T13412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4107 (13412) [ 227.486995][T13412] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 227.509050][T13412] BTRFS info (device loop0): using free space tree [ 227.515628][T13412] BTRFS info (device loop0): has skinny extents [ 227.529238][ T7047] usb 2-1: Detected FT232BM [ 227.679478][T13422] loop2: detected capacity change from 0 to 32768 [ 227.717619][T13412] BTRFS info (device loop0): enabling ssd optimizations [ 227.749314][ T7047] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 227.772567][T13385] lo speed is unknown, defaulting to 1000 [ 227.789184][ T7047] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 227.815738][ T7047] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 227.892978][ T7047] usb 2-1: USB disconnect, device number 16 [ 227.907172][T13422] XFS (loop2): Mounting V5 Filesystem [ 227.914548][ T7047] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 227.925460][ T7047] ftdi_sio 2-1:0.0: device disconnected [ 228.020667][T13422] XFS (loop2): Ending clean mount [ 228.148566][ T4197] XFS (loop2): Unmounting Filesystem [ 228.475776][ T4564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4564) [ 228.699071][ T5492] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 228.926183][T13484] netlink: 'syz.4.4130': attribute type 1 has an invalid length. [ 228.989484][ T5492] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 229.047804][T13490] netlink: 'syz.2.4117': attribute type 9 has an invalid length. [ 229.069068][T13490] netlink: 'syz.2.4117': attribute type 6 has an invalid length. [ 229.206384][T13502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.373454][T13516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.449073][T12576] lo speed is unknown, defaulting to 1000 [ 229.509818][ T26] audit: type=1400 audit(2277.518:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13525 comm="syz.0.4149" [ 229.636994][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 229.793772][ T5492] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 229.814356][ T5492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 229.831595][ T5492] usb 2-1: Product: syz [ 229.836004][ T5492] usb 2-1: Manufacturer: syz [ 229.845328][ T5492] usb 2-1: SerialNumber: syz [ 229.857089][ T5492] usb 2-1: config 0 descriptor?? [ 229.899401][ T7047] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 229.997476][T13565] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 230.018112][T13565] overlayfs: conflicting options: userxattr,metacopy=on [ 230.141202][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 230.163728][ T6083] usb 2-1: USB disconnect, device number 17 [ 230.292432][ T7047] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.311330][ T7047] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.503115][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4188'. [ 230.519525][ T7047] usb 3-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 230.546257][ T7047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.564834][ T7047] usb 3-1: Product: syz [ 230.569578][ T7047] usb 3-1: Manufacturer: syz [ 230.574224][ T7047] usb 3-1: SerialNumber: syz [ 230.594101][T13608] netlink: 'syz.0.4190': attribute type 2 has an invalid length. [ 230.617358][T13608] netlink: 'syz.0.4190': attribute type 8 has an invalid length. [ 230.635575][T13608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4190'. [ 230.660693][ T7047] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 230.811656][T13624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4197'. [ 230.831035][T13624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4197'. [ 230.852414][T13624] device xfrm0 entered promiscuous mode [ 230.883569][T13624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4197'. [ 231.077459][T13636] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 231.109385][ T7047] mos7840: probe of ttyUSB0 failed with error -71 [ 231.140601][ T7047] mos7840: probe of ttyUSB1 failed with error -71 [ 231.140623][ T26] audit: type=1400 audit(2279.148:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13637 comm="syz.1.4205" [ 231.194539][ T7047] mos7840: probe of ttyUSB2 failed with error -71 [ 231.203880][T13639] loop0: detected capacity change from 0 to 2048 [ 231.239150][ T7047] mos7840: probe of ttyUSB3 failed with error -71 [ 231.267069][ T7047] usb 3-1: USB disconnect, device number 16 [ 231.291310][T13639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.328046][ T7047] mos7840 3-1:1.0: device disconnected [ 231.425783][T13648] loop1: detected capacity change from 0 to 16 [ 231.463452][T13614] loop5: detected capacity change from 0 to 32768 [ 231.511161][T13648] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 231.568664][T13648] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 231.637473][T13648] erofs: DAX unsupported by block device. Turning off DAX. [ 231.661156][T13648] erofs: (device loop1): mounted with root inode @ nid 36. [ 231.696816][ T4199] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[46, 0] out[9000] [ 231.767466][T13648] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[46, 4050] out[9000] [ 231.859267][ T26] audit: type=1800 audit(2279.868:22): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4209" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 231.895160][T13662] netlink: 'syz.5.4212': attribute type 2 has an invalid length. [ 231.947649][T13662] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4212'. [ 231.967980][T13661] loop2: detected capacity change from 0 to 2048 [ 232.071328][T13661] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 232.133350][T13661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.189976][T13674] kAFS: unable to lookup cell '@G|' [ 232.371874][T13686] loop0: detected capacity change from 0 to 1024 [ 232.422347][T13689] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 232.449211][ T1279] hfsplus: b-tree write err: -5, ino 25 [ 232.464296][ T1279] hfsplus: b-tree write err: -5, ino 4 [ 232.498182][ T1279] hfsplus: b-tree write err: -5, ino 2 [ 232.515232][T13689] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4226'. [ 232.548651][T13689] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 232.869736][T13718] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 13718 comm: syz.1.4242) [ 232.884544][ T26] audit: type=1800 audit(2280.888:23): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4242" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=63597 res=0 errno=0 [ 233.119075][ T4229] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 233.359929][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 233.391023][T13744] loop0: detected capacity change from 0 to 64 [ 233.449354][T13744] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 233.479212][ T4229] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 233.499706][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.524460][ T4229] usb 5-1: config 0 descriptor?? [ 233.570769][ T4229] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 233.789155][ T4229] usb 5-1: Detected FT232BM [ 233.804703][T13764] loop0: detected capacity change from 0 to 2048 [ 233.889117][ T6083] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.965900][T13748] loop5: detected capacity change from 0 to 32768 [ 234.009453][ T4229] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 234.039158][ T4229] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 234.047707][T13776] netlink: 'syz.1.4270': attribute type 4 has an invalid length. [ 234.057463][ T4229] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.074345][ T4229] usb 5-1: USB disconnect, device number 21 [ 234.083413][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.099238][T13776] netlink: 'syz.1.4270': attribute type 30 has an invalid length. [ 234.119523][ T4229] ftdi_sio 5-1:0.0: device disconnected [ 234.149033][ T6083] usb 3-1: Using ep0 maxpacket: 32 [ 234.284035][ T6083] usb 3-1: config 2 has an invalid interface number: 222 but max is 0 [ 234.297560][ T6083] usb 3-1: config 2 has no interface number 0 [ 234.304334][ T6083] usb 3-1: config 2 interface 222 has no altsetting 0 [ 234.469929][ T6083] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 234.481050][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.489510][ T6083] usb 3-1: Product: syz [ 234.493899][ T6083] usb 3-1: Manufacturer: syz [ 234.499412][ T6083] usb 3-1: SerialNumber: syz [ 234.575798][T13799] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 234.620718][ T7047] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 234.781637][T13814] loop0: detected capacity change from 0 to 764 [ 234.808385][T13814] rock: directory entry would overflow storage [ 234.821865][ T6083] usb 3-1: USB disconnect, device number 17 [ 234.835278][T13814] rock: sig=0x4654, size=5, remaining=4 [ 234.905617][ T7047] usb 2-1: Using ep0 maxpacket: 32 [ 235.049199][ T7047] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.060741][ T7047] usb 2-1: config 0 has no interface number 0 [ 235.073627][ T7047] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 235.099133][T13831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4297'. [ 235.099903][ T7047] usb 2-1: config 0 interface 1 has no altsetting 0 [ 235.108217][T13831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.289210][ T7047] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 235.302906][ T7047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.319046][ T7047] usb 2-1: Product: syz [ 235.325795][ T7047] usb 2-1: Manufacturer: syz [ 235.333903][ T7047] usb 2-1: SerialNumber: syz [ 235.334090][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4303'. [ 235.362132][ T7047] usb 2-1: config 0 descriptor?? [ 235.379132][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 235.420025][T13850] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.541621][T13856] lo speed is unknown, defaulting to 1000 [ 235.555231][T13856] lo speed is unknown, defaulting to 1000 [ 235.588260][T13859] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4311'. [ 235.661617][ T7047] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 235.691266][ T7047] cx231xx 2-1:0.1: Not found matching IAD interface [ 235.723511][ T7047] usb 2-1: USB disconnect, device number 18 [ 235.873230][T13877] ip6t_srh: unknown srh invflags 4000 [ 235.909245][ T1108] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.319239][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.329633][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.375352][T13904] loop4: detected capacity change from 0 to 2048 [ 236.487445][T13904] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.529472][ T1108] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 236.539322][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.559510][ T1108] usb 3-1: Product: syz [ 236.563746][ T1108] usb 3-1: Manufacturer: syz [ 236.568368][ T1108] usb 3-1: SerialNumber: syz [ 236.620881][ T1108] qcserial 3-1:1.0: Qualcomm USB modem converter detected [ 236.834280][ T1108] usb 3-1: USB disconnect, device number 18 [ 236.844181][T13937] syz.5.4344 (13937): attempted to duplicate a private mapping with mremap. This is not supported. [ 236.855864][ T1108] qcserial 3-1:1.0: device disconnected [ 237.117892][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4356'. [ 237.145350][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4356'. [ 237.337794][T13977] ubi16: attaching mtd0 [ 237.399717][T13977] ubi16: scanning is finished [ 237.409465][T13977] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 237.466683][T13985] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.4367'. [ 237.547746][T13977] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 237.737546][T14007] netlink: 'syz.2.4377': attribute type 3 has an invalid length. [ 237.752340][T14006] netlink: 'syz.5.4379': attribute type 1 has an invalid length. [ 237.765676][T14007] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.4377'. [ 237.946725][T14020] tc_dump_action: action bad kind [ 237.979120][ T6083] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 238.032998][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4387'. [ 238.051718][T14025] loop4: detected capacity change from 0 to 16 [ 238.081895][T14025] erofs: (device loop4): mounted with root inode @ nid 36. [ 238.102840][T14025] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 238.143648][T14025] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -59 in[61, 4035] out[1851] [ 238.199419][T14025] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 238.349155][ T6083] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.376060][ T6083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.420005][ T6083] usb 2-1: config 0 descriptor?? [ 238.470163][ T6083] cp210x 2-1:0.0: cp210x converter detected [ 238.707064][T14029] loop2: detected capacity change from 0 to 32768 [ 238.772916][T14053] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 238.893367][ T6083] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 238.911519][ T6083] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 238.936206][ T6083] usb 2-1: cp210x converter now attached to ttyUSB0 [ 238.967662][ T6083] usb 2-1: USB disconnect, device number 19 [ 238.997319][ T6083] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 239.028543][ T6083] cp210x 2-1:0.0: device disconnected [ 239.234668][T14064] loop5: detected capacity change from 0 to 1024 [ 239.358491][T14064] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 239.464884][T14064] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.515449][T14064] EXT4-fs error (device loop5): ext4_quota_enable:6444: comm syz.5.4407: inode #17152: comm syz.5.4407: iget: illegal inode # [ 239.602371][T14064] EXT4-fs (loop5): Remounting filesystem read-only [ 239.613567][T14064] EXT4-fs error (device loop5): ext4_quota_enable:6447: comm syz.5.4407: Bad quota inode: 17152, type: 2 [ 239.640466][T14064] EXT4-fs (loop5): Remounting filesystem read-only [ 239.659060][T14064] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 239.689218][T14089] No source specified [ 239.709125][T14064] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 239.736394][T14064] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,discard,usrjquota=,grpquota,nojournal_checksum,. Quota mode: writeback. [ 239.790904][T14064] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 239.807899][T14064] /dev/loop5: Can't open blockdev [ 239.989026][ T6083] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 240.025395][T14106] netlink: 'syz.5.4425': attribute type 3 has an invalid length. [ 240.075525][T14108] netlink: 'syz.2.4428': attribute type 71 has an invalid length. [ 240.195895][T14118] tmpfs: Bad value for 'mpol' [ 240.229127][ T6083] usb 5-1: Using ep0 maxpacket: 32 [ 240.340502][T14127] loop2: detected capacity change from 0 to 1024 [ 240.372863][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4439'. [ 240.410888][T14132] xt_ecn: cannot match TCP bits for non-tcp packets [ 240.431327][T14127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.468602][T14137] comedi comedi1: dt2814: I/O port conflict (0xc,2) [ 240.509224][ T6083] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 240.528985][ T6083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.542148][T14127] EXT4-fs error (device loop2): ext4_get_first_dir_block:3599: inode #11: comm syz.2.4436: Directory hole found for htree leaf block 0 [ 240.547836][ T6083] usb 5-1: Product: syz [ 240.568957][ T6083] usb 5-1: Manufacturer: syz [ 240.573798][ T6083] usb 5-1: SerialNumber: syz [ 240.581376][ T6083] usb 5-1: config 0 descriptor?? [ 240.839192][ T6083] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 240.849112][ T6083] airspy 5-1:0.0: Could not detect board [ 240.854869][ T6083] airspy: probe of 5-1:0.0 failed with error -71 [ 240.872924][T14157] loop1: detected capacity change from 0 to 256 [ 240.896359][ T6083] usb 5-1: USB disconnect, device number 22 [ 240.949996][T14157] exfat: Deprecated parameter 'utf8' [ 240.955354][T14157] exfat: Deprecated parameter 'utf8' [ 240.979927][T14157] exfat: Deprecated parameter 'namecase' [ 241.067539][T14157] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 241.419117][ T6083] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 241.488263][T14185] loop4: detected capacity change from 0 to 4096 [ 241.562888][T14185] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 241.594967][T14185] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 241.613733][T14185] ntfs3: loop4: mft corrupted [ 241.625982][T14185] ntfs3: loop4: Failed to load $Extend. [ 241.679193][ T6083] usb 6-1: Using ep0 maxpacket: 8 [ 241.722294][ T4229] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 241.742554][ T3060] ntfs3: loop4: ino=1e, Internal error [ 241.749025][ T3060] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 241.809547][ T7047] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 241.969527][ T6083] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 241.982872][ T6083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 241.994439][ T6083] usb 6-1: Product: syz [ 242.001879][ T6083] usb 6-1: Manufacturer: syz [ 242.007486][ T6083] usb 6-1: SerialNumber: syz [ 242.015226][ T6083] usb 6-1: config 0 descriptor?? [ 242.061581][ T6083] gspca_main: sq905-2.14.0 probing 2770:9120 [ 242.076481][ T7047] usb 3-1: Using ep0 maxpacket: 16 [ 242.087701][T14220] loop0: detected capacity change from 0 to 256 [ 242.099314][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.119520][ T4229] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 242.132597][ T4229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.144271][ T4229] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 242.188525][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4482'. [ 242.199347][ T7047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.205571][T14220] FAT-fs (loop0): Directory bread(block 64) failed [ 242.225479][T14220] FAT-fs (loop0): Directory bread(block 65) failed [ 242.229699][ T7047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 242.233073][T14220] FAT-fs (loop0): Directory bread(block 66) failed [ 242.250534][T14220] FAT-fs (loop0): Directory bread(block 67) failed [ 242.257161][T14220] FAT-fs (loop0): Directory bread(block 68) failed [ 242.267499][ T4229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.277060][T14220] FAT-fs (loop0): Directory bread(block 69) failed [ 242.278617][ T7047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 242.284995][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 242.313943][T14220] FAT-fs (loop0): Directory bread(block 70) failed [ 242.318163][ T7047] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.329350][T14220] FAT-fs (loop0): Directory bread(block 71) failed [ 242.347964][ T4229] usb 2-1: SerialNumber: syz [ 242.376468][T14220] FAT-fs (loop0): Directory bread(block 72) failed [ 242.383558][T14220] FAT-fs (loop0): Directory bread(block 73) failed [ 242.457044][ T7047] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.470896][ T7047] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.479166][ T7047] usb 3-1: Manufacturer: syz [ 242.494634][ T7047] usb 3-1: config 0 descriptor?? [ 242.521721][T14228] loop4: detected capacity change from 0 to 4096 [ 242.524529][ T6083] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 242.571310][T14228] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 242.591904][ T6083] sq905: probe of 6-1:0.0 failed with error -71 [ 242.600658][T14228] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.623502][T14228] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 242.640566][ T6083] usb 6-1: USB disconnect, device number 11 [ 242.669577][T14228] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 242.689622][T14228] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 242.702441][T14228] ntfs: volume version 3.1. [ 242.717694][T14228] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 242.732640][T14228] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 242.744584][T14228] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 242.761415][T14228] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 242.779879][T14228] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 242.795884][ T4229] usb 3-1: USB disconnect, device number 19 [ 243.103619][T14248] loop4: detected capacity change from 0 to 256 [ 243.127273][ T4229] usb 2-1: USB disconnect, device number 20 [ 243.467381][T14274] loop1: detected capacity change from 0 to 256 [ 243.671589][T14290] loop2: detected capacity change from 0 to 256 [ 243.794347][T14296] netdevsim netdevsim1: Direct firmware load for ÿÿ failed with error -2 [ 243.827919][T14296] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿÿ [ 243.861748][T14300] xt_l2tp: invalid flags combination: 0 [ 243.945596][T14306] ieee802154 phy0 wpan0: encryption failed: -90 [ 243.975280][T14308] loop2: detected capacity change from 0 to 512 [ 244.060954][T14312] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.071009][T14312] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 244.079689][T14312] overlayfs: missing 'lowerdir' [ 244.169437][T14318] ax25_connect(): syz.5.4530 uses autobind, please contact jreuter@yaina.de [ 244.467622][T14337] loop4: detected capacity change from 0 to 4096 [ 244.527000][T14337] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 244.720701][T14351] loop1: detected capacity change from 0 to 256 [ 244.967438][T14361] xt_ecn: cannot match TCP bits for non-tcp packets [ 245.026960][T14330] loop2: detected capacity change from 0 to 32768 [ 245.076367][T14369] netlink: 'syz.1.4551': attribute type 1 has an invalid length. [ 245.102645][T14371] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4552'. [ 245.154344][T14377] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4554'. [ 245.180305][T14377] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4554'. [ 245.240993][T14330] XFS (loop2): Mounting V5 Filesystem [ 245.353324][T14330] XFS (loop2): Ending clean mount [ 245.370869][T14330] XFS (loop2): Quotacheck needed: Please wait. [ 245.471872][T14330] XFS (loop2): Quotacheck: Done. [ 245.482325][T14330] XFS (loop2): Unmounting Filesystem [ 245.549003][ T6083] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 245.639152][T11792] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 245.789061][ T6083] usb 2-1: Using ep0 maxpacket: 32 [ 245.869864][T14415] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.4570'. [ 245.909356][T11792] usb 5-1: Using ep0 maxpacket: 16 [ 245.962549][ T6083] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.031459][T14425] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 246.066887][ T6083] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.094214][ T6083] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49556, setting to 1024 [ 246.249425][T11792] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 246.268754][T11792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.270779][ T6083] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 246.282253][T11792] usb 5-1: Product: syz [ 246.299051][T11792] usb 5-1: Manufacturer: syz [ 246.301729][ T6083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.309858][T11792] usb 5-1: SerialNumber: syz [ 246.316702][ T6083] usb 2-1: Product: syz [ 246.321122][ T6083] usb 2-1: Manufacturer: syz [ 246.325969][ T6083] usb 2-1: SerialNumber: syz [ 246.356236][T11792] usb 5-1: config 0 descriptor?? [ 246.609193][T11792] usb 5-1: ignoring: not an USB2CAN converter [ 246.690752][ T6083] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 246.719142][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 246.719323][ T6083] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 246.762043][ T6083] usb 2-1: USB disconnect, device number 21 [ 246.817987][T11792] usb 5-1: USB disconnect, device number 23 [ 246.979946][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.996111][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 247.073973][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4589'. [ 247.232078][T14466] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4595' sets config #0 [ 247.319505][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 247.330811][ T23] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 247.342124][ T23] usb 6-1: Product: syz [ 247.346375][ T23] usb 6-1: Manufacturer: syz [ 247.358952][ T23] usb 6-1: SerialNumber: syz [ 247.374806][ T23] usb 6-1: config 0 descriptor?? [ 247.426926][ T23] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 247.567656][T14491] set_capacity_and_notify: 1 callbacks suppressed [ 247.567673][T14491] loop4: detected capacity change from 0 to 512 [ 247.650259][T14491] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 247.689320][T14491] EXT4-fs (loop4): 1 truncate cleaned up [ 247.695033][T14491] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,dax=inode,,errors=continue. Quota mode: writeback. [ 247.746375][T14491] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,dax=inode,. Quota mode: writeback. [ 247.804258][T14505] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 247.833749][T14507] netlink: 'syz.1.4612': attribute type 1 has an invalid length. [ 247.842469][T14507] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4612'. [ 247.853264][T14507] netlink: 'syz.1.4612': attribute type 1 has an invalid length. [ 247.861574][ T23] gspca_zc3xx: reg_r err -71 [ 247.866528][ T23] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 247.883318][ T23] usb 6-1: USB disconnect, device number 12 [ 247.910186][T14505] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4611'. [ 248.243377][T14529] loop2: detected capacity change from 0 to 1024 [ 248.336281][T14529] hfsplus: cannot replace xattr [ 248.463202][T14533] loop1: detected capacity change from 0 to 4096 [ 248.575788][T14545] tmpfs: Bad value for 'mpol' [ 248.665538][T14549] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 248.918273][T14561] loop4: detected capacity change from 0 to 1024 [ 248.975559][ T3060] hfsplus: b-tree write err: -5, ino 25 [ 248.998349][ T3060] hfsplus: b-tree write err: -5, ino 4 [ 249.008213][ T3060] hfsplus: b-tree write err: -5, ino 2 [ 249.103777][T14567] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14568] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14567] [ 249.364651][T14551] loop5: detected capacity change from 0 to 32768 [ 249.423267][T14592] netlink: 'syz.0.4655': attribute type 16 has an invalid length. [ 249.464981][T14592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4655'. [ 249.539090][T14595] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.589864][ T154] general protection fault, probably for non-canonical address 0xdffffc00000000bb: 0000 [#1] PREEMPT SMP KASAN [ 249.601639][ T154] KASAN: null-ptr-deref in range [0x00000000000005d8-0x00000000000005df] [ 249.610095][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 249.617580][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.627672][ T154] Workqueue: writeback wb_workfn (flush-7:5) [ 249.633714][ T154] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0 [ 249.640339][ T154] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 91 24 e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6a 24 e7 fd 41 be 90 00 00 00 4c 03 [ 249.659972][ T154] RSP: 0018:ffffc90002076dd8 EFLAGS: 00010206 [ 249.666073][ T154] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000 [ 249.674068][ T154] RDX: 0000000000000000 RSI: ffffffff9649fe00 RDI: ffff8880574fd000 [ 249.682070][ T154] RBP: ffffffff9649ff10 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 249.690074][ T154] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 1ffff1100ae9fa01 [ 249.698080][ T154] R13: 1ffff1100ae9fa01 R14: dffffc0000000000 R15: ffff8880574fd008 [ 249.706079][ T154] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 249.715047][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.721660][ T154] CR2: 00007f4b2ace6000 CR3: 0000000065bcd000 CR4: 00000000003506f0 [ 249.729665][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.737668][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.745671][ T154] Call Trace: [ 249.749007][ T154] [ 249.751965][ T154] bio_associate_blkg+0x23a/0x340 [ 249.757041][ T154] lbmStartIO+0x20b/0x4d0 [ 249.761401][ T154] lbmWrite+0x361/0x480 [ 249.765592][ T154] jfs_flush_journal+0x537/0xe80 [ 249.770563][ T154] ? lmLogShutdown+0x850/0x850 [ 249.775356][ T154] ? rcu_lock_release+0x5/0x20 [ 249.780152][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 249.785211][ T154] metapage_writepage+0x575/0x1010 [ 249.790380][ T154] ? percpu_counter_add_batch+0x135/0x150 [ 249.796132][ T154] ? clear_page_dirty_for_io+0x889/0x9f0 [ 249.801801][ T154] ? metapage_exit+0x20/0x20 [ 249.806422][ T154] ? mark_lock+0x94/0x320 [ 249.810784][ T154] __writepage+0x63/0x130 [ 249.815155][ T154] write_cache_pages+0x997/0xfb0 [ 249.820145][ T154] ? generic_writepages+0x170/0x170 [ 249.825387][ T154] ? tag_pages_for_writeback+0x4b0/0x4b0 [ 249.831060][ T154] ? writeback_sb_inodes+0x433/0x1750 [ 249.836467][ T154] do_writepages+0x515/0x700 [ 249.841130][ T154] ? __writepage+0x130/0x130 [ 249.845760][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 249.850815][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 249.855875][ T154] __writeback_single_inode+0x153/0xda0 [ 249.861454][ T154] writeback_sb_inodes+0xaaa/0x1750 [ 249.866698][ T154] ? queue_io+0x530/0x530 [ 249.871050][ T154] ? move_expired_inodes+0x722/0x770 [ 249.876367][ T154] ? rcu_is_watching+0x11/0xa0 [ 249.881160][ T154] ? queue_io+0x3ba/0x530 [ 249.885527][ T154] wb_writeback+0x44a/0xbc0 [ 249.890064][ T154] ? rcu_lock_release+0x20/0x20 [ 249.894945][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.900960][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 249.906030][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 249.911261][ T154] wb_workfn+0x43a/0xf20 [ 249.915567][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 249.921361][ T154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.927384][ T154] ? __lock_acquire+0x7b50/0x7b50 [ 249.932454][ T154] ? read_lock_is_recursive+0x10/0x10 [ 249.937866][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 249.943796][ T154] ? _raw_spin_unlock+0x40/0x40 [ 249.948680][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 249.953912][ T154] process_one_work+0x867/0xff0 [ 249.958811][ T154] ? worker_detach_from_pool+0x240/0x240 [ 249.964475][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 249.969793][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 249.975003][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 249.980589][ T154] ? wq_worker_running+0x97/0x170 [ 249.985653][ T154] worker_thread+0xad7/0x12a0 [ 249.990378][ T154] kthread+0x42e/0x520 [ 249.994488][ T154] ? rcu_lock_release+0x20/0x20 [ 249.999366][ T154] ? kthread_blkcg+0xd0/0xd0 [ 250.003985][ T154] ret_from_fork+0x1f/0x30 [ 250.008434][ T154] [ 250.011501][ T154] Modules linked in: [ 250.058021][ T154] ---[ end trace a95847dca5dc7e3d ]--- [ 250.078758][ T154] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0 [ 250.085599][ T154] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 91 24 e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6a 24 e7 fd 41 be 90 00 00 00 4c 03 [ 250.105411][ T154] RSP: 0018:ffffc90002076dd8 EFLAGS: 00010206 [ 250.112683][ T154] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000 [ 250.120804][ T154] RDX: 0000000000000000 RSI: ffffffff9649fe00 RDI: ffff8880574fd000 [ 250.128916][ T154] RBP: ffffffff9649ff10 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 250.137008][ T154] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 1ffff1100ae9fa01 [ 250.145757][ T154] R13: 1ffff1100ae9fa01 R14: dffffc0000000000 R15: ffff8880574fd008 [ 250.153859][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 250.163024][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.169707][ T154] CR2: 00007f6d144d02f8 CR3: 00000000234f3000 CR4: 00000000003506e0 [ 250.177718][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.185794][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.195008][ T154] Kernel panic - not syncing: Fatal exception [ 250.201361][ T154] Kernel Offset: disabled [ 250.205698][ T154] Rebooting in 86400 seconds..