last executing test programs: 3.149165454s ago: executing program 2 (id=8594): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xe}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.996399118s ago: executing program 2 (id=8597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x74}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 2.85838855s ago: executing program 2 (id=8599): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 2.751954989s ago: executing program 2 (id=8601): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x200000, &(0x7f0000000300)={[{@fat=@usefree}, {@numtail}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_mixed}, {@uni_xlate}, {@numtail}]}, 0x3, 0x350, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 2.467636794s ago: executing program 4 (id=8602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000500020000000900020073797a31000000000500040000000000140007800800084000000000050014002300001005000100070000000c000300686173683a6970"], 0x58}}, 0x0) 2.274379371s ago: executing program 4 (id=8603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 2.263048862s ago: executing program 2 (id=8604): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="0000040000000b0f3d5e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.249641123s ago: executing program 1 (id=8605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000112c0)={0x7, 'vlan1\x00', {0x8}}) 2.102359046s ago: executing program 4 (id=8606): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newroute={0xb6c, 0x18, 0xa07, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_METRICS={0xb41, 0x8, 0x0, 0x1, "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"}]}, 0xb6c}}, 0x0) 2.05527501s ago: executing program 1 (id=8608): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) 1.987215956s ago: executing program 4 (id=8609): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c764d4fa7d4851146c45fa801224f584e25daa2c6e13e0e3002f50b275e280221a9972639c4820848a2c97e2ae425e574fcb6f40a392cd788af17c0e9b4a21e623aea4797da0593", 0x4}, {0x0, 0xffffff56}, {&(0x7f0000000000)="ba70de013ead54a64ba4716a32cd38f5f539bb66d45ddb4badcba263146f9e4ff7c8b44b1f3eed131a11f36af74202eb7d1b1314ae7c8ddaafb1199c8a", 0x11}, {&(0x7f00000003c0)="f57cac9ffd4700badc6f0a862276f904d7f173aff011bca7f204f01fc8d551a8c4912c52f8281998be20ede3b8cb4af86a03f07b55823d63e4be7c68c1a973402bd10f74659b91fdfceb4617364fa5ee3fc735f750b54c5a05ebf2e6419c880cbdccd64016ed0a2f21519135b6ad46a6a67f8cd5f8191f8bea6e0398be33491b45d8c8922e8829477fc32df1eef918d5876ff78b89a1"}, {&(0x7f0000000900)="46ddb7fd40427f94dc1189b126d3279ed02b384683089250450253381cd9f37192334acdb9f101c444626fd406180e0594677bfde9846ff6c3eead32a65a8efdca4d8f86a7858568b9b728714dcd307c27fa7b89fe3cf5dc4241d0679a06609e843c9b610d835f9cf1354538abfc5288fbf696fa6b8a1a23c87f1271c28172ef1e492d256d1d88a309da9bec024144a813b7d1e80eb03d4b6b349c81bd6b22e238586fb3a3902b69e4d83e2b253cfaff084aad228bff8a64b4", 0xfffffffffffffde8}, {&(0x7f00000009c0)="109b1e79f7a55e366b53aa93fc651d77f43258dc13f88b87d61f8b230fa0d0b370d1c48622c360f2c91e2576546df4a97f90b3dadead089e70212f8a94fdb29fb0b18c40474295843fd7d65f80e4d313db30fb2e1fbac29fb11856"}, {&(0x7f0000000a40)="40b991110b7c2b4e17b03ddde889d90ac678cb761cd90c77b88f02941e45672d33d215e3c2908c8e3ffcbfe0a53d950bbd72f5aa203a605fec8a5138ae1cbea0aaf340412f5d57f24df6bef999a9443e96d271eb501cfae463825ab9d62bbfc9728f715bbc3c65bbf258834a9ab31d86547142a5cf8eed870565959e1565e34df6cdc6107afd7138be9ee3f5d3b929a2aec38d"}], 0x3, 0x0, 0x0) 1.925957242s ago: executing program 1 (id=8611): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0xb8, 0x7000000, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.882388416s ago: executing program 4 (id=8612): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000003500), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) 1.837335829s ago: executing program 1 (id=8613): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a0004000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) 1.663596495s ago: executing program 1 (id=8616): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0x4058587a, 0x0) 892.065482ms ago: executing program 0 (id=8621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 718.491228ms ago: executing program 3 (id=8622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 638.194914ms ago: executing program 4 (id=8623): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b6a, &(0x7f0000000040)={0x800200e, 0x0, 0x0, 0xfffffffa, 0x40, '7\x00', 0x80, 0x1ff}) 637.751154ms ago: executing program 0 (id=8624): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) 511.896076ms ago: executing program 3 (id=8625): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "00000100cbd047da9ca965f96ad5801f0514d30500000000000000490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5cffa56a5e8d7137024c183ebacdf741cea92ded3a9ca54de162d99e000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000cc00", 0x7d}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 511.192986ms ago: executing program 1 (id=8626): r0 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0x0) 463.517699ms ago: executing program 0 (id=8627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 354.355959ms ago: executing program 3 (id=8628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd27, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 333.684171ms ago: executing program 0 (id=8629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x20, 0x72, 0x333, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 266.000867ms ago: executing program 3 (id=8630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@private2}, [@mark={0xc}]}, 0x4c}}, 0x0) 166.042786ms ago: executing program 0 (id=8631): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x17, 0x1, 0x0, "9f76fe92f6d87e3a99080debac1874d47ee2318d4526f2148e84c532d56b46f0"}) 131.442909ms ago: executing program 3 (id=8632): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) 79.210733ms ago: executing program 2 (id=8633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500010007000000090002007379d21c000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800084000000090"], 0x5c}}, 0x0) 443.38µs ago: executing program 3 (id=8634): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind=static:1']) 0s ago: executing program 0 (id=8635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): hange from 0 to 1024 [ 467.113118][T19839] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6942'. [ 467.118243][ T4018] usb 5-1: USB disconnect, device number 20 [ 467.138766][ T11] hfsplus: b-tree write err: -5, ino 4 [ 467.203269][T19841] loop3: detected capacity change from 0 to 1024 [ 467.262662][T19841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.351021][T19841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 467.435927][T19841] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.6944: corrupted in-inode xattr [ 467.617751][ T4097] EXT4-fs (loop3): unmounting filesystem. [ 467.710557][T19861] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6952'. [ 467.761712][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6952'. [ 467.784688][T19861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6952'. [ 467.824753][T19861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6952'. [ 468.006373][ T3641] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 468.143419][T19877] loop2: detected capacity change from 0 to 256 [ 468.198015][T19879] ebt_among: src integrity fail: 30a [ 468.301844][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6961'. [ 468.323886][T19845] loop1: detected capacity change from 0 to 40427 [ 468.370341][T19845] F2FS-fs (loop1): invalid crc value [ 468.424082][T19845] F2FS-fs (loop1): Found nat_bits in checkpoint [ 468.587231][T19845] F2FS-fs (loop1): Start checkpoint disabled! [ 468.659801][T19845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 468.688177][T19845] syz.1.6945: attempt to access beyond end of device [ 468.688177][T19845] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 468.956817][ T7419] kworker/u4:8: attempt to access beyond end of device [ 468.956817][ T7419] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 469.150624][T19864] loop0: detected capacity change from 0 to 40427 [ 469.211142][T19864] F2FS-fs (loop0): invalid crc value [ 469.277175][T19864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 469.448558][T19864] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 469.480546][T19864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 469.578081][T19864] F2FS-fs (loop0): switch extent_cache option is not allowed [ 469.648826][T19928] loop2: detected capacity change from 0 to 1024 [ 469.677046][T19928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.714917][T19928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 469.783836][T19928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003] [ 469.840633][T19928] System zones: 0-1, 3-36 [ 469.865351][T19928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 469.917097][ T27] audit: type=1400 audit(1725979994.796:106): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=19934 comm="syz.4.6986" [ 470.083836][ T8156] EXT4-fs (loop2): unmounting filesystem. [ 470.242010][T19945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.400840][T19912] loop3: detected capacity change from 0 to 40427 [ 470.441605][ T5762] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 470.463517][T19956] netlink: 'syz.0.6994': attribute type 3 has an invalid length. [ 470.472250][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 470.521609][T19912] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 470.541947][T19912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 470.608215][T19912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 470.640746][ T3641] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 470.651433][ T3641] Bluetooth: hci1: Injecting HCI hardware error event [ 470.661428][ T3636] Bluetooth: hci1: hardware error 0x00 [ 470.738594][T19971] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 43390 - 0 [ 470.748013][T19971] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43390 - 0 [ 470.751603][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 470.757565][T19971] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43390 - 0 [ 470.774085][T19971] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43390 - 0 [ 470.823661][T19912] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 470.830740][T19912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 470.911698][ T5762] usb 5-1: config 0 has an invalid interface number: 77 but max is 0 [ 470.919865][ T5762] usb 5-1: config 0 has no interface number 0 [ 471.141677][ T5762] usb 5-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=9c.d5 [ 471.169159][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.174802][T19984] loop1: detected capacity change from 0 to 2048 [ 471.180148][ T5762] usb 5-1: Product: syz [ 471.188187][ T5762] usb 5-1: Manufacturer: syz [ 471.212090][ T5762] usb 5-1: SerialNumber: syz [ 471.227597][T19984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.237826][ T5762] usb 5-1: config 0 descriptor?? [ 471.261449][ T3647] jfs_flush_journal: synclist not empty [ 471.269007][ T3647] metapage: ffff8880249f0e88: 00001000 00000000 00003aec 00000000 [ 471.311789][ T3647] metapage: ffff8880249f0e98: 02661120 ffffc900 78c2a228 ffff8880 [ 471.329926][ T3647] metapage: ffff8880249f0ea8: 00000004 00000000 00000000 00000000 [ 471.364860][ T3647] metapage: ffff8880249f0eb8: 65c2e000 ffff8880 0000001c 00000000 [ 471.404208][ T3647] metapage: ffff8880249f0ec8: 00000000 dead4ead ffffffff 00000000 [ 471.421841][ T3647] metapage: ffff8880249f0ed8: ffffffff ffffffff 974d5ce0 ffffffff [ 471.463149][ T3647] metapage: ffff8880249f0ee8: 90c12160 ffffffff 00000000 00000000 [ 471.521439][ T3647] metapage: ffff8880249f0ef8: 8b44e420 ffffffff 00000200 00000000 [ 471.591463][ T3647] metapage: ffff8880249f0f08: 249f0f08 ffff8880 249f0f08 ffff8880 [ 471.631572][ T3647] metapage: ffff8880249f0f18: 01970b80 ffffea00 2b6f8000 ffff8880 [ 471.639427][ T3647] metapage: ffff8880249f0f28: 00001000 00000000 00000001 00000000 [ 471.664329][ T4018] usb 5-1: USB disconnect, device number 21 [ 471.764323][ T3647] metapage: ffff8880249f0f38: 78c2a000 ffff8880 [ 471.770612][ T3647] page: ffffea0001970b80: 00fff50000002056 ffffea0000acee48 [ 471.822007][ T3647] page: ffffea0001970b90: ffffea0001d99e88 ffff888073798f98 [ 471.829343][ T3647] page: ffffea0001970ba0: 000000000000001c ffff8880249f0e88 [ 471.894487][ T3647] page: ffffea0001970bb0: 00000002ffffffff ffff888059b72000 [ 471.910651][ T3647] tblock:ffffc90002661110: 03040910 00000000 00003aec 00000000 [ 471.943153][ T3647] tblock:ffffc90002661120: 78c2a228 ffff8880 249f0e98 ffff8880 [ 471.971451][ T3647] tblock:ffffc90002661130: 2b6f8000 ffff8880 00040001 00000000 [ 472.017736][ T3647] tblock:ffffc90002661140: 00000000 dead4ead ffffffff 00000000 [ 472.032156][ T3647] tblock:ffffc90002661150: ffffffff ffffffff 974d5ee0 ffffffff [ 472.039755][ T3647] tblock:ffffc90002661160: 90c12d60 ffffffff 00000000 00000000 [ 472.077042][ T3641] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 472.086159][ T3641] Bluetooth: hci2: Injecting HCI hardware error event [ 472.096903][ T3646] Bluetooth: hci2: hardware error 0x00 [ 472.125568][ T3647] tblock:ffffc90002661170: 8b44f900 ffffffff 00000200 00000000 [ 472.138472][T20008] loop3: detected capacity change from 0 to 4096 [ 472.154965][T20008] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 472.208790][ T3647] tblock:ffffc90002661180: 02661180 ffffc900 02661180 ffffc900 [ 472.227953][ T3647] tblock:ffffc90002661190: 00000001 00000000 00000100 dead0000 [ 472.239438][T20008] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 472.273036][ T3647] tblock:ffffc900026611a0: 00000122 dead0000 00003cbc 00000000 [ 472.291884][ T3647] tblock:ffffc900026611b0: 29263900 ffff8880 00000003 00000cbc [ 472.317033][T20008] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 472.326192][ T3647] tblock:ffffc900026611c0: 00000000 dead4ead ffffffff 00000000 [ 472.346425][T20008] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 472.350179][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7024'. [ 472.372835][ T3647] tblock:ffffc900026611d0: ffffffff ffffffff 974d5ec0 ffffffff [ 472.392037][T20008] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 472.421429][ T3647] tblock:ffffc900026611e0: 90c3e4a0 ffffffff 00000000 00000000 [ 472.429024][ T3647] tblock:ffffc900026611f0: 8b44f8c0 ffffffff 00000200 00000000 [ 472.434368][T20008] ntfs: volume version 3.1. [ 472.460459][T20008] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 472.476792][T20008] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 472.501435][ T3647] tblock:ffffc90002661200: 02661200 ffffc900 02661200 ffffc900 [ 472.535423][T20008] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 472.563446][ T3647] tblock:ffffc90002661210: 737c1ff0 ffff8880 00000007 00000000 [ 472.624320][T20008] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 472.650767][T20027] UBIFS error (pid: 20027): cannot open "ubifs", error -22 [ 472.791694][ T3636] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 472.876190][T20037] loop3: detected capacity change from 0 to 1024 [ 473.065569][T20043] xt_hashlimit: max too large, truncated to 1048576 [ 473.112487][ T4018] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 473.192659][T20018] loop0: detected capacity change from 0 to 40427 [ 473.259381][T20018] F2FS-fs (loop0): invalid crc value [ 473.315864][T20050] netlink: 'syz.3.7038': attribute type 1 has an invalid length. [ 473.347259][T20018] F2FS-fs (loop0): Found nat_bits in checkpoint [ 473.352608][ T4018] usb 2-1: Using ep0 maxpacket: 32 [ 473.471665][ T4018] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 473.487094][T20018] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 473.521484][T20018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 473.651601][ T4018] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 473.684267][ T4018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.703909][ T4018] usb 2-1: Product: syz [ 473.711441][ T4018] usb 2-1: Manufacturer: syz [ 473.736950][T20041] loop2: detected capacity change from 0 to 32768 [ 473.743970][ T4018] usb 2-1: SerialNumber: syz [ 473.782510][ T4018] usb 2-1: config 0 descriptor?? [ 473.801793][T20033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.874738][ T4018] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 474.073355][ T4018] usb 2-1: USB disconnect, device number 33 [ 474.081562][ T46] usb 2-1: Failed to submit usb control message: -71 [ 474.107980][ T46] usb 2-1: unable to send the bmi data to the device: -71 [ 474.141682][ T46] usb 2-1: unable to get target info from device [ 474.151825][ T3646] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 474.168500][ T46] usb 2-1: could not get target info (-71) [ 474.206313][ T46] usb 2-1: could not probe fw (-71) [ 474.307355][T20086] loop0: detected capacity change from 0 to 128 [ 474.829170][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7061'. [ 475.229443][T20121] loop1: detected capacity change from 0 to 2048 [ 475.246151][T20123] loop0: detected capacity change from 0 to 64 [ 475.260040][T20121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.628991][T20137] autofs4:pid:20137:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 475.708731][T20138] ALSA: mixer_oss: invalid OSS volume '%' [ 475.831664][T20143] kAFS: unparsable volume name [ 475.891543][T20147] netlink: 'syz.0.7082': attribute type 27 has an invalid length. [ 475.986532][T20155] netlink: 'syz.3.7085': attribute type 20 has an invalid length. [ 476.069504][T20158] overlayfs: missing 'lowerdir' [ 476.365034][T20172] xt_policy: neither incoming nor outgoing policy selected [ 476.417029][T20176] vhci_hcd: invalid port number 0 [ 476.531393][ T4018] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 476.587940][T20184] netlink: 'syz.2.7101': attribute type 5 has an invalid length. [ 476.667628][T20188] ieee802154 phy0 wpan0: encryption failed: -22 [ 476.770311][T20194] cannot load conntrack support for proto=3 [ 476.891682][ T4018] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 476.917493][ T4018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.970190][ T4018] usb 4-1: config 0 has no interface number 0 [ 476.978273][ T4018] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 477.009295][ T4018] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.228854][T20216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7115'. [ 477.241591][ T4018] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 477.248826][T20218] loop1: detected capacity change from 0 to 256 [ 477.260849][ T4018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.283986][ T4018] usb 4-1: Product: syz [ 477.290719][ T4018] usb 4-1: Manufacturer: syz [ 477.316526][ T4018] usb 4-1: SerialNumber: syz [ 477.317992][T20218] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2c83664b, utbl_chksum : 0xe619d30d) [ 477.324743][T20216] device ip6tnl1 entered promiscuous mode [ 477.346470][ T4018] usb 4-1: config 0 descriptor?? [ 477.398502][T20220] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7118'. [ 477.841600][ T4018] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 477.861799][ T4018] usb 4-1: USB disconnect, device number 32 [ 478.294083][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 478.294101][ T27] audit: type=1326 audit(2000000001.309:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db797def9 code=0x7ffc0000 [ 478.429562][ T27] audit: type=1326 audit(2000000001.309:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db797def9 code=0x7ffc0000 [ 478.541605][ T27] audit: type=1326 audit(2000000001.349:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1db797def9 code=0x7ffc0000 [ 478.692266][ T27] audit: type=1326 audit(2000000001.349:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db797def9 code=0x7ffc0000 [ 478.794031][ T27] audit: type=1326 audit(2000000001.349:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20250 comm="syz.1.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db797def9 code=0x7ffc0000 [ 478.824540][T20279] loop3: detected capacity change from 0 to 16 [ 478.871583][T20279] erofs: (device loop3): mounted with root inode @ nid 36. [ 479.145949][T20294] NILFS (loop3): device size too small [ 479.561425][ T4018] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 479.767504][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'. [ 479.811462][ T4018] usb 1-1: Using ep0 maxpacket: 32 [ 479.859966][T20330] loop3: detected capacity change from 0 to 512 [ 479.931621][ T4018] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 479.953909][ T4018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.972168][T20330] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c028, mo2=0002] [ 480.001238][T20330] System zones: 0-2, 18-18, 34-35 [ 480.035300][T20339] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 480.040501][ T4018] usb 1-1: config 0 descriptor?? [ 480.071553][T20330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 480.124996][T20346] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.131531][T20330] ext4 filesystem being mounted at /1403/file0 supports timestamps until 2038 (0x7fffffff) [ 480.141450][T20346] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 480.144615][ T4018] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 480.231946][T20330] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.7171: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 480.276315][T20330] EXT4-fs (loop3): Remounting filesystem read-only [ 480.361744][ T4018] gspca_vc032x: reg_r err -71 [ 480.366491][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.387655][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.417092][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.427361][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7183'. [ 480.437349][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.444108][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.451750][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.457165][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.477348][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.483068][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.494224][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.505296][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.516333][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.535023][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.546236][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.559958][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.568456][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.580705][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.588929][T20366] loop1: detected capacity change from 0 to 1024 [ 480.590788][ T4018] gspca_vc032x: I2c Bus Busy Wait 00 [ 480.613003][ T4018] gspca_vc032x: Unknown sensor... [ 480.628030][ T4018] vc032x: probe of 1-1:0.0 failed with error -22 [ 480.663198][ T4018] usb 1-1: USB disconnect, device number 33 [ 480.683017][ T4097] EXT4-fs (loop3): unmounting filesystem. [ 480.784818][T20370] nft_compat: unsupported protocol 0 [ 480.993265][T20381] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7197'. [ 481.051683][T20381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7197'. [ 481.101266][T20381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7197'. [ 481.326897][T20399] loop1: detected capacity change from 0 to 8 [ 481.393250][T20399] SQUASHFS error: lzo decompression failed, data probably corrupt [ 481.434617][T20399] SQUASHFS error: Failed to read block 0x1c0: -5 [ 481.453423][T20399] SQUASHFS error: Unable to read metadata cache entry [1be] [ 481.754649][T20416] netlink: 'syz.3.7213': attribute type 2 has an invalid length. [ 481.789225][T20416] netlink: 'syz.3.7213': attribute type 1 has an invalid length. [ 481.832065][T20420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7214'. [ 481.834697][T20419] 9pnet_virtio: no channels available for device syz [ 481.941890][T20422] loop0: detected capacity change from 0 to 256 [ 482.105705][T20422] FAT-fs (loop0): Directory bread(block 64) failed [ 482.127118][T20422] FAT-fs (loop0): Directory bread(block 65) failed [ 482.184410][T20422] FAT-fs (loop0): Directory bread(block 66) failed [ 482.190990][T20422] FAT-fs (loop0): Directory bread(block 67) failed [ 482.231606][T20422] FAT-fs (loop0): Directory bread(block 68) failed [ 482.238179][T20422] FAT-fs (loop0): Directory bread(block 69) failed [ 482.280404][T20440] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 482.288157][T20422] FAT-fs (loop0): Directory bread(block 70) failed [ 482.310933][T20422] FAT-fs (loop0): Directory bread(block 71) failed [ 482.329671][T20422] FAT-fs (loop0): Directory bread(block 72) failed [ 482.347369][T20422] FAT-fs (loop0): Directory bread(block 73) failed [ 482.423484][T20443] loop1: detected capacity change from 0 to 256 [ 482.617579][T20396] loop2: detected capacity change from 0 to 40427 [ 482.692915][T20396] F2FS-fs (loop2): invalid crc value [ 482.792631][T20396] F2FS-fs (loop2): Found nat_bits in checkpoint [ 482.909232][T20396] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 482.937275][T20396] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 482.948725][T20460] loop1: detected capacity change from 0 to 128 [ 483.151685][ T5762] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 483.411604][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 483.504483][ T4808] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 483.545964][ T5762] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 483.562644][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.594149][ T5762] usb 1-1: config 0 descriptor?? [ 483.645751][ T5762] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 483.781620][ T4808] usb 2-1: Using ep0 maxpacket: 32 [ 483.931837][ T4808] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 483.940079][ T4808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 483.961220][ T4808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 484.071715][ T5762] gspca_sunplus: reg_w_riv err -71 [ 484.077796][ T5762] sunplus: probe of 1-1:0.0 failed with error -71 [ 484.109829][ T5762] usb 1-1: USB disconnect, device number 34 [ 484.125857][T20497] netlink: 'syz.3.7251': attribute type 13 has an invalid length. [ 484.133962][T20497] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7251'. [ 484.144616][T20497] syz_tun: refused to change device tx_queue_len [ 484.169371][T20497] net_ratelimit: 2 callbacks suppressed [ 484.169389][T20497] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 484.191619][ T4808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 484.200730][ T4808] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 484.228439][T20499] netlink: 'syz.4.7252': attribute type 5 has an invalid length. [ 484.252590][ T4808] usb 2-1: Product: syz [ 484.256801][ T4808] usb 2-1: Manufacturer: syz [ 484.271570][ T4808] usb 2-1: SerialNumber: syz [ 484.296392][ T4808] usb 2-1: config 0 descriptor?? [ 484.362916][ T4808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 484.424674][ T4808] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 484.565604][T20467] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 484.591953][ T5762] usb 2-1: USB disconnect, device number 34 [ 484.608527][ T5762] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 484.766340][T20517] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 484.860054][T20519] loop0: detected capacity change from 0 to 1024 [ 484.963094][T20519] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.7261: Invalid block bitmap block 0 in block_group 0 [ 484.967266][T20527] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7265'. [ 485.082523][T20519] Quota error (device loop0): write_blk: dquota write failed [ 485.089967][T20519] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 485.128249][T20519] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.7261: Failed to acquire dquot type 0 [ 485.147701][T20519] EXT4-fs error (device loop0): ext4_free_blocks:6212: comm syz.0.7261: Freeing blocks not in datazone - block = 0, count = 4096 [ 485.177293][T20519] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7261: Invalid inode bitmap blk 0 in block_group 0 [ 485.203675][ T36] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 485.220327][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 0 [ 485.292083][T20519] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 485.300973][T20519] EXT4-fs (loop0): 1 orphan inode deleted [ 485.308301][T20519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 485.407047][T20537] netlink: 'syz.4.7270': attribute type 10 has an invalid length. [ 485.446377][T18291] EXT4-fs (loop0): unmounting filesystem. [ 485.511284][T20537] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 485.631014][T20549] loop2: detected capacity change from 0 to 22 [ 485.695529][T20549] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 485.741613][T20549] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 486.190018][T20575] loop1: detected capacity change from 0 to 512 [ 486.317314][T20582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7293'. [ 486.345157][T20575] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 486.378331][T20575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 486.389210][T20575] System zones: 0-1, 15-15, 18-18, 34-34 [ 486.396070][T20575] EXT4-fs (loop1): orphan cleanup on readonly fs [ 486.402745][T20575] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 486.412181][T20575] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 486.426912][T20575] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 486.435489][T20575] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.7289: bad orphan inode 16 [ 486.493110][T20589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.500414][T20589] IPv6: NLM_F_CREATE should be set when creating new route [ 486.507740][T20589] IPv6: NLM_F_CREATE should be set when creating new route [ 486.515400][T20575] ext4_test_bit(bit=15, block=18) = 1 [ 486.530540][T20575] is_bad_inode(inode)=0 [ 486.540290][T20575] NEXT_ORPHAN(inode)=0 [ 486.556459][T20575] max_ino=32 [ 486.581662][T20575] i_nlink=2 [ 486.584895][T20575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 486.671926][T20575] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 486.729228][T20599] No such timeout policy "syz0" [ 486.751505][ T27] audit: type=1326 audit(2000000009.759:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 486.801154][ T6945] EXT4-fs (loop1): unmounting filesystem. [ 486.879248][ T27] audit: type=1326 audit(2000000009.759:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 486.972672][ T27] audit: type=1326 audit(2000000009.759:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 487.048732][ T27] audit: type=1326 audit(2000000009.759:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 487.187939][ T27] audit: type=1326 audit(2000000009.759:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 487.218997][T20619] tmpfs: Bad value for 'mpol' [ 487.283547][ T27] audit: type=1326 audit(2000000009.759:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20600 comm="syz.2.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 487.554877][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7316'. [ 487.627294][T20631] lo speed is unknown, defaulting to 1000 [ 488.027607][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7325'. [ 488.240249][T20657] loop1: detected capacity change from 0 to 512 [ 488.300056][T20657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 488.320091][T20657] ext4 filesystem being mounted at /1216/file0 supports timestamps until 2038 (0x7fffffff) [ 488.407584][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7335'. [ 488.417267][T20657] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.7330: corrupted xattr block 33 [ 488.733374][ T6945] EXT4-fs (loop1): unmounting filesystem. [ 488.916548][T20684] kAFS: Can only specify source 'none' with -o dyn [ 489.170088][T20693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7346'. [ 489.189438][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7345'. [ 489.338522][T20697] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 489.843928][T20723] netlink: 'syz.2.7359': attribute type 10 has an invalid length. [ 489.875971][T20723] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 489.909466][T20723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.946139][T20723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.982479][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7362'. [ 490.105021][T20731] loop3: detected capacity change from 0 to 256 [ 490.176085][T20738] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 490.183293][T20738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.261601][T20738] vhci_hcd vhci_hcd.0: Device attached [ 490.525847][ T4018] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 490.551570][ T4024] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 490.668089][T20762] loop1: detected capacity change from 0 to 1024 [ 490.925103][ T4024] usb 3-1: New USB device found, idVendor=0af0, idProduct=6201, bcdDevice=ad.9d [ 490.969259][ T4024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.009568][ T4024] usb 3-1: config 0 descriptor?? [ 491.071620][T20783] netlink: 300 bytes leftover after parsing attributes in process `syz.0.7388'. [ 491.268098][ T4024] usb 3-1: USB disconnect, device number 34 [ 491.285959][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7392'. [ 491.322893][T20739] vhci_hcd: connection reset by peer [ 491.323888][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7392'. [ 491.349666][ T36] vhci_hcd: stop threads [ 491.369594][ T36] vhci_hcd: release socket [ 491.395344][ T36] vhci_hcd: disconnect device [ 491.402240][T20797] loop3: detected capacity change from 0 to 2048 [ 491.517866][T20797] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 491.531560][T20805] loop0: detected capacity change from 0 to 256 [ 491.539801][T20797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 491.715852][ T4097] EXT4-fs (loop3): unmounting filesystem. [ 492.068867][T20825] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7408'. [ 492.701679][ T5762] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 492.841935][T20817] loop3: detected capacity change from 0 to 32768 [ 492.860647][T20817] XFS (loop3): Invalid device [./file0/file0], error=-20 [ 493.110775][ T5762] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 493.129246][ T5762] usb 3-1: config 0 has no interface number 0 [ 493.161441][ T5762] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 493.193195][ T5762] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 493.282683][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7430'. [ 493.401819][ T5762] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 493.441666][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.469295][ T5762] usb 3-1: Product: syz [ 493.476888][ T5762] usb 3-1: Manufacturer: syz [ 493.512239][ T5762] usb 3-1: SerialNumber: syz [ 493.528646][ T5762] usb 3-1: config 0 descriptor?? [ 493.584420][ T5762] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input26 [ 493.840258][ T5762] usb 3-1: USB disconnect, device number 35 [ 494.091983][T20899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7444'. [ 494.104228][T20899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7444'. [ 494.183151][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7448'. [ 494.192658][T20904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7447'. [ 494.611492][ T4024] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 494.677437][T20928] loop2: detected capacity change from 0 to 256 [ 494.871811][ T4024] usb 4-1: Using ep0 maxpacket: 8 [ 495.011788][ T4024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 495.039243][ T4024] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 495.089553][ T4024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 495.127180][ T4024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 495.168258][T20951] loop1: detected capacity change from 0 to 1764 [ 495.231853][ T4143] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.306782][ T27] kauditd_printk_skb: 2234 callbacks suppressed [ 495.306796][ T27] audit: type=1326 audit(2000000018.319:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20956 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x7ffc0000 [ 495.311556][ T4024] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 495.319300][ T27] audit: type=1326 audit(2000000018.329:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20956 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f23bed7def9 code=0x7ffc0000 [ 495.427861][ T4024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.461473][ T4024] usb 4-1: Product: syz [ 495.465683][ T4024] usb 4-1: Manufacturer: syz [ 495.470315][ T4024] usb 4-1: SerialNumber: syz [ 495.541468][ T27] audit: type=1326 audit(2000000018.389:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20956 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x7ffc0000 [ 495.563146][ T4024] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 495.619265][ T27] audit: type=1326 audit(2000000018.389:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20956 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x7ffc0000 [ 495.672672][ T4018] vhci_hcd: vhci_device speed not set [ 495.769895][ T7] usb 4-1: USB disconnect, device number 33 [ 496.102122][T20995] x_tables: duplicate underflow at hook 3 [ 496.380562][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.481601][ T4808] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 496.493125][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.761527][ T4808] usb 2-1: Using ep0 maxpacket: 32 [ 496.901811][ T4808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.931410][ T4018] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 496.943580][ T4808] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 496.961831][ T4808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.998828][ T4808] usb 2-1: config 0 descriptor?? [ 497.052498][ T4808] usb 2-1: bad CDC descriptors [ 497.156896][T21010] loop0: detected capacity change from 0 to 32768 [ 497.173715][T21010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7499 (21010) [ 497.181820][ T4018] usb 5-1: Using ep0 maxpacket: 16 [ 497.223475][T21010] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.250576][T21010] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 497.272169][ T5762] usb 2-1: USB disconnect, device number 35 [ 497.298405][T21010] BTRFS info (device loop0): force clearing of disk cache [ 497.313977][T21010] BTRFS info (device loop0): using free space tree [ 497.321713][ T4018] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.336548][ T4018] usb 5-1: config 0 has no interface number 0 [ 497.475883][T21010] BTRFS info (device loop0): enabling ssd optimizations [ 497.492374][T21010] BTRFS info (device loop0): rebuilding free space tree [ 497.521595][ T4018] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice=c7.e9 [ 497.531047][ T4018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.539601][ T4018] usb 5-1: Product: syz [ 497.544221][ T4018] usb 5-1: Manufacturer: syz [ 497.549176][ T4018] usb 5-1: SerialNumber: syz [ 497.564383][ T4018] usb 5-1: config 0 descriptor?? [ 497.650460][T18291] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.830383][T21034] loop3: detected capacity change from 0 to 32768 [ 497.911610][ T4018] usb 5-1: MIDIStreaming interface descriptor not found [ 497.989145][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7519'. [ 498.037794][T21034] XFS (loop3): Mounting V5 Filesystem [ 498.066254][T21073] loop1: detected capacity change from 0 to 256 [ 498.071145][ T4018] usb 5-1: USB disconnect, device number 22 [ 498.220039][T21073] FAT-fs (loop1): Directory bread(block 64) failed [ 498.243144][T21073] FAT-fs (loop1): Directory bread(block 65) failed [ 498.249832][T21073] FAT-fs (loop1): Directory bread(block 66) failed [ 498.272267][T21073] FAT-fs (loop1): Directory bread(block 67) failed [ 498.279356][T21073] FAT-fs (loop1): Directory bread(block 68) failed [ 498.308563][T21034] XFS (loop3): Ending clean mount [ 498.316899][T21073] FAT-fs (loop1): Directory bread(block 69) failed [ 498.330195][T21034] XFS (loop3): Quotacheck needed: Please wait. [ 498.335213][T21073] FAT-fs (loop1): Directory bread(block 70) failed [ 498.347536][T21073] FAT-fs (loop1): Directory bread(block 71) failed [ 498.354399][T21073] FAT-fs (loop1): Directory bread(block 72) failed [ 498.361060][T21073] FAT-fs (loop1): Directory bread(block 73) failed [ 498.449459][ T27] audit: type=1800 audit(2000000021.459:2356): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7520" name="file2" dev="loop1" ino=1048721 res=0 errno=0 [ 498.518821][T21034] XFS (loop3): Quotacheck: Done. [ 498.681275][ T4097] XFS (loop3): Unmounting Filesystem [ 499.115236][T21105] loop0: detected capacity change from 0 to 4096 [ 499.169992][T21105] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 499.227576][T21105] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 499.281607][T21105] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 499.311469][T21105] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 499.363641][T21105] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 499.405307][T21119] loop3: detected capacity change from 0 to 64 [ 499.420821][T21105] ntfs: volume version 3.1. [ 499.475699][T21119] hfs: keylen 94 too large [ 499.598791][T21122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.708713][T21130] autofs4:pid:21130:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 500.108412][T21148] loop2: detected capacity change from 0 to 256 [ 500.621506][T21172] loop1: detected capacity change from 0 to 2048 [ 500.638476][T21172] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 500.694547][T21172] syz.1.7566: attempt to access beyond end of device [ 500.694547][T21172] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 500.709710][T21181] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.777241][T21172] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 500.851440][ T4018] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 500.880979][T21172] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 500.898627][T21186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7572'. [ 501.108767][ T4018] usb 1-1: Using ep0 maxpacket: 32 [ 501.273187][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.280186][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.339067][T21208] netlink: 'syz.2.7581': attribute type 6 has an invalid length. [ 501.401569][ T4018] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 501.425305][ T4018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.443874][ T4018] usb 1-1: Product: syz [ 501.448084][ T4018] usb 1-1: Manufacturer: syz [ 501.488772][ T4018] usb 1-1: SerialNumber: syz [ 501.493892][T21212] netlink: 'syz.3.7585': attribute type 2 has an invalid length. [ 501.504222][ T4018] usb 1-1: config 0 descriptor?? [ 501.555061][T21216] loop2: detected capacity change from 0 to 1024 [ 501.771250][ T4018] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 035 [ 501.997547][ T3640] usb 1-1: USB disconnect, device number 35 [ 502.007014][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7595'. [ 502.335641][T21248] kAFS: unable to lookup cell '.,' [ 502.442074][T21252] netlink: 'syz.4.7605': attribute type 1 has an invalid length. [ 502.628304][T21258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 502.634873][T21258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 502.730831][T21265] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.754589][T21258] vhci_hcd vhci_hcd.0: Device attached [ 502.771708][T21265] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.941527][ T3640] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 503.041444][ T4024] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 503.154136][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7619'. [ 503.169167][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7619'. [ 503.227313][T21289] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.291453][ T5762] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 503.302470][ T3640] usb 2-1: New USB device found, idVendor=0af0, idProduct=6201, bcdDevice=ad.9d [ 503.342683][ T3640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.347865][T21293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7625'. [ 503.377199][ T3640] usb 2-1: config 0 descriptor?? [ 503.581525][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 503.581544][ T27] audit: type=1326 audit(2000000026.599:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.653866][ T27] audit: type=1326 audit(2000000026.599:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.682008][ T3640] usb 2-1: USB disconnect, device number 36 [ 503.689386][T21259] vhci_hcd: connection reset by peer [ 503.700976][ T11] vhci_hcd: stop threads [ 503.705773][ T27] audit: type=1326 audit(2000000026.599:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.710777][ T11] vhci_hcd: release socket [ 503.737715][ T27] audit: type=1326 audit(2000000026.599:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.759702][ T11] vhci_hcd: disconnect device [ 503.769362][ T27] audit: type=1326 audit(2000000026.599:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.793919][ T27] audit: type=1326 audit(2000000026.599:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.856252][ T27] audit: type=1326 audit(2000000026.599:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.912227][ T27] audit: type=1326 audit(2000000026.599:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.935823][ T5762] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.951816][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.965906][ T5762] usb 4-1: Product: syz [ 503.971458][ T27] audit: type=1326 audit(2000000026.599:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 503.995087][ T5762] usb 4-1: Manufacturer: syz [ 504.003129][ T5762] usb 4-1: SerialNumber: syz [ 504.014766][ T27] audit: type=1326 audit(2000000026.599:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21304 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bed7def9 code=0x50000 [ 504.072607][ T5762] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.787781][ T5762] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.900952][T21351] netlink: 'syz.0.7648': attribute type 1 has an invalid length. [ 505.046770][T21355] xt_nfacct: accounting object `syz1' does not exists [ 505.174989][T21359] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 505.232341][T15707] usb 4-1: USB disconnect, device number 34 [ 505.274063][ T3640] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 505.521490][ T3640] usb 2-1: Using ep0 maxpacket: 16 [ 505.687244][T21371] loop0: detected capacity change from 0 to 8192 [ 505.720719][T21371] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 505.738419][T21371] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 505.748442][T21371] REISERFS (device loop0): using ordered data mode [ 505.761926][T21371] reiserfs: using flush barriers [ 505.802320][T21371] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 505.811703][ T3640] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 505.828069][ T3640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.836477][ T3640] usb 2-1: Product: syz [ 505.840853][ T3640] usb 2-1: Manufacturer: syz [ 505.846047][ T3640] usb 2-1: SerialNumber: syz [ 505.857770][ T3640] r8152-cfgselector 2-1: config 0 descriptor?? [ 505.902067][T21371] REISERFS (device loop0): checking transaction log (loop0) [ 506.071445][ T5762] usb 4-1: Service connection timeout for: 256 [ 506.082389][ T5762] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 506.130573][ T5762] ath9k_htc: Failed to initialize the device [ 506.176599][T15707] usb 4-1: ath9k_htc: USB layer deinitialized [ 506.202744][T21371] REISERFS (device loop0): Using tea hash to sort names [ 506.210265][T21371] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 506.347530][ T3640] r8152-cfgselector 2-1: Unknown version 0x0000 [ 506.355191][ T3640] r8152-cfgselector 2-1: bad CDC descriptors [ 506.399239][ T3640] r8152-cfgselector 2-1: Unknown version 0x0000 [ 506.421038][ T3640] r8152-cfgselector 2-1: USB disconnect, device number 37 [ 506.582943][T21397] netlink: 'syz.3.7671': attribute type 1 has an invalid length. [ 507.569230][T21445] netlink: 'syz.0.7694': attribute type 1 has an invalid length. [ 507.601640][T21445] netlink: 'syz.0.7694': attribute type 2 has an invalid length. [ 507.654758][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7694'. [ 507.789764][T21458] loop2: detected capacity change from 0 to 256 [ 507.934691][T21465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7704'. [ 508.145429][T21468] loop2: detected capacity change from 0 to 4096 [ 508.152417][ T4024] vhci_hcd: vhci_device speed not set [ 508.295319][T21468] ntfs: volume version 3.1. [ 508.701804][T21499] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 508.741525][T21499] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 509.178756][T21513] loop3: detected capacity change from 0 to 4096 [ 509.276518][T21513] ntfs: volume version 3.1. [ 509.281045][T21527] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (32) [ 509.643626][T21543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 509.650197][T21543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.729992][T21543] vhci_hcd vhci_hcd.0: Device attached [ 509.991459][ T4024] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 510.001518][T15707] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 510.406294][T15707] usb 1-1: New USB device found, idVendor=0af0, idProduct=6201, bcdDevice=ad.9d [ 510.420096][T15707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.445576][T15707] usb 1-1: config 0 descriptor?? [ 510.648455][T21554] loop2: detected capacity change from 0 to 32768 [ 510.651048][T21556] loop3: detected capacity change from 0 to 32768 [ 510.690551][T21556] XFS (loop3): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 510.739871][T21554] XFS (loop2): Mounting V5 Filesystem [ 510.740721][T15707] usb 1-1: USB disconnect, device number 36 [ 510.773904][T21544] vhci_hcd: connection reset by peer [ 510.787079][ T36] vhci_hcd: stop threads [ 510.791877][ T36] vhci_hcd: release socket [ 510.796430][ T36] vhci_hcd: disconnect device [ 510.856282][T21554] XFS (loop2): Ending clean mount [ 510.890331][T21554] XFS (loop2): Quotacheck needed: Please wait. [ 510.989804][T21554] XFS (loop2): Quotacheck: Done. [ 511.015759][T21592] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 511.105961][ T8156] XFS (loop2): Unmounting Filesystem [ 511.747427][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7774'. [ 511.795333][T21618] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 511.805753][T21618] device erspan1 entered promiscuous mode [ 511.982657][T21630] loop3: detected capacity change from 0 to 256 [ 512.441070][T21646] loop3: detected capacity change from 0 to 8192 [ 512.475885][T21646] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 512.499810][T21646] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 512.525926][T21646] REISERFS (device loop3): using ordered data mode [ 512.570088][T21646] reiserfs: using flush barriers [ 512.585140][T21646] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 512.642062][T21646] REISERFS (device loop3): checking transaction log (loop3) [ 512.661668][T21661] netlink: 'syz.0.7793': attribute type 6 has an invalid length. [ 512.851883][T21646] REISERFS (device loop3): Using tea hash to sort names [ 512.865589][T21646] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 512.873006][T21669] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.882889][T21669] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7798'. [ 513.078911][T21678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7803'. [ 513.187509][T21682] loop2: detected capacity change from 0 to 1764 [ 513.341588][T21688] tmpfs: Bad value for 'mpol' [ 514.202526][T21727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.567520][T21745] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 514.871610][T21761] overlayfs: failed to resolve './file1': -2 [ 515.097063][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7848'. [ 515.108078][T21773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7849'. [ 515.121462][ T4024] vhci_hcd: vhci_device speed not set [ 515.127076][T21773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7849'. [ 515.315681][T21781] tmpfs: Bad value for 'mpol' [ 515.502198][T21785] loop3: detected capacity change from 0 to 4096 [ 515.672041][T21791] loop2: detected capacity change from 0 to 4096 [ 515.888771][T21799] loop3: detected capacity change from 0 to 16 [ 515.901766][T21799] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 516.047543][T21806] netlink: 'syz.3.7865': attribute type 3 has an invalid length. [ 516.258074][T21816] x_tables: unsorted underflow at hook 2 [ 516.325459][T21813] nvme_fabrics: missing parameter 'transport=%s' [ 516.357986][T21813] nvme_fabrics: missing parameter 'nqn=%s' [ 517.006602][T21854] xt_TCPMSS: Only works on TCP SYN packets [ 517.302874][T21860] loop1: detected capacity change from 0 to 4096 [ 517.782893][T21880] loop3: detected capacity change from 0 to 256 [ 517.790008][T21880] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.971695][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7906'. [ 518.824374][T21929] netlink: 'syz.3.7927': attribute type 3 has an invalid length. [ 518.839828][T21930] loop1: detected capacity change from 0 to 1024 [ 518.956934][ T11] hfsplus: b-tree write err: -5, ino 4 [ 518.971606][T21932] loop3: detected capacity change from 0 to 512 [ 518.998948][T21932] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 519.018234][T21932] EXT4-fs (loop3): 1 truncate cleaned up [ 519.031648][T21932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 519.136152][T21932] ecryptfs_parse_options: eCryptfs: unrecognized option [bcache_journal_write] [ 519.146809][T21932] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 519.173150][T21932] Error parsing options; rc = [-22] [ 519.196075][T21943] befs: (nbd0): No write support. Marking filesystem read-only [ 519.230624][ T52] block nbd0: Attempted send on invalid socket [ 519.236969][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.294106][ T4097] EXT4-fs (loop3): unmounting filesystem. [ 519.418876][T21954] loop1: detected capacity change from 0 to 256 [ 519.449309][T21954] FAT-fs (loop1): Directory bread(block 64) failed [ 519.463654][T21954] FAT-fs (loop1): Directory bread(block 65) failed [ 519.474254][T21954] FAT-fs (loop1): Directory bread(block 66) failed [ 519.480823][T21954] FAT-fs (loop1): Directory bread(block 67) failed [ 519.509711][T21954] FAT-fs (loop1): Directory bread(block 68) failed [ 519.528919][T21954] FAT-fs (loop1): Directory bread(block 69) failed [ 519.541694][T21954] FAT-fs (loop1): Directory bread(block 70) failed [ 519.582663][T21954] FAT-fs (loop1): Directory bread(block 71) failed [ 519.589424][T21954] FAT-fs (loop1): Directory bread(block 72) failed [ 519.617879][T21954] FAT-fs (loop1): Directory bread(block 73) failed [ 519.908990][T21968] loop3: detected capacity change from 0 to 4096 [ 519.937673][T21968] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 520.062815][T21968] ntfs3: loop3: ino=5, "/" directory corrupted [ 520.069053][T21968] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 520.072544][T21980] 9pnet: Unknown protocol version 9 [ 520.409884][T21993] xt_recent: Unsupported userspace flags (00000064) [ 520.464671][T21995] IPVS: length: 215 != 24 [ 520.521102][T21997] netlink: 'syz.1.7960': attribute type 27 has an invalid length. [ 520.551807][T21997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7960'. [ 520.869692][ T3636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 520.884948][ T3636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 520.894555][ T3636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 520.902893][ T3636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 520.910513][ T3636] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 520.920200][ T3641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 521.039363][T22011] lo speed is unknown, defaulting to 1000 [ 521.158502][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7971'. [ 521.301499][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7976'. [ 521.391551][T22035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7978'. [ 521.753717][T22053] netlink: 'syz.2.7986': attribute type 8 has an invalid length. [ 522.016645][T22011] chnl_net:caif_netlink_parms(): no params data found [ 522.158751][T22072] netlink: 'syz.1.7996': attribute type 48 has an invalid length. [ 522.173572][T22073] loop3: detected capacity change from 0 to 256 [ 522.413187][T22011] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.420345][T22011] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.445711][T22011] device bridge_slave_0 entered promiscuous mode [ 522.504004][T22011] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.512185][T22011] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.529913][T22091] loop2: detected capacity change from 0 to 16 [ 522.540760][T22011] device bridge_slave_1 entered promiscuous mode [ 522.589118][T22091] erofs: (device loop2): mounted with root inode @ nid 36. [ 522.640732][T22095] loop1: detected capacity change from 0 to 736 [ 522.646049][T22091] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 522.673017][T22011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.700987][T22011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.719743][T22091] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 522.771419][T22091] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 522.907420][T22011] team0: Port device team_slave_0 added [ 522.953192][T22011] team0: Port device team_slave_1 added [ 523.032884][ T3646] Bluetooth: hci6: command tx timeout [ 523.078718][T22011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.111558][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.250958][T22011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.292616][T22011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.310012][T22011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.402133][T22011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.562577][T22011] device hsr_slave_0 entered promiscuous mode [ 523.587707][T22011] device hsr_slave_1 entered promiscuous mode [ 523.597045][T22124] loop1: detected capacity change from 0 to 4096 [ 523.639626][T22124] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 523.682607][T22011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.700473][T22011] Cannot create hsr debugfs directory [ 524.284437][T22011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.503649][T22011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.645178][T22168] loop2: detected capacity change from 0 to 2048 [ 524.707221][T22168] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 524.790380][T22011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.804158][T22168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.012354][T22011] bond0: (slave netdevsim0): Releasing backup interface [ 525.053933][T22011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.111770][ T3646] Bluetooth: hci6: command tx timeout [ 525.119137][T22185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8048'. [ 525.360895][T22162] loop3: detected capacity change from 0 to 32768 [ 525.407590][T22162] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.8035 (22162) [ 525.474919][T22011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 525.481761][T22162] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 525.492592][T22162] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 525.501282][T22162] BTRFS info (device loop3): force clearing of disk cache [ 525.513774][T22011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 525.535042][T22162] BTRFS info (device loop3): using free space tree [ 525.554865][T22011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 525.605989][T22011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 525.744124][T22162] BTRFS info (device loop3): enabling ssd optimizations [ 525.792384][T22162] BTRFS info (device loop3): rebuilding free space tree [ 525.795676][T22011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.814382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.826692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.839144][T22011] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.850512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.889924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.903959][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.911126][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.923126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.952257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.972261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.991206][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.998385][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.020187][ T4097] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 526.045550][T22225] loop1: detected capacity change from 0 to 4096 [ 526.052655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.059859][T22225] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 526.095809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.134621][ T27] kauditd_printk_skb: 3368 callbacks suppressed [ 526.134641][ T27] audit: type=1326 audit(2000000049.109:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22230 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 526.158340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.218520][ T27] audit: type=1326 audit(2000000049.169:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22230 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 526.224688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.303863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.313278][T22235] loop0: detected capacity change from 0 to 16 [ 526.320251][T22235] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 526.335667][ T27] audit: type=1326 audit(2000000049.199:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22230 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 526.344984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.403194][ T27] audit: type=1326 audit(2000000049.199:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22230 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 526.426398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.449123][T22233] netlink: 'syz.2.8064': attribute type 13 has an invalid length. [ 526.465672][T22233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8064'. [ 526.477254][T22233] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 526.501539][ T27] audit: type=1326 audit(2000000049.199:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22230 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 526.549873][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.566345][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.602676][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.611638][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.624647][T22011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 527.191560][ T3646] Bluetooth: hci6: command tx timeout [ 527.246137][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.256246][T22264] loop2: detected capacity change from 0 to 1024 [ 527.263634][ T27] audit: type=1400 audit(2000000050.279:5740): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=22262 comm="syz.3.8076" [ 527.265887][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.290219][ T4016] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 527.322918][T22264] hfsplus: Filesystem is marked locked, mounting read-only. [ 527.335822][T22011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.346108][T22264] hfsplus: filesystem is marked locked, leaving read-only. [ 527.556706][T22274] loop3: detected capacity change from 0 to 256 [ 527.598471][T22278] overlayfs: missing 'lowerdir' [ 527.647420][T22274] FAT-fs (loop3): Directory bread(block 64) failed [ 527.661867][T22274] FAT-fs (loop3): Directory bread(block 65) failed [ 527.678745][T22274] FAT-fs (loop3): Directory bread(block 66) failed [ 527.721498][T22274] FAT-fs (loop3): Directory bread(block 67) failed [ 527.722366][ T3647] jfs_flush_journal: synclist not empty [ 527.748509][T22274] FAT-fs (loop3): Directory bread(block 68) failed [ 527.754634][ T3647] metapage: ffff8880249f0e88: 00001000 00000000 00003aec 00000000 [ 527.769852][ T3647] metapage: ffff8880249f0e98: 02661120 ffffc900 78c2a228 ffff8880 [ 527.811749][ T4016] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 527.820528][ T3647] metapage: ffff8880249f0ea8: 00000004 00000000 00000000 00000000 [ 527.831068][ T4016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.841615][T22274] FAT-fs (loop3): Directory bread(block 69) failed [ 527.848287][T22274] FAT-fs (loop3): Directory bread(block 70) failed [ 527.849557][ T3647] metapage: ffff8880249f0eb8: 65c2e000 ffff8880 0000001c 00000000 [ 527.871513][ T4016] usb 2-1: Product: syz [ 527.888470][ T4016] usb 2-1: Manufacturer: syz [ 527.893541][T22274] FAT-fs (loop3): Directory bread(block 71) failed [ 527.908574][ T3647] metapage: ffff8880249f0ec8: 00000000 dead4ead ffffffff 00000000 [ 527.911467][ T4016] usb 2-1: SerialNumber: syz [ 527.945755][ T3647] metapage: ffff8880249f0ed8: ffffffff ffffffff 974d5ce0 ffffffff [ 527.948355][T22274] FAT-fs (loop3): Directory bread(block 72) failed [ 527.968987][ T3647] metapage: ffff8880249f0ee8: 90c12160 ffffffff 00000000 00000000 [ 527.977852][ T4016] usb 2-1: config 0 descriptor?? [ 527.987809][T22274] FAT-fs (loop3): Directory bread(block 73) failed [ 527.995011][ T3647] metapage: ffff8880249f0ef8: 8b44e420 ffffffff 00000200 00000000 [ 528.021413][ T3647] metapage: ffff8880249f0f08: 249f0f08 ffff8880 249f0f08 ffff8880 [ 528.051491][ T3647] metapage: ffff8880249f0f18: 01970b80 ffffea00 2b6f8000 ffff8880 [ 528.066310][ T3647] metapage: ffff8880249f0f28: 00001000 00000000 00000001 00000000 [ 528.085970][ T3647] metapage: ffff8880249f0f38: 78c2a000 ffff8880 [ 528.100108][ T3647] page: ffffea0001970b80: 00fff50000002056 ffffea0000acee48 [ 528.152475][ T3647] page: ffffea0001970b90: ffffea0001d99e88 ffff888073798f98 [ 528.172165][ T3647] page: ffffea0001970ba0: 000000000000001c ffff8880249f0e88 [ 528.181974][ T3647] page: ffffea0001970bb0: 00000002ffffffff ffff888059b72000 [ 528.189308][ T3647] tblock:ffffc90002661110: 03040910 00000000 00003aec 00000000 [ 528.238602][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.251511][ T4016] usb 2-1: ignoring: probably an ADSL modem [ 528.257495][ T3647] tblock:ffffc90002661120: 78c2a228 ffff8880 249f0e98 ffff8880 [ 528.271972][ T3647] tblock:ffffc90002661130: 2b6f8000 ffff8880 00040001 00000000 [ 528.279611][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.306794][ T3647] tblock:ffffc90002661140: 00000000 dead4ead ffffffff 00000000 [ 528.347000][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.359842][ T3647] tblock:ffffc90002661150: ffffffff ffffffff 974d5ee0 ffffffff [ 528.367241][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.375302][ T3647] tblock:ffffc90002661160: 90c12d60 ffffffff 00000000 00000000 [ 528.375327][ T3647] tblock:ffffc90002661170: 8b44f900 ffffffff 00000200 00000000 [ 528.375345][ T3647] tblock:ffffc90002661180: 02661180 ffffc900 02661180 ffffc900 [ 528.375362][ T3647] tblock:ffffc90002661190: 00000001 00000000 00000100 dead0000 [ 528.375378][ T3647] tblock:ffffc900026611a0: 00000122 dead0000 00003cbc 00000000 [ 528.375393][ T3647] tblock:ffffc900026611b0: 29263900 ffff8880 00000003 00000cbc [ 528.375407][ T3647] tblock:ffffc900026611c0: 00000000 dead4ead ffffffff 00000000 [ 528.432474][ T3647] tblock:ffffc900026611d0: ffffffff ffffffff 974d5ec0 ffffffff [ 528.440984][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.448711][ T3647] tblock:ffffc900026611e0: 90c3e4a0 ffffffff 00000000 00000000 [ 528.456941][ T3647] tblock:ffffc900026611f0: 8b44f8c0 ffffffff 00000200 00000000 [ 528.479485][ T3647] tblock:ffffc90002661200: 02661200 ffffc900 02661200 ffffc900 [ 528.486536][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.494881][ T3647] tblock:ffffc90002661210: 737c1ff0 ffff8880 00000007 00000000 [ 528.511756][ T4016] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 528.518062][T22011] device veth0_vlan entered promiscuous mode [ 528.543029][ T4016] usb 2-1: USB disconnect, device number 38 [ 528.550960][T22303] netlink: 'syz.2.8094': attribute type 12 has an invalid length. [ 528.600873][T22011] device veth1_vlan entered promiscuous mode [ 528.691812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.702120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.717291][T22011] device veth0_macvtap entered promiscuous mode [ 528.761253][T22011] device veth1_macvtap entered promiscuous mode [ 528.821024][T22310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.840507][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8097'. [ 528.963239][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.975772][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.041501][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.071840][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.113284][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.163904][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8102'. [ 529.177975][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.199403][T22325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8103'. [ 529.223887][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.249475][T22325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8103'. [ 529.271548][ T3646] Bluetooth: hci6: command tx timeout [ 529.271941][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.320108][T22322] loop0: detected capacity change from 0 to 4096 [ 529.357148][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.377818][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.414770][T22322] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 529.442147][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.483217][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.532657][T22011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.547025][T22332] cgroup: none used incorrectly [ 529.600157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.618151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.661169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.703599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.731272][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.779556][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.835684][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.856235][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.887545][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.919889][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.977087][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.988462][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.999537][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.010688][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.025720][T22011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.049338][T22011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.089194][ T4016] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 530.091945][T22352] Unknown options in mask 5 [ 530.103011][T22011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.110489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 530.144791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.200206][T22354] dlm: no locking on control device [ 530.339307][T22011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.369598][T22011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.389262][T22011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.411391][T22011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.481678][ T4016] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 530.494869][ T4016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.508313][T22356] netlink: 'syz.3.8118': attribute type 6 has an invalid length. [ 530.518205][T22356] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8118'. [ 530.528476][ T4016] usb 2-1: config 0 descriptor?? [ 530.574301][ T4016] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 530.690672][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.711189][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.739936][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.803037][ T4110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.814366][ T4110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.859416][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.922161][ T27] audit: type=1326 audit(2000000053.939:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.0.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 531.011656][ T4016] gp8psk: usb in 128 operation failed. [ 531.031573][ T4016] gp8psk: usb in 137 operation failed. [ 531.035762][ T27] audit: type=1326 audit(2000000053.939:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.0.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 531.037060][ T4016] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 531.037092][ T4016] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 531.098064][T22380] loop4: detected capacity change from 0 to 256 [ 531.150317][ T27] audit: type=1326 audit(2000000053.999:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.0.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 531.196211][T22380] FAT-fs (loop4): Directory bread(block 64) failed [ 531.212801][T22380] FAT-fs (loop4): Directory bread(block 65) failed [ 531.230913][T22380] FAT-fs (loop4): Directory bread(block 66) failed [ 531.249939][ T27] audit: type=1326 audit(2000000053.999:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.0.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 531.251605][ T4016] usb 2-1: USB disconnect, device number 39 [ 531.285632][T22380] FAT-fs (loop4): Directory bread(block 67) failed [ 531.309422][T22380] FAT-fs (loop4): Directory bread(block 68) failed [ 531.324044][T22387] [U] v3f"S/4:XTzWtlW= [ 531.330059][T22387] [U] J"e:" [ 531.339422][T22380] FAT-fs (loop4): Directory bread(block 69) failed [ 531.348213][ T27] audit: type=1326 audit(2000000053.999:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22372 comm="syz.0.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ed97def9 code=0x7ffc0000 [ 531.398034][T22380] FAT-fs (loop4): Directory bread(block 70) failed [ 531.418023][T22380] FAT-fs (loop4): Directory bread(block 71) failed [ 531.435899][T22380] FAT-fs (loop4): Directory bread(block 72) failed [ 531.459881][T22380] FAT-fs (loop4): Directory bread(block 73) failed [ 531.576278][T22396] vivid-000: disconnect [ 531.611964][T22394] vivid-000: reconnect [ 531.821441][T11763] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 531.907106][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8144'. [ 531.938447][T22413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8143'. [ 532.321775][ T5762] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 532.371656][T11763] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 532.399547][T11763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.421971][T11763] usb 3-1: Product: syz [ 532.426177][T11763] usb 3-1: Manufacturer: syz [ 532.430780][T11763] usb 3-1: SerialNumber: syz [ 532.451943][T11763] r8152-cfgselector 3-1: config 0 descriptor?? [ 532.528062][T22412] loop4: detected capacity change from 0 to 32768 [ 532.544440][T22412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8145 (22412) [ 532.597796][T22412] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.641465][T22412] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 532.673015][T22412] BTRFS info (device loop4): using free space tree [ 532.911728][ T5762] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 532.932511][T11763] r8152-cfgselector 3-1: Unknown version 0x0000 [ 532.939041][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.950444][T11763] r8152-cfgselector 3-1: USB disconnect, device number 36 [ 532.967311][ T5762] usb 4-1: Product: syz [ 532.971917][T22412] BTRFS info (device loop4): enabling ssd optimizations [ 532.988265][ T5762] usb 4-1: Manufacturer: syz [ 532.993804][ T5762] usb 4-1: SerialNumber: syz [ 533.042410][ T5762] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 533.081826][T22011] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.396299][T22470] loop0: detected capacity change from 0 to 1024 [ 533.721609][ T4813] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 533.882101][T22486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8172'. [ 533.890039][T22484] loop4: detected capacity change from 0 to 512 [ 533.900123][T22486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8172'. [ 533.909902][T22486] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 533.938387][T22486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.945931][ T4807] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 534.030933][T22484] EXT4-fs (loop4): Test dummy encryption mode enabled [ 534.098921][T22497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8176'. [ 534.108307][T22497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8176'. [ 534.117428][T22497] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8176'. [ 534.135912][T22484] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.8171: inline data xattr refers to an external xattr inode [ 534.169784][T11763] usb 4-1: USB disconnect, device number 35 [ 534.191069][T22500] loop0: detected capacity change from 0 to 1024 [ 534.198907][T22500] EXT4-fs: Ignoring removed orlov option [ 534.203794][T22484] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.8171: couldn't read orphan inode 12 (err -117) [ 534.217349][T22500] EXT4-fs (loop0): Test dummy encryption mode enabled [ 534.238373][T22500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 534.245158][T22484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 534.341634][ T4807] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 534.350728][ T4807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.385213][ T4807] usb 2-1: config 0 descriptor?? [ 534.401955][T18291] EXT4-fs (loop0): unmounting filesystem. [ 534.412302][T22011] EXT4-fs (loop4): unmounting filesystem. [ 534.448326][ T4807] usb 2-1: unknown interface protocol 0x9a, assuming v1 [ 534.491393][ T4807] usb 2-1: cannot find UAC_HEADER [ 534.534165][ T4807] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 534.548901][T22509] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 534.565830][ T3735] udevd[3735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.654637][ T3677] usb 2-1: USB disconnect, device number 40 [ 534.717257][T22513] loop0: detected capacity change from 0 to 256 [ 534.786987][T22513] FAT-fs (loop0): Directory bread(block 64) failed [ 534.803548][ T4813] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 534.810551][ T4813] ath9k_htc: Failed to initialize the device [ 534.836860][T22513] FAT-fs (loop0): Directory bread(block 65) failed [ 534.846744][T11763] usb 4-1: ath9k_htc: USB layer deinitialized [ 534.871722][T22513] FAT-fs (loop0): Directory bread(block 66) failed [ 534.878298][T22513] FAT-fs (loop0): Directory bread(block 67) failed [ 534.921596][T22513] FAT-fs (loop0): Directory bread(block 68) failed [ 534.928177][T22513] FAT-fs (loop0): Directory bread(block 69) failed [ 534.952458][T22513] FAT-fs (loop0): Directory bread(block 70) failed [ 534.959034][T22513] FAT-fs (loop0): Directory bread(block 71) failed [ 534.985516][T22513] FAT-fs (loop0): Directory bread(block 72) failed [ 535.001436][T22513] FAT-fs (loop0): Directory bread(block 73) failed [ 535.037391][T22524] loop3: detected capacity change from 0 to 1024 [ 535.223857][ T36] hfsplus: b-tree write err: -5, ino 4 [ 535.418726][T22534] loop1: detected capacity change from 0 to 1024 [ 535.642727][T22545] loop3: detected capacity change from 0 to 1764 [ 535.754993][T22554] netlink: 'syz.0.8203': attribute type 29 has an invalid length. [ 535.788317][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8203'. [ 535.831785][T22554] netlink: 'syz.0.8203': attribute type 29 has an invalid length. [ 535.889479][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8203'. [ 535.971045][T22558] loop4: detected capacity change from 0 to 512 [ 536.098641][T22558] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.8205: inode #1: comm syz.4.8205: iget: illegal inode # [ 536.241274][T22558] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8205: error while reading EA inode 1 err=-117 [ 536.268207][T22558] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.8205: inode #1: comm syz.4.8205: iget: illegal inode # [ 536.292042][T22558] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8205: error while reading EA inode 1 err=-117 [ 536.328421][T22558] EXT4-fs (loop4): 1 orphan inode deleted [ 536.365569][T22558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 536.381048][T22575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8213'. [ 536.414987][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8213'. [ 536.535546][ T4813] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 536.562460][T22011] EXT4-fs (loop4): unmounting filesystem. [ 536.593826][T22581] binder: 22580:22581 ioctl c0046209 0 returned -22 [ 536.898743][ T27] audit: type=1326 audit(2000000059.909:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.3.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2ab7def9 code=0x7ffc0000 [ 536.971673][ T4813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.974013][ T27] audit: type=1326 audit(2000000059.939:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.3.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f2b2ab7def9 code=0x7ffc0000 [ 537.006029][ T4813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 537.073556][ T27] audit: type=1326 audit(2000000059.939:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.3.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2ab7def9 code=0x7ffc0000 [ 537.141977][ T27] audit: type=1326 audit(2000000059.939:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.3.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2ab7def9 code=0x7ffc0000 [ 537.165944][T22601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8226'. [ 537.242768][T22598] loop4: detected capacity change from 0 to 4096 [ 537.272105][ T4813] usb 2-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=f6.b5 [ 537.290331][T22599] loop3: detected capacity change from 0 to 4096 [ 537.291906][ T4813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.320245][ T4813] usb 2-1: Product: syz [ 537.325230][T22598] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 537.372052][ T4813] usb 2-1: Manufacturer: syz [ 537.396799][ T4813] usb 2-1: SerialNumber: syz [ 537.412582][ T4813] usb 2-1: config 0 descriptor?? [ 537.463831][T22599] Cannot load nls cp8 [ 537.554466][T22614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8230'. [ 537.701601][ T4813] hdpvr 2-1:0.0: firmware version 0x96 dated am=dG@ %/?8 SdƍU8J>`RK_ [ 537.723948][ T4813] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 537.738282][T22599] 9pnet: Could not find request transport: xen [ 537.855907][T22625] dlm: plock device version mismatch: kernel (1.2.0), user (1.768.0) [ 537.889463][T22627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8237'. [ 537.921653][ T4813] hdpvr 2-1:0.0: device init failed [ 537.926946][ T4813] hdpvr: probe of 2-1:0.0 failed with error -12 [ 537.967696][ T4813] usb 2-1: USB disconnect, device number 41 [ 538.210693][T22638] loop3: detected capacity change from 0 to 1764 [ 538.497491][T22649] netlink: 'syz.0.8248': attribute type 21 has an invalid length. [ 538.748184][T22659] loop4: detected capacity change from 0 to 256 [ 538.846685][T22659] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 538.866624][T22665] SET target dimension over the limit! [ 539.173719][T22635] loop2: detected capacity change from 0 to 32768 [ 539.721763][ T4016] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 539.831796][ T4813] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 539.832924][T22705] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8276'. [ 539.860121][T22705] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8276'. [ 540.081608][ T4016] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 540.099559][ T4016] usb 4-1: config 0 has no interface number 0 [ 540.124316][ T4016] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 540.154333][ T4016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.169093][T22723] loop4: detected capacity change from 0 to 512 [ 540.186731][ T4016] usb 4-1: config 0 descriptor?? [ 540.221878][ T4813] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 540.231013][ T4813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.243229][ T4016] smsusb:smsusb_probe: board id=8, interface number 31 [ 540.271073][ T4813] usb 1-1: config 0 descriptor?? [ 540.305303][T22723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 540.324053][ T4813] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 540.335616][T22723] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 540.491255][ T4016] usb 4-1: USB disconnect, device number 36 [ 540.540852][T22011] EXT4-fs (loop4): unmounting filesystem. [ 540.781497][ T4813] gspca_stv06xx: I2C: Read error writing address: -71 [ 540.865432][ T4813] usb 1-1: USB disconnect, device number 37 [ 540.876759][T22749] loop4: detected capacity change from 0 to 256 [ 540.997747][T22749] FAT-fs (loop4): Directory bread(block 64) failed [ 541.021534][T22749] FAT-fs (loop4): Directory bread(block 65) failed [ 541.028997][T22749] FAT-fs (loop4): Directory bread(block 66) failed [ 541.050140][T22756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 541.059175][T22749] FAT-fs (loop4): Directory bread(block 67) failed [ 541.065984][T22749] FAT-fs (loop4): Directory bread(block 68) failed [ 541.098679][T22749] FAT-fs (loop4): Directory bread(block 69) failed [ 541.121680][T22749] FAT-fs (loop4): Directory bread(block 70) failed [ 541.128275][T22749] FAT-fs (loop4): Directory bread(block 71) failed [ 541.178451][T22749] FAT-fs (loop4): Directory bread(block 72) failed [ 541.206182][T22749] FAT-fs (loop4): Directory bread(block 73) failed [ 541.305472][T22764] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 541.380483][T22768] loop2: detected capacity change from 0 to 256 [ 541.470125][T22768] FAT-fs (loop2): Directory bread(block 64) failed [ 541.477438][T22768] FAT-fs (loop2): Directory bread(block 65) failed [ 541.485041][T22768] FAT-fs (loop2): Directory bread(block 66) failed [ 541.499551][T22768] FAT-fs (loop2): Directory bread(block 67) failed [ 541.539801][T22768] FAT-fs (loop2): Directory bread(block 68) failed [ 541.564867][T22768] FAT-fs (loop2): Directory bread(block 69) failed [ 541.592881][T22768] FAT-fs (loop2): Directory bread(block 70) failed [ 541.625538][T22768] FAT-fs (loop2): Directory bread(block 71) failed [ 541.632576][T22768] FAT-fs (loop2): Directory bread(block 72) failed [ 541.639245][T22768] FAT-fs (loop2): Directory bread(block 73) failed [ 541.693843][T22779] x_tables: duplicate entry at hook 2 [ 541.700263][T22780] loop0: detected capacity change from 0 to 512 [ 541.833692][T22780] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 541.875703][T22780] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 541.911623][T22780] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.8311: Failed to acquire dquot type 1 [ 541.986261][T22793] loop4: detected capacity change from 0 to 256 [ 542.003226][T22780] EXT4-fs (loop0): 1 truncate cleaned up [ 542.009127][T22780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 542.061784][T22780] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038 (0x7fffffff) [ 542.126272][T22780] EXT4-fs (loop0): unmounting filesystem. [ 542.602742][T22814] loop1: detected capacity change from 0 to 1024 [ 542.650492][T22773] loop3: detected capacity change from 0 to 32768 [ 542.695148][T22773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8309 (22773) [ 542.716198][T22814] hfsplus: extend alloc file! (16384,256,524288) [ 542.769069][T22773] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 542.799757][T22773] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 542.820820][T22773] BTRFS info (device loop3): using free space tree [ 543.049691][T22848] netlink: 'syz.2.8338': attribute type 13 has an invalid length. [ 543.059743][T22848] netlink: 'syz.2.8338': attribute type 12 has an invalid length. [ 543.091493][ T5762] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 543.221419][T22773] BTRFS info (device loop3): enabling ssd optimizations [ 543.231156][T22857] loop2: detected capacity change from 0 to 512 [ 543.303955][T22857] EXT4-fs: Ignoring removed nobh option [ 543.311677][ T4097] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.330039][T22857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.343566][ T5762] usb 5-1: Using ep0 maxpacket: 32 [ 543.481804][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 543.545618][T22857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 543.577521][T22857] ext4 filesystem being mounted at /1292/file0 supports timestamps until 2038 (0x7fffffff) [ 543.672122][ T5762] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 543.681219][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.689870][ T5762] usb 5-1: Product: syz [ 543.694540][ T5762] usb 5-1: Manufacturer: syz [ 543.699162][ T5762] usb 5-1: SerialNumber: syz [ 543.706151][ T5762] usb 5-1: config 0 descriptor?? [ 543.748655][ T5762] hub 5-1:0.0: bad descriptor, ignoring hub [ 543.761498][ T5762] hub: probe of 5-1:0.0 failed with error -5 [ 543.779981][ T5762] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 543.804719][T22857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8340: bg 0: block 224: padding at end of block bitmap is not set [ 543.805688][ T5762] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 543.896878][T22857] EXT4-fs (loop2): Remounting filesystem read-only [ 543.906851][ T5762] usbtouchscreen: probe of 5-1:0.0 failed with error -22 [ 543.956353][ T5762] usb 5-1: USB disconnect, device number 23 [ 543.972395][T22857] EXT4-fs error (device loop2) in ext4_evict_inode:254: Readonly filesystem [ 544.112959][ T8156] EXT4-fs (loop2): unmounting filesystem. [ 544.119147][ T4110] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 544.132206][ T4110] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 544.781527][T11763] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 545.091212][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8369'. [ 545.149417][T11763] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 545.161014][T11763] usb 3-1: config 0 has no interface number 0 [ 545.177938][T11763] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 545.192593][T11763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.205382][T11763] usb 3-1: config 0 descriptor?? [ 545.220849][T22931] loop3: detected capacity change from 0 to 64 [ 545.274015][T11763] smsusb:smsusb_probe: board id=8, interface number 31 [ 545.327591][T22933] loop4: detected capacity change from 0 to 256 [ 545.379447][T22936] loop1: detected capacity change from 0 to 512 [ 545.422578][T22933] FAT-fs (loop4): Directory bread(block 64) failed [ 545.484305][T22933] FAT-fs (loop4): Directory bread(block 65) failed [ 545.505160][T11763] usb 3-1: USB disconnect, device number 37 [ 545.507694][T22936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 545.511712][T22933] FAT-fs (loop4): Directory bread(block 66) failed [ 545.531693][T22933] FAT-fs (loop4): Directory bread(block 67) failed [ 545.541602][T22933] FAT-fs (loop4): Directory bread(block 68) failed [ 545.549634][T22936] ext4 filesystem being mounted at /1417/file0 supports timestamps until 2038 (0x7fffffff) [ 545.573480][T22933] FAT-fs (loop4): Directory bread(block 69) failed [ 545.580179][T22933] FAT-fs (loop4): Directory bread(block 70) failed [ 545.664315][T22949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8381'. [ 545.675029][T22933] FAT-fs (loop4): Directory bread(block 71) failed [ 545.697279][T22933] FAT-fs (loop4): Directory bread(block 72) failed [ 545.728483][T22933] FAT-fs (loop4): Directory bread(block 73) failed [ 545.976887][ T6945] EXT4-fs (loop1): unmounting filesystem. [ 546.182310][T22970] loop1: detected capacity change from 0 to 256 [ 546.189887][ T27] audit: type=1326 audit(2000000069.199:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.4.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa70f7def9 code=0x7ffc0000 [ 546.252313][ T27] audit: type=1326 audit(2000000069.199:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.4.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7faa70f7def9 code=0x7ffc0000 [ 546.261210][T22970] FAT-fs (loop1): Directory bread(block 64) failed [ 546.354497][ T27] audit: type=1326 audit(2000000069.199:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.4.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa70f7def9 code=0x7ffc0000 [ 546.371377][T22970] FAT-fs (loop1): Directory bread(block 65) failed [ 546.401421][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8394'. [ 546.417868][T22970] FAT-fs (loop1): Directory bread(block 66) failed [ 546.427533][T22979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8395'. [ 546.457748][ T27] audit: type=1326 audit(2000000069.199:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.4.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa70f7def9 code=0x7ffc0000 [ 546.506080][T22970] FAT-fs (loop1): Directory bread(block 67) failed [ 546.514006][T22970] FAT-fs (loop1): Directory bread(block 68) failed [ 546.520570][T22970] FAT-fs (loop1): Directory bread(block 69) failed [ 546.527981][T22970] FAT-fs (loop1): Directory bread(block 70) failed [ 546.534910][T22970] FAT-fs (loop1): Directory bread(block 71) failed [ 546.543613][T22970] FAT-fs (loop1): Directory bread(block 72) failed [ 546.550577][T22970] FAT-fs (loop1): Directory bread(block 73) failed [ 546.676579][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8398'. [ 547.126159][ T3677] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 547.311465][T11763] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 547.520338][ T3677] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 547.531057][ T3677] usb 1-1: config 0 has no interface number 0 [ 547.546998][ T3677] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 547.559377][ T3677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.571506][T11763] usb 3-1: Using ep0 maxpacket: 8 [ 547.587693][ T3677] usb 1-1: config 0 descriptor?? [ 547.633439][ T3677] smsusb:smsusb_probe: board id=8, interface number 31 [ 547.691672][T11763] usb 3-1: config 0 has no interfaces? [ 547.705927][T22987] loop3: detected capacity change from 0 to 40427 [ 547.756515][T22987] F2FS-fs (loop3): invalid crc value [ 547.828243][T22987] F2FS-fs (loop3): Found nat_bits in checkpoint [ 547.837335][T23021] loop1: detected capacity change from 0 to 8192 [ 547.851742][T11763] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 547.860876][T11763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.888802][T23021] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 547.901621][T11763] usb 3-1: Product: syz [ 547.905961][T11763] usb 3-1: Manufacturer: syz [ 547.910587][T11763] usb 3-1: SerialNumber: syz [ 547.911556][T23021] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 547.925761][T23021] REISERFS (device loop1): using ordered data mode [ 547.932623][T23021] reiserfs: using flush barriers [ 547.963001][T23021] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 547.965433][ T3677] usb 1-1: USB disconnect, device number 38 [ 547.981813][T23021] REISERFS (device loop1): checking transaction log (loop1) [ 548.017583][T11763] usb 3-1: config 0 descriptor?? [ 548.031964][T23021] REISERFS (device loop1): Using rupasov hash to sort names [ 548.041976][T23021] REISERFS (device loop1): using 3.5.x disk format [ 548.046509][T22987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 548.058133][T23021] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 548.090408][T23021] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 548.106164][T23021] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 548.120855][T22987] F2FS-fs (loop3): Corrupted max_depth of 3: 1025 [ 548.145730][T22987] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 548.158435][T23021] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 548.201218][T23038] loop4: detected capacity change from 0 to 512 [ 548.274047][T23038] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 548.288806][T23038] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 548.308559][T11763] usb 3-1: USB disconnect, device number 38 [ 548.342492][T23038] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.8422: Failed to acquire dquot type 1 [ 548.396009][T23038] EXT4-fs (loop4): 1 truncate cleaned up [ 548.404376][T23038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 548.445886][T23038] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 548.470242][T23038] EXT4-fs (loop4): unmounting filesystem. [ 549.115610][ T4813] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 549.455879][T23082] loop0: detected capacity change from 0 to 512 [ 549.473863][T23082] EXT4-fs: Ignoring removed orlov option [ 549.531495][T23082] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 549.564728][T23082] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 549.580923][T23082] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.8442: Corrupt directory, running e2fsck is recommended [ 549.623100][T23082] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 549.631695][T23082] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.8442: corrupted in-inode xattr [ 549.651705][T23082] EXT4-fs (loop0): Remounting filesystem read-only [ 549.668646][T23082] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.8442: couldn't read orphan inode 15 (err -117) [ 549.692691][ T4813] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 549.702442][ T4813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.710485][ T4813] usb 2-1: Product: syz [ 549.718397][T23082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 549.732046][ T4813] usb 2-1: Manufacturer: syz [ 549.736681][ T4813] usb 2-1: SerialNumber: syz [ 549.755972][ T4813] r8152-cfgselector 2-1: config 0 descriptor?? [ 549.773778][T23082] EXT4-fs error (device loop0): ext4_xattr_set_entry:1619: inode #2: comm syz.0.8442: corrupted xattr entries [ 549.796992][T23082] EXT4-fs (loop0): Remounting filesystem read-only [ 549.860196][T18291] EXT4-fs (loop0): unmounting filesystem. [ 550.155701][T23113] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.164017][T23113] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 550.251698][ T4813] r8152-cfgselector 2-1: Unknown version 0x0000 [ 550.262327][ T4813] r8152-cfgselector 2-1: USB disconnect, device number 42 [ 550.478232][T23127] loop0: detected capacity change from 0 to 512 [ 550.612273][T23127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 550.625078][T23127] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038 (0x7fffffff) [ 550.656607][T23127] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 550.688696][T23127] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 550.716514][T23127] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.8464: Failed to acquire dquot type 0 [ 550.846804][T18291] EXT4-fs (loop0): unmounting filesystem. [ 550.881698][ T3677] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 551.119778][T23154] loop1: detected capacity change from 0 to 2048 [ 551.169178][T23154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.241821][ T3677] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 551.421733][ T3677] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 551.442488][ T3677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.477430][ T3677] usb 4-1: Product: syz [ 551.492996][ T3677] usb 4-1: Manufacturer: syz [ 551.507722][ T3677] usb 4-1: SerialNumber: syz [ 551.746837][T23171] loop1: detected capacity change from 0 to 64 [ 551.851741][ T3677] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 551.852736][T23173] netlink: 'syz.0.8486': attribute type 30 has an invalid length. [ 551.858189][ T3677] dvb_usb_af9035: probe of 4-1:164.0 failed with error -22 [ 551.923665][ T3677] usb 4-1: USB disconnect, device number 37 [ 552.028921][T23159] loop2: detected capacity change from 0 to 32768 [ 552.041262][T23159] XFS: attr2 mount option is deprecated. [ 552.050630][T23177] loop4: detected capacity change from 0 to 1024 [ 552.065792][T23159] XFS: ikeep mount option is deprecated. [ 552.081272][T23159] XFS: noikeep mount option is deprecated. [ 552.150971][T23159] XFS (loop2): Mounting V5 Filesystem [ 552.185592][T23177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 552.203037][T23190] rdma_rxe: rxe_register_device failed with error -23 [ 552.233254][T23177] EXT4-fs error (device loop4): ext4_lookup:1856: comm syz.4.8488: inode #12: comm syz.4.8488: iget: illegal inode # [ 552.246117][T23190] rdma_rxe: failed to add team0 [ 552.253590][T23177] EXT4-fs (loop4): Remounting filesystem read-only [ 552.333333][T23159] XFS (loop2): Ending clean mount [ 552.350715][T23159] XFS (loop2): Quotacheck needed: Please wait. [ 552.373991][T22011] EXT4-fs (loop4): unmounting filesystem. [ 552.478891][T23200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8494'. [ 552.545180][T23159] XFS (loop2): Quotacheck: Done. [ 552.673978][ T8156] XFS (loop2): Unmounting Filesystem [ 552.785683][T23213] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 552.861211][T23220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8503'. [ 552.888115][T23220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8503'. [ 552.910288][T23212] XFS (nullb0): Invalid superblock magic number [ 553.831652][ T7] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 554.033814][T23267] loop0: detected capacity change from 0 to 512 [ 554.081682][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 554.087824][T23267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 554.130159][T23267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 554.198065][T23267] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 554.207870][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 554.234778][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 554.258103][T23267] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.8523: attempt to clear invalid blocks 2 len 1 [ 554.282521][T23273] loop2: detected capacity change from 0 to 256 [ 554.310829][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.341615][T23273] exfat: Deprecated parameter 'utf8' [ 554.346974][T23273] exfat: Deprecated parameter 'namecase' [ 554.356673][T23263] loop3: detected capacity change from 0 to 32768 [ 554.368141][T23273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 554.392670][T23267] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 554.490335][T23267] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.8523: invalid indirect mapped block 1819239214 (level 0) [ 554.536921][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.561629][T23267] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.8523: invalid indirect mapped block 1819239214 (level 1) [ 554.574203][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.590827][ T7] usb 2-1: Product: syz [ 554.595936][ T7] usb 2-1: Manufacturer: syz [ 554.605631][ T7] usb 2-1: SerialNumber: syz [ 554.619355][T23267] EXT4-fs (loop0): 1 truncate cleaned up [ 554.625780][T23275] x_tables: duplicate underflow at hook 4 [ 554.641688][T23267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 554.714439][T23267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 554.773454][T23267] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 554.787685][T23255] loop4: detected capacity change from 0 to 32768 [ 554.818639][T23255] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 554.831616][T23255] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 554.880479][T18291] EXT4-fs (loop0): unmounting filesystem. [ 554.927353][T23255] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 554.970726][ T5762] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 554.981192][ T5762] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 555.092915][ T5762] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 555.113416][ T5762] gfs2: fsid=syz:syz.0: jid=0: Done [ 555.118714][T23255] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 555.161727][ T7] usb 2-1: 0:2 : does not exist [ 555.224531][ T7] usb 2-1: USB disconnect, device number 43 [ 555.976295][T23281] loop2: detected capacity change from 0 to 32768 [ 556.017490][T23281] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 556.066349][T23281] gfs2: fsid=.: Now mounting FS (format 0)... [ 556.089437][T23281] gfs2: not a GFS2 filesystem [ 556.109346][T23281] gfs2: fsid=.: can't read superblock [ 556.119464][T23281] gfs2: fsid=.: can't read superblock: -22 [ 556.267387][T23289] loop0: detected capacity change from 0 to 32768 [ 556.308966][T23289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8532 (23289) [ 556.350489][T23289] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.439110][T23289] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 556.468728][T23289] BTRFS info (device loop0): using free space tree [ 556.565210][T23287] loop3: detected capacity change from 0 to 40427 [ 556.608075][T23287] F2FS-fs (loop3): invalid crc value [ 556.640105][T23325] IPv6: NLM_F_CREATE should be specified when creating new route [ 556.650381][T23287] F2FS-fs (loop3): Found nat_bits in checkpoint [ 556.743268][T23287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 556.783174][T23289] BTRFS info (device loop0): enabling ssd optimizations [ 556.848462][T23287] syz.3.8531: attempt to access beyond end of device [ 556.848462][T23287] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 556.939522][ T4097] syz-executor: attempt to access beyond end of device [ 556.939522][ T4097] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 556.992311][T18291] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.273190][T23352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 557.903407][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8551'. [ 557.931428][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8551'. [ 558.180872][T23382] netlink: 'syz.3.8567': attribute type 10 has an invalid length. [ 558.210705][T23382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8567'. [ 558.236127][T23384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8568'. [ 558.241435][T23382] device hsr0 entered promiscuous mode [ 558.262223][T23382] bridge0: port 3(hsr0) entered blocking state [ 558.274359][T23382] bridge0: port 3(hsr0) entered disabled state [ 558.282747][T23384] netlink: 'syz.4.8568': attribute type 1 has an invalid length. [ 558.293442][T23382] bridge0: port 3(hsr0) entered blocking state [ 558.299794][T23382] bridge0: port 3(hsr0) entered forwarding state [ 558.321629][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8565'. [ 558.400848][T23393] loop4: detected capacity change from 0 to 256 [ 558.457426][T23393] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcd43d30d, utbl_chksum : 0xe619d30d) [ 558.502709][T23395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.556979][T23393] syz.4.8572: attempt to access beyond end of device [ 558.556979][T23393] loop4: rw=524288, sector=34359738496, nr_sectors = 1 limit=256 [ 558.597162][T23393] syz.4.8572: attempt to access beyond end of device [ 558.597162][T23393] loop4: rw=0, sector=34359738496, nr_sectors = 1 limit=256 [ 558.658918][ T27] audit: type=1800 audit(2000000081.669:5754): pid=23393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8572" name="file1" dev="loop4" ino=1048740 res=0 errno=0 [ 559.021565][ T5756] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 559.252364][T23427] loop2: detected capacity change from 0 to 256 [ 559.291587][ T5756] usb 2-1: Using ep0 maxpacket: 8 [ 559.442031][ T5756] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 559.451937][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.501179][ T5756] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 559.520883][ T5756] usb 2-1: config 0 has no interface number 1 [ 559.538966][ T5756] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 559.559058][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.573552][ T5756] usb 2-1: config 0 descriptor?? [ 559.622929][ T5756] usb 2-1: unknown number of interfaces: 2 [ 559.775325][T23409] loop0: detected capacity change from 0 to 32768 [ 559.829564][T23445] loop4: detected capacity change from 0 to 512 [ 559.860569][T23445] EXT4-fs: Ignoring removed orlov option [ 559.872680][ T4812] usb 2-1: USB disconnect, device number 44 [ 559.930225][T23445] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 559.958570][T23445] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 559.964095][T23451] loop2: detected capacity change from 0 to 256 [ 559.975252][ T5756] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 559.984942][T23445] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8598: Corrupt directory, running e2fsck is recommended [ 560.022348][T23445] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 560.031902][T23445] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.8598: corrupted in-inode xattr [ 560.034047][T23451] FAT-fs (loop2): Directory bread(block 64) failed [ 560.050663][T23451] FAT-fs (loop2): Directory bread(block 65) failed [ 560.051024][T23445] EXT4-fs (loop4): Remounting filesystem read-only [ 560.059030][T23451] FAT-fs (loop2): Directory bread(block 66) failed [ 560.065314][T23445] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.8598: couldn't read orphan inode 15 (err -117) [ 560.083343][T23451] FAT-fs (loop2): Directory bread(block 67) failed [ 560.083966][T23445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 560.090065][T23451] FAT-fs (loop2): Directory bread(block 68) failed [ 560.106370][T23451] FAT-fs (loop2): Directory bread(block 69) failed [ 560.124034][T23451] FAT-fs (loop2): Directory bread(block 70) failed [ 560.138578][T23451] FAT-fs (loop2): Directory bread(block 71) failed [ 560.140345][T23445] EXT4-fs error (device loop4): ext4_xattr_set_entry:1619: inode #2: comm syz.4.8598: corrupted xattr entries [ 560.145510][T23451] FAT-fs (loop2): Directory bread(block 72) failed [ 560.160698][T23445] EXT4-fs (loop4): Remounting filesystem read-only [ 560.210561][T23451] FAT-fs (loop2): Directory bread(block 73) failed [ 560.227392][T22011] EXT4-fs (loop4): unmounting filesystem. [ 560.371741][ T5756] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 560.379899][ T5756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.450943][ T5756] usb 4-1: config 0 has no interface number 0 [ 560.464414][ T5756] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 560.493574][ T5756] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 560.530074][ T5756] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.587990][ T5756] usb 4-1: config 0 interface 52 has no altsetting 0 [ 560.781706][ T5756] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 560.814418][ T5756] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 560.839268][ T5756] usb 4-1: Product: syz [ 560.851503][ T5756] usb 4-1: Manufacturer: syz [ 560.856184][ T5756] usb 4-1: SerialNumber: syz [ 560.871659][ T4812] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 560.890889][ T5756] usb 4-1: config 0 descriptor?? [ 560.930185][T23477] netlink: 'syz.1.8613': attribute type 4 has an invalid length. [ 560.939793][T23477] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8613'. [ 561.121411][ T4812] usb 3-1: Using ep0 maxpacket: 16 [ 561.182209][ T5756] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 561.201462][ T5756] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 561.226009][T23485] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8617'. [ 561.258470][T23485] tc_dump_action: action bad kind [ 561.398023][ T5756] usb 4-1: USB disconnect, device number 38 [ 561.441730][ T4812] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 561.450826][ T4812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.485609][ T4812] usb 3-1: Product: syz [ 561.503453][T23489] loop0: detected capacity change from 0 to 64 [ 561.510748][ T4812] usb 3-1: Manufacturer: syz [ 561.515578][ T4812] usb 3-1: SerialNumber: syz [ 561.540254][ T4812] r8152-cfgselector 3-1: config 0 descriptor?? [ 561.619677][T23475] loop4: detected capacity change from 0 to 32768 [ 561.635183][T23475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8612 (23475) [ 561.654842][T23475] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.667318][T23475] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 561.677437][T23475] BTRFS info (device loop4): using free space tree [ 561.756858][T23482] loop1: detected capacity change from 0 to 32768 [ 561.812789][T23482] XFS (loop1): Mounting V5 Filesystem [ 561.888575][T23475] BTRFS info (device loop4): enabling ssd optimizations [ 561.936742][T23482] XFS (loop1): Ending clean mount [ 562.011493][ T4812] r8152-cfgselector 3-1: Unknown version 0x0000 [ 562.021866][ T4812] r8152-cfgselector 3-1: bad CDC descriptors [ 562.044431][T22011] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.055588][ T4812] r8152-cfgselector 3-1: Unknown version 0x0000 [ 562.098912][ T4812] r8152-cfgselector 3-1: USB disconnect, device number 39 [ 562.509401][ T6945] XFS (loop1): Unmounting Filesystem [ 562.717542][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.723928][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.733819][ T28] INFO: task jfsCommit:134 blocked for more than 143 seconds. [ 562.771376][ T28] Not tainted 6.1.109-syzkaller #0 [ 562.777205][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.804007][ T28] task:jfsCommit state:D stack:26744 pid:134 ppid:2 flags:0x00004000 [ 562.844141][T23544] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 562.870155][ T28] Call Trace: [ 562.883778][ T28] [ 562.894580][ T28] __schedule+0x143f/0x4570 [ 562.907136][ T28] ? mark_lock+0x9a/0x340 [ 562.911993][ T28] ? release_firmware_map_entry+0x186/0x186 [ 562.917932][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 562.926055][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 562.931728][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 562.937743][ T28] schedule+0xbf/0x180 [ 562.942484][ T28] io_schedule+0x88/0x100 [ 562.958031][ T28] lock_metapage+0x250/0x370 [ 562.999102][ T28] ? lock_metapage+0x16e/0x370 [ 563.011358][ T28] ? lock_page+0x2b0/0x2b0 [ 563.015920][ T28] ? do_task_dead+0xd0/0xd0 [ 563.020452][ T28] ? PageHeadHuge+0x8e/0x1c0 [ 563.047323][ T28] __get_metapage+0x50f/0x1040 [ 563.052659][ T28] ? __get_metapage+0x9ae/0x1040 [ 563.057633][ T28] diIAGRead+0xcb/0x130 [ 563.062546][ T28] diFree+0xa7a/0x2fb0 [ 563.066674][ T28] ? diWrite+0x19b0/0x19b0 [ 563.071112][ T28] ? jfs_free_zero_link+0x46a/0x6e0 [ 563.077019][ T28] ? jfs_write_failed+0x190/0x190 [ 563.089816][ T28] ? bit_waitqueue+0x30/0x30 [ 563.094953][ T28] jfs_evict_inode+0x329/0x440 [ 563.100184][ T28] ? jfs_write_inode+0x210/0x210 [ 563.117164][ T28] evict+0x529/0x930 [ 563.121148][ T28] ? proc_nr_inodes+0x310/0x310 [ 563.135456][ T28] ? _raw_spin_unlock+0x24/0x40 [ 563.140361][ T28] ? iput+0x73f/0x980 [ 563.149495][ T28] txUpdateMap+0x825/0x9e0 [ 563.159276][ T28] ? txCommit+0x6ba0/0x6ba0 [ 563.167579][ T28] jfs_lazycommit+0x476/0xb60 [ 563.177007][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 563.186804][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 563.196753][ T28] ? txFreelock+0x580/0x580 [ 563.201493][ T28] ? do_task_dead+0xd0/0xd0 [ 563.206174][ T28] ? _raw_spin_unlock+0x40/0x40 [ 563.211206][ T28] ? __kthread_parkme+0x168/0x1c0 [ 563.216708][ T28] kthread+0x28d/0x320 [ 563.220835][ T28] ? txFreelock+0x580/0x580 [ 563.225422][ T28] ? kthread_blkcg+0xd0/0xd0 [ 563.236714][ T28] ret_from_fork+0x1f/0x30 [ 563.241211][ T28] [ 563.246730][ T28] [ 563.246730][ T28] Showing all locks held in the system: [ 563.262345][ T28] 3 locks held by kworker/0:0/7: [ 563.267346][ T28] 1 lock held by rcu_tasks_kthre/12: [ 563.289056][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 563.307543][ T28] 1 lock held by rcu_tasks_trace/13: [ 563.314373][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 563.333101][ T28] 1 lock held by khungtaskd/28: [ 563.338062][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 563.352192][ T28] 4 locks held by kworker/u4:4/102: [ 563.357429][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 563.369502][ T28] #1: ffffc900015f7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 563.380751][ T28] #2: ffffffff8e4ecb90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 563.394315][ T28] #3: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 563.404485][ T28] 2 locks held by jfsCommit/134: [ 563.409691][ T28] #0: ffff888055d18920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x378/0x2fb0 [ 563.423941][ T28] #1: ffff88807379af78 (&jfs_ip->rdwrlock/1){++++}-{3:3}, at: diFree+0x394/0x2fb0 [ 563.434173][ T28] 2 locks held by getty/3389: [ 563.439326][ T28] #0: ffff88802ebc6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 563.451405][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 563.462188][ T28] 2 locks held by syz-executor/6945: [ 563.467487][ T28] #0: ffff88807d8680e0 (&type->s_umount_key#66){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 563.477839][ T28] #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 563.489564][ T28] [ 563.503623][ T28] ============================================= [ 563.503623][ T28] [ 563.513845][ T28] NMI backtrace for cpu 1 [ 563.518199][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 563.526114][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 563.536284][ T28] Call Trace: [ 563.539577][ T28] [ 563.542521][ T28] dump_stack_lvl+0x1e3/0x2cb [ 563.547206][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 563.552750][ T28] ? panic+0x764/0x764 [ 563.556817][ T28] ? vprintk_emit+0x622/0x740 [ 563.561499][ T28] ? printk_sprint+0x490/0x490 [ 563.566267][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 563.571389][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 563.576338][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 563.582491][ T28] ? _printk+0xd1/0x111 [ 563.586650][ T28] ? panic+0x764/0x764 [ 563.590715][ T28] ? __wake_up_klogd+0xcc/0x100 [ 563.595566][ T28] ? panic+0x764/0x764 [ 563.599639][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 563.605717][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 563.611794][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 563.617793][ T28] watchdog+0xf88/0xfd0 [ 563.621959][ T28] ? watchdog+0x1f8/0xfd0 [ 563.626301][ T28] kthread+0x28d/0x320 [ 563.630412][ T28] ? hungtask_pm_notify+0x50/0x50 [ 563.635449][ T28] ? kthread_blkcg+0xd0/0xd0 [ 563.640031][ T28] ret_from_fork+0x1f/0x30 [ 563.644451][ T28] [ 563.648385][ T28] Sending NMI from CPU 1 to CPUs 0: [ 563.653938][ C0] NMI backtrace for cpu 0 [ 563.653951][ C0] CPU: 0 PID: 3692 Comm: kworker/u4:6 Not tainted 6.1.109-syzkaller #0 [ 563.653967][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 563.653976][ C0] Workqueue: phy14 ieee80211_iface_work [ 563.654004][ C0] RIP: 0010:register_lock_class+0x6e/0x990 [ 563.654026][ C0] Code: 41 48 c7 44 24 48 a8 80 b4 8c 48 c7 44 24 50 50 66 6a 81 4c 8d 7c 24 40 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f3 f3 f3 49 89 04 17 <48> c7 c0 60 21 33 97 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 0d 07 00 [ 563.654038][ C0] RSP: 0018:ffffc9000438f940 EFLAGS: 00000806 [ 563.654049][ C0] RAX: f3f3f300f1f1f1f1 RBX: ffffc9000438fd20 RCX: 0000000000000000 [ 563.654061][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc9000438fd20 [ 563.654071][ C0] RBP: ffffc9000438fa10 R08: 0000000000000001 R09: 0000000000000000 [ 563.654080][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 563.654090][ C0] R13: ffff888027200000 R14: 0000000000000000 R15: 1ffff92000871f30 [ 563.654100][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 563.654112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.654122][ C0] CR2: 0000555559a615c8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 563.654135][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.654143][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 563.654152][ C0] Call Trace: [ 563.654158][ C0] [ 563.654164][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 563.654184][ C0] ? read_lock_is_recursive+0x10/0x10 [ 563.654202][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 563.654227][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 563.654252][ C0] ? nmi_handle+0x12e/0x440 [ 563.654271][ C0] ? nmi_handle+0x25/0x440 [ 563.654288][ C0] ? register_lock_class+0x6e/0x990 [ 563.654305][ C0] ? default_do_nmi+0x62/0x150 [ 563.654319][ C0] ? exc_nmi+0xa8/0x100 [ 563.654331][ C0] ? end_repeat_nmi+0x16/0x31 [ 563.654353][ C0] ? register_lock_class+0x6e/0x990 [ 563.654370][ C0] ? register_lock_class+0x6e/0x990 [ 563.654388][ C0] ? register_lock_class+0x6e/0x990 [ 563.654405][ C0] [ 563.654409][ C0] [ 563.654416][ C0] ? is_dynamic_key+0x260/0x260 [ 563.654432][ C0] ? try_to_wake_up+0x6a4/0x12e0 [ 563.654450][ C0] ? mark_lock+0x9a/0x340 [ 563.654468][ C0] __lock_acquire+0xd3/0x1f80 [ 563.654491][ C0] lock_acquire+0x1f8/0x5a0 [ 563.654507][ C0] ? process_one_work+0x7a9/0x11d0 [ 563.654526][ C0] ? read_lock_is_recursive+0x10/0x10 [ 563.654543][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 563.654562][ C0] ? print_irqtrace_events+0x210/0x210 [ 563.654585][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 563.654602][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 563.654622][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 563.654638][ C0] ? process_one_work+0x7a9/0x11d0 [ 563.654652][ C0] process_one_work+0x7dc/0x11d0 [ 563.654666][ C0] ? process_one_work+0x7a9/0x11d0 [ 563.654685][ C0] ? worker_detach_from_pool+0x260/0x260 [ 563.654701][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 563.654716][ C0] ? kthread_data+0x4e/0xc0 [ 563.654740][ C0] ? wq_worker_running+0x97/0x190 [ 563.654760][ C0] worker_thread+0xa47/0x1200 [ 563.654783][ C0] kthread+0x28d/0x320 [ 563.654794][ C0] ? worker_clr_flags+0x190/0x190 [ 563.654808][ C0] ? kthread_blkcg+0xd0/0xd0 [ 563.654820][ C0] ret_from_fork+0x1f/0x30 [ 563.654845][ C0] [ 563.660197][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 564.008020][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 564.015993][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 564.026044][ T28] Call Trace: [ 564.029316][ T28] [ 564.032242][ T28] dump_stack_lvl+0x1e3/0x2cb [ 564.036925][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 564.042385][ T28] ? panic+0x764/0x764 [ 564.046450][ T28] ? llist_add_batch+0x160/0x1d0 [ 564.051422][ T28] ? vscnprintf+0x59/0x80 [ 564.055751][ T28] panic+0x318/0x764 [ 564.059646][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 564.065808][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 564.071180][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 564.077336][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 564.083493][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 564.089649][ T28] watchdog+0xfc7/0xfd0 [ 564.093809][ T28] ? watchdog+0x1f8/0xfd0 [ 564.098141][ T28] kthread+0x28d/0x320 [ 564.102213][ T28] ? hungtask_pm_notify+0x50/0x50 [ 564.107234][ T28] ? kthread_blkcg+0xd0/0xd0 [ 564.111822][ T28] ret_from_fork+0x1f/0x30 [ 564.116252][ T28] [ 564.119505][ T28] Kernel Offset: disabled [ 564.123843][ T28] Rebooting in 86400 seconds..