last executing test programs: 19m4.055084311s ago: executing program 1 (id=1972): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) write$P9_RVERSION(r0, 0x0, 0x15) 19m3.86028862s ago: executing program 1 (id=1976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000040)="b9a98b2b8df5b6898c3fe0927cdfee24ad5d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19m3.423013023s ago: executing program 1 (id=1978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 19m2.935626701s ago: executing program 1 (id=1985): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000003080)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LsIwvAf8K8Y6GDIKPogSOWmN122Jv2ZLdny+cDdzrn3JuecnPs9PTcnIQH0rdHsn0LEyxHxdRJxqOnYYOQHR1fPW35wbSrbklhZ+eSvJJJ8X+P8JP9/OM+8FBG/fRlxorC+3Ori0mypXE7n8/xYbe7yWHVx6eTFudJMOpNempicPP3W5MS777zdsba+fu6f7z6+88Hpr44tf/vTvcO3kjgTB/Njze3YhevNmdEYzV+ToTjz2InjHSislyTdrgA7MpDH+VBkY8ChGMijHnj+fRERK0CfSsQ/9KnGPKBxb9+h++Bnxv33V2+A1rd/cPW9kdhXvzc6sJw8cmeU3e+OdKD8rIyf/7x9K9uic+9DAGzq+o2IODU4uH78S/Lxb+dObeGcx8vY5vi3ss0qAU3uZPOfN1rNfwpr859oMf8ZbhG7O9E6/pvDunCvA8W0lc3/3ms5/11btBoZyHMv1Od8Q8mFi+U0G9tejIjjMbQ3y2+0nnN6+W7bcap5/pdtWfmNuWBej3uDex99zHSpVtpNm5vdvxHxSsv5b7LW/0mL/s9ej3NbLONoevvVdsc2b/+TtfJjxGst+//hilay8frkWP16GGtcFev9ffPo7+3K73b7s/4/sHH7R5Lm9drq9sv4Yd+/abtjO73+9ySf1tN78n1XS7Xa/HjEnuSj9fsnHj62kW+cn7X/+LGNx79W1//+iPhsi+2/eeRm21N7of+nt9X/20/c/fDz79uVv7X+f7OeOp7v2cr4t9UK7ua1AwAAAAAAgF5TiIiDkRSKa+lCoVhc/XzHkThQKFeqtRMXKguXpqP+XdmRGCo0VrqHmz4PMZ5/HraRn3gsPxkRhyPim4H99XxxqlKe7nbjAQAAAAAAAAAAAAAAAAAAoEcMt/n+f+aPgW7XDnji/OQ39K9N478Tv/QE9CR//6F/iX/oX+If+pf4h/4l/qF/iX/oX9uK/9v/PbmKAE9di/j/5dduVAQAAAAAAAAAAAAAAAAAAAAAAAAAAACeD+fOns22leUH16ay/PSVxYXZypWT02l1tji3MFWcqsxfLs5UKjPltDhVmdvs+cqVyuXxiVi4OlZLq7Wx6uLS+bnKwqXa+YtzpZn0fDr0VFoFAAAAAAAAAAAAAAAAAAAAz5bq4tJsqVxO5yUkdpQY7I1qSKwmGoG96yfs7rgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3+DwAA//9i5TpB") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 19m2.300751253s ago: executing program 1 (id=1995): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x48574653, 0x2, @stepwise={0xffffff7f, 0x1, 0x101, 0xf, 0xffff, 0x1}}) 19m1.387025333s ago: executing program 1 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x8, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 19m0.965582165s ago: executing program 32 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x8, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 18m33.327093808s ago: executing program 0 (id=2230): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) 18m33.201308681s ago: executing program 0 (id=2233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x36, 0x0, &(0x7f0000000300)="c5dfb080cd20d308098e000086dd6be9ff2296e3cbdb2486bead973bc901bf66833258a40841b286a5eed7e91b051055b287e225946c", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m32.743815206s ago: executing program 0 (id=2239): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 18m32.571165233s ago: executing program 0 (id=2242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000003080)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 18m32.054550483s ago: executing program 0 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000400000000000900020073797a310000000014000780080013400000000008000640000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x10) 18m31.666075072s ago: executing program 0 (id=2256): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) 18m31.201351297s ago: executing program 33 (id=2256): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) 7m37.061822373s ago: executing program 3 (id=10673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'dummy0\x00', {0x20001}, 0x8}) 7m36.833909735s ago: executing program 3 (id=10675): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xd) 7m36.536429305s ago: executing program 3 (id=10679): r0 = syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x48000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000000c0)) 7m36.347762353s ago: executing program 3 (id=10683): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 7m36.06520149s ago: executing program 3 (id=10687): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 7m35.751063962s ago: executing program 3 (id=10690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_newroute={0xa0, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x3}, {0x8}, {0xce000, 0x0, 0x1}, {0x5}, {0x4}, {0x561}, {0xe, 0x0, 0x1}, {0x35bd, 0x0, 0x1}, {0x7}, {0x6}, {0x3}, {0x8, 0x0, 0x1}, {0x2}, {0xffff7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7}, {0xf2fe5, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x8}, {}, {0x3, 0x0, 0x1}, {0x2}, {0x7}, {0x7}, {0x4, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 7m35.297247376s ago: executing program 34 (id=10690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_newroute={0xa0, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x3}, {0x8}, {0xce000, 0x0, 0x1}, {0x5}, {0x4}, {0x561}, {0xe, 0x0, 0x1}, {0x35bd, 0x0, 0x1}, {0x7}, {0x6}, {0x3}, {0x8, 0x0, 0x1}, {0x2}, {0xffff7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7}, {0xf2fe5, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x8}, {}, {0x3, 0x0, 0x1}, {0x2}, {0x7}, {0x7}, {0x4, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 4.147023073s ago: executing program 5 (id=16481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000070601020000000000000000030000010500010007000000050001000700000008000640000000030900020073797a3100000000050001000700000008000640000000100800064000000005"], 0x50}, 0x1, 0x0, 0x0, 0x44815}, 0x24000000) 3.918091755s ago: executing program 5 (id=16483): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x19, 0x1, 0x3, "000000000000000405f126b8454ad22de3ffffffff39361e9700", 0x35315258}) 3.744880612s ago: executing program 5 (id=16485): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.180417808s ago: executing program 2 (id=16492): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002040)={0x2, 0x2, {0x1ff, @struct={0x3, 0x6}, 0x0, 0x6, 0x1, 0x7, 0x2, 0x0, 0x8, @struct={0x163}, 0x1, 0x402, [0x80000000, 0x0, 0x2, 0x4, 0x4de6, 0x9]}, {0x2, @struct={0x5e, 0x9}, 0x0, 0x1, 0x2, 0x20080000009, 0x4, 0xfffffffffffffff9, 0x4a0, @struct={0x9, 0xd3}, 0x5, 0x5, [0x100000000000, 0xffffffffffffffff, 0x0, 0x8, 0x8f3, 0x9]}, {0xf7a, @usage, 0x0, 0x80000000000000, 0x400000000000, 0x8000000000000001, 0xffffffff, 0x100000000000000c, 0x4fb, @struct={0x0, 0x13ffd}, 0x0, 0x7fff, [0x0, 0x6, 0x4000000000000, 0x0, 0xd44f, 0x6]}, {0x3, 0x616600000000, 0x400000}}) 2.759390079s ago: executing program 6 (id=16497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000130a0500000000000000000003000008080003400000000608000340000000030900020073797a31eeffffff07000340"], 0x138}, 0x1, 0x0, 0x0, 0x40040}, 0x40004) 2.602951204s ago: executing program 6 (id=16500): syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c0002010351000905031300000000000725010f00000009050f00"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 1.165027176s ago: executing program 2 (id=16507): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c6425636f6d706f73f9ffffffffff01000000000000a0f5c7", @ANYRESHEX=0x0, @ANYBLOB="2c747970653d826d74172c666f7263652c00"], 0x3, 0x6b9, &(0x7f0000000240)="$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") statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100, 0xb38dcf3f7bb4b8a7, 0x0) 1.143342308s ago: executing program 4 (id=16508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, 0x0) 1.007059351s ago: executing program 4 (id=16509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 793.996652ms ago: executing program 2 (id=16510): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x3d) 758.008326ms ago: executing program 6 (id=16511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) 754.341676ms ago: executing program 4 (id=16512): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x0, 0x0, @SEQ_NOTEON}) 550.583086ms ago: executing program 5 (id=16513): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 549.966406ms ago: executing program 2 (id=16514): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 507.86531ms ago: executing program 4 (id=16515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfa, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfd}}]}, 0x1c}}, 0x40050) 462.797505ms ago: executing program 6 (id=16516): personality(0x5d28870e52b2f29b) uname(&(0x7f0000000640)=""/4096) 311.56828ms ago: executing program 6 (id=16517): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7e5, 0xf8d8, 0x40, 0x61f8, 0x4abd6a1f4eb9d584}}) 287.954802ms ago: executing program 5 (id=16518): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 285.726632ms ago: executing program 2 (id=16519): r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, 0x0, 0x0, 0x800) 201.72486ms ago: executing program 4 (id=16520): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, 0x0, 0xff35) 90.697941ms ago: executing program 6 (id=16521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 24.153968ms ago: executing program 2 (id=16522): r0 = syz_open_dev$loop(&(0x7f0000000200), 0xff, 0x740) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 13.983359ms ago: executing program 5 (id=16523): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x225, 0x12) 0s ago: executing program 4 (id=16524): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000340)={0x2, "8ee4ca2bf9ad9950c598a3d768671083cddd47fc312caf234423ba70d826c815", 0x1, 0x5, 0x3, 0x100000, 0x10010}) kernel console output (not intermixed with test programs): or ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1212.721291][ T5885] visor 7-1:1.0: device disconnected [ 1213.536711][T10617] netlink: 'syz.4.14396': attribute type 5 has an invalid length. [ 1213.582518][T10611] loop2: detected capacity change from 0 to 8192 [ 1213.598945][ T5885] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1213.630616][T10611] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1213.655945][T10611] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1213.665393][T10611] REISERFS (device loop2): using ordered data mode [ 1213.673582][T10611] reiserfs: using flush barriers [ 1213.685369][T10611] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1213.720523][T10611] REISERFS (device loop2): checking transaction log (loop2) [ 1213.815103][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.855448][ T5885] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1213.905753][ T5885] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1213.949908][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.985561][ T5885] usb 7-1: config 0 descriptor?? [ 1214.023705][T10611] REISERFS (device loop2): Using tea hash to sort names [ 1214.079217][T10611] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1214.257072][T10640] netlink: 'syz.4.14402': attribute type 21 has an invalid length. [ 1214.265922][T10640] netlink: 'syz.4.14402': attribute type 1 has an invalid length. [ 1214.274916][T10640] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14402'. [ 1214.424034][ T5885] Bluetooth: Can't get state to change to load configuration err [ 1214.445365][ T5885] Bluetooth: Loading sysconfig file failed [ 1214.479224][ T5885] ath3k: probe of 7-1:0.0 failed with error -16 [ 1214.498729][ T5885] usb 7-1: USB disconnect, device number 19 [ 1215.182009][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14413'. [ 1215.207601][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14413'. [ 1215.508504][T10701] No source specified [ 1215.668626][T10707] cgroup: Unexpected value for 'nofavordynmods' [ 1215.732079][T10710] overlayfs: overlapping lowerdir path [ 1216.204266][T10685] loop6: detected capacity change from 0 to 32768 [ 1216.689833][T10753] netlink: 5064 bytes leftover after parsing attributes in process `syz.4.14437'. [ 1216.691164][T10751] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14436'. [ 1216.724648][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14436'. [ 1217.372510][T10782] autofs4:pid:10782:autofs_fill_super: called with bogus options [ 1217.413771][T10785] loop6: detected capacity change from 0 to 2048 [ 1217.512081][T10785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1217.868491][T10809] Zero length message leads to an empty skb [ 1218.039857][T10815] loop4: detected capacity change from 0 to 2048 [ 1218.094128][T10815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1218.336480][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14458'. [ 1218.355153][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14458'. [ 1218.582772][T10845] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14462'. [ 1218.836632][T10859] netlink: 'syz.6.14465': attribute type 21 has an invalid length. [ 1218.876933][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14465'. [ 1218.958467][ T966] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1219.142926][ T966] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1219.158677][ T966] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1219.198487][ T966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1219.230763][ T966] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1219.248443][ T966] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1219.281854][ T966] usb 5-1: Product: syz [ 1219.286087][ T966] usb 5-1: Manufacturer: syz [ 1219.300974][ T966] usb 5-1: SerialNumber: syz [ 1219.309798][ T966] usb 5-1: config 0 descriptor?? [ 1219.344436][ T966] hub 5-1:0.0: bad descriptor, ignoring hub [ 1219.351981][ T966] hub: probe of 5-1:0.0 failed with error -5 [ 1219.371864][ T966] usb 5-1: selecting invalid altsetting 0 [ 1219.451036][T10889] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1219.530247][ T5885] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1219.748407][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1219.758154][ T5885] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1219.768207][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.783930][ T5885] usb 3-1: config 0 descriptor?? [ 1219.799593][ T28] usb 5-1: USB disconnect, device number 53 [ 1219.878905][ T5885] as10x_usb: device has been detected [ 1219.898594][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1220.001095][T21575] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1220.031721][ T5885] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1220.061292][ T5885] as10x_usb: error during firmware upload part1 [ 1220.069221][ T5885] Registered device nBox DVB-T Dongle [ 1220.072943][ T5885] usb 3-1: USB disconnect, device number 54 [ 1220.111251][ T5885] Unregistered device nBox DVB-T Dongle [ 1220.118839][ T5885] as10x_usb: device has been disconnected [ 1220.230498][T21575] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 1220.239581][T21575] usb 7-1: config 0 has no interface number 0 [ 1220.262702][T21575] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 1220.276312][T21575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.285329][T21575] usb 7-1: Product: syz [ 1220.292986][T21575] usb 7-1: Manufacturer: syz [ 1220.297766][T21575] usb 7-1: SerialNumber: syz [ 1220.319537][T21575] usb 7-1: config 0 descriptor?? [ 1220.348221][T21575] usbserial_generic 7-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1220.365846][T21575] usbserial_generic 7-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1220.379571][T21575] usbserial_generic 7-1:0.244: device has no bulk endpoints [ 1220.387685][T21575] safe_serial 7-1:0.244: safe_serial converter detected [ 1220.408515][T21575] safe_serial: probe of 7-1:0.244 failed with error -22 [ 1220.586741][T26738] usb 7-1: USB disconnect, device number 20 [ 1222.023173][T11044] loop4: detected capacity change from 0 to 1024 [ 1222.356538][T30295] hfsplus: b-tree write err: -5, ino 4 [ 1223.139670][T11105] gretap2: entered promiscuous mode [ 1224.123918][T11157] loop4: detected capacity change from 0 to 16 [ 1224.164618][T11157] erofs: (device loop4): mounted with root inode @ nid 36. [ 1224.207535][T11157] syz.4.14537: attempt to access beyond end of device [ 1224.207535][T11157] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 1224.218567][T11162] netlink: 'syz.2.14538': attribute type 1 has an invalid length. [ 1224.680348][T11179] __nla_validate_parse: 2 callbacks suppressed [ 1224.680368][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14542'. [ 1224.790492][T11151] loop6: detected capacity change from 0 to 32768 [ 1224.869075][T11151] jfs: Unrecognized mount option "1844674407370955161501777777777777777777777V?Cp~'~8pٻ젌|^(coM)0177777777777777777777718446744073709551615" or missing value [ 1225.069201][T11192] xt_TCPMSS: Only works on TCP SYN packets [ 1225.168111][T11200] loop2: detected capacity change from 0 to 256 [ 1225.206629][T11200] exfat: Deprecated parameter 'namecase' [ 1225.218742][T11200] exfat: Deprecated parameter 'namecase' [ 1225.224494][T11200] exfat: Deprecated parameter 'utf8' [ 1225.299758][T11200] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 1227.284740][T11303] xfrm0: mtu greater than device maximum [ 1228.419260][ T2200] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1228.668657][ T2200] usb 7-1: Using ep0 maxpacket: 8 [ 1228.697708][ T2200] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1228.707037][ T2200] usb 7-1: config 0 has no interface number 0 [ 1228.731529][ T2200] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1228.768556][ T2200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.786983][ T2200] usb 7-1: Product: syz [ 1228.797562][ T2200] usb 7-1: Manufacturer: syz [ 1228.812968][ T2200] usb 7-1: SerialNumber: syz [ 1228.833561][ T2200] usb 7-1: config 0 descriptor?? [ 1228.855709][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14602'. [ 1229.061763][ T2200] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1229.082233][ T2200] usb 7-1: No valid video chain found. [ 1229.112848][ T2200] usb 7-1: USB disconnect, device number 21 [ 1229.307415][T11361] loop2: detected capacity change from 0 to 32768 [ 1229.417769][T11361] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1229.545627][T11427] loop4: detected capacity change from 0 to 512 [ 1229.611697][T11427] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 1229.682627][T11427] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 1229.740189][T11361] XFS (loop2): Ending clean mount [ 1229.747215][T11427] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.14610: iget: bad i_size value: 12154757448730 [ 1229.780339][ T966] XFS (loop2): Corruption warning: Metadata has LSN (2:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1229.823073][ T966] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 1229.848467][T11427] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.14610: couldn't read orphan inode 13 (err -117) [ 1229.858410][ T966] XFS (loop2): Unmount and run xfs_repair [ 1229.882558][T11427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.904506][ T966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1229.934588][ T966] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1229.978364][ T966] 00000010: 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 80 ................ [ 1229.995379][T11427] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 1230.008389][ T966] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1230.038654][ T966] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 1230.086003][ T966] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1230.103302][T11444] netlink: 'syz.5.14615': attribute type 10 has an invalid length. [ 1230.116443][T10351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.139676][ T966] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1230.203577][T11444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1230.208482][ T966] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1230.234242][ T966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1230.244334][T11361] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 4 error 74 [ 1230.308791][T11361] XFS (loop2): Failed to initialize disk quotas. [ 1230.337145][T11452] loop6: detected capacity change from 0 to 1024 [ 1230.604340][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1230.649104][ T1137] hfsplus: b-tree write err: -5, ino 4 [ 1230.791713][T11470] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.313413][T11497] loop2: detected capacity change from 0 to 64 [ 1231.682901][T11514] loop2: detected capacity change from 0 to 256 [ 1231.761538][T11514] FAT-fs (loop2): Directory bread(block 64) failed [ 1231.788544][T11514] FAT-fs (loop2): Directory bread(block 65) failed [ 1231.795312][T11514] FAT-fs (loop2): Directory bread(block 66) failed [ 1231.828746][T11514] FAT-fs (loop2): Directory bread(block 67) failed [ 1231.835820][T11514] FAT-fs (loop2): Directory bread(block 68) failed [ 1231.868618][T11514] FAT-fs (loop2): Directory bread(block 69) failed [ 1231.875365][T11514] FAT-fs (loop2): Directory bread(block 70) failed [ 1231.925504][T11514] FAT-fs (loop2): Directory bread(block 71) failed [ 1231.934885][T11514] FAT-fs (loop2): Directory bread(block 72) failed [ 1231.942858][T11514] FAT-fs (loop2): Directory bread(block 73) failed [ 1231.985494][ T27] audit: type=1400 audit(1231.930:537): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11522 comm="syz.6.14636" [ 1232.421714][T11550] dlm: non-version read from control device 0 [ 1232.926191][T11573] netlink: 'syz.4.14652': attribute type 4 has an invalid length. [ 1232.968181][T11573] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.14652'. [ 1232.981567][T11579] netlink: 'syz.2.14654': attribute type 10 has an invalid length. [ 1233.072686][T11579] team0: Cannot enslave team device to itself [ 1233.220643][T11589] ip6t_srh: unknown srh invflags 7D00 [ 1233.553411][T11599] loop4: detected capacity change from 0 to 4096 [ 1233.642669][T11613] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1233.994049][T11632] netlink: 'syz.5.14671': attribute type 1 has an invalid length. [ 1234.036399][T11632] netlink: 'syz.5.14671': attribute type 1 has an invalid length. [ 1234.441821][T11654] loop6: detected capacity change from 0 to 128 [ 1234.751758][T11669] loop4: detected capacity change from 0 to 1024 [ 1235.043062][T11684] loop6: detected capacity change from 0 to 256 [ 1235.164093][T11684] FAT-fs (loop6): Directory bread(block 64) failed [ 1235.186505][T11684] FAT-fs (loop6): Directory bread(block 65) failed [ 1235.240481][T11684] FAT-fs (loop6): Directory bread(block 66) failed [ 1235.247094][T11684] FAT-fs (loop6): Directory bread(block 67) failed [ 1235.308622][T11684] FAT-fs (loop6): Directory bread(block 68) failed [ 1235.318505][T11684] FAT-fs (loop6): Directory bread(block 69) failed [ 1235.325547][T11684] FAT-fs (loop6): Directory bread(block 70) failed [ 1235.358564][T11684] FAT-fs (loop6): Directory bread(block 71) failed [ 1235.372508][T11684] FAT-fs (loop6): Directory bread(block 72) failed [ 1235.391071][T11684] FAT-fs (loop6): Directory bread(block 73) failed [ 1235.518541][ T27] audit: type=1800 audit(1235.460:538): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14686" name="file1" dev="loop6" ino=1048774 res=0 errno=0 [ 1235.889896][T11720] loop4: detected capacity change from 0 to 2048 [ 1235.964761][T11720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.351095][T11739] loop6: detected capacity change from 0 to 64 [ 1237.203151][T11781] loop6: detected capacity change from 0 to 8 [ 1237.860418][T11814] loop2: detected capacity change from 0 to 1024 [ 1237.899819][T11814] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1237.938816][T11814] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1237.982399][ T27] audit: type=1326 audit(1237.940:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.5.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1238.020092][T11814] EXT4-fs (loop2): journal inode is deleted [ 1238.041806][ T27] audit: type=1326 audit(1237.960:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.5.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1238.096195][ T27] audit: type=1326 audit(1237.970:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.5.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1238.183931][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14728'. [ 1238.190307][ T27] audit: type=1326 audit(1237.970:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.5.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1238.246508][T11830] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1238.439303][ T966] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1238.521760][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14733'. [ 1238.554182][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14733'. [ 1238.640895][ T966] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 1238.665584][ T966] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 1238.717101][ T966] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1238.753675][ T966] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1238.784010][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.814868][ T966] usb 3-1: Product: syz [ 1238.819875][ T966] usb 3-1: Manufacturer: syz [ 1238.824539][ T966] usb 3-1: SerialNumber: syz [ 1238.841200][ T966] usb 3-1: config 0 descriptor?? [ 1238.851216][ T966] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 1238.875317][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1238.886501][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1238.896560][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1238.912547][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1238.928881][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 1238.946299][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 1238.956646][ T966] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1238.971997][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1239.019029][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.028915][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.060136][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1239.076244][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1239.084761][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 1239.092815][ T966] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1239.106426][ T966] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1239.124652][ T966] usb 3-1: USB disconnect, device number 55 [ 1239.136655][ T966] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1239.190825][ T966] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1239.229211][ T966] keyspan 3-1:0.0: device disconnected [ 1239.929113][T11928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14752'. [ 1240.132237][T11939] tmpfs: Bad value for 'mpol' [ 1240.376981][T11954] netlink: 'syz.4.14762': attribute type 1 has an invalid length. [ 1240.389237][T11954] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14762'. [ 1240.505733][T11959] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 1240.538872][T11959] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1240.840012][T26738] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1241.040996][T26738] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1241.064980][T26738] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1241.086670][T26738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.129191][T26738] usb 7-1: Product: syz [ 1241.133438][T26738] usb 7-1: Manufacturer: syz [ 1241.138066][T26738] usb 7-1: SerialNumber: syz [ 1241.184740][T26738] usb 7-1: config 0 descriptor?? [ 1241.286790][T26738] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 1241.437093][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.504599][ T5885] usb 7-1: USB disconnect, device number 22 [ 1241.717038][ T27] audit: type=1326 audit(1241.670:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.4.14782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1241.756359][ T27] audit: type=1326 audit(1241.670:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.4.14782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1241.787084][ T27] audit: type=1326 audit(1241.710:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.4.14782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1241.820134][ T27] audit: type=1326 audit(1241.710:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.4.14782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1241.881590][ T27] audit: type=1326 audit(1241.710:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.4.14782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1242.004467][T12046] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1242.687834][T12083] netlink: 'syz.4.14798': attribute type 1 has an invalid length. [ 1243.068095][T12104] __vm_enough_memory: pid: 12104, comm: syz.4.14806, not enough memory for the allocation [ 1243.320004][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14809'. [ 1244.121320][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1244.129603][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1244.224412][T12179] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14827'. [ 1244.255352][T12176] loop6: detected capacity change from 0 to 4096 [ 1244.280781][T12176] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1244.319566][T26738] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1244.394296][T12176] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 1244.508595][T26738] usb 5-1: Using ep0 maxpacket: 8 [ 1244.521403][T26738] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1244.534642][T26738] usb 5-1: config 2 has no interface number 0 [ 1244.549374][T26738] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1244.574697][T26738] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1244.590194][T26738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.603732][T26738] usb 5-1: Product: syz [ 1244.616465][T26738] usb 5-1: Manufacturer: syz [ 1244.621585][T26738] usb 5-1: SerialNumber: syz [ 1244.796037][T12202] loop6: detected capacity change from 0 to 256 [ 1244.871823][T12202] FAT-fs (loop6): Directory bread(block 64) failed [ 1244.878808][T12202] FAT-fs (loop6): Directory bread(block 65) failed [ 1244.896731][T12202] FAT-fs (loop6): Directory bread(block 66) failed [ 1244.903845][T12202] FAT-fs (loop6): Directory bread(block 67) failed [ 1244.918832][T12202] FAT-fs (loop6): Directory bread(block 68) failed [ 1244.933932][T12202] FAT-fs (loop6): Directory bread(block 69) failed [ 1244.948555][T12202] FAT-fs (loop6): Directory bread(block 70) failed [ 1244.969411][T12202] FAT-fs (loop6): Directory bread(block 71) failed [ 1244.977773][T12202] FAT-fs (loop6): Directory bread(block 72) failed [ 1244.986806][T12202] FAT-fs (loop6): Directory bread(block 73) failed [ 1245.082591][T26738] ch9200: probe of 5-1:2.31 failed with error -22 [ 1245.100243][T26738] usb 5-1: USB disconnect, device number 54 [ 1245.407071][T12228] netlink: 'syz.6.14838': attribute type 10 has an invalid length. [ 1245.491749][T12230] loop2: detected capacity change from 0 to 8192 [ 1245.507914][T12230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1245.527431][T12230] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1245.539286][T12230] REISERFS (device loop2): using ordered data mode [ 1245.545860][T12230] reiserfs: using flush barriers [ 1245.554136][T12230] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1245.577589][T12230] REISERFS (device loop2): checking transaction log (loop2) [ 1245.599430][T12230] REISERFS (device loop2): Using tea hash to sort names [ 1245.606841][T12230] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1245.947236][T12241] loop4: detected capacity change from 0 to 4096 [ 1246.471026][T12269] loop4: detected capacity change from 0 to 1764 [ 1246.503366][T12269] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1246.614771][T12269] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1246.616078][ C1] sd 0:0:1:0: [sda] tag#4884 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1246.632851][ C1] sd 0:0:1:0: [sda] tag#4884 CDB: Read(6) 08 00 9f d1 fe de [ 1247.737395][T12340] netlink: 'syz.5.14868': attribute type 1 has an invalid length. [ 1247.998665][T12353] netlink: 2 bytes leftover after parsing attributes in process `syz.5.14872'. [ 1248.060023][T12357] loop2: detected capacity change from 0 to 64 [ 1248.098956][T12357] Trying to free block not in datazone [ 1248.104503][T12357] Trying to free block not in datazone [ 1248.144534][T12357] Trying to free block not in datazone [ 1248.152065][T12357] Trying to free block not in datazone [ 1248.167513][T12357] Trying to free block not in datazone [ 1248.173909][T12357] Trying to free block not in datazone [ 1248.181173][T12357] Trying to free block not in datazone [ 1248.186873][T12357] Trying to free block not in datazone [ 1248.211310][T12357] Trying to free block not in datazone [ 1248.238701][T12357] Trying to free block not in datazone [ 1248.263995][T12357] Trying to free block not in datazone [ 1248.295202][T12357] Trying to free block not in datazone [ 1248.331925][T12371] loop6: detected capacity change from 0 to 512 [ 1248.398721][T12371] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.14878: invalid block [ 1248.510150][T12371] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.14878: invalid indirect mapped block 10 (level 1) [ 1248.601390][T12371] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.14878: invalid indirect mapped block 8 (level 1) [ 1248.722532][T12371] EXT4-fs (loop6): 1 truncate cleaned up [ 1248.738046][T12371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.852146][T12371] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.14878: inode has both inline data and extents flags [ 1248.896815][ T27] audit: type=1326 audit(1248.850:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1248.995864][T12370] loop4: detected capacity change from 0 to 32768 [ 1248.999689][ T27] audit: type=1326 audit(1248.850:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1249.059791][ T27] audit: type=1326 audit(1248.860:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1249.115422][T12370] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1249.142471][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.156993][T12401] netlink: 'syz.2.14883': attribute type 10 has an invalid length. [ 1249.206402][ T27] audit: type=1326 audit(1248.860:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f142b18f003 code=0x7ffc0000 [ 1249.292804][ T27] audit: type=1326 audit(1248.880:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f142b18da7f code=0x7ffc0000 [ 1249.371671][ T27] audit: type=1326 audit(1248.930:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f142b18f057 code=0x7ffc0000 [ 1249.405276][T12370] XFS (loop4): Ending clean mount [ 1249.427505][T12370] XFS (loop4): Quotacheck needed: Please wait. [ 1249.471589][ T27] audit: type=1326 audit(1248.930:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f142b18d810 code=0x7ffc0000 [ 1249.560194][ T27] audit: type=1326 audit(1248.930:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f142b18ebcb code=0x7ffc0000 [ 1249.619350][T12370] XFS (loop4): Quotacheck: Done. [ 1249.680540][ T27] audit: type=1326 audit(1248.930:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f142b18ebcb code=0x7ffc0000 [ 1249.780062][ T27] audit: type=1326 audit(1248.930:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.5.14881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f142b1c1885 code=0x7ffc0000 [ 1249.867655][T10351] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1249.925539][T12428] netlink: 'syz.2.14889': attribute type 1 has an invalid length. [ 1249.954246][T12428] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14889'. [ 1250.991495][T12481] cgroup: release_agent respecified [ 1251.162521][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14907'. [ 1251.682024][T12519] netlink: 'syz.4.14917': attribute type 10 has an invalid length. [ 1251.724219][T12519] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.14917'. [ 1252.316538][T12549] comedi comedi3: pcl726: I/O port conflict (0x3,16) [ 1252.681909][T12568] loop4: detected capacity change from 0 to 128 [ 1253.304517][T12600] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1253.357581][T12600] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1253.546817][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14944'. [ 1253.567607][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14944'. [ 1254.021658][T12637] loop2: detected capacity change from 0 to 1024 [ 1254.066660][T12637] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1254.127344][T12637] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.14953: lblock 2 mapped to illegal pblock 2 (length 1) [ 1254.217278][T12637] __quota_error: 5 callbacks suppressed [ 1254.217294][T12637] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1254.255039][T12650] loop4: detected capacity change from 0 to 512 [ 1254.270201][T12637] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.14953: lblock 0 mapped to illegal pblock 48 (length 1) [ 1254.317907][T12637] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1254.344440][T12654] netlink: 1 bytes leftover after parsing attributes in process `syz.6.14957'. [ 1254.359583][T12637] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.14953: Failed to acquire dquot type 0 [ 1254.409368][T12637] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 1254.453697][T12650] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #16: comm syz.4.14956: corrupted inode contents [ 1254.466074][T12637] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.14953: mark_inode_dirty error [ 1254.519006][T12650] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #16: comm syz.4.14956: mark_inode_dirty error [ 1254.540809][T12637] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1254.563664][T12637] EXT4-fs (loop2): 1 orphan inode deleted [ 1254.570248][T12650] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #16: comm syz.4.14956: corrupted inode contents [ 1254.582605][T30295] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1254.607719][T12637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.621075][T30295] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1254.630534][T12650] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.14956: mark_inode_dirty error [ 1254.647018][T30295] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:5: Failed to release dquot type 0 [ 1254.683224][T12650] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #16: comm syz.4.14956: corrupted inode contents [ 1254.733298][T12650] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 1254.753660][T12650] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #16: comm syz.4.14956: corrupted inode contents [ 1254.798947][T12650] EXT4-fs error (device loop4): ext4_truncate:4294: inode #16: comm syz.4.14956: mark_inode_dirty error [ 1254.854848][T12650] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 1254.864983][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.890023][ T59] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1254.907810][T12650] EXT4-fs (loop4): 1 truncate cleaned up [ 1254.933820][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1254.938021][T12650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.975245][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 0 [ 1255.020040][ T59] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1255.068630][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 1 [ 1255.130606][ T5787] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1255.179477][ T5787] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 1255.230539][ T5787] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1255.367307][T10351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.418353][T12686] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.14966'. [ 1255.444534][T12686] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1255.497063][T12686] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1255.908970][T12699] loop4: detected capacity change from 0 to 4096 [ 1257.012742][T12759] loop6: detected capacity change from 0 to 256 [ 1257.196668][T12768] netlink: 'syz.4.14991': attribute type 25 has an invalid length. [ 1257.423087][ T27] audit: type=1326 audit(1257.380:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.5.14993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1257.435024][T12734] loop2: detected capacity change from 0 to 32768 [ 1257.488778][ T27] audit: type=1326 audit(1257.380:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.5.14993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1257.500186][T12734] (syz.2.14982,12734,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.573182][ T27] audit: type=1326 audit(1257.420:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.5.14993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1257.579880][T12734] (syz.2.14982,12734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.595126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.700702][ T27] audit: type=1326 audit(1257.420:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.5.14993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1257.737634][T12734] (syz.2.14982,12734,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1257.818711][ T27] audit: type=1326 audit(1257.420:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.5.14993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1257.848786][T12734] JBD2: Ignoring recovery information on journal [ 1257.955524][T12734] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1258.295620][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 1258.509297][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15005'. [ 1258.576699][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15005'. [ 1258.855012][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15004'. [ 1258.865216][T12823] tmpfs: Bad value for 'mpol' [ 1260.089666][T12868] loop4: detected capacity change from 0 to 4096 [ 1260.172738][T12871] loop6: detected capacity change from 0 to 2048 [ 1260.205915][T12846] loop2: detected capacity change from 0 to 32768 [ 1260.277104][T12871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1260.313528][T12846] ERROR: (device loop2): diAllocBit: iag inconsistent [ 1260.313528][T12846] [ 1260.387221][T12846] ialloc: diAlloc returned -5! [ 1260.400452][T12868] ntfs3: loop4: ino=5, "/" directory corrupted [ 1260.893663][T12889] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.15027'. [ 1261.593823][T12918] loop6: detected capacity change from 0 to 4096 [ 1261.649250][T12918] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 1262.497889][T12970] netlink: 'syz.2.15051': attribute type 5 has an invalid length. [ 1262.765046][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15056'. [ 1262.785152][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15056'. [ 1262.825540][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15056'. [ 1263.268547][T13005] netlink: 'syz.4.15063': attribute type 3 has an invalid length. [ 1264.427148][T13068] JFS: discard option not supported on device [ 1264.442930][T13068] Mount JFS Failure: -22 [ 1264.447403][T13068] jfs_mount failed w/return code = -22 [ 1264.663064][T13076] netlink: 'syz.2.15085': attribute type 1 has an invalid length. [ 1264.689962][T13076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15085'. [ 1264.998732][T13051] loop4: detected capacity change from 0 to 32768 [ 1265.519975][T13113] netlink: 'syz.2.15096': attribute type 3 has an invalid length. [ 1266.863867][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15114'. [ 1266.880692][T13178] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1267.556426][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15127'. [ 1267.585715][T13216] netlink: 'syz.6.15127': attribute type 1 has an invalid length. [ 1267.781911][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15130'. [ 1267.952961][T13230] loop2: detected capacity change from 0 to 4096 [ 1268.010628][T13230] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1268.047485][T13238] netlink: 'syz.6.15134': attribute type 1 has an invalid length. [ 1268.105769][T13230] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1268.246956][T13230] ntfs3: loop2: failed to convert "c46c" to cp863 [ 1268.390292][T13249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15137'. [ 1268.886246][T13268] loop6: detected capacity change from 0 to 512 [ 1268.898529][T13273] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1268.915506][T13268] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1268.970054][T13273] bond0: (slave netdevsim0): Releasing backup interface [ 1268.993156][T13268] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1269.013455][T13273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1269.045301][T13268] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.15143: bg 0: block 248: padding at end of block bitmap is not set [ 1269.087717][T13268] Quota error (device loop6): write_blk: dquota write failed [ 1269.097317][T13268] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1269.115721][T13268] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.15143: Failed to acquire dquot type 1 [ 1269.164263][T13268] EXT4-fs (loop6): 1 truncate cleaned up [ 1269.179645][T13268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1269.344122][T13268] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1269.387434][T13268] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1269.398072][T13268] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.15143: Failed to acquire dquot type 1 [ 1269.572442][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1269.609963][ T1093] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 1269.638929][ T1093] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u4:6: Failed to release dquot type 1 [ 1269.763054][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15154'. [ 1269.818583][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15154'. [ 1269.840130][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15154'. [ 1270.876968][T13374] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1271.187531][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15180'. [ 1271.470772][T13409] netlink: 'syz.6.15185': attribute type 10 has an invalid length. [ 1271.479824][T13409] batman_adv: batadv0: Adding interface: wlan0 [ 1271.486091][T13409] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.536109][T13409] batman_adv: batadv0: Interface activated: wlan0 [ 1271.778490][T13423] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15188'. [ 1272.128673][ T2200] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1272.310839][ T2200] usb 3-1: config 13 has an invalid interface number: 74 but max is 0 [ 1272.319470][ T2200] usb 3-1: config 13 has no interface number 0 [ 1272.330923][ T2200] usb 3-1: config 13 interface 74 has no altsetting 0 [ 1272.345258][ T2200] usb 3-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=20.48 [ 1272.357572][ T2200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.372310][ T2200] usb 3-1: Product: syz [ 1272.376619][ T2200] usb 3-1: Manufacturer: syz [ 1272.382419][ T2200] usb 3-1: SerialNumber: syz [ 1272.518534][T21575] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1272.625769][ T2200] usb 3-1: USB disconnect, device number 56 [ 1272.708399][T21575] usb 7-1: Using ep0 maxpacket: 32 [ 1272.715996][T21575] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.739437][T21575] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1272.754202][T21575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.764882][T21575] usb 7-1: Product: syz [ 1272.773496][T21575] usb 7-1: Manufacturer: syz [ 1272.778362][T21575] usb 7-1: SerialNumber: syz [ 1272.786403][T21575] usb 7-1: config 0 descriptor?? [ 1272.799623][T21575] usb 7-1: bad CDC descriptors [ 1272.806232][T21575] usb 7-1: unsupported MDLM descriptors [ 1273.027262][ T2200] usb 7-1: USB disconnect, device number 23 [ 1273.880716][ T966] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1274.088552][ T966] usb 5-1: Using ep0 maxpacket: 32 [ 1274.099228][ T966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1274.120580][ T966] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 1274.139315][ T966] usb 5-1: config 7 has no interface number 0 [ 1274.165104][ T966] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1274.208557][ T966] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1274.248475][ T966] usb 5-1: config 7 interface 187 has no altsetting 0 [ 1274.261724][T13539] netlink: 'syz.2.15212': attribute type 28 has an invalid length. [ 1274.308060][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15211'. [ 1274.311357][ T966] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1274.336687][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.350833][ T966] usb 5-1: Product: syz [ 1274.355407][ T966] usb 5-1: Manufacturer: syz [ 1274.360608][ T966] usb 5-1: SerialNumber: syz [ 1274.551777][T13553] geneve0: entered promiscuous mode [ 1274.624524][ T966] usb 5-1: Unknown endpoint type found, address 0x07 [ 1274.648593][ T966] usb 5-1: Not enough endpoints found in device, aborting! [ 1274.863981][ T966] usb 5-1: USB disconnect, device number 55 [ 1275.458106][T13602] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 1275.503331][T13602] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1275.610394][T13607] loop4: detected capacity change from 0 to 256 [ 1275.675437][T13607] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1275.817018][T13614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15232'. [ 1275.837759][T13607] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 1276.778046][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15246'. [ 1276.863130][ T27] audit: type=1326 audit(1276.820:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13665 comm="syz.6.15247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaedd8efc9 code=0x7ffc0000 [ 1276.885079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.950292][ T27] audit: type=1326 audit(1276.820:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13665 comm="syz.6.15247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaedd8efc9 code=0x7ffc0000 [ 1277.048368][ T27] audit: type=1326 audit(1276.830:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13665 comm="syz.6.15247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fcaedd8efc9 code=0x7ffc0000 [ 1277.136175][ T27] audit: type=1326 audit(1276.830:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13665 comm="syz.6.15247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaedd8efc9 code=0x7ffc0000 [ 1277.376625][T13690] netlink: 'syz.5.15258': attribute type 11 has an invalid length. [ 1278.049704][T30376] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1278.264382][T13744] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15275'. [ 1278.273875][T30376] usb 5-1: Using ep0 maxpacket: 8 [ 1278.290349][T30376] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 1278.310288][T30376] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.354462][T30376] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1278.379726][T30376] usb 5-1: config 1 has no interface number 0 [ 1278.385953][T30376] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.442172][T30376] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.462052][T30376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.484192][T30376] usb 5-1: Product: syz [ 1278.503223][T30376] usb 5-1: Manufacturer: syz [ 1278.507892][T30376] usb 5-1: SerialNumber: syz [ 1278.535243][T30376] cdc_wdm 5-1:1.128: skipping garbage [ 1278.553817][T30376] cdc_wdm 5-1:1.128: invalid descriptor buffer length [ 1278.607334][T30376] cdc_wdm: probe of 5-1:1.128 failed with error -22 [ 1278.745483][T30376] usb 5-1: USB disconnect, device number 56 [ 1279.635375][T13808] loop4: detected capacity change from 0 to 4096 [ 1279.713227][T13808] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1279.752889][T13808] ntfs3: loop4: Failed to load $Extend (-22). [ 1279.779560][T13808] ntfs3: loop4: Failed to initialize $Extend. [ 1280.242100][T13849] netlink: 348 bytes leftover after parsing attributes in process `syz.4.15304'. [ 1280.262688][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15304'. [ 1281.048641][T30376] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1281.128127][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15318'. [ 1281.142614][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15319'. [ 1281.268845][T30376] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.289262][T30376] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1281.330431][T30376] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1281.359412][T30376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1281.388220][T30376] usb 3-1: SerialNumber: syz [ 1281.421944][T30376] usb 3-1: 0:2 : does not exist [ 1281.490250][T13907] loop6: detected capacity change from 0 to 4096 [ 1281.508068][T13907] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1281.558661][T13907] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1281.577599][T13907] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1281.578435][ T966] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1281.643264][T13907] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1281.673725][T13907] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1281.711525][T13907] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1281.768865][T13907] ntfs: volume version 3.1. [ 1281.789408][ T966] usb 5-1: Using ep0 maxpacket: 32 [ 1281.800584][ T966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1281.816556][ T966] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 1281.829568][ T966] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.868768][ T966] usb 5-1: config 7 has no interface number 0 [ 1281.892847][ T966] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1281.932487][ T966] usb 5-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.954216][T13907] __ntfs_warning: 14 callbacks suppressed [ 1281.954234][T13907] ntfs: (device loop6): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1281.981494][ T966] usb 5-1: config 7 interface 187 has no altsetting 0 [ 1281.988708][T21575] usb 3-1: USB disconnect, device number 57 [ 1281.992199][ T966] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1282.026247][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.081606][ T966] usb 5-1: Product: syz [ 1282.101028][ T966] usb 5-1: Manufacturer: syz [ 1282.105700][ T966] usb 5-1: SerialNumber: syz [ 1282.324403][T13955] loop6: detected capacity change from 0 to 16 [ 1282.333306][T13955] erofs: (device loop6): mounted with root inode @ nid 36. [ 1282.383842][ T966] usb 5-1: Limiting number of CPorts to U8_MAX [ 1282.395676][T13955] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1282.400915][ T966] usb 5-1: Unknown endpoint type found, address 0x07 [ 1282.419609][ T966] usb 5-1: Not enough endpoints found in device, aborting! [ 1282.448754][T13955] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1282.682433][ T966] usb 5-1: USB disconnect, device number 57 [ 1282.891763][T13986] loop2: detected capacity change from 0 to 8 [ 1282.948718][T13986] SQUASHFS error: Corrupted symlink [ 1283.339106][T13997] loop2: detected capacity change from 0 to 4096 [ 1283.358568][T13997] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1283.446369][T13997] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1283.458465][T13997] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1283.487460][T13997] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1283.502489][T13997] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1283.552351][T13997] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1283.576792][T13997] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1283.597834][T21575] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1283.609994][T13997] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1283.648509][T13997] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1283.727159][T13997] ntfs: volume version 3.1. [ 1283.791358][T21575] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1283.810754][T21575] usb 7-1: config 0 has no interface number 0 [ 1283.823494][T21575] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1283.847580][T21575] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1283.861063][T21575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.889830][T21575] usb 7-1: Product: syz [ 1283.899849][T21575] usb 7-1: Manufacturer: syz [ 1283.908531][T21575] usb 7-1: SerialNumber: syz [ 1283.925633][T21575] usb 7-1: config 0 descriptor?? [ 1283.941416][T14000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1284.001075][T21575] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 26:73:39:98:9b:8d [ 1284.707652][T14061] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15353'. [ 1285.038153][T14077] x_tables: unsorted entry at hook 2 [ 1286.084485][T21575] usb 7-1: USB disconnect, device number 24 [ 1286.122370][T21575] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1286.702191][T14154] loop2: detected capacity change from 0 to 4096 [ 1286.798480][T14154] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1286.842540][T14154] ntfs3: loop2: Failed to load $Extend (-22). [ 1286.863903][T14154] ntfs3: loop2: Failed to initialize $Extend. [ 1287.137075][T14111] loop4: detected capacity change from 0 to 40427 [ 1287.223308][T14111] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1287.269368][T14111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1287.358441][T14111] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1287.640339][T14111] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1287.661823][T14111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1287.777151][T14205] netlink: 'syz.6.15383': attribute type 11 has an invalid length. [ 1287.863194][T14111] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1288.295335][T14225] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 1288.347368][T14225] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 1288.486609][T14235] loop2: detected capacity change from 0 to 1024 [ 1289.103301][T14258] binfmt_misc: register: failed to install interpreter file ./file0 [ 1289.825693][T14291] loop6: detected capacity change from 0 to 512 [ 1289.928907][T14291] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1289.996733][T14291] EXT4-fs (loop6): invalid journal inode [ 1290.014610][T14291] EXT4-fs (loop6): can't get journal size [ 1290.049040][T14291] EXT4-fs (loop6): 1 truncate cleaned up [ 1290.085998][T14291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1290.339376][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.471374][T14323] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1290.506675][T14323] overlayfs: missing 'lowerdir' [ 1290.644730][T14329] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1290.698744][T14329] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1290.871035][T14343] loop2: detected capacity change from 0 to 8 [ 1290.888991][T14343] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1290.916966][ T5798] udevd[5798]: incorrect cramfs checksum on /dev/loop2 [ 1290.970977][T14343] cramfs: Error -3 while decompressing! [ 1290.976603][T14343] cramfs: ffffffff96fdd368(26)->ffff888056bc0000(4096) [ 1291.007463][T14343] cramfs: bad data blocksize 524314 [ 1291.024853][ T5798] udevd[5798]: incorrect cramfs checksum on /dev/loop2 [ 1291.054829][T14343] cramfs: bad data blocksize 4294442596 [ 1291.086639][T14343] cramfs: Error -3 while decompressing! [ 1291.128780][T14343] cramfs: ffffffff96fdd368(26)->ffff888056bc0000(4096) [ 1291.209030][T14356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1292.134415][T14409] veth1_vlan: left promiscuous mode [ 1292.538805][T14423] loop2: detected capacity change from 0 to 64 [ 1292.563703][T14425] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.15444'. [ 1292.884792][T14435] loop6: detected capacity change from 0 to 4096 [ 1293.020810][T14435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.124471][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1293.124490][ T27] audit: type=1326 audit(1293.080:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.5.15453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1293.210713][ T27] audit: type=1326 audit(1293.110:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.5.15453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1293.313254][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.322729][ T27] audit: type=1326 audit(1293.120:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.5.15453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1293.322782][ T27] audit: type=1326 audit(1293.120:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.5.15453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1293.322827][ T27] audit: type=1326 audit(1293.120:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.5.15453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1293.527261][T14475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15459'. [ 1293.554964][T14478] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15458'. [ 1293.564195][T14478] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15458'. [ 1293.618572][T14478] netlink: 'syz.4.15458': attribute type 3 has an invalid length. [ 1293.641660][T14478] netlink: 11 bytes leftover after parsing attributes in process `syz.4.15458'. [ 1293.683583][T14483] loop6: detected capacity change from 0 to 256 [ 1293.748155][T14483] FAT-fs (loop6): Directory bread(block 64) failed [ 1293.766039][T14483] FAT-fs (loop6): Directory bread(block 65) failed [ 1293.778720][T14483] FAT-fs (loop6): Directory bread(block 66) failed [ 1293.791532][T14483] FAT-fs (loop6): Directory bread(block 67) failed [ 1293.808817][T14483] FAT-fs (loop6): Directory bread(block 68) failed [ 1293.825721][T14483] FAT-fs (loop6): Directory bread(block 69) failed [ 1293.857448][T14483] FAT-fs (loop6): Directory bread(block 70) failed [ 1293.864902][T14483] FAT-fs (loop6): Directory bread(block 71) failed [ 1293.880414][T14486] loop2: detected capacity change from 0 to 4096 [ 1293.887030][T14483] FAT-fs (loop6): Directory bread(block 72) failed [ 1293.897045][T14483] FAT-fs (loop6): Directory bread(block 73) failed [ 1293.904428][T14486] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1294.017610][T14486] ntfs3: loop2: failed to convert "c46c" to cp862 [ 1294.193627][T14494] loop4: detected capacity change from 0 to 256 [ 1294.220717][T14494] exfat: Deprecated parameter 'namecase' [ 1294.226452][T14494] exfat: Deprecated parameter 'utf8' [ 1294.271986][T14494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1294.616045][T14519] xt_hashlimit: invalid interval [ 1295.020696][T14546] loop4: detected capacity change from 0 to 64 [ 1295.042139][T14546] Trying to free block not in datazone [ 1295.050991][T14546] minix_free_block (loop4:21): bit already cleared [ 1295.138209][T14551] netlink: 'syz.2.15477': attribute type 10 has an invalid length. [ 1295.212939][T14551] batman_adv: batadv0: Interface activated: vlan1 [ 1295.220152][T14551] team0: Device veth0_vlan failed to register rx_handler [ 1295.236511][T14551] batman_adv: batadv0: Interface deactivated: vlan1 [ 1295.483580][T14570] netlink: 'syz.2.15482': attribute type 21 has an invalid length. [ 1295.491876][T14570] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15482'. [ 1295.688388][ T966] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1295.839698][T30376] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1295.868416][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 1295.875769][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1295.887636][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1295.901035][ T966] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1295.910705][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.918845][ T966] usb 5-1: Product: syz [ 1295.923036][ T966] usb 5-1: Manufacturer: syz [ 1295.927637][ T966] usb 5-1: SerialNumber: syz [ 1295.935010][ T966] usb 5-1: config 0 descriptor?? [ 1295.945858][ T966] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1295.955325][ T966] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 1296.018627][T30376] usb 3-1: Using ep0 maxpacket: 32 [ 1296.026127][T30376] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1296.028645][T26738] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1296.034534][T30376] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1296.055687][T30376] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1296.067112][T30376] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1296.077108][T30376] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1296.090653][T30376] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1296.102777][T30376] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1296.111944][T30376] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1296.121205][T30376] usb 3-1: Product: syz [ 1296.125411][T30376] usb 3-1: Manufacturer: syz [ 1296.130274][T30376] usb 3-1: SerialNumber: syz [ 1296.148630][T30376] usb 3-1: config 0 descriptor?? [ 1296.165885][T30376] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1296.181209][T30376] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1296.228783][T26738] usb 7-1: Using ep0 maxpacket: 32 [ 1296.234205][ T966] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1296.242140][T26738] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.253497][T26738] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.265134][T26738] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1296.275297][T26738] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1296.284100][T26738] usb 7-1: Product: syz [ 1296.288639][T26738] usb 7-1: Manufacturer: syz [ 1296.300493][T26738] hub 7-1:4.0: USB hub found [ 1296.321257][ T966] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1296.331796][ T966] em28xx 5-1:0.0: board has no eeprom [ 1296.393134][T14573] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1296.408223][T30376] usb 3-1: USB disconnect, device number 58 [ 1296.408502][ T966] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1296.425591][T30376] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1296.448549][ T966] em28xx 5-1:0.0: dvb set to isoc mode. [ 1296.460094][ T28] em28xx 5-1:0.0: Binding DVB extension [ 1296.526408][ T966] usb 5-1: USB disconnect, device number 58 [ 1296.548468][T26738] hub 7-1:4.0: 1 port detected [ 1296.621889][ T966] em28xx 5-1:0.0: Disconnecting em28xx [ 1296.685039][ T28] em28xx 5-1:0.0: Registering input extension [ 1296.704966][ T966] em28xx 5-1:0.0: Closing input extension [ 1296.761492][T26738] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1296.782931][T26738] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1296.847774][ T966] em28xx 5-1:0.0: Freeing device [ 1296.854968][T26738] usb 7-1: USB disconnect, device number 25 [ 1297.092781][T14648] sctp: [Deprecated]: syz.2.15489 (pid 14648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1297.092781][T14648] Use struct sctp_sack_info instead [ 1298.098340][ T27] audit: type=1326 audit(1298.040:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.5.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1298.198683][ T27] audit: type=1326 audit(1298.040:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.5.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1298.257518][ T27] audit: type=1326 audit(1298.050:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.5.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1298.290168][ T27] audit: type=1326 audit(1298.050:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.5.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1298.319850][ T27] audit: type=1326 audit(1298.050:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.5.15507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142b18efc9 code=0x7ffc0000 [ 1298.354109][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15511'. [ 1298.398643][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15511'. [ 1298.407784][T14714] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15511'. [ 1298.417260][ T27] audit: type=1326 audit(1298.140:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.4.15509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1298.469562][T14719] ip6gre1: entered allmulticast mode [ 1298.479763][ T27] audit: type=1326 audit(1298.140:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.4.15509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1298.548344][ T27] audit: type=1326 audit(1298.160:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.4.15509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1298.637065][ T27] audit: type=1326 audit(1298.160:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.4.15509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5838efc9 code=0x7ffc0000 [ 1299.031363][T14749] loop2: detected capacity change from 0 to 1024 [ 1299.157345][T14745] loop6: detected capacity change from 0 to 4096 [ 1299.237089][T14759] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1299.262221][T14758] loop4: detected capacity change from 0 to 512 [ 1299.279612][T14758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1299.394256][T14758] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1299.467528][T14758] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1299.583526][T14758] EXT4-fs (loop4): Remounting filesystem read-only [ 1299.603712][T14758] EXT4-fs (loop4): 1 truncate cleaned up [ 1299.630137][T14758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.870265][T10351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.211903][T14808] loop6: detected capacity change from 0 to 256 [ 1300.254183][T14811] loop4: detected capacity change from 0 to 256 [ 1300.279907][T14808] exfat: Deprecated parameter 'utf8' [ 1300.293131][T14811] exfat: Deprecated parameter 'namecase' [ 1300.324508][T14808] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1300.446600][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.450659][T14811] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1300.616003][T14825] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15541'. [ 1300.820091][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15544'. [ 1300.848749][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15544'. [ 1300.922815][T14839] overlayfs: workdir and upperdir must be separate subtrees [ 1300.933782][T14840] netlink: 'syz.4.15545': attribute type 10 has an invalid length. [ 1301.076132][T14840] team0: Device veth0_vlan failed to register rx_handler [ 1301.206511][T14849] netlink: 'syz.6.15549': attribute type 10 has an invalid length. [ 1301.214947][T14847] loop2: detected capacity change from 0 to 1024 [ 1301.225247][T14849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15549'. [ 1301.396160][T14847] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 1301.428499][T14847] hfsplus: xattr searching failed [ 1301.491352][T14859] loop6: detected capacity change from 0 to 1024 [ 1301.505757][T14859] EXT4-fs: Ignoring removed bh option [ 1301.554442][T14859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.740077][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.124289][T14887] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1302.133812][T14887] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1302.156371][T14887] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1302.284361][T14896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15561'. [ 1303.134236][T14943] netlink: 'syz.2.15576': attribute type 6 has an invalid length. [ 1303.990925][T14989] loop6: detected capacity change from 0 to 1024 [ 1304.185439][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 1304.569560][T15009] loop6: detected capacity change from 0 to 4096 [ 1304.823919][T15009] ntfs3: loop6: ino=5, "/" directory corrupted [ 1304.841132][T15009] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1305.970578][T15080] netlink: 'syz.5.15618': attribute type 10 has an invalid length. [ 1306.110226][T15080] team0: Device veth0_vlan failed to register rx_handler [ 1306.154558][T15035] loop2: detected capacity change from 0 to 32768 [ 1306.426106][T15093] netlink: 180 bytes leftover after parsing attributes in process `syz.4.15622'. [ 1306.474213][T15099] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581) [ 1306.498408][T15099] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1306.526713][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15624'. [ 1306.562010][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15624'. [ 1306.588421][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15624'. [ 1307.118599][T15125] netlink: 'syz.4.15632': attribute type 1 has an invalid length. [ 1307.168560][T15125] netlink: 'syz.4.15632': attribute type 2 has an invalid length. [ 1307.177005][T15125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15632'. [ 1307.928520][T21575] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1308.077379][T15178] loop2: detected capacity change from 0 to 512 [ 1308.140433][T15178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1308.158973][T21575] usb 5-1: Using ep0 maxpacket: 16 [ 1308.166421][T21575] usb 5-1: config 0 has no interfaces? [ 1308.198883][T21575] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1308.208007][T21575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.218620][T21575] usb 5-1: Product: syz [ 1308.222849][T21575] usb 5-1: Manufacturer: syz [ 1308.227483][T21575] usb 5-1: SerialNumber: syz [ 1308.234941][T21575] r8152-cfgselector 5-1: config 0 descriptor?? [ 1308.307706][T15178] EXT4-fs error (device loop2): ext4_xattr_block_get:600: inode #15: comm syz.2.15655: corrupted xattr block 13: invalid checksum [ 1308.387916][ T27] audit: type=1800 audit(1308.340:586): pid=15178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15655" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1308.476567][T21575] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1308.489797][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.691729][T15206] netlink: 'syz.6.15653': attribute type 4 has an invalid length. [ 1308.712189][T26738] usb 5-1: USB disconnect, device number 59 [ 1308.872724][T15202] loop2: detected capacity change from 0 to 4096 [ 1308.889424][T15202] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1309.094064][T15202] ntfs3: loop2: failed to convert "c46c" to cp864 [ 1309.991284][T15270] gtp2: entered promiscuous mode [ 1310.006119][T15270] gtp2: entered allmulticast mode [ 1310.678579][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1311.022873][T15330] netlink: 232 bytes leftover after parsing attributes in process `syz.2.15692'. [ 1311.285079][ T27] audit: type=1326 audit(1311.230:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.2.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1311.415883][ T27] audit: type=1326 audit(1311.230:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.2.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1311.460914][ T27] audit: type=1326 audit(1311.240:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.2.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1311.508333][ T27] audit: type=1326 audit(1311.240:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.2.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1311.565509][ T27] audit: type=1326 audit(1311.240:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.2.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1312.087129][T15392] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1312.333038][T15404] netlink: 'syz.4.15715': attribute type 10 has an invalid length. [ 1312.399417][T15404] macvlan0: entered promiscuous mode [ 1312.404793][T15404] macvlan0: entered allmulticast mode [ 1312.442716][T15404] veth1_vlan: entered allmulticast mode [ 1312.508990][T15404] bond0: (slave macvlan0): Enslaving as an active interface with a down link [ 1312.638710][T21575] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1312.828368][T21575] usb 3-1: Using ep0 maxpacket: 16 [ 1312.839166][T21575] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1312.848689][T21575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.887188][T21575] usb 3-1: Product: syz [ 1312.898307][T21575] usb 3-1: Manufacturer: syz [ 1312.910951][T21575] usb 3-1: SerialNumber: syz [ 1312.949111][T21575] usb 3-1: config 0 descriptor?? [ 1312.975213][T21575] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1312.988682][T15440] cifs: Unknown parameter '2Q [ 1312.988682][T15440] @"2ach}#`[T&:"1:ӭ'4,Zz-#F<]%gC [ 1312.988682][T15440] S' [ 1313.065770][T15442] loop6: detected capacity change from 0 to 2048 [ 1313.171147][T15442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1313.379687][T21575] ssu100: probe of 3-1:0.0 failed with error -71 [ 1313.402754][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15728'. [ 1313.416982][T21575] usb 3-1: USB disconnect, device number 59 [ 1313.441794][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.882653][T15487] loop6: detected capacity change from 0 to 64 [ 1313.936300][T15487] Trying to free block not in datazone [ 1314.338453][T15502] loop6: detected capacity change from 0 to 4096 [ 1314.422789][T15512] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1314.510006][T15502] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1314.564927][T15502] Remounting filesystem read-only [ 1314.859701][T15525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1315.236713][T15500] loop2: detected capacity change from 0 to 32768 [ 1315.295761][T15510] loop4: detected capacity change from 0 to 32768 [ 1315.363289][T15500] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1315.409890][T15510] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1315.648162][T10351] ocfs2: Unmounting device (7,4) on (node local) [ 1315.720190][T15500] XFS (loop2): Ending clean mount [ 1315.906653][T15565] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15755'. [ 1315.973365][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1316.564768][T15579] loop6: detected capacity change from 0 to 4096 [ 1316.603302][T15579] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 1316.888553][T15600] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.732558][T15620] loop2: detected capacity change from 0 to 8192 [ 1317.875781][T15640] loop6: detected capacity change from 0 to 256 [ 1317.978411][T21575] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1318.027916][T15640] FAT-fs (loop6): Directory bread(block 64) failed [ 1318.064499][T15640] FAT-fs (loop6): Directory bread(block 65) failed [ 1318.083193][T15647] libceph: resolve '0.' (ret=-3): failed [ 1318.083328][T15640] FAT-fs (loop6): Directory bread(block 66) failed [ 1318.154543][T15640] FAT-fs (loop6): Directory bread(block 67) failed [ 1318.167444][T15640] FAT-fs (loop6): Directory bread(block 68) failed [ 1318.187894][T15640] FAT-fs (loop6): Directory bread(block 69) failed [ 1318.206047][T15644] loop2: detected capacity change from 0 to 4096 [ 1318.227147][T21575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.238846][T15640] FAT-fs (loop6): Directory bread(block 70) failed [ 1318.245431][T15640] FAT-fs (loop6): Directory bread(block 71) failed [ 1318.261088][T21575] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.279117][T15640] FAT-fs (loop6): Directory bread(block 72) failed [ 1318.288351][T21575] usb 5-1: config 1 interface 1 has no altsetting 1 [ 1318.299589][T15640] FAT-fs (loop6): Directory bread(block 73) failed [ 1318.311204][T21575] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1318.321515][T21575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.340820][T21575] usb 5-1: Product: syz [ 1318.347223][T21575] usb 5-1: Manufacturer: syz [ 1318.380669][T21575] usb 5-1: SerialNumber: syz [ 1318.396408][T15644] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1318.407995][T21575] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1318.466309][T21575] cdc_ncm 5-1:1.0: bind() failure [ 1318.467420][T15644] ntfs3: loop2: Failed to load $Extend (-22). [ 1318.499691][T21575] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1318.506637][T21575] cdc_ncm 5-1:1.1: bind() failure [ 1318.507039][T15644] ntfs3: loop2: Failed to initialize $Extend. [ 1318.729863][ T966] usb 5-1: USB disconnect, device number 60 [ 1319.256431][T15696] loop6: detected capacity change from 0 to 512 [ 1319.428831][T15696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.637543][T15696] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz.6.15787: Directory hole found for htree leaf block 0 [ 1319.711691][T15696] EXT4-fs (loop6): Remounting filesystem read-only [ 1319.771625][T15727] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15796'. [ 1319.867467][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.885995][T30294] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1319.913162][T30294] Quota error (device loop6): write_blk: dquota write failed [ 1319.925192][T30294] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 1319.955546][T30294] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1319.975179][T30294] Quota error (device loop6): write_blk: dquota write failed [ 1319.988500][T30294] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 1320.851118][T15783] loop2: detected capacity change from 0 to 8 [ 1320.929072][T15783] SQUASHFS error: Failed to read block 0x636: -5 [ 1320.952095][T15783] SQUASHFS error: Unable to read metadata cache entry [634] [ 1320.980690][T15783] SQUASHFS error: Unable to read metadata cache entry [634] [ 1321.005332][T15783] SQUASHFS error: Unable to read directory block [629:0] [ 1321.619195][T15816] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15823'. [ 1321.650463][T15816] netlink: 9 bytes leftover after parsing attributes in process `syz.6.15823'. [ 1321.670024][T15816] netlink: 9 bytes leftover after parsing attributes in process `syz.6.15823'. [ 1321.696054][T15816] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1322.478920][T15847] netlink: 2 bytes leftover after parsing attributes in process `syz.6.15833'. [ 1322.508890][T15847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.534858][T15847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.568547][T15847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.588608][T15847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.608389][T15847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.638466][T15847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.658855][T15847] batadv_slave_1: entered promiscuous mode [ 1323.435648][T15883] tipc: Can't bind to reserved service type 2 [ 1323.625926][T15888] geneve0: entered promiscuous mode [ 1324.022131][T15885] loop2: detected capacity change from 0 to 32768 [ 1324.053262][T15885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.15846 (15885) [ 1324.101506][T15885] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1324.124726][T15885] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1324.149092][T15885] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1324.175607][T15885] BTRFS info (device loop2): use lzo compression, level 0 [ 1324.208815][T15885] BTRFS info (device loop2): turning on async discard [ 1324.215672][T15885] BTRFS info (device loop2): using free space tree [ 1324.348046][T15885] BTRFS info (device loop2): enabling ssd optimizations [ 1324.638871][ T5787] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1325.247742][T15917] loop6: detected capacity change from 0 to 32768 [ 1325.266380][T15963] macsec0: entered promiscuous mode [ 1325.280100][T15963] macsec0: entered allmulticast mode [ 1325.288792][T15963] veth1_macvtap: entered allmulticast mode [ 1325.362608][T15917] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1325.423881][T15917] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1325.634045][T15917] XFS (loop6): Ending clean mount [ 1325.691640][T15917] XFS (loop6): Quotacheck needed: Please wait. [ 1325.824459][T15917] XFS (loop6): Quotacheck: Done. [ 1326.000656][T30147] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1327.443154][T16027] Non-string source [ 1327.565850][T16011] loop6: detected capacity change from 0 to 32768 [ 1327.625580][T16011] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1327.853408][T16011] XFS (loop6): Ending clean mount [ 1327.913091][T16011] XFS (loop6): Quotacheck needed: Please wait. [ 1328.090203][T16011] XFS (loop6): Quotacheck: Done. [ 1328.330667][T30147] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1328.352771][T16061] kAFS: No cell specified [ 1329.489064][T21575] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1330.279677][ T2200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1331.392428][T16186] loop6: detected capacity change from 0 to 256 [ 1331.634376][T16155] loop4: detected capacity change from 0 to 32768 [ 1331.720055][T16155] jfs_lookup: iget failed on inum 32 [ 1331.725719][T16155] jfs_lookup: iget failed on inum 32 [ 1331.957556][T16203] loop6: detected capacity change from 0 to 4096 [ 1332.015579][T16203] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 1332.122805][T16203] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1332.209483][T16203] ntfs3: loop6: ino=0, attr_set_size [ 1332.523220][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15930'. [ 1333.446425][T16278] loop4: detected capacity change from 0 to 512 [ 1333.479557][T16278] EXT4-fs: Ignoring removed mblk_io_submit option [ 1333.509830][T16278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1333.624786][T16278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.812394][T16278] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:335: inode #15: comm syz.4.15943: verity file corrupted; can't find descriptor [ 1333.893838][T16278] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 1334.019216][T10351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.045286][T16313] loop2: detected capacity change from 0 to 256 [ 1334.093670][T16314] netlink: 'syz.5.15953': attribute type 3 has an invalid length. [ 1334.133392][T16313] FAT-fs (loop2): Directory bread(block 64) failed [ 1334.155359][T16313] FAT-fs (loop2): Directory bread(block 65) failed [ 1334.180389][T16313] FAT-fs (loop2): Directory bread(block 66) failed [ 1334.205900][T16313] FAT-fs (loop2): Directory bread(block 67) failed [ 1334.250994][T16313] FAT-fs (loop2): Directory bread(block 68) failed [ 1334.258018][T16313] FAT-fs (loop2): Directory bread(block 69) failed [ 1334.319708][T16313] FAT-fs (loop2): Directory bread(block 70) failed [ 1334.326350][T16313] FAT-fs (loop2): Directory bread(block 71) failed [ 1334.385794][T16313] FAT-fs (loop2): Directory bread(block 72) failed [ 1334.400380][T16313] FAT-fs (loop2): Directory bread(block 73) failed [ 1334.489270][T16332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.348361][ T27] audit: type=1400 audit(1335.290:592): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16381 comm="syz.4.15973" [ 1335.480128][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15975'. [ 1335.511740][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15975'. [ 1335.521526][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15975'. [ 1335.549739][T16394] loop6: detected capacity change from 0 to 64 [ 1335.598109][T16394] syz.6.15977: attempt to access beyond end of device [ 1335.598109][T16394] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1335.648376][T16394] Buffer I/O error on dev loop6, logical block 512, async page read [ 1335.656502][T16394] syz.6.15977: attempt to access beyond end of device [ 1335.656502][T16394] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1335.681147][T16394] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1335.712089][T16399] ipt_ECN: cannot use operation on non-tcp rule [ 1335.963466][T16412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15982'. [ 1335.990673][T16412] D`: renamed from hsr_slave_1 (while UP) [ 1336.185553][T16427] netlink: 'syz.2.15986': attribute type 2 has an invalid length. [ 1336.222815][T16427] netlink: 'syz.2.15986': attribute type 8 has an invalid length. [ 1336.238315][T16427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15986'. [ 1336.489725][T16443] loop4: detected capacity change from 0 to 64 [ 1337.153856][T16478] loop2: detected capacity change from 0 to 1024 [ 1337.230679][T16478] fuse: Bad value for 'fd' [ 1337.310145][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 1337.731981][T16514] bond0: Error: Cannot enslave bond to itself. [ 1337.995070][T16526] loop4: detected capacity change from 0 to 1024 [ 1338.079748][T16526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.261697][T10351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.208817][ T2200] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1339.308960][T16598] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 1339.427029][ T2200] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1339.467683][ T2200] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1339.485934][ T2200] usb 3-1: config 0 has no interface number 0 [ 1339.492949][ T2200] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1339.508723][T16607] x_tables: duplicate underflow at hook 1 [ 1339.561369][ T2200] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1339.624346][ T2200] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1339.647367][ T2200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.686818][ T2200] usb 3-1: config 0 descriptor?? [ 1339.716408][T16619] netlink: 'syz.5.16043': attribute type 30 has an invalid length. [ 1340.070142][T16667] netlink: 'syz.6.16048': attribute type 1 has an invalid length. [ 1340.119071][ T2200] usb 3-1: USB disconnect, device number 60 [ 1340.343375][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16052'. [ 1341.402406][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1341.528408][T16741] loop6: detected capacity change from 0 to 256 [ 1341.983929][T16722] loop2: detected capacity change from 0 to 32768 [ 1342.134233][T16767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16077'. [ 1342.189025][T16767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16077'. [ 1342.220116][T16771] loop6: detected capacity change from 0 to 128 [ 1342.262012][T16771] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1342.309243][T16771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1342.570074][T16781] ip6tnl5: entered promiscuous mode [ 1343.201955][T16814] loop2: detected capacity change from 0 to 164 [ 1343.241615][T16814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1343.288182][T16814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1343.334057][T16814] Symlink component flag not implemented [ 1343.358492][T16814] Symlink component flag not implemented [ 1343.364279][T16814] Symlink component flag not implemented (7) [ 1343.379908][T16814] Symlink component flag not implemented (116) [ 1343.952118][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16102'. [ 1344.061852][T16860] netlink: 292 bytes leftover after parsing attributes in process `syz.2.16103'. [ 1344.266708][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16107'. [ 1344.425609][T16872] loop6: detected capacity change from 0 to 4096 [ 1344.483238][T16872] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1344.543715][T16872] ntfs: volume version 3.1. [ 1345.965283][T16957] loop6: detected capacity change from 0 to 16 [ 1345.989016][T16953] loop2: detected capacity change from 0 to 1024 [ 1346.007979][T16957] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1346.048401][T16957] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1346.073344][T16962] loop4: detected capacity change from 0 to 128 [ 1346.169129][T16962] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1346.653503][T16957] erofs: DAX unsupported by block device. Turning off DAX. [ 1346.679943][T16957] erofs: (device loop6): mounted with root inode @ nid 36. [ 1346.730988][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16141'. [ 1346.774230][ T2366] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 1346.829780][T16957] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 1346.846119][ T27] audit: type=1800 audit(1346.800:593): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16135" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1347.257907][T17002] loop4: detected capacity change from 0 to 164 [ 1347.304621][T17002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1347.340470][T17002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1347.377215][T17002] Symlink component flag not implemented [ 1347.398701][T17002] Symlink component flag not implemented [ 1347.407738][T17002] Symlink component flag not implemented (7) [ 1347.438016][T17002] Symlink component flag not implemented (116) [ 1348.364847][T17054] netlink: 'syz.4.16161': attribute type 1 has an invalid length. [ 1348.398737][T17054] netlink: 228 bytes leftover after parsing attributes in process `syz.4.16161'. [ 1348.843527][T17075] loop4: detected capacity change from 0 to 4096 [ 1348.890363][T17075] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1349.088074][T17075] ntfs3: loop4: failed to convert "c46c" to koi8-u [ 1349.273931][T17100] loop2: detected capacity change from 0 to 128 [ 1349.821332][T17116] loop6: detected capacity change from 0 to 8192 [ 1349.868340][T17116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1349.926109][T17116] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1349.936242][T17116] REISERFS (device loop6): using ordered data mode [ 1349.944399][T17116] reiserfs: using flush barriers [ 1349.954038][T17116] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1350.014128][T17116] REISERFS (device loop6): checking transaction log (loop6) [ 1350.082602][T17116] REISERFS (device loop6): Using rupasov hash to sort names [ 1350.103490][T17116] REISERFS (device loop6): using 3.5.x disk format [ 1350.119955][T17116] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1350.162643][T17116] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1350.208750][T17116] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1350.260373][T17116] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1350.323786][T17116] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1350.448901][T17116] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1350.484847][T17116] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1351.133283][T17189] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1351.141596][T17192] netlink: 'syz.2.16201': attribute type 4 has an invalid length. [ 1351.141620][T17192] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16201'. [ 1351.141645][T17192] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1351.161639][T17193] loop4: detected capacity change from 0 to 8 [ 1351.277907][T17193] overlayfs: failed to resolve 'fscontext=system_u': -2 [ 1351.344356][ T27] audit: type=1326 audit(1351.300:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.430565][ T27] audit: type=1326 audit(1351.300:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.501925][ T27] audit: type=1326 audit(1351.300:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.604343][ T27] audit: type=1326 audit(1351.320:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.673023][ T27] audit: type=1326 audit(1351.320:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.767935][ T27] audit: type=1326 audit(1351.320:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.845025][ T27] audit: type=1326 audit(1351.320:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1351.924820][ T27] audit: type=1326 audit(1351.320:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1352.019370][ T27] audit: type=1326 audit(1351.330:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.2.16205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00ff98efc9 code=0x7ffc0000 [ 1352.095916][T17238] xt_cgroup: invalid path, errno=-2 [ 1352.101546][T17237] loop2: detected capacity change from 0 to 65 [ 1352.178367][T17237] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1352.258449][ T966] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1352.468606][ T966] usb 7-1: Using ep0 maxpacket: 32 [ 1352.504337][ T966] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1352.518056][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.536227][ T966] usb 7-1: Product: syz [ 1352.542039][ T966] usb 7-1: Manufacturer: syz [ 1352.550852][ T966] usb 7-1: SerialNumber: syz [ 1352.565757][T17254] loop2: detected capacity change from 0 to 1024 [ 1352.573991][ T966] usb 7-1: config 0 descriptor?? [ 1352.830239][ T966] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 1352.848085][ T966] airspy 7-1:0.0: Could not detect board [ 1352.872270][ T966] airspy: probe of 7-1:0.0 failed with error -71 [ 1352.906320][ T966] usb 7-1: USB disconnect, device number 26 [ 1352.906849][T17272] netlink: 'syz.2.16221': attribute type 9 has an invalid length. [ 1352.971344][T17272] netlink: 'syz.2.16221': attribute type 9 has an invalid length. [ 1353.166093][T17286] loop2: detected capacity change from 0 to 256 [ 1353.182634][T17286] exfat: Deprecated parameter 'namecase' [ 1353.192786][T17286] exfat: Deprecated parameter 'namecase' [ 1353.226153][T17286] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 1353.759292][T30376] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1353.975359][T30376] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1353.996273][T30376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.028591][T30376] usb 3-1: Product: syz [ 1354.032850][T30376] usb 3-1: Manufacturer: syz [ 1354.037480][T30376] usb 3-1: SerialNumber: syz [ 1354.075053][T30376] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1354.097815][ T2200] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1354.431411][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16242'. [ 1354.463727][T17354] loop4: detected capacity change from 0 to 256 [ 1354.507565][T17354] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 1354.630396][ T27] audit: type=1800 audit(1354.570:603): pid=17354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16243" name="file1" dev="loop4" ino=1048792 res=0 errno=0 [ 1354.630447][T30376] usb 3-1: USB disconnect, device number 61 [ 1354.905666][T17370] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1355.233078][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16251'. [ 1355.256194][T17394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1355.263619][T17394] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.270998][T17394] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.485770][ T2200] usb 3-1: Service connection timeout for: 256 [ 1355.504304][ T2200] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1355.544429][ T2200] ath9k_htc: Failed to initialize the device [ 1355.555740][T30376] usb 3-1: ath9k_htc: USB layer deinitialized [ 1355.717270][T17424] loop6: detected capacity change from 0 to 256 [ 1356.246456][T17449] delete_channel: no stack [ 1356.318654][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16268'. [ 1356.321999][T17454] loop6: detected capacity change from 0 to 128 [ 1356.328917][T17455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16268'. [ 1356.354367][T17454] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1356.397415][T17454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1356.985472][T17473] loop4: detected capacity change from 0 to 4096 [ 1357.039445][T17473] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1357.066498][T17484] loop2: detected capacity change from 0 to 1024 [ 1357.157863][T17484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.385096][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.417491][T17488] loop6: detected capacity change from 0 to 4096 [ 1357.460365][T17488] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 1357.608184][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16282'. [ 1358.938859][T17571] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1359.269813][T17589] loop6: detected capacity change from 0 to 64 [ 1359.313888][T17594] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1359.350164][T17589] Bad inode number on dev loop6: 6 is out of range [ 1359.817391][T17619] loop4: detected capacity change from 0 to 128 [ 1359.853289][T17623] xt_cgroup: path and classid specified [ 1359.888561][T17619] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1359.963458][T17619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1360.084760][T17631] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1360.301092][T17638] loop2: detected capacity change from 0 to 64 [ 1360.717174][T17614] loop6: detected capacity change from 0 to 32768 [ 1360.743438][T17614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.16315 (17614) [ 1360.807894][T17614] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1360.848614][T17614] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1360.871593][T17614] BTRFS error (device loop6): invalid value 0 for thread_pool [ 1360.901755][T17614] BTRFS error (device loop6): open_ctree failed: -22 [ 1360.943912][ T8590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (8590) [ 1361.428442][T17682] Unsupported ieee802154 address type: 0 [ 1361.665612][T17655] loop2: detected capacity change from 0 to 32768 [ 1361.738901][T17655] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1361.760125][T17655] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1361.778510][T17655] BTRFS info (device loop2): turning on async discard [ 1361.795734][T17655] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1361.827184][T17655] BTRFS info (device loop2): trying to use backup root at mount time [ 1361.871330][T17655] BTRFS info (device loop2): using free space tree [ 1361.886046][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.968768][ T2200] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1362.031902][T17655] BTRFS info (device loop2): enabling ssd optimizations [ 1362.191490][ T2200] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1362.214893][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1362.237696][ T2200] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1362.278427][ T2200] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.317212][ T2200] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1362.348538][ T2200] usb 7-1: config 1 has no interface number 0 [ 1362.367476][ T2200] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1362.426583][ T2200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.462563][ T2200] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1362.714690][ T2200] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 1362.733797][ T2200] snd_usb_pod 7-1:1.1: invalid control EP [ 1362.772866][ T2200] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 1362.805313][ T2200] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1362.817832][ T2200] snd_usb_pod: probe of 7-1:1.1 failed with error -22 [ 1362.966529][T21575] usb 7-1: USB disconnect, device number 27 [ 1362.983443][T17752] loop4: detected capacity change from 0 to 64 [ 1363.100347][T17752] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1363.426872][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16354'. [ 1363.442191][T17773] netlink: 'syz.2.16354': attribute type 1 has an invalid length. [ 1363.464989][T17773] netlink: 'syz.2.16354': attribute type 2 has an invalid length. [ 1363.473776][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16354'. [ 1363.540340][T17779] netlink: 'syz.5.16355': attribute type 3 has an invalid length. [ 1363.573424][T17779] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.16355'. [ 1363.855565][T17794] dlm: no locking on control device [ 1364.178332][T26738] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1364.370354][T26738] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 1364.381165][T26738] usb 3-1: config 0 has no interface number 0 [ 1364.387329][T26738] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1364.422056][ T966] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1364.439081][T26738] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1364.455811][T26738] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1364.466573][T26738] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1364.488449][T26738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.509408][T26738] usb 3-1: config 0 descriptor?? [ 1364.533468][T26738] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1364.618358][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 1364.626077][ T966] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1364.636103][ T966] usb 5-1: config 0 has no interface number 0 [ 1364.649226][ T966] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1364.681835][ T966] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1364.701433][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.733251][T26738] spca561: probe of 3-1:0.156 failed with error -22 [ 1364.748357][ T966] usb 5-1: Product: syz [ 1364.759983][T26738] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1364.767102][ T966] usb 5-1: Manufacturer: syz [ 1364.782151][ T966] usb 5-1: SerialNumber: syz [ 1364.786888][T26738] usb 3-1: MIDIStreaming interface descriptor not found [ 1364.797528][ T966] usb 5-1: config 0 descriptor?? [ 1364.878896][T17853] SET target dimension over the limit! [ 1364.996130][T26738] usb 3-1: USB disconnect, device number 62 [ 1365.308966][ T966] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 1365.352408][ T966] usb 5-1: USB disconnect, device number 61 [ 1365.476945][T17897] gtp0: entered promiscuous mode [ 1365.490007][T17897] gtp0: entered allmulticast mode [ 1366.074824][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16390'. [ 1366.367483][T17946] macvtap0: entered allmulticast mode [ 1366.394148][T17946] veth0_macvtap: entered allmulticast mode [ 1366.400720][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16395'. [ 1366.652524][T17958] loop6: detected capacity change from 0 to 2048 [ 1366.728824][T17958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1366.769539][T17966] netlink: 'syz.2.16402': attribute type 1 has an invalid length. [ 1367.214757][T17987] loop6: detected capacity change from 0 to 1024 [ 1367.256910][T17987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.435073][T17998] libceph: resolve '0' (ret=-3): failed [ 1367.487604][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.868886][T21575] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1367.964365][T18028] loop6: detected capacity change from 0 to 1024 [ 1367.992322][T18028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1368.013711][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16421'. [ 1368.018463][T18028] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1368.057814][T18028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce018, mo2=0000] [ 1368.079792][T21575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.109228][T18028] System zones: 0-1, 3-12 [ 1368.119815][T21575] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1368.147799][T18028] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #3: block 1: comm syz.6.16420: lblock 1 mapped to illegal pblock 1 (length 1) [ 1368.174045][T21575] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1368.202810][T21575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1368.228671][T18028] Quota error (device loop6): write_blk: dquota write failed [ 1368.244355][T21575] usb 5-1: SerialNumber: syz [ 1368.258327][T18028] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1368.297782][T18028] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.16420: Failed to acquire dquot type 0 [ 1368.340221][T18028] EXT4-fs error (device loop6): ext4_free_blocks:6676: comm syz.6.16420: Freeing blocks not in datazone - block = 0, count = 4096 [ 1368.375529][T18028] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.16420: Invalid inode bitmap blk 0 in block_group 0 [ 1368.393440][ T1102] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1368.431959][T18028] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 1368.444217][ T1102] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1368.456263][T18028] EXT4-fs (loop6): 1 orphan inode deleted [ 1368.468280][ T1102] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u4:7: Failed to release dquot type 0 [ 1368.481786][T18028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.501882][T18049] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1368.521029][T21575] usb 5-1: 0:2 : does not exist [ 1368.539979][T21575] usb 5-1: unit 5: unexpected type 0x03 [ 1368.638165][T18028] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1368.646930][T21575] usb 5-1: USB disconnect, device number 62 [ 1368.743393][T30147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.765147][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1368.863723][T18080] loop2: detected capacity change from 0 to 8 [ 1370.020617][T18143] loop2: detected capacity change from 0 to 512 [ 1370.035113][T18144] loop6: detected capacity change from 0 to 64 [ 1370.128975][T18144] syz.6.16450: attempt to access beyond end of device [ 1370.128975][T18144] loop6: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 1370.158925][T18144] Buffer I/O error on dev loop6, logical block 117440531, async page read [ 1370.167953][T18144] syz.6.16450: attempt to access beyond end of device [ 1370.167953][T18144] loop6: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 1370.188339][T18143] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1370.225029][T18143] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1370.248463][T18144] Buffer I/O error on dev loop6, logical block 4274257920, async page read [ 1370.271729][T18144] syz.6.16450: attempt to access beyond end of device [ 1370.271729][T18144] loop6: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 1370.286915][T18144] Buffer I/O error on dev loop6, logical block 150994944, async page read [ 1370.296595][T18144] syz.6.16450: attempt to access beyond end of device [ 1370.296595][T18144] loop6: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 1370.301086][T18143] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1370.312525][T18144] Buffer I/O error on dev loop6, logical block 117440531, async page read [ 1370.328886][ T27] audit: type=1800 audit(1370.290:604): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16450" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 1370.348030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.357968][T18143] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1370.367185][T18143] System zones: 0-2, 18-18, 34-35 [ 1370.378556][T18143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.531895][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.766739][T18171] autofs4:pid:18171:autofs_fill_super: called with bogus options [ 1370.998745][T18180] loop6: detected capacity change from 0 to 256 [ 1371.012220][T18180] exfat: Deprecated parameter 'namecase' [ 1371.091408][T18180] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 1371.502645][T18209] netlink: 'syz.5.16468': attribute type 22 has an invalid length. [ 1372.175109][T18238] comedi comedi3: pcl812: I/O port conflict (0x4f26,16) [ 1372.439816][T18203] loop4: detected capacity change from 0 to 32768 [ 1372.997232][T18233] loop2: detected capacity change from 0 to 32768 [ 1373.025276][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16487'. [ 1373.090862][T18233] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1373.370483][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 1373.837184][T18308] netlink: 'syz.6.16497': attribute type 3 has an invalid length. [ 1374.161800][T18325] loop4: detected capacity change from 0 to 16 [ 1374.186116][T18325] erofs: (device loop4): mounted with root inode @ nid 36. [ 1374.218460][T21575] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1374.361008][T18305] loop2: detected capacity change from 0 to 32768 [ 1374.361132][T18331] loop4: detected capacity change from 0 to 128 [ 1374.377834][T18305] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.16492 (18305) [ 1374.387732][T18331] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1374.429573][T18305] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1374.444866][T21575] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 1374.451562][T18305] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1374.466375][T21575] usb 7-1: config 0 has no interface number 0 [ 1374.481316][T21575] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1374.491453][T18305] BTRFS info (device loop2): force zlib compression, level 3 [ 1374.505003][T18331] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1374.508838][T21575] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1374.530432][T18305] BTRFS info (device loop2): force clearing of disk cache [ 1374.537737][T18331] FAT-fs (loop4): Filesystem has been set read-only [ 1374.545656][T18305] BTRFS info (device loop2): setting nodatasum [ 1374.551923][T21575] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1374.551996][T21575] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1374.552021][T21575] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.572261][T18305] BTRFS info (device loop2): allowing degraded mounts [ 1374.572293][T18305] BTRFS info (device loop2): enabling disk space caching [ 1374.572312][T18305] BTRFS info (device loop2): disk space caching is enabled [ 1374.632246][T21575] usb 7-1: config 0 descriptor?? [ 1374.736319][T21575] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1374.770471][T18305] BTRFS info (device loop2): auto enabling async discard [ 1374.797546][T18305] BTRFS info (device loop2): rebuilding free space tree [ 1374.852983][T18305] BTRFS info (device loop2): disabling free space tree [ 1374.865330][T18305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1374.884084][T18305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1374.979290][T21575] spca561: probe of 7-1:0.156 failed with error -22 [ 1374.999243][T21575] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1375.011911][T21575] usb 7-1: MIDIStreaming interface descriptor not found [ 1375.130504][T21575] usb 7-1: USB disconnect, device number 28 [ 1375.138085][T18305] BTRFS info (device loop2): balance: start -sprofiles=system|raid0|raid1|dup|raid10|raid6|raid1c3|raid1c4|0x800,usage=0,usage=0..0,drange=36028797018963968..70368744177664,vrange=9223372036854775809..4294967295,limit=351830835986432 [ 1375.190950][T18305] BTRFS info (device loop2): balance: ended with status: 0 [ 1375.218434][T18378] netlink: 'syz.4.16506': attribute type 12 has an invalid length. [ 1375.246940][T18378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16506'. [ 1375.339060][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1375.601415][T18400] x_tables: unsorted underflow at hook 3 [ 1376.347980][T18432] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.16518'. [ 1376.580521][T18447] [ 1376.582925][T18447] ====================================================== [ 1376.589977][T18447] WARNING: possible circular locking dependency detected [ 1376.597139][T18447] syzkaller #0 Not tainted [ 1376.601589][T18447] ------------------------------------------------------ [ 1376.608633][T18447] syz.2.16522/18447 is trying to acquire lock: [ 1376.614815][T18447] ffff88807a45e0e0 (&type->s_umount_key#55){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1376.624294][T18447] [ 1376.624294][T18447] but task is already holding lock: [ 1376.631689][T18447] ffff88801fc81808 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x815/0x2460 [ 1376.641952][T18447] [ 1376.641952][T18447] which lock already depends on the new lock. [ 1376.641952][T18447] [ 1376.652409][T18447] [ 1376.652409][T18447] the existing dependency chain (in reverse order) is: [ 1376.661551][T18447] [ 1376.661551][T18447] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 1376.669776][T18447] __mutex_lock+0x129/0xcc0 [ 1376.674859][T18447] bd_finish_claiming+0x22f/0x3f0 [ 1376.680461][T18447] blkdev_get_by_dev+0x45c/0x600 [ 1376.685973][T18447] bdev_open_by_dev+0x77/0x100 [ 1376.691397][T18447] setup_bdev_super+0x59/0x660 [ 1376.696730][T18447] mount_bdev+0x1dd/0x2d0 [ 1376.701627][T18447] legacy_get_tree+0xea/0x180 [ 1376.706877][T18447] vfs_get_tree+0x8c/0x280 [ 1376.711855][T18447] do_new_mount+0x24b/0xa40 [ 1376.716916][T18447] init_mount+0xd2/0x120 [ 1376.721723][T18447] do_mount_root+0x97/0x230 [ 1376.726812][T18447] mount_root_generic+0x195/0x3c0 [ 1376.732408][T18447] prepare_namespace+0xc2/0x100 [ 1376.734302][T18452] overlay: Unknown parameter '\' [ 1376.737859][T18447] kernel_init_freeable+0x413/0x570 [ 1376.737891][T18447] kernel_init+0x1d/0x1c0 [ 1376.753530][T18447] ret_from_fork+0x48/0x80 [ 1376.758513][T18447] ret_from_fork_asm+0x11/0x20 [ 1376.763842][T18447] [ 1376.763842][T18447] -> #3 (bdev_lock){+.+.}-{3:3}: [ 1376.771025][T18447] __mutex_lock+0x129/0xcc0 [ 1376.776103][T18447] bd_prepare_to_claim+0x1ba/0x480 [ 1376.781781][T18447] truncate_bdev_range+0x4e/0x260 [ 1376.787371][T18447] blkdev_common_ioctl+0x1ba8/0x2460 [ 1376.793230][T18447] blkdev_ioctl+0x4eb/0x6f0 [ 1376.798303][T18447] __se_sys_ioctl+0xfd/0x170 [ 1376.803466][T18447] do_syscall_64+0x55/0xb0 [ 1376.808452][T18447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.814935][T18447] [ 1376.814935][T18447] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 1376.823305][T18447] down_write+0x97/0x1f0 [ 1376.828103][T18447] set_blocksize+0x249/0x4b0 [ 1376.833236][T18447] sb_min_blocksize+0xbe/0x190 [ 1376.838548][T18447] ext4_fill_super+0x6df/0x66c0 [ 1376.843947][T18447] get_tree_bdev+0x3e4/0x510 [ 1376.849070][T18447] vfs_get_tree+0x8c/0x280 [ 1376.854016][T18447] do_new_mount+0x24b/0xa40 [ 1376.859058][T18447] init_mount+0xd2/0x120 [ 1376.863860][T18447] do_mount_root+0x97/0x230 [ 1376.868906][T18447] mount_root_generic+0x195/0x3c0 [ 1376.874490][T18447] prepare_namespace+0xc2/0x100 [ 1376.879980][T18447] kernel_init_freeable+0x413/0x570 [ 1376.885734][T18447] kernel_init+0x1d/0x1c0 [ 1376.890602][T18447] ret_from_fork+0x48/0x80 [ 1376.895570][T18447] ret_from_fork_asm+0x11/0x20 [ 1376.900876][T18447] [ 1376.900876][T18447] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 1376.909510][T18447] down_write+0x97/0x1f0 [ 1376.914324][T18447] set_blocksize+0x201/0x4b0 [ 1376.919453][T18447] sb_min_blocksize+0xbe/0x190 [ 1376.924757][T18447] hfsplus_read_wrapper+0xc9/0xfd0 [ 1376.930410][T18447] hfsplus_fill_super+0x37e/0x1b90 [ 1376.936051][T18447] mount_bdev+0x22b/0x2d0 [ 1376.940912][T18447] legacy_get_tree+0xea/0x180 [ 1376.946120][T18447] vfs_get_tree+0x8c/0x280 [ 1376.951062][T18447] do_new_mount+0x24b/0xa40 [ 1376.956098][T18447] __se_sys_mount+0x2da/0x3c0 [ 1376.961303][T18447] do_syscall_64+0x55/0xb0 [ 1376.966263][T18447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1376.972693][T18447] [ 1376.972693][T18447] -> #0 (&type->s_umount_key#55){++++}-{3:3}: [ 1376.980979][T18447] __lock_acquire+0x2ddb/0x7c80 [ 1376.986360][T18447] lock_acquire+0x197/0x410 [ 1376.991393][T18447] down_read+0x46/0x2e0 [ 1376.996086][T18447] super_lock+0x167/0x360 [ 1377.000974][T18447] fs_bdev_sync+0xa4/0x170 [ 1377.005937][T18447] blkdev_common_ioctl+0x881/0x2460 [ 1377.011677][T18447] blkdev_ioctl+0x4eb/0x6f0 [ 1377.016735][T18447] __se_sys_ioctl+0xfd/0x170 [ 1377.021856][T18447] do_syscall_64+0x55/0xb0 [ 1377.026808][T18447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.033236][T18447] [ 1377.033236][T18447] other info that might help us debug this: [ 1377.033236][T18447] [ 1377.043471][T18447] Chain exists of: [ 1377.043471][T18447] &type->s_umount_key#55 --> bdev_lock --> &bdev->bd_holder_lock [ 1377.043471][T18447] [ 1377.057144][T18447] Possible unsafe locking scenario: [ 1377.057144][T18447] [ 1377.064598][T18447] CPU0 CPU1 [ 1377.069972][T18447] ---- ---- [ 1377.075339][T18447] lock(&bdev->bd_holder_lock); [ 1377.080292][T18447] lock(bdev_lock); [ 1377.086729][T18447] lock(&bdev->bd_holder_lock); [ 1377.094202][T18447] rlock(&type->s_umount_key#55); [ 1377.099333][T18447] [ 1377.099333][T18447] *** DEADLOCK *** [ 1377.099333][T18447] [ 1377.107481][T18447] 1 lock held by syz.2.16522/18447: [ 1377.112686][T18447] #0: ffff88801fc81808 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x815/0x2460 [ 1377.123351][T18447] [ 1377.123351][T18447] stack backtrace: [ 1377.129244][T18447] CPU: 0 PID: 18447 Comm: syz.2.16522 Not tainted syzkaller #0 [ 1377.136800][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1377.146869][T18447] Call Trace: [ 1377.150184][T18447] [ 1377.153127][T18447] dump_stack_lvl+0x16c/0x230 [ 1377.157825][T18447] ? load_image+0x3b0/0x3b0 [ 1377.162344][T18447] ? show_regs_print_info+0x20/0x20 [ 1377.167563][T18447] ? print_circular_bug+0x12b/0x1a0 [ 1377.172795][T18447] check_noncircular+0x2bd/0x3c0 [ 1377.177751][T18447] ? print_deadlock_bug+0x5d0/0x5d0 [ 1377.182958][T18447] ? lockdep_lock+0xe0/0x220 [ 1377.187565][T18447] ? _find_first_zero_bit+0xd3/0x100 [ 1377.192874][T18447] __lock_acquire+0x2ddb/0x7c80 [ 1377.197757][T18447] ? verify_lock_unused+0x140/0x140 [ 1377.202976][T18447] ? stack_trace_save+0x9c/0xe0 [ 1377.207852][T18447] ? stack_trace_snprint+0xf0/0xf0 [ 1377.212978][T18447] ? __stack_depot_save+0x1f/0x630 [ 1377.218102][T18447] ? do_syscall_64+0x55/0xb0 [ 1377.222713][T18447] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.228807][T18447] lock_acquire+0x197/0x410 [ 1377.233321][T18447] ? super_lock+0x167/0x360 [ 1377.237933][T18447] ? __might_sleep+0xe0/0xe0 [ 1377.242540][T18447] ? __mutex_trylock_common+0x153/0x250 [ 1377.248110][T18447] ? read_lock_is_recursive+0x20/0x20 [ 1377.253502][T18447] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1377.259682][T18447] down_read+0x46/0x2e0 [ 1377.263891][T18447] ? super_lock+0x167/0x360 [ 1377.268415][T18447] super_lock+0x167/0x360 [ 1377.272763][T18447] ? user_get_super+0x180/0x180 [ 1377.277629][T18447] ? mutex_lock_nested+0x20/0x20 [ 1377.282589][T18447] fs_bdev_sync+0xa4/0x170 [ 1377.287020][T18447] ? fs_bdev_mark_dead+0x1f0/0x1f0 [ 1377.292142][T18447] blkdev_common_ioctl+0x881/0x2460 [ 1377.297361][T18447] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1377.303008][T18447] ? blkdev_bszset+0x1f0/0x1f0 [ 1377.307814][T18447] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1377.313311][T18447] blkdev_ioctl+0x4eb/0x6f0 [ 1377.317834][T18447] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1377.323317][T18447] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1377.328270][T18447] ? security_file_ioctl+0x80/0xa0 [ 1377.333404][T18447] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1377.338891][T18447] __se_sys_ioctl+0xfd/0x170 [ 1377.343502][T18447] do_syscall_64+0x55/0xb0 [ 1377.347936][T18447] ? clear_bhb_loop+0x40/0x90 [ 1377.352655][T18447] ? clear_bhb_loop+0x40/0x90 [ 1377.357375][T18447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.363283][T18447] RIP: 0033:0x7f00ff98efc9 [ 1377.367714][T18447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.387362][T18447] RSP: 002b:00007f0100890038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.395791][T18447] RAX: ffffffffffffffda RBX: 00007f00ffbe5fa0 RCX: 00007f00ff98efc9 [ 1377.403775][T18447] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000003 [ 1377.411761][T18447] RBP: 00007f00ffa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1377.419747][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.427732][T18447] R13: 00007f00ffbe6038 R14: 00007f00ffbe5fa0 R15: 00007ffdabc13558 [ 1377.435728][T18447]