last executing test programs: 2m8.754554735s ago: executing program 3 (id=3472): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x48, 0x0, 0x7}}) 2m8.635973615s ago: executing program 3 (id=3475): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}, {{&(0x7f00000002c0)={0xa, 0x5, 0x89, @local, 0xb066}, 0x1c, 0x0}}], 0x2, 0x4000) 2m8.559334166s ago: executing program 3 (id=3478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000001900)={0x2, {0x2, 0x4, 0x0, 0x101, 0xa}}) 2m8.497468996s ago: executing program 3 (id=3480): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x23694ca, 0x0) 2m8.173209107s ago: executing program 3 (id=3488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x4b}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 2m7.323445908s ago: executing program 3 (id=3498): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x7, 0x0) 2m7.129826699s ago: executing program 32 (id=3498): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x7, 0x0) 2.336209688s ago: executing program 4 (id=6427): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 2.242426308s ago: executing program 4 (id=6431): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000140)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8001}}, {@errors_remount}, {@data_err_ignore}]}, 0x1, 0x443, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 1.828351331s ago: executing program 4 (id=6446): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000000640)="$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") truncate(&(0x7f0000000180)='./file0/file0\x00', 0x1ffe) 1.827277841s ago: executing program 1 (id=6447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}]}, 0x2c}}, 0x0) 1.727801771s ago: executing program 1 (id=6449): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000180)) 1.684211461s ago: executing program 1 (id=6454): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000780)={[], [], 0x2c}, 0x6, 0x4f6, &(0x7f00000014c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.406148022s ago: executing program 5 (id=6461): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) 1.193548233s ago: executing program 4 (id=6465): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0xb, 0x148, 0x130, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @private, 0x0, 0x0, 'ip6gretap0\x00', 'dvmrp1\x00', {}, {}, 0x11}, 0x2e8, 0xc8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}, {[], [], 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'ip6tnl0\x00', 'veth1\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 1.171161633s ago: executing program 2 (id=6466): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 1.139009583s ago: executing program 0 (id=6467): r0 = fsopen(&(0x7f0000000180)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.120842553s ago: executing program 1 (id=6468): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000900)='./file1\x00', 0x200010, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e4, &(0x7f0000000200)="$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") open(&(0x7f0000001400)='./bus\x00', 0x14d27e, 0x0) 1.013538824s ago: executing program 4 (id=6469): r0 = socket(0x1, 0x80802, 0x0) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x62dd61cb}], 0x18, 0x40}, 0x24008060) 1.013098124s ago: executing program 0 (id=6470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c"], 0x2c}}, 0x0) 972.192564ms ago: executing program 2 (id=6471): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) 971.800073ms ago: executing program 4 (id=6472): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x105) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b98be7406d04230848390102030109025200010000000009044000000e0100000a240108000b020102000600040007000300390c2402050302060254df000a092403"], 0x0) 868.411364ms ago: executing program 5 (id=6473): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6, 0x2}]}, 0x10) 868.167364ms ago: executing program 0 (id=6474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 806.559124ms ago: executing program 1 (id=6475): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001a80)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@utf8no}, {}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 802.434895ms ago: executing program 2 (id=6476): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') 743.836784ms ago: executing program 5 (id=6477): r0 = socket(0x11, 0xa, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="e8c8", 0x2}], 0x1) 719.265414ms ago: executing program 2 (id=6478): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x6b) 654.789643ms ago: executing program 0 (id=6479): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000780)={[], [], 0x2c}, 0x6, 0x4f6, &(0x7f00000014c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 645.812864ms ago: executing program 2 (id=6480): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000280)={"35d2c74b70135fdb89a06358804249602b0324fa3a0718d58a35c1a93bd7", 0xf, 0x0, 0x1, 0x4, 0xff, 0x1, 0x0, 0x5, [0x700000, 0x6, 0x200, 0xfffffffc, 0x34, 0x4, 0x2, 0xd09, 0x9, 0x5672, 0x7871, 0x6b, 0xc, 0x782c, 0x3, 0x7, 0x1, 0x6, 0x1]}) 636.979754ms ago: executing program 5 (id=6481): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) 571.991553ms ago: executing program 2 (id=6482): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000440)={[{@journal_async_commit}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x31a3a014}) 571.429863ms ago: executing program 0 (id=6483): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 502.221622ms ago: executing program 5 (id=6484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x8000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x4000000) 457.146452ms ago: executing program 0 (id=6485): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0x0) 284.539912ms ago: executing program 1 (id=6486): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYRES32=0x0], 0xff, 0x5e92, &(0x7f0000018400)="$eJzs3U1vHVf9B/DfffD1Q/9No+qvKkQs3BRKS2nzHChPTVl0AQuQUNckct0qkAJKAqJVRFxlgdgALwE23bDoW+AF9DUgXgCRbFZdUAaNfU4yHl/nOiS+c6/P5yM5M785d3zP5Ovx3OuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPj+Wz8+24uIK79OC45H/F8MIvoRy3W9GvXM5fz4YUSciO3meC4iBosR9frb/zwTcSEiPj0Wsbl1e61efO6A/bh45taNz3/wvb//7o93T/z0nZ983G7/0f+f/+T3dyKO//D1Tz6/82S2HQAAAEpRVVXVS2/zT6b39/2uOwUATEU+/ldJXq5Wq9XqJ1r/oT9b/VEXWjdV491pFhGx0Vynfs3gdDwAzJmN+KzrLtAh+RdtGBFPdd0JYKb1uu4Ah2Jz6/ZaL+Xbax4PVnfa898pd+W/0bt/f8d+00na15hM6+frbgzi2X36szylPsySnH+/nf+VnfZRetxh5z8t++U/2rn1qTg5/0E7/5Zd+f8pIuY2//7Y/EuV8x8+Sv4bgzne/+UPAAAAAMDRl//+f7zj87+Lj78pB/Kw87+rU+oDAAAAAAAAADxpjzv+333G/wMAAICZVb9Xr/352INl+30WW7387V7E063HA4VZbXw4IAAAAAAAAAAAAAAwHcOIlXRd/0JEPL2yUlVV/dXUrh/V464/70rffihZ17/kAQBgx6fHWvfy9yKWIuLt9Fl/CysrK1W1tLxSrVTLi/n17GhxqVpuvK/N03rZ4ugAL4iHo6r+ZkuN9ZomvV+e1N7+fvVzjarBATo2HR0GDgARsXM02nREOmKq6pno+lUO88H+f/TY/zmIrn9OAQAAgMNXVVXVSx/nfTKd8+933SkAYCry8b99XkCtVqvVavXRq5uq8e40i4jYaK5Tv2YwHD8AzJmN+KzrLtAh+RdtGBEnuu4EMNN6XXeAQ7G5dXutl/LtNY8Hqzvt+VqQXflv9LbXy+uPm07SvsZkWj9fd2MQz+7Tn+em1IdZkvPvt/O/stOeh/g/7PynZb/86+083kF/upbzH7Tzbzk6+ffH5l+qnP/wkfIfyB8AAAAAAGZY/vv/ced/8yYDAAAAAAAAwNzZ3Lq9lu97zef/vzjmcb3mnPs/j4ycf+/A+bv/9yjJ+ffb+bcuyBk05u+9+SD/f23dXvv41j+/kKczn//CYFQ/90KvPxima36qhXfjWlyP9Tiz5/HDXe1n97Qv7Go/N6H9/J72Ud2+vN3+Vl2vxS/ierxzv31xwoVRSxPaqwntOf+B/b9IOf9h46vOfyW191rT2r2P+nv2++Z03PNc/uu/X9y7d03f3Rjc37amevtOddCf7f+Tp0bxq5vrN177zdVbt26cjTTZtfRcpMkTlvNfSF85/5de2GnPv/eb++u9j0aPnP+suBvDffN/oTFfb+/LU+5bF3L+o/SV889HoPH7/zznv//+/0oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5erp1Usz1h+1Wq1WH926qRrvjWYREX9rrlO/ZvjtuG8GAMyy/0TEP7ruBJ2Rf8Hy5/3V0y913Rlgqm5+8OHPrl6/vn7jZtc9AQAAAAAAAAD+V3n8z9XG+M/b1wG1xo3eNf7rm7E6t+N/9keD7bHO0wY9Hw8f//tUPHz87+GE51uY0D6a0L44oX1pQvvYGz0acv7Pp4xz/ifThpU0/utLHfSnazn/U2ms55z/V1qPa+Zf/WWe8+/vyv/0rfd/efrmBx++eu39q++tv7f+87NnLl04f/HC+YsXT7977fr6mZ1/O+zx4cr557GvXQdalpx/zlz+Zcn5fznV8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/6+mWv5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8X0u1/MuS8z+davmXJeefz3DJvyw5/3xlg/zLkvM/l2r5lyXnfz7V8i9Lzv9CquVflpz/xVTLvyw5/0upln9Zcv5fT7X8y5Lz/0aq5V+WnP/rqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj8fzNmzJjJM13/ZgIAAAAAAAAAAAAA2qZxOXHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkKu/7gZ+92WtDgv+BcIsDtrkZWNhd38AhBpOE/CnphZKQNi2pcbxrs4lv9e5yEyqbQluiIBWpVUVfNE2iNIrUVqAqaqlEIqRGat81rxrxJmqlvPALqByUVEoV2OrMPM+zM7Ozc9aXsWfO+XyQ/fPunJl55syZ2fku+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gjzx6f/ZCDLsvxP7a8NWXZx/u912d78y4VdF3qFAAAAwNl6t/b3312SvrF3FWdq2OZfr/n37y4uLi5mX3jn5Ht/triYTtiUZUNrs6x2WvRvv/j5YuM2wXPZ6MBgw9eDBVc/VHD6cMHpIwWnryk4fW3B6aMFpy/bAcusq/8+pnZh19f+uaG+S7PLspHaade3OddzA2sHB+PvcmoGaudZHDmYzWSHs+lsYtl5Bmr/Zdnrm/Pruj+L1zXYcF0bsyw79dNnDsQ1DIR9fH3WdGU1jffd2/dmm9756TMHvj331lXtZuFuWLbSLNu6JV/n81m29OuqbCBbm/ZJXOdgwzo3tlnnUNM6B2rny//dus5Tq1xnvN2jYZ0/7LDOjeF7T16XZdlCtuI2rZ7LBrP1Ldea9vdo/YjILyO/Kz+QDZ/WcbJ5FcdJfp6fXNd8nLQek3H/bw77ZHiFNTTeHW9/ec2y/X6mx0l+q3vhWM0v+8H8SkdHG3+12nSs5ts8c8PKx0Db+67NMZCO5YZjYEvRMTC4Zqh2DAwurXlL0zEwuew8g9lA7bpO3tD5GBifO3J8fPapp2+bObL/0PSh6aOTE7t2bN+5Y/vOneMHZw5PT9T/Pr1d2kfWZ4PpGNwSnmviMXhTy7aNh+TiN87d42C0Rx4H+W3/zI35gi4ezFY4xvNtnt969o+D9HO/4XEw3PA4aPuc2uZxMLyKx0G+zamtq/uZOdzwp90auvVcuKHhGLiQPw/z63zk5pWfCzeGdb1wy+n+PBxadgzEmzUQHnv5d9LrvdE7w35ZflxcnZ9w0Zpsfnb6xO1P7p+bOzGZhXFeXNpwX7UeL+sbblO27HgZPO3jZe/f/vLGq9t8f0PYV6O3dr6v8m12jHW+r2rP7u33Z9N3t2VhnGPne3+2+2mW78+UJTrsz3yb5287+9eCKZc0PP+NFD3/DY0M15//htLeGGl6/lt+1wzVVpZlp25b3fPfSPhzvp//LuuR5798Xz1ye+djIN/mhfHTPQaGOz7/XRfmQFjPzSExjDbk/vdqpy/UD9OG+7LwuBkeHgnHzXC8xubjZvuy8+SXll/31okzO262Xtd8XzW9binhcZPvqz+f6Hzc5Nu8MXn2zx3r4j8bnjvWFB0DI0Nr8vWOpIOg/ny3uC4eA7dnB7Jj2eFsKp0nv5fz6xrbtrpjYE34c76fO67skWMg31cvb+t8DOTb/GD7uX3ttDV8J23T8Nqp9fcLK2X+q4eXLq91t53rzJ+v8xM7Ov9uKN/mrR2nmzM676dbw3cuarOfWh8/Kx3TU9n52U9XhnUe3tn5d1P5NpftWuXxtDfLsjcn36z9viv8fvcf5v/ju02/9233O+U3J998YPyhH53O+gEAOHPv1f5eWFN/rdnwf6xX8///AQAAgL4Qc/9gmIn8DwAAAKURc/9QmIn8DwAAAKURc/9wmElF8v9jd+5+5d1ns/RugItBPD3uhgfvrm8XO94L4etNi0vy73/sWyOvfOXZ1V33YJZlv3zgQ223f+zuuK6643GdH2n+/jJXXruq63/04aXtGt8/4dTu+uXH27PawyB2lV8f31a73E1PTdbmGw9ktfnQwgvP1S+//nXc/uT2+vZ/Fd60ZO/Bgabzbw3ruT7MTeE9ZR7cu7Qf8hnP98rGa/7l0s8uXV8838CW99du5st/UL/c+B5RL11a3z7e7pXW/72vfueVfPsnb2i//mcH26//ZLjcn4T5iz317Rv3+Vca1v9HYf3x+uL5bv/m99uu/9Ur6tu/Go6Lr4fZuv57//TD77a7v+L17L2rfr54/RP/s6N2vnh58fJb1z/67GTT/mi9/DfeqV/Onsd/NtS4ffx+vJ7o0buaj++BcP829cizLPvOH2dN+zn7aP18/9yy/nh5x+9qv/5bW9Z5fODa2vmXbs+Gptv1tb/Z1vb2xvXs/fsNTbfnpfvC/ntn/Af55Z58KByP4fT//WH98lrfy/TV+5qfb+L2X99Qf9zGyxtvWf9LLetfuDbfd8Xrv/+d+vpfvWdt0/r3fjIcT/fXZ9H6D/31JU3n/8a36/fHiSfGjh6bnZ+ZatirjY/jtaPr1l908fvef0l4Lm39et+xucemT2ya2DSRZZv68C0Du73+b4b53/WxcO6voe5HP6sfdy9+qv5z66af179+KXz/0XB/xp+PX/vLkabjtfV+X7inPs92/beEdazWFV/9r2tXteHJz78+/09/+Fbr64J4e45/cLR2+17efHnttIE36qe3Pl8V+c8PNj+ufzw8UZuvhf26GN6Zecvl9etrvfz43iQvfrr++I2v5OL5s5b3E9kw1Hw7znb9Pw6vY75/ZfPzXzw+Xnu25d2cN2QD+RIWwvNDtlA/PW4V9/eLpy5ve33xfXiyhatOZ5krmn1qdvzwzNH5J8fnpmfnxmefenrfkWPzR+f21d67dN8Xi86/9PheX3t8T03v2pHVHu3H6qPLLvT6jz98YOqOiRunpg/unz849/Dx6ROHDszOHpiemr1x/8GD008UnX9mas/ktt3b79g2dmhmas+du3dv3z02c/RYvoz6ogrsmvjS2NET+2pnmd2zY/fkzp07JsaOHJua3nPHxMTYfNH5az+bxvJzPz52Yvrw/rmZI9NjszNPT++Z3L1r17bCd388cvzg7KbxE/NHx+dnp0+M12/Lprnat/OffUXnpxpmj4XnuxYD4dX5527dld4fN/etL694UfVNml+eZm+H94KKP9+Kvo65fyTMpCL5HwAAAKog5v7wxv9LJ8j/AAAAUBox968NM5H/AQAAoDRi7h8NM6lI/tf/1//X/1+h//+P39P/1//X/z8H9P/1/zvR/9f/7+f16//r/1Os1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrP/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+v0/+k1vdb/j7n/fWEm1cj/AAAAUAkx978/zET+BwAAgNKIuf+SMBP5HwAAAEoj5v4NYSYVyf8+/1//X/+/U//f5/830v/X/z8T+v/6/53o/5e4/+/z/33+P/Rg/z/m/v8XZlKR/A8AAABVEHP/B8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x938wzKQi+R8AAACqIOb+y8NM5H8AAAAojZj7rwgzkf8BAACgNGLuvzLMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x918VZlKR/A8AAABVEHP/1WEm8j8AAACURsz9Hwozkf8BAACgNGLu3xhmUpH8r/+v/6//r/+v/6//30391f8fXPEU/f86/f9m+v/6/+es/5+/FNf/p4R6rf8fc/+Hw0wqkv8BAACgCmLuvybMRP4HAACA0oi5/9owE/kfAAAASiPm/k1hJhXJ//r/+v/6/73c/6/f0mr2/1/7i9b9qf+v/9+Oz//X/8/0/8/Yhe7P9/v6ff6//j/Feq3/H3P/5jCTiuR/AAAAqIKY+7eEmcj/AAAAUBox918XZiL/AwAAQGnE3H99mElF8r/+v/6//n8v9/99/n+m/6//X0D/X/8/0/8/Yxe6P9/v69f/X13/f03RBVFq57H/P5ytov8fc/8NYSYVyf8AAABQBTH33xhmIv8DAABAacTcf1OYifwPAAAApRFz/9Ywk4rkf/1//X/9f/1//X/9/27S/9f/70T/X/+/n9ev/+/z/ynWa5//H3P/zWEmFcn/AAAAUAUx998SZiL/AwAAQGnE3H9rmIn8DwAAAKURc/9YmElF8r/+v/6//r/+v/6//n83lbX/n55H9f/1//X/9f/1//X/WVGv9f9j7r8tzKQi+R8AAACqIOb+28NM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/9f/1//X/9f/1//X/u6ms/X+f/6//n+n/6//r/+v/U6jX+v8x90+GmVQk/wMAAEAVxNy/LcxE/gcAAIDSiLl/e5iJ/A8AAAClEXP/jjCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//r/9Ps8E23+u1/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNx/R5iJ/A8AAAClEXP/nWEmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5f3eYSUXyPwAAAFRBzP0fCTOR/wEAAKA0Yu6/K8xE/gcAAIC+0u5zCKOY+z8aZlKR/K//X/b+/+Ja/X/9f/3/zuvX/+8u/X/9/070//X/+3n9+v/6/xTrtf5/zP17wkwqkv8BAACgCmLuvzvMRP4HAACA0oi5/54wE/kfAAAASiPm/r1hJhXJ//r/Ze//+/x//X/9/6L16/93l/6//n8n+v/92f8PL1v0/3uo/58fQ/r/9KJe6//H3H9vmElF8j8AAABUQcz9Hwszkf8BAACgNGLu/3iYifwPAAAApRFz/yfCTCqS//X/9f/1//X/9f/1/7tJ/1//vxP9//7s/0f6/73T//f5//SqXuv/x9x/X5hJRfI/AAAAVEHM/Z8MM5H/AQAAoDRi7v//YSbyPwAAAJRGzP33h5lUJP/r/+v/6//r/+v/6/93k/6//n8n+v/6//28fv1//X+K9Vr/P+b+XwkzqUj+BwAAgCqIuf+BMBP5HwAAAEoj5v5PhZnI/wAAAFAaMff/aphJRfK//v/56f8PpsvX/9f/1//X/9f/P5f0//X/M/3/M3ah+/P9vn79f/1/ivVa/z/m/l8LM6lI/gcAAIAqiLn/18NM5H8AAAAojZj7fyPMRP4HAACA0oi5/8Ewk4rkf/1/n/+v/6//r/+v/99N+v/6/53o/+v/9/P69f/1/ynWa/3/mPt/M8ykIvkfAAAAqiDm/ofCTOR/AAAAKI2Y+z8dZiL/AwAAQGnE3P+ZMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+xXuv/x9z/cJhJRfI/AAAAVEHM/Z8NM5H/AQAAoDRi7v+tMBP5HwAAAEoj5v7fDjOpSP7X/9f/1//X/9f/1//vJv3/5f3//DnsQvb/16xmQ/3/VdH/1//X/9f/p7Ne6//H3P+5MJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3fDTOR/AAAAKI2Y+x8JM6lI/tf/1//X/9f/1//vdv//Df1//X+f/78C/X/9/35ev/6//j/Feq3/H3P/58NMKpL/AQAAoApi7v+9MBP5HwAAAEoj5v59YSbyPwAAAJRGzP2PhplUJP/r/+v/X7D+fziP/v/S+fT/w/1auv6/z//X/9f/X4n+v/5/P69f/1//n2K91v+PuX9/mElF8j8AAABUQcz9Xwgzkf8BAACgNGLuPxBmIv8DAABAacTcPxVmUpH8r/+v/+/z//X/9f/1/7tJ/1//vxP9f/3/fl6//r/+P8V6rf8fc/90mElF8j8AAABUQcz9B8NM5H8AAAAojZj7D4WZyP8AAABQGjH3PxZmUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+2fCTCqS/wEAAKAKYu7/YpiJ/A8AAAClEXP/l8JM5H8AAAAojZj7D4eZVCT/6//r/+v/6/+36//XD0n9f/3/s6f/r//fif6//n8/r1//X/+fYr3W/4+5/0iYSUXyPwAAAFRBzP1Hw0zkfwAAACiNmPuPhZnI/wAAAFAaMfcfDzOpSP7X/9f/1//X//f5//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5//fDTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNw/G2Yi/wMAAEBpxNw/F2ZSmP/XdXFV54/+v/6//r/+v/6//n836f/r/3ei/6//38/r1//X/6dYr/X/Y+6fDzPx//8BAACgNGLufzzMRP4HAACA0oi5/4kwE/kfAID/Y++udwW7qjiO35a0JSGEZ+EJeASegbfA3Yq7u7u7u7u7OxSKa1ICd601ZTrdZ+xw99nr8/lnBTrt7Mz965fJNweAZeTuv2fc0mT/6//1//r/afr/085P/6//1/9fEv2//v9E/3/ZzrqfP/r79f/6f7bN1v/n7r9X3NJk/wMAAEAHufvvHbfY/wAAALCM3P33iVvsfwAAAFhG7v77xi1N9r/+X/+v/5+m//f9//y56v/1/5dA/6//P9H/X7az7ueP/n79v/6fbbP1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAALCN3/wPiFvsfAAAAlpG7/4FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9k2W/+fu/9BcUuT/Q8AAAAd5O5/cNxi/wMAAMAycvc/JG6x/wEAAGAZufsfGrc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H79v/6fbbP1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAALCN3/yPiFvsfAAAAlpG7/5FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9m2e/9/9xv/ey+2/8/df2Pc0mT/AwAAQAe5+x8Vt9j/AAAAsIzc/Y+OW+x/AAAAWEbu/sfELU32v/5f/3+u/7/lGv2//l//f+7/1/9fHfp//f+I/n/W/v/i/iT0//p//T9bdu//N3r/8/937v7Hxi1N9j8AAAB0kLv/cXGL/Q8AAADLyN3/+LjF/gcAAIBl5O5/QtzSZP/r//X/vv+v/9f/6//3pP/X/4/o/2ft/33//0r7/7tdxPv1/3QwW/+fu/+JcUuT/Q8AAAAd5O5/Utxi/wMAAMAycvc/OW6x/wEAAGAZufufErc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H7f/9f/s222/j93/1Pjlib7HwAAADrI3f+0uMX+BwAAgGXk7n963GL/AwAAwDJy9z8jbmmy//X/+n/9v/7/ivr/O+j/9f9j+n/9/4j+X/9/5PdfYv9/w/n/vv6fDmbr/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAWEbu/mfHLfY/AAAALCN3/3Pilib7X/+v/9f/6/99/1//vyf9/3L9/zX6/3P0//p/3//X/zM2W/+fu/+5cUuT/Q8AAAAd5O5/Xtxi/wMAAMAycvc/P26x/wEAAGAZuftfELc02f/6f/2//l//r//X/+9J/79c/+/7/7ei/9f/6//1/4zN1v/n7n9h3NJk/wMAAEAHuftfFLfY/wAAALCM3P0vjlvsfwAAAFhG7v6XxC1N9v+U/f91+v9j9P/Xn5yc6P/1//p//f+Y/l//P6L/v3D/f8fb+f30/3O9X/+v/2fbbP1/7v6Xxi1N9j8AAAB0kLv/ZXGL/Q8AAADLyN3/8rjF/gcAAIBl5O5/RdzSZP/fXv9/851O/7nv/1+cnv2/7//r///3Pfp//f+F6P/1/yP6f9//P/L79f/6f7bN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAALCM3P2vjlvsfwAAAFhG7v7XxC1N9v+U3//X/+v/9f/139H/6//1/2P6f/3/if7/sp11P3/09+v/9f9sm63/z93/2rilyf4HAACADnL3vy5usf8BAABgGbn7Xx+32P8AAACwjNz9b4hbmux//b/+/8z7/2v1/0n/Hz9X/b/+/xLo//X/J/r/y3bW/fzR36//1/+zbbb+P3f/G+OWJvsfAAAAOsjd/6a4xf4HAACAZeTuf3PcYv8DAADAMnL3vyVuabL/9f/6/zPv/33/v+j/4+e6Q///nz9D/f/Z0P/r/0f0//r/I79f/6//Z9ts/X/u/rfGLU32PwAAAHSQu/9tcYv9DwAAAMvI3f/2uMX+BwAAgGXk7n9H3NJk/+v/9f/6f/1/h/5/9H79/770//r/Ef2//v/I79f/6//ZNlv/n7v/nXFLk/0PAAAAHeTuf1fcYv8DAADAMnL3vztusf8BAABgGbn73xO3NNn/+v+j9//3uCleoP/X/+v/9f9T0v/r/0f0//r/I79f/6//Z9ts/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMvI3f/+uMX+BwAAgGXk7v9A3NJk//fo/6+7zS9bp//3/X/9v/5f/z83/b/+f0T/r/8/8vv1//p/ts3W/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAsIzc/R+OW+x/AAAAWEbu/o/ELU32f4/+/7b0/6euev9/y130//r/ov/X/5/o//X/G/T/+v8jv1//r/9n22z9f+7+j8YtTfY/AAAAdJC7/2Nxi/0PAAAAy8jd//G4xf4HAACAZeTu/0TccNc7n92T/q/0//p/3//X/+v/9f970v/r/0f0//r/I79f/6//Z9ts/X/u/k/GLf7+HwAAAJaRu/9TcYv9DwAAAMvI3f/puMX+BwAAgGXk7v9M3NJk/+v/9f/6/2P3/9fq//X/k9P/6/9H9P/6/yO/X/+v/2fbbP1/7v7Pxi1N9j8AAAB0kLv/c3GL/Q8AAADLyN3/+bjF/gcAAIBl5O7/QtzSZP/r//X/+v9j9/++/6//n53+X/8/ov/X/x/5/fp//T/bZuv/c/d/MW5psv8BAACgg9z9X4pb7H8AAABYRu7+L8ct9j8AAAAsI3f/V+KWJvtf/6//1//r//X/+v896f/1/yP6f/3/kd+v/9f/s222/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGXk7v963GL/AwAAwDJy938jbmmy/1fu/0e/TP9/Sv+v/z/R/+v/d6b/1/+P6P/1/0d+v/5f/8+22fr/3P3fjFua7H8AAADoIHf/t+IW+x8AAACWkbv/23GL/Q8AAADLyN3/nbilyf5fuf8f0f+f0v/r/0/0//r/nen/9f8j+n/9/5Hfr//X/7Nttv4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBl5O7/ftxi/wMAAMAycvf/IG5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zBuabL/AQAAoIPc/T+KW+x/AAAAWEbu/h/HLfY/AAAALCN3/0/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/9P45Ym+x8AAAA6yN3/s7jF/gcAAIBl5O7/edxi/wMAAMAycvf/Im5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAWEbu/l/HLfY/AAAALCN3/2/ilib7X/+v/9f/6/8b9v/X3/r30//vS/+v/x/R/+v/j/x+/b/+n21Xrf/PX3CF/X/u/pvilib7HwAAADrI3f/buMX+BwAAgGXk7v9d3GL/AwAAwDJy998ctzTZ//p//f+S/f8N+n/9v+//z0L/r/8f0f/r/4/8fv2//p9ts33/P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAZeTu/2PcYv8DAADAMnL3/yluabL/9f/6/yX7f9//1//r/6eh/9f/j+j/9f9Hfr/+X//Pttn6/9z9f45bmux/AAAA6CB3/1/iFvsfAAAAlpG7/69xi/0PAAAAy8jd/7e45cL7//xs9PD0//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/z1u8ff/AAAAsIzc/f+IW+x/AAAAWEbu/n/GLfY/AAAALCN3/7/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/+/AwAA//+foDTn") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 0s ago: executing program 5 (id=6487): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006c00)='/sys/power/pm_test', 0x1, 0x0) write$bt_hci(r0, &(0x7f0000006c40)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.4282'. [ 254.869221][T18345] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 254.916771][T18345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.156430][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4293'. [ 255.272170][ T4170] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 255.379370][T18391] loop2: detected capacity change from 0 to 4096 [ 255.419688][T18368] loop5: detected capacity change from 0 to 32768 [ 255.449317][T18391] ntfs: volume version 3.1. [ 255.482353][T18368] XFS (loop5): Mounting V5 Filesystem [ 255.522091][ T4170] usb 1-1: Using ep0 maxpacket: 16 [ 255.564854][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.571216][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.577552][ T4210] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.582735][T18368] XFS (loop5): Ending clean mount [ 255.592746][T18368] XFS (loop5): Quotacheck needed: Please wait. [ 255.656757][T18368] XFS (loop5): Quotacheck: Done. [ 255.718683][T18415] usb usb8: usbfs: process 18415 (syz.2.4301) did not claim interface 0 before use [ 255.746502][T15066] XFS (loop5): Unmounting Filesystem [ 255.855234][ T4210] usb 5-1: Using ep0 maxpacket: 8 [ 255.962473][ T4170] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 255.971541][ T4170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.980387][ T4170] usb 1-1: Product: syz [ 255.984999][ T4170] usb 1-1: Manufacturer: syz [ 255.989616][ T4170] usb 1-1: SerialNumber: syz [ 255.995920][ T4210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.996722][ T4170] r8152-cfgselector 1-1: config 0 descriptor?? [ 256.015022][ T4210] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 256.034240][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.050102][ T4210] usb 5-1: config 0 descriptor?? [ 256.085213][T18433] [U] ^C [ 256.142886][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 256.305644][ T1107] usb 5-1: USB disconnect, device number 23 [ 256.317552][ T4170] r8152-cfgselector 1-1: Unknown version 0x0000 [ 256.328898][ T4170] cdc_acm 1-1:0.0: Zero length descriptor references [ 256.348791][ T4170] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 256.382118][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 256.387417][ T4170] r8152-cfgselector 1-1: Unknown version 0x0000 [ 256.402316][ T4170] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 256.440379][T18449] loop5: detected capacity change from 0 to 40427 [ 256.479814][T18449] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 256.487962][T18449] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 256.502991][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.504083][T18449] F2FS-fs (loop5): invalid crc value [ 256.523190][T18449] F2FS-fs (loop5): Found nat_bits in checkpoint [ 256.548934][T18449] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 256.556498][T18449] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 256.593609][T18449] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 256.604359][T18449] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 256.672190][ T7] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 256.681626][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.690047][ T7] usb 3-1: Product: syz [ 256.694665][ T7] usb 3-1: Manufacturer: syz [ 256.699262][ T7] usb 3-1: SerialNumber: syz [ 256.714033][ T7] usb 3-1: config 0 descriptor?? [ 256.767282][ T7] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 256.955747][T18483] __nla_validate_parse: 2 callbacks suppressed [ 256.955762][T18483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4324'. [ 256.988454][T18484] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4314'. [ 256.997324][ T7] usb 3-1: USB disconnect, device number 19 [ 257.011390][T18484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.090169][ T26] audit: type=1400 audit(1733918248.952:22): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18499 comm="syz.0.4316" [ 257.175573][T18506] netlink: 1328 bytes leftover after parsing attributes in process `syz.4.4319'. [ 257.313037][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 257.409556][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4328'. [ 257.471781][ T26] audit: type=1400 audit(1733918249.332:23): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18529 comm="syz.4.4330" [ 258.317033][T18540] loop2: detected capacity change from 0 to 32768 [ 258.411239][T18592] loop5: detected capacity change from 0 to 2048 [ 258.491756][T18540] XFS (loop2): Mounting V5 Filesystem [ 258.509347][T18592] Dev loop5: RDB in block 2 has bad checksum [ 258.622630][T18540] XFS (loop2): Ending clean mount [ 258.669512][T18608] loop4: detected capacity change from 0 to 4096 [ 258.677578][T18540] XFS (loop2): Quotacheck needed: Please wait. [ 258.777987][T18608] ntfs: volume version 3.1. [ 258.785604][T18540] XFS (loop2): Quotacheck: Done. [ 258.946856][T18628] device ip6tnl1 entered promiscuous mode [ 258.998284][ T4164] XFS (loop2): Unmounting Filesystem [ 259.172571][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4363'. [ 259.273367][T18649] cgroup: name respecified [ 259.453460][ T4210] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 259.731657][T18676] netlink: 'syz.2.4373': attribute type 3 has an invalid length. [ 259.739737][T18677] usb usb8: usbfs: process 18677 (syz.0.4372) did not claim interface 0 before use [ 259.875785][ T4210] usb 5-1: config index 0 descriptor too short (expected 2207, got 159) [ 259.900396][ T4210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.921796][ T4210] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.008065][T18667] loop5: detected capacity change from 0 to 32768 [ 260.134762][ T4210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.144733][T18667] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4371 (18667) [ 260.159157][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.168894][ T4210] usb 5-1: Product: syz [ 260.173432][ T4210] usb 5-1: Manufacturer: syz [ 260.178029][ T4210] usb 5-1: SerialNumber: syz [ 260.206256][T18667] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 260.228118][T18667] BTRFS info (device loop5): force zlib compression, level 3 [ 260.239365][T18716] loop2: detected capacity change from 0 to 512 [ 260.243473][T18667] BTRFS info (device loop5): force clearing of disk cache [ 260.259339][T18667] BTRFS info (device loop5): setting nodatasum [ 260.266446][T18667] BTRFS info (device loop5): allowing degraded mounts [ 260.281515][T18667] BTRFS info (device loop5): enabling disk space caching [ 260.314341][T18667] BTRFS info (device loop5): disk space caching is enabled [ 260.328208][T18667] BTRFS info (device loop5): has skinny extents [ 260.336543][T18716] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 260.357487][T18716] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 260.390101][T18716] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 260.411769][T18716] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 260.425079][T18716] EXT4-fs (loop2): 1 truncate cleaned up [ 260.430743][T18716] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 260.477153][T18667] BTRFS info (device loop5): clearing free space tree [ 260.484568][T18667] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.494980][T18667] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 260.495966][T18716] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 260.524378][ T4210] usb 5-1: cannot find UAC_HEADER [ 260.547619][ T4210] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 260.568688][ T4210] usb 5-1: USB disconnect, device number 24 [ 260.628114][T18667] BTRFS error (device loop5): balance: invalid convert metadata profile raid0 [ 260.640557][T18769] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 260.802855][ T4308] udevd[4308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.132270][T18784] loop2: detected capacity change from 0 to 512 [ 261.317873][T18784] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.376259][T18818] netlink: 'syz.1.4407': attribute type 3 has an invalid length. [ 261.394415][T18784] ext4 filesystem being mounted at /865/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.489724][T18818] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4407'. [ 261.578039][T18829] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 261.758655][T18842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4412'. [ 261.809508][T18846] cgroup: name respecified [ 261.938095][T18859] loop2: detected capacity change from 0 to 2048 [ 261.958479][T18861] netlink: 'syz.1.4418': attribute type 3 has an invalid length. [ 262.024152][T18859] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3424, location=3424 [ 262.096317][T18859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.757305][T18906] loop2: detected capacity change from 0 to 2048 [ 262.789013][T18830] loop4: detected capacity change from 0 to 40427 [ 262.830643][T18906] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 262.865590][T18830] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 262.893403][T18830] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.926217][T18906] attempt to access beyond end of device [ 262.926217][T18906] loop2: rw=524288, want=33554432, limit=2048 [ 262.940698][T18920] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.974229][T18830] F2FS-fs (loop4): invalid crc value [ 263.038717][T18830] F2FS-fs (loop4): Found nat_bits in checkpoint [ 263.145388][T18876] loop5: detected capacity change from 0 to 32768 [ 263.182758][T18830] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 263.186399][T18937] loop1: detected capacity change from 0 to 512 [ 263.189899][T18830] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 263.236414][T18830] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 263.252108][T18876] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 263.274123][T18876] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 263.281916][T18830] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 263.287967][T18946] netlink: 'syz.2.4446': attribute type 3 has an invalid length. [ 263.301519][T18876] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 263.346599][T18946] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4446'. [ 263.358877][T18937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.450565][T18937] ext4 filesystem being mounted at /899/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.580501][T18876] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 263.899033][T18986] xt_socket: unknown flags 0xc [ 264.292965][T19004] loop4: detected capacity change from 0 to 2048 [ 264.297180][ T4856] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 264.386118][T19004] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3424, location=3424 [ 264.436634][T19004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.453793][T19024] loop5: detected capacity change from 0 to 4096 [ 264.548103][T19024] NILFS (loop5): invalid segment: Checksum error in segment payload [ 264.556921][ T4856] usb 1-1: Using ep0 maxpacket: 8 [ 264.562987][T19024] NILFS (loop5): trying rollback from an earlier position [ 264.613230][T19024] NILFS (loop5): recovery complete [ 264.648105][T19034] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.682512][ T4856] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 264.702082][ T4856] usb 1-1: config 0 has no interface number 0 [ 264.723448][ T4856] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 264.761533][ T4856] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 264.792016][ T4856] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.882420][T18995] loop1: detected capacity change from 0 to 40427 [ 264.952371][ T4856] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=10.15 [ 264.961898][T18995] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 264.975038][ T4856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.002270][T18995] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 265.015510][ T4856] usb 1-1: Product: syz [ 265.022749][T18995] F2FS-fs (loop1): invalid crc value [ 265.032565][ T4856] usb 1-1: Manufacturer: syz [ 265.047565][ T4856] usb 1-1: SerialNumber: syz [ 265.079290][ T4856] usb 1-1: config 0 descriptor?? [ 265.108994][T19066] loop4: detected capacity change from 0 to 128 [ 265.109720][T18995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 265.133433][ T4856] keyspan 1-1:0.95: Keyspan 1 port adapter converter detected [ 265.164464][T19066] FAT-fs (loop4): FAT read failed (blocknr 234) [ 265.182800][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 87 [ 265.190583][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 7 [ 265.204099][T18995] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 265.211147][T18995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 265.248841][T19072] autofs4:pid:19072:autofs_fill_super: called with bogus options [ 265.258106][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 81 [ 265.280960][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 1 [ 265.296085][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 2 [ 265.315433][T18995] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 265.316348][ T4856] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 85 [ 265.335005][T18995] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 265.350102][T19027] loop2: detected capacity change from 0 to 32768 [ 265.377912][ T4856] keyspan 1-1:0.95: unsupported endpoint type 0 [ 265.396883][ T4856] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 265.407585][T19027] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 265.462174][ T4856] usb 1-1: USB disconnect, device number 20 [ 265.476648][T19027] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 265.496004][ T4856] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 265.524018][T19089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4480'. [ 265.540734][ T4856] keyspan 1-1:0.95: device disconnected [ 265.562939][T19027] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 265.571523][T19093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4482'. [ 265.810611][T19027] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 267.656939][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4553'. [ 267.683989][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4553'. [ 267.717390][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4553'. [ 267.749952][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4557'. [ 267.803713][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4557'. [ 268.653302][T19381] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4580'. [ 268.670772][T19308] loop4: detected capacity change from 0 to 32768 [ 268.692058][T19381] openvswitch: netlink: Flow key attribute not present in set flow. [ 268.763082][T19308] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 268.791538][T19308] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 268.819454][T19308] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 268.945697][T19308] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 269.038762][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'. [ 269.061676][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'. [ 269.092276][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'. [ 269.474987][T19450] loop4: detected capacity change from 0 to 1024 [ 269.637554][T19450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.665535][T19450] ext4 filesystem being mounted at /872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.700967][T19450] fscrypt (loop4, inode 15): Error -61 getting encryption context [ 269.896244][T19501] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 270.002358][T19513] netlink: 'syz.0.4624': attribute type 3 has an invalid length. [ 270.730764][T19521] loop5: detected capacity change from 0 to 32768 [ 270.831118][T19521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.4627 (19521) [ 270.926296][T19521] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 270.949860][T19521] BTRFS info (device loop5): use zlib compression, level 3 [ 270.957247][T19521] BTRFS info (device loop5): setting nodatacow, compression disabled [ 270.965565][T19521] BTRFS info (device loop5): turning on flush-on-commit [ 270.976196][T19521] BTRFS info (device loop5): turning off barriers [ 270.982754][T19521] BTRFS info (device loop5): enabling auto defrag [ 270.989695][T19521] BTRFS info (device loop5): max_inline at 0 [ 270.996069][T19521] BTRFS info (device loop5): turning on sync discard [ 271.002966][T19521] BTRFS info (device loop5): using free space tree [ 271.009557][T19521] BTRFS info (device loop5): has skinny extents [ 271.276674][T19635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4662'. [ 271.372636][ T4514] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 271.387648][T19521] BTRFS info (device loop5): enabling ssd optimizations [ 271.420455][T19654] netlink: 'syz.1.4666': attribute type 3 has an invalid length. [ 271.512189][ T5930] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.622347][ T4514] usb 1-1: Using ep0 maxpacket: 32 [ 271.742334][ T4514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 271.753767][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 271.772332][ T4514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 271.811042][ T4514] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 271.841402][ T4514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.872357][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 271.922952][ T4514] usb 1-1: config 0 descriptor?? [ 271.928067][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 271.942304][T19612] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.963056][ T4514] hub 1-1:0.0: USB hub found [ 272.137612][ T5930] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 272.152538][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.160554][ T5930] usb 5-1: Product: syz [ 272.171166][T19703] netlink: 'syz.2.4679': attribute type 3 has an invalid length. [ 272.180347][ T5930] usb 5-1: Manufacturer: syz [ 272.185370][ T4514] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 272.196243][ T5930] usb 5-1: SerialNumber: syz [ 272.219281][ T5930] usb 5-1: config 0 descriptor?? [ 272.264185][ T5930] usb 5-1: no audio or video endpoints found [ 272.441680][T19731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4686'. [ 272.472255][ T4514] usbhid 1-1:0.0: can't add hid device: -71 [ 272.479024][ T4514] usbhid: probe of 1-1:0.0 failed with error -71 [ 272.542787][ T5208] usb 5-1: USB disconnect, device number 25 [ 272.576233][ T4514] usb 1-1: USB disconnect, device number 21 [ 272.701615][ T26] audit: type=1326 audit(1733918264.562:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c9ecaf19 code=0x7ffc0000 [ 272.739034][T19768] loop1: detected capacity change from 0 to 2048 [ 272.760730][T19773] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.761724][ T26] audit: type=1326 audit(1733918264.562:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa5c9ecaf19 code=0x7ffc0000 [ 272.802535][ T26] audit: type=1326 audit(1733918264.562:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5c9ecaf53 code=0x7ffc0000 [ 272.831749][ T26] audit: type=1326 audit(1733918264.562:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5c9ec99cf code=0x7ffc0000 [ 272.858787][ T26] audit: type=1326 audit(1733918264.592:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa5c9ecafa7 code=0x7ffc0000 [ 272.881562][ T4574] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 272.899198][ T26] audit: type=1326 audit(1733918264.602:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5c9ec9880 code=0x7ffc0000 [ 272.936847][ T26] audit: type=1326 audit(1733918264.602:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c9ecab1b code=0x7ffc0000 [ 272.959826][ T26] audit: type=1326 audit(1733918264.622:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5c9ec9b7a code=0x7ffc0000 [ 273.016399][ T26] audit: type=1326 audit(1733918264.622:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c9ecab1b code=0x7ffc0000 [ 273.040356][ T26] audit: type=1326 audit(1733918264.622:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.1.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c9ecab1b code=0x7ffc0000 [ 273.212225][ T4574] usb 6-1: Using ep0 maxpacket: 16 [ 273.250259][T19808] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 273.281102][T19805] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.330652][T19817] overlayfs: missing 'lowerdir' [ 273.354098][ T4574] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.395725][ T4574] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 273.432541][ T4574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.459222][ T4574] usb 6-1: config 0 descriptor?? [ 273.511276][T19829] proc: Bad value for 'gid' [ 273.533895][ T4574] gspca_main: spca501-2.14.0 probing 0000:0000 [ 273.739621][T19856] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 273.957572][ T4574] gspca_spca501: reg write: error -71 [ 273.966386][ T4574] spca501 6-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 273.996452][ T4574] spca501: probe of 6-1:0.0 failed with error -22 [ 274.017906][ T4574] usb 6-1: USB disconnect, device number 4 [ 274.090926][T19891] loop1: detected capacity change from 0 to 1024 [ 274.140449][T19866] loop4: detected capacity change from 0 to 32768 [ 274.163421][T19891] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 274.176913][T19866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4732 (19866) [ 274.198994][T19891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c198, mo2=0002] [ 274.211180][T19891] System zones: 0-1, 3-36 [ 274.220891][T19891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 274.244119][T19891] EXT4-fs (loop1): 1 truncate cleaned up [ 274.250077][T19866] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 274.269210][T19866] BTRFS info (device loop4): use zlib compression, level 3 [ 274.284407][T19866] BTRFS info (device loop4): setting nodatacow, compression disabled [ 274.294348][T19891] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nogrpid,i_version,max_batch_time=0x000000000000070d,debug,usrjquota=,nomblk_io_submit,norecovery,,errors=continue. Quota mode: writeback. [ 274.303134][T19866] BTRFS info (device loop4): turning on flush-on-commit [ 274.339594][T19891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c198, mo2=0002] [ 274.355301][T19866] BTRFS info (device loop4): turning off barriers [ 274.362472][T19866] BTRFS info (device loop4): enabling auto defrag [ 274.369403][T19891] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 274.378699][T19866] BTRFS info (device loop4): max_inline at 0 [ 274.385175][T19866] BTRFS info (device loop4): turning on sync discard [ 274.392142][T19866] BTRFS info (device loop4): using free space tree [ 274.398745][T19866] BTRFS info (device loop4): has skinny extents [ 274.575530][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4748'. [ 274.586342][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4748'. [ 274.595672][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4748'. [ 274.628363][T19866] BTRFS info (device loop4): enabling ssd optimizations [ 274.706149][T19945] loop2: detected capacity change from 0 to 4096 [ 274.713511][T19943] overlayfs: missing 'lowerdir' [ 274.732126][T19949] device vlan0 entered promiscuous mode [ 274.737968][T19949] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 274.797651][T19945] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 274.891679][T19945] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 275.022663][T19969] loop1: detected capacity change from 0 to 128 [ 275.155469][ T4574] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 275.602574][ T4574] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.620263][ T4574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.660628][ T4574] usb 6-1: config 0 descriptor?? [ 275.723486][ T4574] cp210x 6-1:0.0: cp210x converter detected [ 275.888151][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 275.922162][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 276.126135][T20045] device bond2 entered promiscuous mode [ 276.136919][T20045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.152491][ T4574] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 276.172411][ T4574] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 276.180125][ T4574] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 276.193012][ T4574] usb 6-1: cp210x converter now attached to ttyUSB0 [ 276.205525][ T4574] usb 6-1: USB disconnect, device number 5 [ 276.223205][T19982] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 276.247619][ T4574] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.269985][ T4574] cp210x 6-1:0.0: device disconnected [ 276.462124][T19982] usb 5-1: Using ep0 maxpacket: 32 [ 276.582556][T19982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 276.603367][T19982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 276.647887][T19982] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.667833][T19982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.707538][T19982] usb 5-1: config 0 descriptor?? [ 276.733990][T20035] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 276.753334][T19982] hub 5-1:0.0: USB hub found [ 276.855976][T20101] loop2: detected capacity change from 0 to 32768 [ 276.902315][T20134] loop1: detected capacity change from 0 to 4096 [ 276.936484][T20134] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 276.947928][T20101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4782 (20101) [ 276.972159][T19982] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 277.019103][T20101] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 277.072499][T20101] BTRFS info (device loop2): using free space tree [ 277.079043][T20101] BTRFS info (device loop2): has skinny extents [ 277.115119][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4802'. [ 277.153874][T20166] netlink: 'syz.0.4804': attribute type 29 has an invalid length. [ 277.182858][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 277.195684][T20166] netlink: 'syz.0.4804': attribute type 29 has an invalid length. [ 277.204457][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 277.262189][T19982] usbhid 5-1:0.0: can't add hid device: -71 [ 277.272381][T19982] usbhid: probe of 5-1:0.0 failed with error -71 [ 277.374301][T19982] usb 5-1: USB disconnect, device number 26 [ 277.521202][T20101] BTRFS info (device loop2): enabling ssd optimizations [ 277.632441][ T5208] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 277.850163][T20239] cgroup: Unknown subsys name 'appraise_type' [ 277.984856][T20246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4824'. [ 278.032727][ T5208] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 278.060897][ T5208] usb 6-1: config 0 has no interface number 0 [ 278.074178][T20244] loop1: detected capacity change from 0 to 4096 [ 278.084977][ T5208] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.102569][ T5208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.128140][ T5208] usb 6-1: config 0 descriptor?? [ 278.177413][ T5208] cp210x 6-1:0.255: cp210x converter detected [ 278.196058][T20244] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 278.237729][T20244] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 278.290848][T20272] (syz.2.4830,20272,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 278.318089][T20272] (syz.2.4830,20272,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 278.550278][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 278.569424][T20296] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 278.610052][T20296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.627496][ T5208] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 278.688082][ T5208] usb 6-1: cp210x converter now attached to ttyUSB0 [ 278.708578][T20308] loop2: detected capacity change from 0 to 256 [ 278.732386][ T5208] usb 6-1: USB disconnect, device number 6 [ 278.753374][ T5208] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.774190][ T5208] cp210x 6-1:0.255: device disconnected [ 278.789128][T20308] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 279.020992][T20346] loop2: detected capacity change from 0 to 1764 [ 279.378122][T20299] loop4: detected capacity change from 0 to 32768 [ 279.397036][T20382] loop1: detected capacity change from 0 to 256 [ 279.449090][T20386] netlink: 'syz.2.4864': attribute type 29 has an invalid length. [ 279.464670][T20386] netlink: 'syz.2.4864': attribute type 29 has an invalid length. [ 279.498508][T20383] loop5: detected capacity change from 0 to 4096 [ 279.509539][T20299] (syz.4.4839,20299,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 2, needed 8) [ 279.536801][T20382] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 279.554855][T20383] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 279.832124][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 279.852165][T20419] __nla_validate_parse: 3 callbacks suppressed [ 279.852182][T20419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4874'. [ 279.876373][T20419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4874'. [ 280.087726][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 280.213255][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.241295][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 280.262658][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.315502][ T7] usb 1-1: config 0 descriptor?? [ 280.353932][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 280.374727][T20457] loop4: detected capacity change from 0 to 4096 [ 280.408990][T20457] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 280.632085][T19982] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.674670][T20495] loop4: detected capacity change from 0 to 1764 [ 280.698306][T20497] loop5: detected capacity change from 0 to 4096 [ 280.782366][ T7] gspca_spca501: reg write: error -71 [ 280.787960][ T7] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 280.795475][ T7] spca501: probe of 1-1:0.0 failed with error -22 [ 280.804338][ T7] usb 1-1: USB disconnect, device number 22 [ 280.813657][T20497] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 280.877405][T20497] ntfs3: loop5: failed to convert "c46c" to cp865 [ 281.001334][T19982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 281.032648][T19982] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 281.059780][T19982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.104165][T19982] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.272174][T19982] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 281.281225][T19982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.298799][T19982] usb 3-1: Product: syz [ 281.303082][T19982] usb 3-1: Manufacturer: syz [ 281.308132][T19982] usb 3-1: SerialNumber: syz [ 281.328168][T19982] usb 3-1: config 0 descriptor?? [ 281.335885][T20539] (syz.5.4905,20539,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 281.345077][T20539] (syz.5.4905,20539,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 281.393494][T19982] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 281.434543][T19982] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 281.437138][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 281.633763][ T5474] usb 3-1: USB disconnect, device number 20 [ 281.659859][ T5474] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 281.687836][ T5474] ti_usb_3410_5052 3-1:0.0: device disconnected [ 281.824314][T20594] netlink: 'syz.4.4921': attribute type 32 has an invalid length. [ 282.202464][T20624] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4932'. [ 282.233293][T20590] loop5: detected capacity change from 0 to 32768 [ 282.254603][T20625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 282.271195][T20625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.383219][T20590] jfs_lookup: iget failed on inum 32 [ 282.389832][T20590] jfs_lookup: iget failed on inum 32 [ 282.520713][T20655] xt_TCPMSS: Only works on TCP SYN packets [ 282.544078][T20658] (syz.0.4943,20658,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 282.590655][T20658] (syz.0.4943,20658,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 282.762376][T20679] netlink: 'syz.5.4948': attribute type 10 has an invalid length. [ 282.770714][T20679] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4948'. [ 282.869516][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'. [ 282.950876][T20698] netlink: 'syz.1.4955': attribute type 13 has an invalid length. [ 282.993821][T20706] xt_TCPMSS: Only works on TCP SYN packets [ 283.064578][T20703] loop5: detected capacity change from 0 to 2048 [ 283.139604][T20719] cgroup: Invalid name [ 283.145348][T20703] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 283.220695][T20724] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4965'. [ 283.253135][T20730] netlink: 'syz.2.4966': attribute type 10 has an invalid length. [ 283.292413][T20730] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4966'. [ 283.350410][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 283.367745][T20742] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4980'. [ 283.778965][T20783] loop4: detected capacity change from 0 to 2048 [ 283.918348][T20783] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000aba,nolazytime,errors=remount-ro,. Quota mode: none. [ 283.987996][T20783] ext4 filesystem being mounted at /948/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.065721][T20783] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4983: bg 0: block 345: padding at end of block bitmap is not set [ 284.099920][T20783] EXT4-fs (loop4): Remounting filesystem read-only [ 284.107516][T20783] EXT4-fs error (device loop4): ext4_xattr_block_set:2197: inode #12: comm syz.4.4983: bad block 0 [ 284.159532][T20783] EXT4-fs (loop4): Remounting filesystem read-only [ 284.643066][T20865] netlink: 'syz.0.5007': attribute type 10 has an invalid length. [ 284.874774][T20884] __nla_validate_parse: 1 callbacks suppressed [ 284.874790][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5013'. [ 284.940516][T20828] loop1: detected capacity change from 0 to 32768 [ 285.041782][T20828] jfs_lookup: iget failed on inum 32 [ 285.066327][T20828] jfs_lookup: iget failed on inum 32 [ 285.236664][T20842] loop4: detected capacity change from 0 to 40427 [ 285.288645][T20842] F2FS-fs (loop4): invalid crc value [ 285.299929][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5022'. [ 285.353279][T20925] netlink: 'syz.1.5025': attribute type 10 has an invalid length. [ 285.361192][T20925] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5025'. [ 285.366646][T20842] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.397889][ T4514] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.474978][ T263] block nbd2: Attempted send on invalid socket [ 285.481204][ T263] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.502471][T20931] qnx4: unable to read the superblock [ 285.534297][T20842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 285.772277][ T4514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 285.827715][ T4514] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 285.847453][ T4514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.857701][T20969] xt_TCPMSS: Only works on TCP SYN packets [ 285.864561][ T4514] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 286.052353][ T4514] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 286.061776][ T4514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.080843][ T4514] usb 6-1: Product: syz [ 286.094500][ T4514] usb 6-1: Manufacturer: syz [ 286.099278][ T4514] usb 6-1: SerialNumber: syz [ 286.136467][ T4514] usb 6-1: config 0 descriptor?? [ 286.193528][ T4514] ti_usb_3410_5052 6-1:0.0: TI USB 3410 1 port adapter converter detected [ 286.219503][ T4514] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 286.270612][T21013] netlink: 'syz.0.5056': attribute type 15 has an invalid length. [ 286.432487][ T7] usb 6-1: USB disconnect, device number 7 [ 286.451834][ T7] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 286.499997][ T7] ti_usb_3410_5052 6-1:0.0: device disconnected [ 286.501324][T21037] usb usb8: usbfs: process 21037 (syz.0.5062) did not claim interface 0 before use [ 286.911693][T21080] syz.1.5076 uses old SIOCAX25GETINFO [ 286.923983][T21076] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 286.943396][T21076] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 287.151605][T21046] loop2: detected capacity change from 0 to 32768 [ 287.184681][T21100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.268520][ T150] block nbd0: Attempted send on invalid socket [ 287.275129][ T150] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.286643][T21109] qnx4: unable to read the superblock [ 287.310208][T21046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5064 (21046) [ 287.326534][T21046] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 287.372319][T21046] BTRFS info (device loop2): using free space tree [ 287.422956][T21046] BTRFS info (device loop2): has skinny extents [ 287.459000][T21130] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 287.472996][T21130] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 287.668857][T21046] BTRFS info (device loop2): enabling ssd optimizations [ 287.844258][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 288.300007][T21164] loop1: detected capacity change from 0 to 32768 [ 288.431338][T21164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5101 (21164) [ 288.524862][T21164] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 288.562178][T21164] BTRFS info (device loop1): using free space tree [ 288.568718][T21164] BTRFS info (device loop1): has skinny extents [ 288.600066][T21213] loop2: detected capacity change from 0 to 4096 [ 289.019548][T21164] BTRFS info (device loop1): enabling ssd optimizations [ 289.591715][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'. [ 289.601397][T21303] loop5: detected capacity change from 0 to 8192 [ 289.657128][T21326] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5148'. [ 289.769864][T21303] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.821528][T21344] virtio-fs: tag <(null)> not found [ 289.828426][T21303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 289.868426][T21303] FAT-fs (loop5): Filesystem has been set read-only [ 289.914745][T21303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 289.948139][T21303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 290.181163][T21366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 290.878563][T21419] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5173'. [ 290.930337][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5174'. [ 290.939689][T21380] loop4: detected capacity change from 0 to 32768 [ 291.139340][T21440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 291.156969][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5179'. [ 291.855623][T21443] loop5: detected capacity change from 0 to 32768 [ 291.931207][T21443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5182 (21443) [ 292.005375][T21502] device bond3 entered promiscuous mode [ 292.062833][T21502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.072629][T21443] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 292.099690][T21443] BTRFS info (device loop5): using free space tree [ 292.107934][T21443] BTRFS info (device loop5): has skinny extents [ 292.130553][T21553] loop2: detected capacity change from 0 to 256 [ 292.224809][T21564] loop4: detected capacity change from 0 to 256 [ 292.264649][T21553] FAT-fs (loop2): Directory bread(block 64) failed [ 292.295620][T21553] FAT-fs (loop2): Directory bread(block 65) failed [ 292.303581][T21553] FAT-fs (loop2): Directory bread(block 66) failed [ 292.314966][T21553] FAT-fs (loop2): Directory bread(block 67) failed [ 292.344916][T21553] FAT-fs (loop2): Directory bread(block 68) failed [ 292.351478][T21553] FAT-fs (loop2): Directory bread(block 69) failed [ 292.379460][T21553] FAT-fs (loop2): Directory bread(block 70) failed [ 292.396818][T21553] FAT-fs (loop2): Directory bread(block 71) failed [ 292.407645][T21553] FAT-fs (loop2): Directory bread(block 72) failed [ 292.417034][T21553] FAT-fs (loop2): Directory bread(block 73) failed [ 292.421163][T21443] BTRFS info (device loop5): enabling ssd optimizations [ 293.331759][T21636] loop4: detected capacity change from 0 to 8192 [ 293.485657][T21636] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.538721][T21636] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 293.562313][T21636] FAT-fs (loop4): Filesystem has been set read-only [ 293.602157][T21636] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 293.613213][T21687] loop1: detected capacity change from 0 to 764 [ 293.627723][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5247'. [ 293.637054][T21636] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 293.700812][T21687] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 293.762355][T21703] mmap: syz.0.5252 (21703) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 293.887547][T21712] netlink: 'syz.2.5255': attribute type 1 has an invalid length. [ 293.988414][T21724] loop1: detected capacity change from 0 to 256 [ 294.005793][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5259'. [ 294.094106][T21724] FAT-fs (loop1): Directory bread(block 64) failed [ 294.100664][T21724] FAT-fs (loop1): Directory bread(block 65) failed [ 294.138180][T21724] FAT-fs (loop1): Directory bread(block 66) failed [ 294.155503][T21724] FAT-fs (loop1): Directory bread(block 67) failed [ 294.183658][T21724] FAT-fs (loop1): Directory bread(block 68) failed [ 294.200501][T21724] FAT-fs (loop1): Directory bread(block 69) failed [ 294.209112][T21724] FAT-fs (loop1): Directory bread(block 70) failed [ 294.248975][T21724] FAT-fs (loop1): Directory bread(block 71) failed [ 294.272751][T21724] FAT-fs (loop1): Directory bread(block 72) failed [ 294.291657][T21724] FAT-fs (loop1): Directory bread(block 73) failed [ 294.724908][T21771] device bond1 entered promiscuous mode [ 294.735036][T21771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.293501][T21867] loop1: detected capacity change from 0 to 8 [ 295.352837][T21867] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 295.409875][T21867] cramfs: Error -3 while decompressing! [ 295.469147][T21867] cramfs: ffffffff96bb72a8(26)->ffff88804f08b000(4096) [ 295.482365][T21867] cramfs: Error -5 while decompressing! [ 295.488252][T21867] cramfs: ffffffff96bb72c2(26)->ffff8880567f1000(4096) [ 295.533911][T21867] cramfs: Error -3 while decompressing! [ 295.570021][T21867] cramfs: ffffffff96bb72dc(16)->ffff888058adc000(4096) [ 295.589937][T21867] cramfs: Error -3 while decompressing! [ 295.612168][T21867] cramfs: ffffffff96bb72a8(26)->ffff88804f08b000(4096) [ 295.642256][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 295.642270][ T26] audit: type=1800 audit(1733918287.502:53): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5294" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 295.667984][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.839341][T21844] loop2: detected capacity change from 0 to 32768 [ 295.929995][T21912] loop5: detected capacity change from 0 to 1024 [ 296.007839][T21912] EXT4-fs (loop5): Test dummy encryption mode enabled [ 296.040680][T21912] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.071810][T21912] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,resuid=0x0000000000000000,test_dummy_encryption=v1,dioread_nolock,max_dir_size_kb=0x0000000000000009,stripe=0x00000000000000f0,data_err=abort,,errors=continue. Quota mode: writeback. [ 296.105849][T21915] loop1: detected capacity change from 0 to 4096 [ 296.296952][T21929] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.465127][T21938] loop2: detected capacity change from 0 to 512 [ 296.628782][T21938] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 296.669326][T21938] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5313: invalid indirect mapped block 2683928664 (level 1) [ 296.714844][T21920] loop4: detected capacity change from 0 to 32768 [ 296.731432][T21938] EXT4-fs (loop2): 1 truncate cleaned up [ 296.769288][T21938] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=coup.contrs,errors=continue. Quota mode: writeback. [ 296.789541][T21920] (syz.4.5312,21920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.798360][T21920] (syz.4.5312,21920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.815189][T21920] JBD2: Ignoring recovery information on journal [ 296.951820][T21979] netlink: 'syz.5.5328': attribute type 9 has an invalid length. [ 296.997057][T21920] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 297.111230][T21999] overlayfs: empty lowerdir [ 297.149498][ T4165] ocfs2: Unmounting device (7,4) on (node local) [ 297.257268][T22013] delete_channel: no stack [ 297.453798][T22031] netlink: 798 bytes leftover after parsing attributes in process `syz.0.5342'. [ 297.456447][T22028] loop1: detected capacity change from 0 to 512 [ 297.538299][T22028] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 297.573213][T22042] loop4: detected capacity change from 0 to 8 [ 297.597856][T22042] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 297.626360][T22028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.5343: inode #1: comm syz.1.5343: iget: illegal inode # [ 297.637518][T22051] overlayfs: empty lowerdir [ 297.649540][T22028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.5343: error while reading EA inode 1 err=-117 [ 297.696955][T22028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.5343: inode #1: comm syz.1.5343: iget: illegal inode # [ 297.697602][T22028] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.5343: error while reading EA inode 1 err=-117 [ 297.698058][T22028] EXT4-fs (loop1): 1 orphan inode deleted [ 297.698080][T22028] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 297.761906][T22042] cramfs: Error -3 while decompressing! [ 297.761923][T22042] cramfs: ffffffff96bbb2a8(26)->ffff888054556000(4096) [ 297.768536][T22042] cramfs: Error -5 while decompressing! [ 297.805291][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.836906][T22042] cramfs: ffffffff96bbb2c2(26)->ffff888054557000(4096) [ 297.897934][T22071] loop5: detected capacity change from 0 to 512 [ 297.902175][T22042] cramfs: Error -3 while decompressing! [ 297.909825][T22042] cramfs: ffffffff96bbb2dc(16)->ffff8880537c8000(4096) [ 297.922892][T22042] cramfs: Error -3 while decompressing! [ 297.928456][T22042] cramfs: ffffffff96bbb2a8(26)->ffff888054556000(4096) [ 297.998603][ T26] audit: type=1800 audit(1733918289.862:54): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5331" name="file3" dev="loop4" ino=348 res=0 errno=0 [ 298.018249][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.132477][T22071] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 298.143807][T22071] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5355: invalid indirect mapped block 2683928664 (level 1) [ 298.202885][T22071] EXT4-fs (loop5): 1 truncate cleaned up [ 298.211248][T22071] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=coup.contrs,errors=continue. Quota mode: writeback. [ 298.457383][T22119] loop1: detected capacity change from 0 to 16 [ 298.473264][T22124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5372'. [ 298.701336][T22149] loop1: detected capacity change from 0 to 512 [ 298.724580][T22158] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.793997][T22149] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 298.845127][T22169] delete_channel: no stack [ 298.864201][T22167] netlink: 'syz.0.5398': attribute type 5 has an invalid length. [ 298.895614][T22149] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5382: invalid indirect mapped block 2683928664 (level 1) [ 298.919375][T22178] loop4: detected capacity change from 0 to 256 [ 298.922388][T22149] EXT4-fs (loop1): 1 truncate cleaned up [ 298.941111][T22176] netlink: 'syz.2.5389': attribute type 9 has an invalid length. [ 298.973372][T22178] exfat: Deprecated parameter 'utf8' [ 298.977139][T22149] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=coup.contrs,errors=continue. Quota mode: writeback. [ 298.983309][T22178] exfat: Deprecated parameter 'namecase' [ 299.028721][T22178] exfat: Deprecated parameter 'namecase' [ 299.052127][T22178] exfat: Deprecated parameter 'utf8' [ 299.085587][T22178] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 299.108620][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5396'. [ 299.427726][T22226] xt_TCPMSS: Only works on TCP SYN packets [ 299.458050][T22217] loop2: detected capacity change from 0 to 4096 [ 299.503012][T22235] netlink: 324 bytes leftover after parsing attributes in process `syz.5.5411'. [ 299.517897][T22235] netlink: 324 bytes leftover after parsing attributes in process `syz.5.5411'. [ 299.532199][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 299.534976][T22239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5412'. [ 299.606432][T22242] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.814190][T22258] loop1: detected capacity change from 0 to 1024 [ 299.837474][T22258] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.860969][T22258] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.959618][T22258] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,resuid=0x0000000000000000,test_dummy_encryption=v1,dioread_nolock,max_dir_size_kb=0x0000000000000009,stripe=0x00000000000000f0,data_err=abort,,errors=continue. Quota mode: writeback. [ 299.985250][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.486065][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5453'. [ 300.499916][T22344] loop5: detected capacity change from 0 to 8 [ 300.623073][T22344] SQUASHFS error: Unable to read directory block [629:26] [ 300.765072][T22375] xt_TCPMSS: Only works on TCP SYN packets [ 300.891202][T22390] loop5: detected capacity change from 0 to 64 [ 300.915792][T22393] netlink: 'syz.1.5457': attribute type 3 has an invalid length. [ 300.942094][T22393] netlink: 'syz.1.5457': attribute type 28 has an invalid length. [ 300.998437][T22393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5457'. [ 301.579275][T22463] loop5: detected capacity change from 0 to 2048 [ 301.657725][T22376] loop4: detected capacity change from 0 to 32768 [ 301.674686][T22463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.721309][T22376] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.5449 (22376) [ 301.869885][T22376] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 301.935922][T22376] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 301.978419][T22376] BTRFS info (device loop4): use zstd compression, level 3 [ 302.019409][T22376] BTRFS info (device loop4): using free space tree [ 302.028164][T22376] BTRFS info (device loop4): has skinny extents [ 302.152703][ T5205] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.183504][T22513] loop2: detected capacity change from 0 to 512 [ 302.223428][T22513] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 302.266161][T22513] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.371077][T22376] BTRFS info (device loop4): enabling ssd optimizations [ 302.447307][T22513] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 302.473082][T22513] Quota error (device loop2): write_blk: dquota write failed [ 302.484339][T22513] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 302.499157][T22513] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.5487: Failed to acquire dquot type 0 [ 302.511305][T22513] EXT4-fs (loop2): 1 truncate cleaned up [ 302.520718][T22513] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,usrquota,inode_readahead_blks=0x0000000000000004,resgid=0x000000000000ee01,noinit_itable,grpjquota=./file0,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 302.647725][T22513] Quota error (device loop2): write_blk: dquota write failed [ 302.693005][T22513] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 302.709015][T22513] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.5487: Failed to acquire dquot type 0 [ 302.772334][ T5205] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 302.781426][ T5205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.812065][ T5205] usb 6-1: Product: syz [ 302.816251][ T5205] usb 6-1: Manufacturer: syz [ 302.820842][ T5205] usb 6-1: SerialNumber: syz [ 302.836689][ T5205] usb 6-1: config 0 descriptor?? [ 302.941114][T22568] netlink: 'syz.0.5494': attribute type 2 has an invalid length. [ 302.966937][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 302.979805][T22568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 303.008056][T22568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.096778][ T5205] int51x1: probe of 6-1:0.0 failed with error -22 [ 303.299308][ T5205] usb 6-1: USB disconnect, device number 8 [ 303.665044][T22636] netlink: 'syz.4.5515': attribute type 3 has an invalid length. [ 303.827156][T22652] bridge0: port 3(erspan0) entered blocking state [ 303.845522][T22652] bridge0: port 3(erspan0) entered disabled state [ 303.853730][T22652] device erspan0 entered promiscuous mode [ 304.003711][T22664] loop2: detected capacity change from 0 to 2048 [ 304.065672][T22664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.068087][T22676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 304.274294][T22695] loop2: detected capacity change from 0 to 256 [ 304.543725][T22726] loop5: detected capacity change from 0 to 512 [ 304.684321][T22726] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 304.728380][T22726] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 304.773119][T22741] netlink: 'syz.1.5550': attribute type 3 has an invalid length. [ 304.795437][T22726] EXT4-fs (loop5): orphan cleanup on readonly fs [ 304.853563][T22726] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.5545: Invalid block bitmap block 0 in block_group 0 [ 304.898054][T22716] loop4: detected capacity change from 0 to 32768 [ 304.937562][T22726] Quota error (device loop5): write_blk: dquota write failed [ 304.961415][T22726] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 305.028379][T22716] jfs_rename: dtInsert returned -EIO [ 305.038838][T22726] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.5545: Failed to acquire dquot type 1 [ 305.071069][T22726] EXT4-fs (loop5): 1 orphan inode deleted [ 305.091458][ T154] Quota error (device loop5): remove_tree: Getting block too big (0 >= 6) [ 305.117399][ T154] EXT4-fs error (device loop5): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 1 [ 305.240210][T22726] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,nodiscard,noblock_validity,noquota,resuid=0x0000000000000000,stripe=0x0000000000000004,abort,noload,auto_da_alloc=0x0000000000000001,grpjquota=,,errors=continue. Quota mode: writeback. [ 305.241361][T22760] loop2: detected capacity change from 0 to 4096 [ 305.552112][ T4516] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.583026][T22790] loop2: detected capacity change from 0 to 1024 [ 305.719689][ T1181] hfsplus: b-tree write err: -5, ino 4 [ 305.886075][T22833] loop4: detected capacity change from 0 to 8 [ 305.942379][T22836] bridge0: port 3(erspan0) entered blocking state [ 305.948321][ T26] audit: type=1400 audit(1733918297.813:55): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22837 comm="syz.1.5579" [ 305.948843][T22836] bridge0: port 3(erspan0) entered disabled state [ 305.979247][T22836] device erspan0 entered promiscuous mode [ 305.986061][T22836] bridge0: port 3(erspan0) entered blocking state [ 305.992570][T22836] bridge0: port 3(erspan0) entered forwarding state [ 306.084787][T22833] SQUASHFS error: lzo decompression failed, data probably corrupt [ 306.093710][ T4516] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.113725][ T4516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.129944][T22833] SQUASHFS error: Failed to read block 0x1c0: -5 [ 306.147815][ T4516] usb 1-1: Product: syz [ 306.157049][T22833] SQUASHFS error: Unable to read metadata cache entry [1be] [ 306.164996][ T4516] usb 1-1: Manufacturer: syz [ 306.172421][ T4516] usb 1-1: SerialNumber: syz [ 306.232999][ T4516] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.360420][T22877] netlink: 'syz.5.5591': attribute type 4 has an invalid length. [ 306.467279][T22887] loop4: detected capacity change from 0 to 256 [ 306.523447][T22887] exfat: Deprecated parameter 'utf8' [ 306.552281][T22887] exfat: Deprecated parameter 'utf8' [ 306.589145][T22887] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 306.825526][ T4516] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.843616][ T26] audit: type=1400 audit(1733918298.693:56): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22923 comm="syz.4.5606" [ 306.983041][T22937] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.220077][T22956] PKCS8: Unsupported PKCS#8 version [ 307.228112][T22957] bridge0: port 3(erspan0) entered blocking state [ 307.241938][T22957] bridge0: port 3(erspan0) entered disabled state [ 307.251015][T22957] device erspan0 entered promiscuous mode [ 307.283690][ T5205] usb 1-1: USB disconnect, device number 23 [ 307.294789][T22957] bridge0: port 3(erspan0) entered blocking state [ 307.301289][T22957] bridge0: port 3(erspan0) entered forwarding state [ 307.566680][T22985] loop4: detected capacity change from 0 to 512 [ 307.634822][T22985] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 307.665669][T22985] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 307.693046][T22985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 307.738297][T22985] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.5625: Invalid block bitmap block 0 in block_group 0 [ 307.775510][T22985] Quota error (device loop4): write_blk: dquota write failed [ 307.812175][T22985] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 307.852241][T22985] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.5625: Failed to acquire dquot type 1 [ 307.885417][T22985] EXT4-fs (loop4): 1 orphan inode deleted [ 307.895878][T22987] loop5: detected capacity change from 0 to 32768 [ 307.902574][ T1181] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 307.911153][ T1181] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 1 [ 307.946788][T22985] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nodiscard,noblock_validity,noquota,resuid=0x0000000000000000,stripe=0x0000000000000004,abort,noload,auto_da_alloc=0x0000000000000001,grpjquota=,,errors=continue. Quota mode: writeback. [ 307.976831][ T4516] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 307.990295][ T4516] ath9k_htc: Failed to initialize the device [ 308.008188][ T5205] usb 1-1: ath9k_htc: USB layer deinitialized [ 308.028974][T22987] jfs_rename: dtInsert returned -EIO [ 308.272059][ T4170] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 308.482142][ T5477] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 308.522186][ T4170] usb 3-1: Using ep0 maxpacket: 16 [ 308.622366][ T13] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 308.642347][ T4170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.652544][ T4170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.675785][ T4170] usb 3-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 308.692033][ T4170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.752199][ T5477] usb 6-1: Using ep0 maxpacket: 32 [ 308.841731][T23053] netlink: 'syz.0.5649': attribute type 4 has an invalid length. [ 308.862743][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 308.899843][ T5477] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 308.915223][ T5477] usb 6-1: config 4 has no interface number 0 [ 308.921507][ T5477] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.940540][ T5477] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.951127][ T5477] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 308.969712][ T5477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.982384][ T13] usb 5-1: config 0 has no interfaces? [ 309.002179][ T4170] usb 3-1: string descriptor 0 read error: -71 [ 309.005418][T23061] xt_bpf: check failed: parse error [ 309.010943][ T4170] usb 3-1: 0:2 : does not exist [ 309.033193][ T5477] hub 6-1:4.128: USB hub found [ 309.090616][ T4170] usb 3-1: USB disconnect, device number 21 [ 309.104561][T23073] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5654'. [ 309.143798][ T13] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 309.164023][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.196439][ T13] usb 5-1: Product: syz [ 309.208575][ T13] usb 5-1: Manufacturer: syz [ 309.213678][ T13] usb 5-1: SerialNumber: syz [ 309.232743][ T13] r8152-cfgselector 5-1: config 0 descriptor?? [ 309.248133][ T5477] hub 6-1:4.128: 2 ports detected [ 309.253953][ T5477] hub 6-1:4.128: Using single TT (err -22) [ 309.419855][T22922] syz.1.5608 (22922): drop_caches: 3 [ 309.472355][ T5477] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 309.479202][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5664'. [ 309.482215][ T5477] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 309.492592][ T13] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 309.525593][T10167] usb 5-1: config 0 descriptor?? [ 309.536355][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5664'. [ 309.573471][ T5477] usb 6-1: USB disconnect, device number 9 [ 309.637535][T23121] loop2: detected capacity change from 0 to 512 [ 309.739599][T23121] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 309.745554][ T4170] usb 5-1: USB disconnect, device number 27 [ 309.748858][T23121] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 309.762218][T10167] usb 5-1: can't set config #0, error -71 [ 309.770336][T23121] System zones: 0-2, 18-18, 34-35 [ 309.780460][T23121] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 309.881012][T23131] loop1: detected capacity change from 0 to 4096 [ 309.956631][T23131] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 310.038231][T23131] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 310.070067][T23131] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 310.131300][T23159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5681'. [ 310.161340][ T154] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 310.187926][ T4177] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 310.262143][T23176] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5685'. [ 310.277280][T23176] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5685'. [ 310.337450][T23181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5682'. [ 310.522023][ T5205] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 310.616779][T23215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5697'. [ 310.651244][T23215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5697'. [ 310.747649][T23224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5700'. [ 310.956589][T23245] binder: 23244:23245 ioctl c018620c 200013c0 returned -22 [ 311.144339][ T5205] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 311.165648][ T5205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.188078][ T5205] usb 1-1: Product: syz [ 311.203755][ T5205] usb 1-1: Manufacturer: syz [ 311.221808][ T5205] usb 1-1: SerialNumber: syz [ 311.250470][ T5205] usb 1-1: config 0 descriptor?? [ 311.337281][T23219] loop1: detected capacity change from 0 to 32768 [ 311.457970][T23219] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 311.522448][ T5205] int51x1: probe of 1-1:0.0 failed with error -22 [ 311.539458][T23219] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 311.558879][T23219] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 311.569640][T23219] OCFS2: File system is now read-only. [ 311.575368][T23219] (syz.1.5698,23219,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 311.593485][T23219] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 311.612508][T23219] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 311.622417][T23219] (syz.1.5698,23219,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 311.639026][T23219] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 311.656648][T23219] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 311.670492][T23219] (syz.1.5698,23219,1):ocfs2_prepare_dx_dir_for_insert:4158 ERROR: status = -30 [ 311.689027][T23346] loop5: detected capacity change from 0 to 256 [ 311.696073][T23219] (syz.1.5698,23219,1):ocfs2_prepare_dir_for_insert:4283 ERROR: status = -30 [ 311.705839][T23219] (syz.1.5698,23219,1):ocfs2_mknod:296 ERROR: status = -30 [ 311.720204][T23219] (syz.1.5698,23219,1):ocfs2_mknod:500 ERROR: status = -30 [ 311.733975][ T4170] usb 1-1: USB disconnect, device number 24 [ 311.745115][T23219] (syz.1.5698,23219,1):ocfs2_create:674 ERROR: status = -30 [ 311.780873][T23346] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 311.847693][ T4177] ocfs2: Unmounting device (7,1) on (node local) [ 311.875990][ T2419] pvrusb2: request_firmware fatal error with code=-110 [ 311.890324][ T2419] pvrusb2: Failure uploading firmware1 [ 311.920814][ T2419] pvrusb2: Device initialization was not successful. [ 311.950708][ T2419] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.966123][T23346] exFAT-fs (loop5): hint_cluster is invalid (1) [ 311.968274][ T2419] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.985997][T23346] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 311.995919][ T4515] pvrusb2: Device being rendered inoperable [ 312.083673][T23346] exFAT-fs (loop5): Filesystem has been set read-only [ 312.090791][T23346] exFAT-fs (loop5): error, failed to bmap (inode : ffff888060d52ee0 iblock : 9, err : -5) [ 312.221104][T23346] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 312.248602][T23346] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 312.617789][T23434] loop4: detected capacity change from 0 to 256 [ 312.662201][ T5477] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.707961][T23434] FAT-fs (loop4): Directory bread(block 64) failed [ 312.727984][T23434] FAT-fs (loop4): Directory bread(block 65) failed [ 312.737397][T23434] FAT-fs (loop4): Directory bread(block 66) failed [ 312.757158][T23434] FAT-fs (loop4): Directory bread(block 67) failed [ 312.764763][T23434] FAT-fs (loop4): Directory bread(block 68) failed [ 312.772573][T23434] FAT-fs (loop4): Directory bread(block 69) failed [ 312.779590][T23434] FAT-fs (loop4): Directory bread(block 70) failed [ 312.832059][T23434] FAT-fs (loop4): Directory bread(block 71) failed [ 312.852191][T23434] FAT-fs (loop4): Directory bread(block 72) failed [ 312.869832][T23434] FAT-fs (loop4): Directory bread(block 73) failed [ 312.962137][ T5477] usb 3-1: Using ep0 maxpacket: 32 [ 313.102158][ T5477] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.121921][ T5477] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.140684][T23488] loop4: detected capacity change from 0 to 764 [ 313.147242][ T5477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.220843][T23488] Symlink component flag not implemented [ 313.257577][T23488] Symlink component flag not implemented (101) [ 313.306110][T23496] loop1: detected capacity change from 0 to 4096 [ 313.322601][ T5484] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.352441][ T5477] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 313.361719][ T5477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.373238][T23505] netlink: 'syz.5.5778': attribute type 13 has an invalid length. [ 313.384835][ T5477] usb 3-1: Product: syz [ 313.408888][T23496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.426565][ T5477] usb 3-1: Manufacturer: syz [ 313.433790][ T5477] usb 3-1: SerialNumber: syz [ 313.446190][ T5477] usb 3-1: config 0 descriptor?? [ 313.487583][T23505] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.496841][ T5477] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 313.538022][T23505] gretap0: refused to change device tx_queue_len [ 313.544739][T23505] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.597184][ T5484] usb 1-1: Using ep0 maxpacket: 16 [ 313.728904][ T5484] usb 1-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=a9.3c [ 313.732175][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 313.739119][ T5484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.773477][ T5484] usb 1-1: config 0 descriptor?? [ 313.823391][ T5484] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 313.954481][ T5205] usb 3-1: USB disconnect, device number 22 [ 314.000438][T23571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.017966][T23571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 314.042962][ T5484] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 314.046387][T23580] netlink: 'syz.4.5792': attribute type 7 has an invalid length. [ 314.050036][ T5484] quatech2: probe of 1-1:0.0 failed with error -8 [ 314.152308][ T13] usb 2-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config [ 314.174995][ T13] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 314.194470][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.243533][ T13] usb 2-1: config 0 descriptor?? [ 314.270925][T23601] __nla_validate_parse: 5 callbacks suppressed [ 314.270941][T23601] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5796'. [ 314.300119][ T4515] usb 1-1: USB disconnect, device number 25 [ 314.301829][T23602] delete_channel: no stack [ 314.306981][ T13] usb 2-1: bad CDC descriptors [ 314.336304][ T13] usb 2-1: bad CDC descriptors [ 314.506739][ T13] usb 2-1: USB disconnect, device number 13 [ 314.518694][T23625] loop5: detected capacity change from 0 to 512 [ 314.677569][T23625] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 314.742390][T23625] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.764028][T23654] tmpfs: Bad value for 'mpol' [ 314.821271][T23658] netlink: 'syz.2.5809': attribute type 1 has an invalid length. [ 314.953922][T23671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5813'. [ 314.964148][T23671] unsupported nlmsg_type 40 [ 315.002053][ T5484] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 315.049249][T23679] netlink: 'syz.2.5816': attribute type 30 has an invalid length. [ 315.158640][T23690] netlink: 'syz.2.5822': attribute type 27 has an invalid length. [ 315.462431][ T5484] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 315.511827][ T5484] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 315.544421][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5836'. [ 315.562643][ T5484] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 315.571700][ T5484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.580925][T23732] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 315.677527][T23744] tmpfs: Bad value for 'mpol' [ 315.719658][T23749] loop1: detected capacity change from 0 to 2048 [ 315.801620][ T26] audit: type=1326 audit(1733918307.663:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23754 comm="syz.2.5844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46fb5df19 code=0x0 [ 315.897181][T23758] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.910738][ T5484] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 315.923654][ T5484] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input32 [ 315.939766][T23749] attempt to access beyond end of device [ 315.939766][T23749] loop1: rw=0, want=19791209300042, limit=2048 [ 315.967855][ T5484] input: failed to attach handler kbd to device input32, error: -5 [ 316.000651][T23749] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 316.022288][ T5484] usb 5-1: USB disconnect, device number 28 [ 316.038864][T23771] loop2: detected capacity change from 0 to 256 [ 316.198570][T23771] FAT-fs (loop2): Directory bread(block 64) failed [ 316.212053][T23771] FAT-fs (loop2): Directory bread(block 65) failed [ 316.218684][T23771] FAT-fs (loop2): Directory bread(block 66) failed [ 316.238870][T23771] FAT-fs (loop2): Directory bread(block 67) failed [ 316.252427][T23771] FAT-fs (loop2): Directory bread(block 68) failed [ 316.258967][T23771] FAT-fs (loop2): Directory bread(block 69) failed [ 316.279566][T23771] FAT-fs (loop2): Directory bread(block 70) failed [ 316.298565][T23771] FAT-fs (loop2): Directory bread(block 71) failed [ 316.308729][T23771] FAT-fs (loop2): Directory bread(block 72) failed [ 316.322143][T23771] FAT-fs (loop2): Directory bread(block 73) failed [ 316.537924][T23803] loop5: detected capacity change from 0 to 1024 [ 316.641831][T23803] hfsplus: xattr searching failed [ 316.781832][T23837] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5862'. [ 316.807137][T23840] sctp: [Deprecated]: syz.0.5865 (pid 23840) Use of int in maxseg socket option. [ 316.807137][T23840] Use struct sctp_assoc_value instead [ 316.846973][T23847] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 316.885081][T23847] VFS: Can't find a romfs filesystem on dev nullb0. [ 316.885081][T23847] [ 317.014127][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.020452][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.042080][ T4515] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 317.077561][T23860] program syz.0.5870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.288876][ T4515] usb 5-1: Using ep0 maxpacket: 8 [ 317.353254][T23892] netlink: 'syz.5.5881': attribute type 2 has an invalid length. [ 317.391891][T23892] netlink: 'syz.5.5881': attribute type 1 has an invalid length. [ 317.412389][ T4515] usb 5-1: config 0 has an invalid interface number: 141 but max is 0 [ 317.420574][ T4515] usb 5-1: config 0 has no interface number 0 [ 317.612193][ T4515] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ee.8a [ 317.641720][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.668161][T23919] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 317.690206][ T4515] usb 5-1: Product: syz [ 317.699052][ T4515] usb 5-1: Manufacturer: syz [ 317.712294][ T4515] usb 5-1: SerialNumber: syz [ 317.739077][ T4515] usb 5-1: config 0 descriptor?? [ 317.794306][ T4515] gspca_main: sq905-2.14.0 probing 2770:9120 [ 318.120421][T23956] loop2: detected capacity change from 0 to 2048 [ 318.222135][ T4515] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 318.234482][ T4515] sq905: probe of 5-1:0.141 failed with error -71 [ 318.254067][ T4515] usb 5-1: USB disconnect, device number 29 [ 318.533462][ T5477] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 318.624449][T24013] xt_l2tp: v2 tid > 0xffff: 262144 [ 318.660001][ T26] audit: type=1400 audit(1733918310.523:58): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24017 comm="syz.1.5922" [ 318.703352][T24022] loop1: detected capacity change from 0 to 256 [ 318.773220][T24022] exfat: Deprecated parameter 'utf8' [ 318.797915][T24035] netlink: 'syz.5.5929': attribute type 10 has an invalid length. [ 318.835840][T24035] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5929'. [ 318.853716][T24035] bridge0: port 4(veth0_vlan) entered blocking state [ 318.863593][T24022] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 318.877087][T24035] bridge0: port 4(veth0_vlan) entered disabled state [ 318.908029][T24035] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 318.956829][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5931'. [ 318.973374][ T5477] usb 3-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 318.992507][ T5477] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.001553][ T5477] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.192385][ T5477] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.201451][ T5477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.213268][ T5477] usb 3-1: Product: syz [ 319.218870][ T5477] usb 3-1: Manufacturer: syz [ 319.238933][ T5477] usb 3-1: SerialNumber: syz [ 319.283090][T24077] loop4: detected capacity change from 0 to 256 [ 319.293318][ T5477] cdc_ncm 3-1:1.0: skipping garbage [ 319.298545][ T5477] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 319.318182][ T5477] cdc_ncm 3-1:1.0: bind() failure [ 319.339473][T24062] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 319.509431][ T5205] usb 3-1: USB disconnect, device number 23 [ 319.690073][T24121] netlink: 9164 bytes leftover after parsing attributes in process `syz.5.5954'. [ 319.705240][T24123] netlink: 'syz.0.5953': attribute type 1 has an invalid length. [ 319.936093][T24147] loop5: detected capacity change from 0 to 512 [ 319.978675][T24157] netlink: 'syz.1.5966': attribute type 1 has an invalid length. [ 320.087891][T24164] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 320.103695][ T5205] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 320.159875][T24173] loop2: detected capacity change from 0 to 256 [ 320.201921][T24173] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 320.492292][ T5205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 320.523242][ T5205] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 320.563131][ T5205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 320.586617][T24214] loop1: detected capacity change from 0 to 8 [ 320.597717][ T5205] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 320.623227][ T5205] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 320.633348][ T5205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.643847][ T5205] usb 5-1: config 0 descriptor?? [ 320.727405][T24214] SQUASHFS error: xz decompression failed, data probably corrupt [ 320.728946][T24226] loop2: detected capacity change from 0 to 256 [ 320.753822][T24214] SQUASHFS error: Failed to read block 0x60: -5 [ 320.766055][T24214] SQUASHFS error: xz decompression failed, data probably corrupt [ 320.815762][T24214] SQUASHFS error: Failed to read block 0x60: -5 [ 320.841513][ T26] audit: type=1800 audit(1733918312.703:59): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5983" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 320.922333][ T5205] hdpvr 5-1:0.0: firmware version 0x15 dated mҝR( ry|A3je{)7}-S8N [ 321.024057][T24248] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 321.142303][ T5205] hdpvr 5-1:0.0: device init failed [ 321.147788][ T5205] hdpvr: probe of 5-1:0.0 failed with error -12 [ 321.192353][ T5205] usb 5-1: USB disconnect, device number 30 [ 321.822157][ T5477] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 321.868419][T24347] netlink: 'syz.4.6027': attribute type 10 has an invalid length. [ 321.891509][T24347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6027'. [ 321.904726][T24347] bridge0: port 4(veth0_vlan) entered blocking state [ 321.917509][T24347] bridge0: port 4(veth0_vlan) entered disabled state [ 321.928781][T24347] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 322.140080][T24361] loop2: detected capacity change from 0 to 1764 [ 322.189487][T24356] loop4: detected capacity change from 0 to 4096 [ 322.232092][ T5477] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.254546][ T5477] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.282394][ T5477] usb 1-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 322.300942][ T5477] usb 1-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 322.339812][T24356] ntfs: volume version 3.1. [ 322.392082][ T5477] usb 1-1: config 1 interface 1 has no altsetting 0 [ 322.411267][T24325] loop1: detected capacity change from 0 to 32768 [ 322.627859][ T5477] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.629027][T24402] loop4: detected capacity change from 0 to 1024 [ 322.641549][ T5477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.681506][ T5477] usb 1-1: Product: syz [ 322.739205][ T5477] usb 1-1: Manufacturer: syz [ 322.784833][ T5477] usb 1-1: SerialNumber: syz [ 322.818337][T24416] device erspan1 entered promiscuous mode [ 322.836488][T24325] XFS (loop1): Mounting V5 Filesystem [ 322.852108][ T4170] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 322.856057][ T5477] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 323.062380][T24325] XFS (loop1): Ending clean mount [ 323.062412][ T5483] usb 1-1: USB disconnect, device number 26 [ 323.102094][ T4170] usb 6-1: Using ep0 maxpacket: 16 [ 323.140325][ T4177] XFS (loop1): Unmounting Filesystem [ 323.264663][ T13] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 323.272772][ T4170] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.381077][ T4170] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 323.404579][ T4170] usb 6-1: config 0 has no interface number 0 [ 323.410710][ T4170] usb 6-1: config 0 interface 213 altsetting 251 bulk endpoint 0x5 has invalid maxpacket 24 [ 323.423233][ T4170] usb 6-1: config 0 interface 213 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 8 [ 323.433663][ T4170] usb 6-1: config 0 interface 213 has no altsetting 0 [ 323.532203][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 323.592436][ T4170] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=de.91 [ 323.601501][ T4170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.616587][T24464] binder: 24463:24464 ioctl c018620c 200013c0 returned -22 [ 323.625939][ T4170] usb 6-1: Product: syz [ 323.630212][ T4170] usb 6-1: Manufacturer: syz [ 323.643660][ T4170] usb 6-1: SerialNumber: syz [ 323.653939][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.680301][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 323.700107][ T4170] usb 6-1: config 0 descriptor?? [ 323.722484][T24394] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 323.740168][T24394] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 323.863654][ T13] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 323.892670][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.900690][ T13] usb 5-1: Product: syz [ 323.933135][ T13] usb 5-1: Manufacturer: syz [ 323.937761][ T13] usb 5-1: SerialNumber: syz [ 323.951323][ T13] usb 5-1: config 0 descriptor?? [ 324.125847][T24505] loop2: detected capacity change from 0 to 4096 [ 324.158211][T24505] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 324.172279][ T4170] usb 6-1: probing VID:PID(0424:012C) [ 324.185265][ T4170] usb 6-1: vub300 testing BULK OUT EndPoint(0) 05 [ 324.207124][ T4170] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0D [ 324.227479][ T4170] usb 6-1: vub300 testing BULK OUT EndPoint(2) 09 [ 324.261627][ T4170] usb 6-1: ignoring unexpected bulk_out endpoint [ 324.279923][ T4170] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 324.300234][ T4170] vub300: probe of 6-1:0.213 failed with error -22 [ 324.319053][ T4170] usb 6-1: USB disconnect, device number 10 [ 324.427826][T24481] loop1: detected capacity change from 0 to 32768 [ 324.460274][ T4515] usb 5-1: USB disconnect, device number 31 [ 324.579611][T24481] XFS (loop1): Mounting V5 Filesystem [ 324.733374][T24481] XFS (loop1): Ending clean mount [ 324.769551][ T4177] XFS (loop1): Unmounting Filesystem [ 325.032311][ T4515] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 325.076579][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6092'. [ 325.114112][ T5484] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 325.272192][ T4515] usb 1-1: Using ep0 maxpacket: 16 [ 325.372192][ T5484] usb 3-1: Using ep0 maxpacket: 16 [ 325.394454][ T4515] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.435225][ T4515] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.473124][ T4515] usb 1-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 325.498324][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.527988][ T5484] usb 3-1: config 0 has no interfaces? [ 325.702497][ T5484] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 325.711623][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.735248][T24662] loop5: detected capacity change from 0 to 764 [ 325.750332][ T5484] usb 3-1: Product: syz [ 325.755000][ T5484] usb 3-1: Manufacturer: syz [ 325.759619][ T5484] usb 3-1: SerialNumber: syz [ 325.775146][ T5484] r8152-cfgselector 3-1: config 0 descriptor?? [ 325.799533][T24669] loop1: detected capacity change from 0 to 256 [ 325.822162][ T4515] usb 1-1: string descriptor 0 read error: -71 [ 325.841008][T24662] Symlink component flag not implemented [ 325.850774][ T4515] usb 1-1: 0:2 : does not exist [ 325.859507][T24662] Symlink component flag not implemented (101) [ 325.892841][ T4515] usb 1-1: USB disconnect, device number 27 [ 325.910074][T24669] FAT-fs (loop1): Directory bread(block 64) failed [ 325.938556][T24669] FAT-fs (loop1): Directory bread(block 65) failed [ 325.947995][T24669] FAT-fs (loop1): Directory bread(block 66) failed [ 325.955459][T24669] FAT-fs (loop1): Directory bread(block 67) failed [ 325.968104][T24669] FAT-fs (loop1): Directory bread(block 68) failed [ 325.978035][T24669] FAT-fs (loop1): Directory bread(block 69) failed [ 325.989878][T24669] FAT-fs (loop1): Directory bread(block 70) failed [ 326.005906][T24669] FAT-fs (loop1): Directory bread(block 71) failed [ 326.021572][T24669] FAT-fs (loop1): Directory bread(block 72) failed [ 326.034880][T24669] FAT-fs (loop1): Directory bread(block 73) failed [ 326.056211][ T5484] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 326.086519][T10167] usb 3-1: config 0 descriptor?? [ 326.088627][T24698] loop5: detected capacity change from 0 to 2048 [ 326.164966][T24698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.182156][ T5930] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 326.199268][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.271889][ T4170] usb 3-1: USB disconnect, device number 24 [ 326.272172][T10167] usb 3-1: can't set config #0, error -71 [ 326.432303][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 326.441274][T24725] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 326.450933][T24725] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 326.552306][ T5930] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 326.565383][ T5930] usb 5-1: config 4 has no interface number 0 [ 326.586296][ T5930] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.601531][ T5930] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.602579][ T5484] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 326.619460][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 326.629105][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.688925][T24721] loop5: detected capacity change from 0 to 32768 [ 326.697015][ T5930] hub 5-1:4.128: USB hub found [ 326.777856][T24721] JBD2: Ignoring recovery information on journal [ 326.816627][T24744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6143'. [ 326.848722][T24721] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 326.867888][T24750] netlink: 'syz.2.6134': attribute type 4 has an invalid length. [ 326.902293][ T5930] hub 5-1:4.128: 2 ports detected [ 326.907373][ T5930] hub 5-1:4.128: Using single TT (err -22) [ 326.987819][T24721] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 4 but claims that 2046 are free [ 327.014534][T24721] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 327.031652][T24765] netlink: 'syz.0.6138': attribute type 27 has an invalid length. [ 327.036654][T24721] OCFS2: File system is now read-only. [ 327.040529][T24764] SET target dimension over the limit! [ 327.048505][T24721] (syz.5.6124,24721,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 327.050897][ T5484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 327.067134][T24721] (syz.5.6124,24721,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 327.079584][T24721] (syz.5.6124,24721,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 327.080889][ T5484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.095436][T24721] (syz.5.6124,24721,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 327.099566][ T5484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 327.121481][ T5484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 327.122131][ T5930] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 327.133669][T24721] (syz.5.6124,24721,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 327.148274][ T5930] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 327.171523][ T26] audit: type=1326 audit(1733918319.033:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24767 comm="syz.0.6139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b26cf19 code=0x0 [ 327.198642][T24721] (syz.5.6124,24721,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 327.208142][T24721] (syz.5.6124,24721,1):ocfs2_mknod_locked:637 ERROR: status = -30 [ 327.221656][T24772] binder: 24771:24772 ioctl c018620c 20000240 returned -1 [ 327.230312][ T5930] usb 5-1: USB disconnect, device number 32 [ 327.233957][T24721] (syz.5.6124,24721,1):ocfs2_mknod:383 ERROR: status = -30 [ 327.257926][T24721] (syz.5.6124,24721,1):ocfs2_mknod:500 ERROR: status = -30 [ 327.271876][T24721] (syz.5.6124,24721,1):ocfs2_mkdir:657 ERROR: status = -30 [ 327.316065][T15066] ocfs2: Unmounting device (7,5) on (node local) [ 327.332322][ T5484] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 327.351993][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.372206][ T5484] usb 2-1: Product: syz [ 327.391114][ T5484] usb 2-1: Manufacturer: syz [ 327.402418][ T5484] usb 2-1: SerialNumber: syz [ 327.415956][ T5484] usb 2-1: config 0 descriptor?? [ 327.473270][ T5484] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 327.483154][ T5484] cyphidcom ttyUSB0: required endpoint is missing [ 327.660579][T24809] loop5: detected capacity change from 0 to 64 [ 327.925026][T24829] netlink: 'syz.2.6159': attribute type 13 has an invalid length. [ 327.962864][T24829] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 328.005183][T24829] gretap0: refused to change device tx_queue_len [ 328.012466][T24829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.344023][ T4170] usb 2-1: USB disconnect, device number 14 [ 328.362835][ T4170] cypress_m8 2-1:0.0: device disconnected [ 328.536287][T24885] delete_channel: no stack [ 328.669950][T24901] loop4: detected capacity change from 0 to 1024 [ 328.876033][ T1181] hfsplus: b-tree write err: -5, ino 4 [ 329.396902][T24911] loop1: detected capacity change from 0 to 32768 [ 329.748943][T24940] loop4: detected capacity change from 0 to 32768 [ 330.090562][T24930] syz.2.6193 (24930): drop_caches: 3 [ 330.171417][T24940] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 330.375795][T25024] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6225'. [ 330.398851][T24940] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 330.454416][T24940] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 330.507166][T24940] OCFS2: File system is now read-only. [ 330.532091][T24940] (syz.4.6191,24940,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 330.550511][T25042] netlink: 468 bytes leftover after parsing attributes in process `syz.2.6231'. [ 330.587841][T24940] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 330.661679][T24940] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 330.692120][T24940] (syz.4.6191,24940,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 330.721212][T24940] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 330.754599][T25055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6235'. [ 330.779202][T24940] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 330.791826][T25061] loop1: detected capacity change from 0 to 256 [ 330.800677][T24940] (syz.4.6191,24940,0):ocfs2_prepare_dx_dir_for_insert:4158 ERROR: status = -30 [ 330.828799][T24940] (syz.4.6191,24940,0):ocfs2_prepare_dir_for_insert:4283 ERROR: status = -30 [ 330.843419][T24940] (syz.4.6191,24940,0):ocfs2_mknod:296 ERROR: status = -30 [ 330.859011][T24940] (syz.4.6191,24940,0):ocfs2_mknod:500 ERROR: status = -30 [ 330.918836][T24940] (syz.4.6191,24940,0):ocfs2_create:674 ERROR: status = -30 [ 331.224388][T25083] loop2: detected capacity change from 0 to 4096 [ 331.450467][ T4165] ocfs2: Unmounting device (7,4) on (node local) [ 331.484928][T25039] syz.5.6229 (25039): drop_caches: 3 [ 331.504420][T25083] ntfs: volume version 3.1. [ 331.799112][T25117] loop5: detected capacity change from 0 to 256 [ 331.873473][T25117] exfat: Deprecated parameter 'utf8' [ 331.878834][T25117] exfat: Deprecated parameter 'utf8' [ 331.965757][T25117] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 332.196271][T25147] loop1: detected capacity change from 0 to 1024 [ 332.267351][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6273'. [ 332.299439][T25147] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,bsddf,barrier=0x0000000000000000,bsddf,delalloc,lazytime,nodelalloc,acl,nouid32,,errors=continue. Quota mode: none. [ 332.352154][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6273'. [ 332.386894][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6273'. [ 332.485253][T25147] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.6269: inode #12: comm syz.1.6269: iget: illegal inode # [ 332.542083][ T4515] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 332.629076][T25189] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 332.647998][T25191] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.6282'. [ 332.762511][T25205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.769965][T25205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.792069][ T4515] usb 5-1: Using ep0 maxpacket: 8 [ 332.855116][T25205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.883987][T25205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.921376][ T4515] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 332.951671][ T4515] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 332.962841][ T4515] usb 5-1: config 135 has no interface number 0 [ 332.969436][ T4515] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 332.990951][ T4515] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 333.006431][ T4515] usb 5-1: config 135 interface 230 has no altsetting 0 [ 333.166209][T25232] loop5: detected capacity change from 0 to 2048 [ 333.193211][T25206] loop2: detected capacity change from 0 to 32768 [ 333.195409][ T4515] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 333.209962][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.221063][ T4515] usb 5-1: Product: syz [ 333.251173][ T4515] usb 5-1: Manufacturer: syz [ 333.265551][T25232] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 333.271249][T25237] No such timeout policy "syz1" [ 333.287994][T25206] JBD2: Ignoring recovery information on journal [ 333.292281][ T4515] usb 5-1: SerialNumber: syz [ 333.299240][T25232] UDF-fs: Scanning with blocksize 512 failed [ 333.317168][T25232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.371710][T25206] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 333.453991][ T5930] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 333.474833][ T4164] ocfs2: Unmounting device (7,2) on (node local) [ 333.562252][ T4515] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 333.568630][ T4515] usb 5-1: No valid video chain found. [ 333.781053][ T5205] usb 5-1: USB disconnect, device number 33 [ 333.822264][ T5930] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 333.830567][ T5930] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 333.839298][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.849481][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 333.858358][ T5930] usb 1-1: config 0 has no interface number 0 [ 333.864899][ T5930] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 333.874842][ T5930] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 333.885922][ T5930] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 333.895985][ T5930] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.909124][ T5930] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 333.918231][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.928676][ T5930] usb 1-1: config 0 descriptor?? [ 333.973726][ T5930] gspca_main: spca561-2.14.0 probing abcd:cdee [ 334.252093][ T5930] spca561: probe of 1-1:0.156 failed with error -22 [ 334.259222][ T5930] usb 1-1: MIDIStreaming interface descriptor not found [ 334.293695][ T5930] usb 1-1: USB disconnect, device number 28 [ 334.341072][T25300] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 334.467125][T25314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6306'. [ 334.498161][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6306'. [ 334.529141][T25314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6306'. [ 334.607491][T25324] loop5: detected capacity change from 0 to 8 [ 334.701472][T25307] syz.4.6304 (25307): drop_caches: 3 [ 334.742958][ T5484] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 334.776401][T25324] SQUASHFS error: xz decompression failed, data probably corrupt [ 334.791483][T25324] SQUASHFS error: Failed to read block 0x60: -5 [ 334.817746][T25324] SQUASHFS error: xz decompression failed, data probably corrupt [ 334.827329][T25324] SQUASHFS error: Failed to read block 0x60: -5 [ 334.837835][ T26] audit: type=1800 audit(1733918326.703:61): pid=25324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6308" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 334.855225][T25333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.864660][T25333] IPv6: NLM_F_CREATE should be set when creating new route [ 334.871887][T25333] IPv6: NLM_F_CREATE should be set when creating new route [ 334.959805][T25340] ipt_ECN: cannot use operation on non-tcp rule [ 335.214630][T25358] loop5: detected capacity change from 0 to 8192 [ 335.272371][ T5484] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.290554][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.299922][T25358] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 335.336018][T25358] REISERFS (device loop5): using ordered data mode [ 335.342835][T25358] reiserfs: using flush barriers [ 335.349543][ T5484] usb 2-1: Product: syz [ 335.349611][T25358] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 335.366571][ T5484] usb 2-1: Manufacturer: syz [ 335.375882][T25358] REISERFS (device loop5): checking transaction log (loop5) [ 335.429428][ T5484] usb 2-1: SerialNumber: syz [ 335.515089][T25358] REISERFS (device loop5): Using tea hash to sort names [ 335.533099][ T5484] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.562916][T25358] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 335.586776][T25390] loop4: detected capacity change from 0 to 512 [ 335.926578][T25363] syz.0.6324 (25363): drop_caches: 3 [ 335.946620][T25390] EXT4-fs (loop4): Ignoring removed oldalloc option [ 335.966901][T25390] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 336.018437][T25390] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,grpquota,resgid=0x0000000000000000,oldalloc,lazytime,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 336.048206][T25390] ext4 filesystem being mounted at /1166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.142024][T25421] QAT: Stopping all acceleration devices. [ 336.262366][ T5484] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.350747][T25431] loop5: detected capacity change from 0 to 4096 [ 336.452731][T25449] cgroup: name respecified [ 336.465719][T25431] ntfs: volume version 3.1. [ 336.486933][T25452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.540116][T25452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.555273][T25459] loop4: detected capacity change from 0 to 64 [ 336.597570][T25452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.605923][T25452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.767575][ T5205] usb 2-1: USB disconnect, device number 15 [ 336.995428][T25498] kernel profiling enabled (shift: 62) [ 337.005193][T25498] profiling shift: 62 too large [ 337.075404][ T5930] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 337.078202][T25513] program syz.2.6370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.171124][T25518] loop4: detected capacity change from 0 to 512 [ 337.252446][T25518] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 337.312084][ T5484] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 337.319074][ T5484] ath9k_htc: Failed to initialize the device [ 337.322252][T25518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 337.331121][ T5205] usb 2-1: ath9k_htc: USB layer deinitialized [ 337.370496][T25518] System zones: 1-12 [ 337.376962][T25518] EXT4-fs (loop4): orphan cleanup on readonly fs [ 337.387913][T25543] __nla_validate_parse: 1 callbacks suppressed [ 337.387926][T25543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6378'. [ 337.402880][T25518] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.6373: attempt to clear invalid blocks 1024 len 1 [ 337.425995][T25518] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6373: bg 0: block 361: padding at end of block bitmap is not set [ 337.487519][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.511256][T25518] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 337.544260][ T5930] usb 6-1: not running at top speed; connect to a high speed hub [ 337.570507][T25518] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.6373: invalid indirect mapped block 1811939328 (level 0) [ 337.589129][T25518] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.6373: invalid indirect mapped block 2 (level 2) [ 337.626158][T25518] EXT4-fs (loop4): 1 truncate cleaned up [ 337.633201][T25518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 337.647784][ T5930] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 337.680064][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0 [ 337.712773][T25561] xt_cluster: node mask cannot exceed total number of nodes [ 337.852411][ T5930] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 337.867380][T25545] syz.0.6381 (25545): drop_caches: 3 [ 337.880113][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.902012][ T5930] usb 6-1: Product: syz [ 337.907818][ T5930] usb 6-1: Manufacturer: ꧝砲햑圭䍲쑚ቜ칢拕趺齧긎㈔믗༑墛褐댉猛樢候賵ײַ݆ [ 337.929763][ T5930] usb 6-1: SerialNumber: syz [ 337.956487][T25481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 337.974443][T25587] loop1: detected capacity change from 0 to 8 [ 338.042789][T25587] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 338.087564][T25587] cramfs: bad data blocksize 4291821208 [ 338.096057][T25598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.108363][T25598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.115147][T25587] cramfs: bad data blocksize 4291821208 [ 338.122550][T25598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.142474][T25598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.167055][T25605] ip6t_REJECT: ECHOREPLY is not supported [ 338.290628][ T5930] usb 6-1: USB disconnect, device number 11 [ 338.393320][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6406'. [ 338.410555][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6406'. [ 338.612470][T25650] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6413'. [ 338.638662][T25657] damon: kdamond (25657) starts [ 338.692687][T25660] cgroup: none used incorrectly [ 338.730340][T25638] syz.0.6407 (25638): drop_caches: 3 [ 338.832321][T25673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.858020][T25673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.897759][T25681] loop5: detected capacity change from 0 to 64 [ 338.913331][T25673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.927678][T25673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.011381][ T26] audit: type=1800 audit(1733918330.873:62): pid=25681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6422" name="bus" dev="loop5" ino=3 res=0 errno=0 [ 339.204413][T25714] loop4: detected capacity change from 0 to 512 [ 339.282084][T25714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.319342][T25714] EXT4-fs (loop4): 1 truncate cleaned up [ 339.325581][T25731] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6439'. [ 339.355182][T25714] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,init_itable=0x0000000000008001,errors=remount-ro,data_err=ignore,. Quota mode: none. [ 339.461178][T25714] EXT4-fs error (device loop4): ext4_find_extent:893: inode #15: comm syz.4.6431: inode has invalid extent depth: 25964 [ 339.477224][T25714] EXT4-fs (loop4): Remounting filesystem read-only [ 339.484351][T25714] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 339.552306][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 339.623288][T25762] loop4: detected capacity change from 0 to 256 [ 339.685489][T25768] loop1: detected capacity change from 0 to 512 [ 339.711907][T25762] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 339.759765][T25768] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 339.778570][T25768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 339.787234][T25768] System zones: 1-12 [ 339.789319][T25779] QAT: Stopping all acceleration devices. [ 339.796416][T25768] EXT4-fs (loop1): orphan cleanup on readonly fs [ 339.811119][T25762] exFAT-fs (loop4): hint_cluster is invalid (1) [ 339.811506][T25768] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.6454: attempt to clear invalid blocks 1024 len 1 [ 339.844427][T25762] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 339.853977][T25768] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6454: bg 0: block 361: padding at end of block bitmap is not set [ 339.882615][T25768] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 339.910914][T25768] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6454: invalid indirect mapped block 1811939328 (level 0) [ 339.929853][T25762] exFAT-fs (loop4): Filesystem has been set read-only [ 339.962143][T25762] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880635a3560 iblock : 9, err : -5) [ 339.981132][T25768] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6454: invalid indirect mapped block 2 (level 2) [ 340.022299][T25762] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 340.048051][T25762] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 340.062852][T25768] EXT4-fs (loop1): 1 truncate cleaned up [ 340.071616][T25799] loop5: detected capacity change from 0 to 1024 [ 340.101143][T25768] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 340.112599][T25799] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 340.162228][T25799] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 340.207291][T25799] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: comm syz.5.6461: inode #1: comm syz.5.6461: iget: illegal inode # [ 340.257851][T25799] EXT4-fs (loop5): no journal found [ 340.277704][T25799] EXT4-fs (loop5): can't get journal size [ 340.333643][T25821] loop1: detected capacity change from 0 to 64 [ 340.349647][T25799] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,nouid32,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 340.383226][T25828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6470'. [ 340.394624][T25799] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 340.454510][ T26] audit: type=1800 audit(1733918332.323:63): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6468" name="bus" dev="loop1" ino=3 res=0 errno=0 [ 340.576755][T25844] affs: No valid root block on device nbd2 [ 340.690502][T25855] loop1: detected capacity change from 0 to 256 [ 340.726384][T25861] loop5: detected capacity change from 0 to 8 [ 340.772431][ T4516] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 340.820228][T25855] FAT-fs (loop1): Directory bread(block 64) failed [ 340.826490][T25867] device ip6gre1 entered promiscuous mode [ 340.848554][T25855] FAT-fs (loop1): Directory bread(block 65) failed [ 340.851173][T15066] SQUASHFS error: Unable to read directory block [629:1f] [ 340.864357][T25855] FAT-fs (loop1): Directory bread(block 66) failed [ 340.878985][T25855] FAT-fs (loop1): Directory bread(block 67) failed [ 340.887310][T15066] SQUASHFS error: Unable to read directory block [629:1f] [ 340.892816][T25855] FAT-fs (loop1): Directory bread(block 68) failed [ 340.911204][T25855] FAT-fs (loop1): Directory bread(block 69) failed [ 340.918339][T25855] FAT-fs (loop1): Directory bread(block 70) failed [ 340.925289][T25855] FAT-fs (loop1): Directory bread(block 71) failed [ 340.932710][T25855] FAT-fs (loop1): Directory bread(block 72) failed [ 340.939394][T25855] FAT-fs (loop1): Directory bread(block 73) failed [ 341.105365][T25868] loop2: detected capacity change from 0 to 32768 [ 341.132267][ T4516] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 341.138304][T25868] (syz.2.6482,25868,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 341.162828][ T4516] usb 5-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 341.178403][T25868] (syz.2.6482,25868,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 341.186807][ T4516] usb 5-1: config 0 has no interface number 0 [ 341.194395][ T5205] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 341.213151][T25868] JBD2: Ignoring recovery information on journal [ 341.258754][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.273085][T25868] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 341.339795][T25868] [ 341.342143][T25868] ====================================================== [ 341.349154][T25868] WARNING: possible circular locking dependency detected [ 341.352171][ T4516] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 341.356161][T25868] 5.15.173-syzkaller #0 Not tainted [ 341.356171][T25868] ------------------------------------------------------ [ 341.356177][T25868] syz.2.6482/25868 is trying to acquire lock: [ 341.356186][T25868] ffff888060e089c8 [ 341.374595][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.377348][T25868] (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 341.383542][ T4516] usb 5-1: Product: syz [ 341.387120][T25868] [ 341.387120][T25868] but task is already holding lock: [ 341.387127][T25868] ffff88807baba0a8 [ 341.395571][ T4516] usb 5-1: Manufacturer: syz [ 341.406145][T25868] (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 341.406187][T25868] [ 341.406187][T25868] which lock already depends on the new lock. [ 341.406187][T25868] [ 341.406192][T25868] [ 341.406192][T25868] the existing dependency chain (in reverse order) is: [ 341.406197][T25868] [ 341.406197][T25868] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 341.406218][T25868] lock_acquire+0x1db/0x4f0 [ 341.406232][T25868] __mutex_lock_common+0x1da/0x25a0 [ 341.406245][T25868] mutex_lock_nested+0x17/0x20 [ 341.406257][T25868] dquot_commit+0x57/0x510 [ 341.406271][T25868] ext4_write_dquot+0x1fd/0x360 [ 341.422898][ T4516] usb 5-1: SerialNumber: syz [ 341.426025][T25868] mark_all_dquot_dirty+0xf7/0x400 [ 341.458235][ T4516] usb 5-1: config 0 descriptor?? [ 341.461126][T25868] __dquot_free_space+0x932/0xe40 [ 341.507947][T25868] ext4_free_blocks+0x1f5c/0x2e90 [ 341.513493][T25868] ext4_ext_remove_space+0x24da/0x4db0 [ 341.516861][T25885] loop1: detected capacity change from 0 to 32768 [ 341.519464][T25868] ext4_ext_truncate+0x191/0x250 [ 341.519484][T25868] ext4_truncate+0x9fd/0x1130 [ 341.519501][T25868] ext4_setattr+0xf96/0x1990 [ 341.541578][T25868] notify_change+0xc6d/0xf50 [ 341.546690][T25868] do_truncate+0x21c/0x300 [ 341.551629][T25868] vfs_truncate+0x2dd/0x3a0 [ 341.556646][T25868] do_sys_truncate+0xda/0x190 [ 341.561827][T25868] do_syscall_64+0x3b/0xb0 [ 341.566744][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.573141][T25868] [ 341.573141][T25868] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 341.580763][T25868] lock_acquire+0x1db/0x4f0 [ 341.585770][T25868] down_write+0x38/0x60 [ 341.590434][T25868] ext4_map_blocks+0x9a2/0x1c70 [ 341.595879][T25868] ext4_writepages+0x160e/0x3d10 [ 341.601318][T25868] do_writepages+0x481/0x730 [ 341.606405][T25868] __writeback_single_inode+0x15b/0xe30 [ 341.612452][T25868] writeback_sb_inodes+0xbce/0x1a40 [ 341.618152][T25868] __writeback_inodes_wb+0x114/0x400 [ 341.623938][T25868] wb_writeback+0x465/0xc50 [ 341.628945][T25868] wb_workfn+0xd07/0x1130 [ 341.633774][T25868] process_one_work+0x8a1/0x10c0 [ 341.639212][T25868] worker_thread+0xaca/0x1280 [ 341.644387][T25868] kthread+0x3f6/0x4f0 [ 341.648955][T25868] ret_from_fork+0x1f/0x30 [ 341.653871][T25868] [ 341.653871][T25868] -> #4 (jbd2_handle){++++}-{0:0}: [ 341.661194][T25868] lock_acquire+0x1db/0x4f0 [ 341.666198][T25868] start_this_handle+0x12e1/0x1570 [ 341.671812][T25868] jbd2__journal_start+0x2d1/0x5c0 [ 341.677424][T25868] jbd2_journal_start+0x25/0x30 [ 341.682778][T25868] ocfs2_start_trans+0x3c2/0x6f0 [ 341.688219][T25868] ocfs2_modify_bh+0xe9/0x4c0 [ 341.693399][T25868] ocfs2_local_read_info+0x1587/0x19e0 [ 341.699358][T25868] dquot_load_quota_sb+0x754/0xb90 [ 341.704970][T25868] dquot_load_quota_inode+0x318/0x600 [ 341.710844][T25868] ocfs2_enable_quotas+0x165/0x440 [ 341.716457][T25868] ocfs2_fill_super+0x440e/0x58a0 [ 341.721981][T25868] mount_bdev+0x2c9/0x3f0 [ 341.726810][T25868] legacy_get_tree+0xeb/0x180 [ 341.731986][T25868] vfs_get_tree+0x88/0x270 [ 341.736899][T25868] do_new_mount+0x2ba/0xb40 [ 341.741899][T25868] __se_sys_mount+0x2d5/0x3c0 [ 341.747076][T25868] do_syscall_64+0x3b/0xb0 [ 341.751990][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.758409][T25868] [ 341.758409][T25868] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 341.766902][T25868] lock_acquire+0x1db/0x4f0 [ 341.771906][T25868] down_read+0x45/0x2e0 [ 341.776566][T25868] ocfs2_start_trans+0x3b7/0x6f0 [ 341.782004][T25868] ocfs2_modify_bh+0xe9/0x4c0 [ 341.787182][T25868] ocfs2_local_read_info+0x1587/0x19e0 [ 341.793144][T25868] dquot_load_quota_sb+0x754/0xb90 [ 341.798756][T25868] dquot_load_quota_inode+0x318/0x600 [ 341.804630][T25868] ocfs2_enable_quotas+0x165/0x440 [ 341.810241][T25868] ocfs2_fill_super+0x440e/0x58a0 [ 341.815773][T25868] mount_bdev+0x2c9/0x3f0 [ 341.820601][T25868] legacy_get_tree+0xeb/0x180 [ 341.825778][T25868] vfs_get_tree+0x88/0x270 [ 341.830698][T25868] do_new_mount+0x2ba/0xb40 [ 341.835700][T25868] __se_sys_mount+0x2d5/0x3c0 [ 341.840875][T25868] do_syscall_64+0x3b/0xb0 [ 341.845797][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.852194][T25868] [ 341.852194][T25868] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 341.859646][T25868] lock_acquire+0x1db/0x4f0 [ 341.864650][T25868] ocfs2_start_trans+0x2b2/0x6f0 [ 341.870090][T25868] ocfs2_write_info+0x124/0x3a0 [ 341.875442][T25868] dquot_set_dqinfo+0x488/0x6f0 [ 341.880800][T25868] quota_setinfo+0x3d6/0x4f0 [ 341.885887][T25868] __se_sys_quotactl+0x2b1/0x770 [ 341.891323][T25868] do_syscall_64+0x3b/0xb0 [ 341.896240][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.902640][T25868] [ 341.902640][T25868] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 341.911485][T25868] lock_acquire+0x1db/0x4f0 [ 341.916487][T25868] down_write+0x38/0x60 [ 341.921144][T25868] ocfs2_lock_global_qf+0x221/0x2a0 [ 341.926846][T25868] ocfs2_write_info+0xd2/0x3a0 [ 341.932111][T25868] dquot_set_dqinfo+0x488/0x6f0 [ 341.937469][T25868] quota_setinfo+0x3d6/0x4f0 [ 341.942559][T25868] __se_sys_quotactl+0x2b1/0x770 [ 341.947995][T25868] do_syscall_64+0x3b/0xb0 [ 341.952910][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.959306][T25868] [ 341.959306][T25868] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 341.969797][T25868] validate_chain+0x1649/0x5930 [ 341.975149][T25868] __lock_acquire+0x1295/0x1ff0 [ 341.980503][T25868] lock_acquire+0x1db/0x4f0 [ 341.985505][T25868] down_write+0x38/0x60 [ 341.990160][T25868] ocfs2_lock_global_qf+0x202/0x2a0 [ 341.995860][T25868] ocfs2_acquire_dquot+0x299/0xb40 [ 342.001473][T25868] dqget+0x762/0xe90 [ 342.005867][T25868] dquot_set_dqblk+0x27/0xf20 [ 342.011043][T25868] quota_setquota+0x6d3/0x840 [ 342.016219][T25868] __se_sys_quotactl+0x2b1/0x770 [ 342.021655][T25868] do_syscall_64+0x3b/0xb0 [ 342.026577][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.032974][T25868] [ 342.032974][T25868] other info that might help us debug this: [ 342.032974][T25868] [ 342.043177][T25868] Chain exists of: [ 342.043177][T25868] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &ei->i_data_sem --> &dquot->dq_lock [ 342.043177][T25868] [ 342.059065][T25868] Possible unsafe locking scenario: [ 342.059065][T25868] [ 342.066491][T25868] CPU0 CPU1 [ 342.071833][T25868] ---- ---- [ 342.077173][T25868] lock(&dquot->dq_lock); [ 342.081566][T25868] lock(&ei->i_data_sem); [ 342.088479][T25868] lock(&dquot->dq_lock); [ 342.095393][T25868] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 342.102668][T25868] [ 342.102668][T25868] *** DEADLOCK *** [ 342.102668][T25868] [ 342.110802][T25868] 2 locks held by syz.2.6482/25868: [ 342.115982][T25868] #0: ffff888057a9e0e0 (&type->s_umount_key#98){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 342.126150][T25868] #1: ffff88807baba0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 342.136136][T25868] [ 342.136136][T25868] stack backtrace: [ 342.142000][T25868] CPU: 1 PID: 25868 Comm: syz.2.6482 Not tainted 5.15.173-syzkaller #0 [ 342.150228][T25868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.160270][T25868] Call Trace: [ 342.163536][T25868] [ 342.166464][T25868] dump_stack_lvl+0x1e3/0x2d0 [ 342.171127][T25868] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 342.176746][T25868] ? print_circular_bug+0x12b/0x1a0 [ 342.181929][T25868] check_noncircular+0x2f8/0x3b0 [ 342.186853][T25868] ? add_chain_block+0x850/0x850 [ 342.191774][T25868] ? lockdep_lock+0x11f/0x2a0 [ 342.196436][T25868] ? _find_first_zero_bit+0xcf/0xf0 [ 342.201618][T25868] validate_chain+0x1649/0x5930 [ 342.206554][T25868] ? ocfs2_refresh_inode+0x960/0x960 [ 342.211826][T25868] ? reacquire_held_locks+0x660/0x660 [ 342.217183][T25868] ? ocfs2_read_blocks_sync+0xbc0/0xbc0 [ 342.222719][T25868] ? look_up_lock_class+0x77/0x120 [ 342.227820][T25868] ? register_lock_class+0x100/0x9a0 [ 342.233102][T25868] ? ocfs2_read_inode_block+0x148/0x1d0 [ 342.238633][T25868] ? is_dynamic_key+0x1f0/0x1f0 [ 342.243562][T25868] ? mark_lock+0x98/0x340 [ 342.247888][T25868] __lock_acquire+0x1295/0x1ff0 [ 342.252735][T25868] lock_acquire+0x1db/0x4f0 [ 342.257227][T25868] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 342.262595][T25868] ? read_lock_is_recursive+0x10/0x10 [ 342.267951][T25868] ? __might_sleep+0xc0/0xc0 [ 342.272523][T25868] ? do_raw_spin_lock+0x14a/0x370 [ 342.277533][T25868] ? do_raw_spin_unlock+0x137/0x8b0 [ 342.282713][T25868] down_write+0x38/0x60 [ 342.286849][T25868] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 342.292204][T25868] ocfs2_lock_global_qf+0x202/0x2a0 [ 342.297395][T25868] ? lock_buffer+0x80/0x80 [ 342.301813][T25868] ? __mutex_lock_common+0x444/0x25a0 [ 342.307169][T25868] ocfs2_acquire_dquot+0x299/0xb40 [ 342.312272][T25868] ? dqget+0x6dc/0xe90 [ 342.316333][T25868] ? mutex_unlock+0x10/0x10 [ 342.320821][T25868] ? from_kgid+0x1a3/0x730 [ 342.325220][T25868] ? ocfs2_destroy_dquot+0x40/0x40 [ 342.330317][T25868] ? percpu_counter_add_batch+0x142/0x160 [ 342.336023][T25868] dqget+0x762/0xe90 [ 342.339905][T25868] dquot_set_dqblk+0x27/0xf20 [ 342.344564][T25868] ? __might_fault+0xb4/0x110 [ 342.349227][T25868] quota_setquota+0x6d3/0x840 [ 342.353888][T25868] ? quota_getnextquota+0x6b0/0x6b0 [ 342.359158][T25868] ? bpf_lsm_capable+0x5/0x10 [ 342.363815][T25868] ? security_capable+0x86/0xb0 [ 342.368649][T25868] ? do_quotactl+0x4e1/0x6c0 [ 342.373309][T25868] __se_sys_quotactl+0x2b1/0x770 [ 342.378228][T25868] ? __lock_acquire+0x1ff0/0x1ff0 [ 342.383232][T25868] ? __x64_sys_quotactl+0xa0/0xa0 [ 342.388241][T25868] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 342.394202][T25868] ? print_irqtrace_events+0x210/0x210 [ 342.399639][T25868] ? vtime_user_exit+0x2d1/0x400 [ 342.404560][T25868] ? syscall_enter_from_user_mode+0x2e/0x240 [ 342.410523][T25868] ? lockdep_hardirqs_on+0x94/0x130 [ 342.415700][T25868] ? syscall_enter_from_user_mode+0x2e/0x240 [ 342.421662][T25868] do_syscall_64+0x3b/0xb0 [ 342.426058][T25868] ? clear_bhb_loop+0x15/0x70 [ 342.430727][T25868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.436600][T25868] RIP: 0033:0x7fd46fb5df19 [ 342.440997][T25868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.460590][T25868] RSP: 002b:00007fd46d9d4058 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 342.468991][T25868] RAX: ffffffffffffffda RBX: 00007fd46fd23fa0 RCX: 00007fd46fb5df19 [ 342.476947][T25868] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffff80000801 [ 342.484898][T25868] RBP: 00007fd46fbd1cc8 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.492850][T25868] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 342.500800][T25868] R13: 0000000000000000 R14: 00007fd46fd23fa0 R15: 00007ffe88312558 [ 342.508756][T25868] [ 342.563992][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.600243][T25885] jfs_rename did not expect dtDelete to return rc = -2 [ 342.607755][T25885] ERROR: (device loop1): jfs_rename: [ 342.607755][T25885] [ 342.612180][ T4516] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 342.622778][ T4516] usb 5-1: No valid video chain found. [ 342.632102][ T5205] usb 1-1: Using ep0 maxpacket: 16 [ 342.641369][T25885] ERROR: (device loop1): remounting filesystem as read-only [ 342.649851][ T4516] usb 5-1: USB disconnect, device number 34 [ 342.705520][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.812802][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.922820][T25908] lo speed is unknown, defaulting to 1000 [ 343.032175][ T5205] usb 1-1: device descriptor read/all, error -71 [ 343.139051][T25864] ocfs2: Unmounting device (7,2) on (node local) [ 343.259859][T25908] chnl_net:caif_netlink_parms(): no params data found [ 343.310175][T25908] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.323027][T25908] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.330852][T25908] device bridge_slave_0 entered promiscuous mode [ 343.339561][T25908] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.347313][T25908] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.355262][T25908] device bridge_slave_1 entered promiscuous mode [ 343.385870][T25908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.397955][T25908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.415496][ T154] bridge0: port 3(erspan0) entered disabled state [ 343.425068][ T154] device erspan0 left promiscuous mode [ 343.430618][ T154] bridge0: port 3(erspan0) entered disabled state [ 343.450148][T25908] team0: Port device team_slave_0 added [ 343.460495][T25908] team0: Port device team_slave_1 added [ 343.498073][T25908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.505701][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.532095][T25908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.544915][T25908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.551850][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.577733][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.585527][T25908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.625387][T25908] device hsr_slave_0 entered promiscuous mode [ 343.633423][T25908] device hsr_slave_1 entered promiscuous mode [ 343.639923][T25908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.648444][T25908] Cannot create hsr debugfs directory [ 343.780261][T25908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.789115][T25908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.800217][T25908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.824635][T25908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.853512][ T154] device hsr_slave_0 left promiscuous mode [ 343.859602][ T154] device hsr_slave_1 left promiscuous mode [ 343.866150][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.874788][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.882526][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.889930][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.897817][ T154] device bridge_slave_1 left promiscuous mode [ 343.904002][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.911695][ T154] device bridge_slave_0 left promiscuous mode [ 343.918156][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.927973][ T154] device veth1_macvtap left promiscuous mode [ 343.934063][ T154] device veth0_macvtap left promiscuous mode [ 343.940054][ T154] device veth1_vlan left promiscuous mode [ 343.945909][ T154] device veth0_vlan left promiscuous mode [ 344.093788][ T154] bond1 (unregistering): Released all slaves [ 344.131769][ T154] team0 (unregistering): Port device team_slave_1 removed [ 344.141786][ T154] team0 (unregistering): Port device team_slave_0 removed [ 344.152216][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.166653][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.204884][ T154] bond0 (unregistering): Released all slaves [ 344.290870][T25908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.312575][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.320306][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.330351][T25908] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.356694][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.366359][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.400762][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.407888][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.425921][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.434083][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.443076][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.451633][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.458717][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.466543][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.476087][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.486386][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.495425][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.530550][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.538759][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.548095][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.556865][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.567812][T25908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.580633][T25908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.590682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.669456][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.678633][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.693472][T25908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.840662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.848986][ T5205] Bluetooth: hci2: command 0x0409 tx timeout [ 344.854282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.869301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.878685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.887280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.897965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.909122][T25908] device veth0_vlan entered promiscuous mode [ 344.928201][T25908] device veth1_vlan entered promiscuous mode [ 344.957576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.967107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.980390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.988972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.005078][T25908] device veth0_macvtap entered promiscuous mode [ 345.015650][T25908] device veth1_macvtap entered promiscuous mode [ 345.056754][T25908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.073993][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.092972][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.100981][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.116770][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.127047][T25908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.136562][T25908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.146849][T25908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.155846][T25908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.164805][T25908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.178276][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.187073][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.229471][T25908] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 345.260215][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.274747][T25908] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 345.282487][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.293842][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.308699][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.317711][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.326357][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.347899][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.437800][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.516353][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.719708][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.786100][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.847953][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.007972][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.087302][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.156543][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.215466][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.309522][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.375689][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.416436][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.466567][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.045591][ T154] bridge0: port 3(erspan0) entered disabled state [ 347.056366][ T154] bridge0: port 3(erspan0) entered disabled state [ 347.066207][ T154] device erspan0 left promiscuous mode [ 347.072299][ T154] bridge0: port 3(erspan0) entered disabled state [ 347.083710][ T154] device erspan0 left promiscuous mode [ 347.089169][ T154] bridge0: port 3(erspan0) entered disabled state [ 347.977081][ T154] device hsr_slave_0 left promiscuous mode [ 347.983382][ T154] device hsr_slave_1 left promiscuous mode [ 347.989575][ T154] device bridge_slave_1 left promiscuous mode [ 347.996140][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.005789][ T154] device bridge_slave_0 left promiscuous mode [ 348.012225][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.022413][ T154] device hsr_slave_0 left promiscuous mode [ 348.028456][ T154] device hsr_slave_1 left promiscuous mode [ 348.034669][ T154] device bridge_slave_1 left promiscuous mode [ 348.040767][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.049554][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.060483][ T154] device hsr_slave_0 left promiscuous mode [ 348.066709][ T154] device hsr_slave_1 left promiscuous mode [ 348.073016][ T154] device bridge_slave_1 left promiscuous mode [ 348.079119][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.087570][ T154] device bridge_slave_0 left promiscuous mode [ 348.093716][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.105041][ T154] device hsr_slave_0 left promiscuous mode [ 348.111082][ T154] device hsr_slave_1 left promiscuous mode [ 348.117443][ T154] device bridge_slave_1 left promiscuous mode [ 348.123866][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.131532][ T154] device bridge_slave_0 left promiscuous mode [ 348.137858][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.149428][ T154] device veth1_macvtap left promiscuous mode [ 348.155597][ T154] device veth0_macvtap left promiscuous mode [ 348.161603][ T154] device veth1_vlan left promiscuous mode [ 348.168848][ T154] device veth1_macvtap left promiscuous mode [ 348.175047][ T154] device veth1_vlan left promiscuous mode [ 348.181253][ T154] device veth1_macvtap left promiscuous mode [ 348.187309][ T154] device veth1_vlan left promiscuous mode [ 348.193466][ T154] device veth0_vlan left promiscuous mode [ 348.199614][ T154] device veth1_macvtap left promiscuous mode [ 348.205872][ T154] device veth0_macvtap left promiscuous mode [ 348.211873][ T154] device veth1_vlan left promiscuous mode [ 348.217698][ T154] device veth0_vlan left promiscuous mode [ 348.364868][ T154] bond4 (unregistering): Released all slaves [ 348.374153][ T154] bond3 (unregistering): Released all slaves [ 348.384472][ T154] bond2 (unregistering): Released all slaves [ 348.563842][ T154] bond1 (unregistering): Released all slaves [ 348.599654][ T154] team0 (unregistering): Port device team_slave_1 removed [ 348.610207][ T154] team0 (unregistering): Port device team_slave_0 removed [ 348.621397][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.633322][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.668734][ T154] bond0 (unregistering): Released all slaves [ 348.773830][ T154] bond1 (unregistering): Released all slaves [ 348.898155][ T154] team0 (unregistering): Port device team_slave_1 removed [ 348.907697][ T154] team0 (unregistering): Port device team_slave_0 removed [ 348.917211][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.928559][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.965076][ T154] bond0 (unregistering): Released all slaves [ 349.173277][ T154] bond2 (unregistering): Released all slaves [ 349.181667][ T154] bond1 (unregistering): Released all slaves [ 349.216124][ T154] team0 (unregistering): Port device team_slave_1 removed [ 349.225913][ T154] team0 (unregistering): Port device team_slave_0 removed [ 349.235325][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.248776][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.286031][ T154] bond0 (unregistering): Released all slaves [ 349.453330][ T154] bond3 (unregistering): Released all slaves [ 349.461678][ T154] bond2 (unregistering): Released all slaves [ 349.514261][ T154] bond1 (unregistering): Released all slaves [ 349.584641][ T154] team0 (unregistering): Port device geneve1 removed [ 349.617567][ T154] team0 (unregistering): Port device team_slave_1 removed [ 349.627102][ T154] team0 (unregistering): Port device team_slave_0 removed [ 349.636808][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.649994][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.684981][ T154] bond0 (unregistering): Released all slaves [ 349.740180][ T4170] lo speed is unknown, defaulting to 1000 [ 351.055672][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.095797][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.145075][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.195318][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0