last executing test programs: 3m42.750151786s ago: executing program 2 (id=22): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x3013}) 3m42.51004831s ago: executing program 2 (id=24): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000080)=0x1, 0x4) 3m42.313945233s ago: executing program 2 (id=26): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0xfffffffb, 0x7, 0x4, 0x7e40c, 0xfffffffd, {}, {0x1, 0x8, 0x7, 0x10, 0x20, 0x7}, 0x10, 0x3, {0x0}, 0x3c04}) 3m42.133780216s ago: executing program 2 (id=27): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m41.759070961s ago: executing program 2 (id=30): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x2011, 0x0, 0x9, 0x0, 0x0, 0x2}}) 3m41.18559677s ago: executing program 2 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x40020}, 0x4004040) 3m40.640703519s ago: executing program 32 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x40020}, 0x4004040) 2m56.96025445s ago: executing program 1 (id=536): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) 2m56.601951505s ago: executing program 1 (id=538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000000)) 2m56.337400779s ago: executing program 1 (id=541): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@map_normal}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x1, 0xaa5, &(0x7f0000000240)="$eJzs3ctvHHcdAPDvrB+x3apN29CWqG0mqdK6bXD8oImiHmhirx0XP5DtSI0EaqrGQVEsilqQ2ggpiUCcqKgQQgIkhHrkVKkc6AXlBkdOHJCg4h9AFacUAYNmZm3v2rvexNnYSfl8rPW8vr/XzOz8vOvd+QX3sizLisc2l8/8Zicry93n1MQnH3z4Xv64djV6oyteTH4X0RcRaUT3f4pzpWd8YmF+tk1GlyLORcT1iCQi9kQ5baG/YelcJD+O+9eXr0fyy3i8SbK+W2wcbWX8X9vt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5K4xPDwyNJzEzPnXk1ba0YAnyL7avZfVyM+p183K7YJCLJH9HXtzrU9+P71jc/mv86FE+US0+UI3/3xeX7Ht370iPdldX0W1RoR7z97uVLr6+sLL9VW96Tpj1tE+2549W6db3bSzZVnZtenJ+ePTlVTacX59MTx44NHz09uZhOXouIs4tL1dl0fKF6cml+IR0cfy4dOXFiLK0OnZ0/Mzc1MTRTXV15/Eujw8PH0leGvlY9ubA4P3f0laHF8dPTMzPTc1NFTL45jzmen4hfnV5Kl6onZ9P0wsWV5bF2lcyDRppuSRqDRtvlNDo8OjoyMtofx1488eLx4eHu2orRkdUVwxvEpojdP2nptF/ddORvO379httQqfX/MRPTMRdn4tVIm/6Mx0QsxHzMNtmWrOe32v8fPlrdstz6/n+1l398ffP+KPr/p8qlp1r1/y3q2v4ny8qct5t+reVX343LcSlej5VYieV463ZzzLpiQ80+2xjz7yzLtpFzmud5oH4f3Hbr05iKaszFdCzGfEzHbJyMqfj+38sWzEcaJ+JYHIvheC1Ox2QsRhqTMR0zUY3FOBuLsRTV4owaj4WophFLMR8LkcZgjMdzkcZInIj+GIs0qjEUZ2M+zsRcTMVEnCxyuRAXi/0+tkUd14JGbiZodIugTZ357fX/2d34lyDb1vZP/yxL614qwa7Lav1/b8uAbHVucHzHagUAAAB00hf/GA/se/gPf43oiSeL9+Unp2eqw7tdLQAAAKCDio/rPZFPerKIeDKSJq//K7tUOQAAAKAjkuI7dklEDMSBcq78JlRX+BAAAAAAfE4U//9/Kp8M5HMHIlm7E8q5JpEAAADAPajtPfZrL/uvbhHRF7V7Wqbny+n5WkTtPr8Dk9Mz1aHx+ZmXRuKZ4i4DxTcNNuXWFZH05LHrNyM8OFBOB9Zy7M8z7cujRoZeGonn41CtIYNP55OnBxvLLiJHy8hny8hnt4gcyyNvwtXb3O0AsKsObe6PP8sa7rHf/i+E5+NIGXFkf3fedXfvb9KzDq/3rN270VAAYE37MXYaI67U0tX3/1/OX/83duoN/f/DceG/+crlGIo34s1YifNxpPi2QfGJg4Zyv/5+7T2DtY8hDMeROFjGbn43oCH2T8crcaTN+wEDdQO9HGnzjkAZG9+IGLuDRwAAdt6hFv1wq/6/iIjVjwOW/f+Rutf/sfn1/9q7+cu+UggAd4W1Eew7OpN11a/Z7TYCAI300gAAAAAAAAAAAAAAAAAAAAAAAAAAANB5Hb3tf982k/+tNq5fuSbr/HgEzWf6a/tgdc2VW9ob195+9/JPIqJ+UyVvxJ2pc1HTzuZc6UA+WUTs1PHauZnYG7HtvRrNNvVGxB2vfH8nivisNlM+NypbXTzObLkVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe0AS0dVsfSViT0QMR8TRna/VnXN1tyuw875Sv5DciBvxTjywe9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh8qt3/vxLl9L5yVXRXIg5HxLmIyHa7jp10Y7cr0CH920xXd////JhHlkR3edgj6RmfWJifzQ9/MfZD5ZMPPnzvscbke262nCKwsmFwiVoJG2N/ff/q3ENFqoGJ5bcvfefNb6cTp6ISvXFqaXJmYnZq4eX1JI8mH0WkUT5W5fXNH987/Pv3m7T8o7ylzW0sd7LYOROby32sWepW5VZaFbfm4sryaB61VH116bvfuvhO3aaH42DE04MRg40lfTN/NG9hHIyeTet612eTT5MfJg/Ez+JccfzzvZFkSX6IHiyq23/h4sry0BtvrpxvUae9cSAizkf0RS19yzqt7eoDxfWkqeKsq/TkpQ4XQfmvfW3a2NzaGBfnV3McadGGh4pTZqDWht6GNlRalJm2bkOxw+v2+9oxT+qSlDUaq9WoNxpr9Eg80+RIZ3siWu+FZ5oc6baST5O/JKfjz/GDuvE/KvnxP5y1fnY2ZnE4Gs+UlpGVMrJo+Wj9htc2Rv7j5zdV+6bD1HCrflSe+DWVuut/7Vht73rUt7GcLGl+PaqpK3GsRYnNnxcbrg4bz4rW19yiR9q3IUXt6tMyUVnPfWVUi3p+IV6I6N4fDTu2sZ6beusXWl9RGtO/vGF9dqWYbPf5/4tkMP4ZV43/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3P2SiK5m6yvlZO/qchqR3UK2e1ptqAwkt1S/Tru69uset6/4XWlYd619suRG3Miu3KlKAQAAAAAAALDTTk188sGH7+WP4v/xXTeyrPb//TSiOyL2Jj/tj4mF+dk2GfVEnIuI6/l8X6ugf2WlxrV5urh/ffl6RPbg9psEALTxvwAAAP//ONp1bw==") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 2m55.856394407s ago: executing program 1 (id=547): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m55.420533143s ago: executing program 0 (id=553): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x6}, {0x28, 0x29, 0x32, "379687cd219d6a7037a1a7ac37e116dc65"}], 0x38}, 0x4004000) 2m55.391466174s ago: executing program 1 (id=554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@udp, 0x1}, 0x20) 2m55.147040338s ago: executing program 0 (id=556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) 2m54.913055391s ago: executing program 1 (id=560): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x0, 0x3008}}) 2m54.866986632s ago: executing program 0 (id=561): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) 2m54.37794506s ago: executing program 33 (id=560): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x0, 0x3008}}) 2m54.37245294s ago: executing program 0 (id=565): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m53.899372027s ago: executing program 0 (id=572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_ENCRYPT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) 2m53.299064776s ago: executing program 0 (id=575): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x128, 0x8, 0x7f02ae, 0x0, 0x200, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x10000, 0x8, 0x126d6, 0x8b12, 0x6, 0x4, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x85, 0x4}, 0xe, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 2m52.899774442s ago: executing program 34 (id=575): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x128, 0x8, 0x7f02ae, 0x0, 0x200, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x10000, 0x8, 0x126d6, 0x8b12, 0x6, 0x4, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x85, 0x4}, 0xe, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 2.413522573s ago: executing program 7 (id=2804): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 2.201504507s ago: executing program 7 (id=2807): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8482) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0xa, 0x5, 0x1, 0x0, 'syz0\x00', 0x4}, 0x1, 0x20000423, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1.99950392s ago: executing program 7 (id=2812): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@subsystem='net_prio'}]}) 1.822691643s ago: executing program 7 (id=2815): personality(0x5400004) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={[0x3cf]}, 0x8) 1.565679607s ago: executing program 7 (id=2818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x28, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2600}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1, 0x11}, 0x0) 1.376675539s ago: executing program 7 (id=2822): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000080)={[{@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@inode64}, {@nouser_xattr}, {@barrier={'barrier', 0x3d, 0x5}}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.34031342s ago: executing program 4 (id=2823): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, 0x0) 1.286162341s ago: executing program 5 (id=2824): mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000003c0)=0x6, 0x6, 0x0) 1.195751372s ago: executing program 6 (id=2826): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 1.089843144s ago: executing program 3 (id=2827): r0 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) 1.056413094s ago: executing program 4 (id=2828): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) 1.032305415s ago: executing program 5 (id=2829): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15b", 0x2}], 0x1) 933.574896ms ago: executing program 3 (id=2830): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @reserved}}) 877.720347ms ago: executing program 6 (id=2831): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) 863.201448ms ago: executing program 4 (id=2832): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1, 0x6, 0x0) 776.833519ms ago: executing program 5 (id=2833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) 722.57271ms ago: executing program 3 (id=2834): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000580)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x34, 0x0, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x90) 669.66466ms ago: executing program 6 (id=2835): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) 669.418511ms ago: executing program 4 (id=2836): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x128, 0x5c, 0x160, 0x128, 0x3e0, 0x320, 0x228, 0x25a, 0x320, 0x228, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2e}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x4}, 0x5002, 0x100, 0x128, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh={{0x30}, {0x5e, 0x4, 0xfe, 0x8, 0x0, 0x4000}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 502.287543ms ago: executing program 6 (id=2837): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x61, 0x0, 0x0, 0x310}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 501.702213ms ago: executing program 3 (id=2838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getpolicy={0x64, 0x15, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x6, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x23, 0x0, 0xee00}, 0x6e6bb9, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @policy_type={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8881}, 0x4000) 417.607774ms ago: executing program 5 (id=2839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0) 417.409134ms ago: executing program 4 (id=2840): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xffffffff, 0x0, 0x1002, 0x80000000}}) 309.361096ms ago: executing program 6 (id=2841): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 269.829617ms ago: executing program 5 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0007"], 0x28}}, 0x0) 222.230327ms ago: executing program 3 (id=2843): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 137.388179ms ago: executing program 4 (id=2844): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 126.885709ms ago: executing program 6 (id=2845): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000040)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4452, &(0x7f0000004480)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 21.61324ms ago: executing program 5 (id=2846): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}, 0x4000000) 0s ago: executing program 3 (id=2847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="280200000101030000000000000000000100000208000840000002b80800034000001400080008400000080018000e801400018008000100ac1414bb080002000a01010190000180"], 0x228}, 0x1, 0x0, 0x0, 0x8}, 0x40040) kernel console output (not intermixed with test programs): 603324][ T7193] xt_TCPMSS: Only works on TCP SYN packets [ 176.819018][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1066'. [ 176.858719][ T7200] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1066'. [ 177.340811][ T26] audit: type=1326 audit(1750125887.446:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 177.443488][ T26] audit: type=1326 audit(1750125887.446:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 177.526711][ T26] audit: type=1326 audit(1750125887.516:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 177.621104][ T26] audit: type=1326 audit(1750125887.516:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 177.643522][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.738251][ T26] audit: type=1326 audit(1750125887.516:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 177.760635][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.883130][ T26] audit: type=1400 audit(1750125887.986:1707): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=7239 comm="syz.6.1082" [ 178.601497][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1095'. [ 178.791019][ T7277] loop6: detected capacity change from 0 to 2048 [ 178.814255][ T7283] loop3: detected capacity change from 0 to 256 [ 178.882744][ T7277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.902383][ T7283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 179.020689][ T26] audit: type=1800 audit(1750125889.126:1708): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1097" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 179.041278][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.054986][ T7283] fuse: Bad value for 'fd' [ 179.126497][ T7290] loop4: detected capacity change from 0 to 256 [ 179.215247][ T7290] exfat: Deprecated parameter 'utf8' [ 179.220747][ T7290] exfat: Deprecated parameter 'utf8' [ 179.278708][ T7290] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 179.701293][ T7307] ipt_REJECT: TCP_RESET invalid for non-tcp [ 180.646659][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 181.003791][ T7361] loop5: detected capacity change from 0 to 8 [ 181.173168][ T5464] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.363200][ T5464] usb 5-1: Using ep0 maxpacket: 32 [ 181.372856][ T5464] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 181.403994][ T5464] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 181.473225][ T5464] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 181.492454][ T5464] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 181.523371][ T5464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.531467][ T5464] usb 5-1: Product: syz [ 181.569878][ T5464] usb 5-1: Manufacturer: syz [ 181.591850][ T5464] usb 5-1: SerialNumber: syz [ 181.619333][ T5464] cdc_acm: probe of 5-1:2.1 failed with error -22 [ 181.822022][ T27] usb 5-1: USB disconnect, device number 10 [ 181.955203][ T7388] loop3: detected capacity change from 0 to 1024 [ 183.613269][ T7451] delete_channel: no stack [ 183.633859][ T5464] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 183.823327][ T5464] usb 4-1: Using ep0 maxpacket: 8 [ 183.840669][ T5464] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 183.867789][ T5464] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 183.900323][ T5464] usb 4-1: Product: syz [ 183.910354][ T5464] usb 4-1: Manufacturer: syz [ 183.930626][ T5464] usb 4-1: SerialNumber: syz [ 183.957530][ T5464] usb 4-1: config 0 descriptor?? [ 184.005373][ T5464] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 184.127426][ T7472] netlink: 'syz.4.1175': attribute type 30 has an invalid length. [ 184.153386][ T7472] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 184.162627][ T7472] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 184.233651][ T7476] netlink: 'syz.5.1177': attribute type 27 has an invalid length. [ 184.381356][ T5464] gspca_zc3xx: reg_r err -71 [ 184.386132][ T5464] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 184.404069][ T5464] usb 4-1: USB disconnect, device number 4 [ 185.144709][ T7509] loop5: detected capacity change from 0 to 128 [ 185.353678][ T7517] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 185.624091][ T7526] nfs: Deprecated parameter 'nointr' [ 186.560264][ T7566] 8021q: VLANs not supported on lo [ 186.810736][ T7543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.139573][ T7588] loop4: detected capacity change from 0 to 64 [ 187.953533][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 188.069525][ T7624] tipc: Can't bind to reserved service type 1 [ 188.144849][ T27] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 188.173607][ T27] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 188.208882][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.238590][ T27] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 188.665631][ T7642] loop6: detected capacity change from 0 to 1024 [ 189.104805][ T7655] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.114084][ T7613] loop3: detected capacity change from 0 to 40427 [ 189.136536][ T7613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 189.165866][ T7613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.197944][ T7613] F2FS-fs (loop3): invalid crc value [ 189.256202][ T7613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.314198][ T27] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 189.515108][ T27] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 189.533756][ T27] stv0680 6-1:4.0: last error: 20, command = 0x55 [ 189.575105][ T27] usb 6-1: USB disconnect, device number 6 [ 189.606435][ T7613] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.633815][ T7613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.993191][ T5468] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 190.008059][ T4820] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 190.091634][ T4820] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 190.206001][ T5468] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.219360][ T5468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.249136][ T5468] usb 5-1: config 0 descriptor?? [ 190.268024][ T5468] cp210x 5-1:0.0: cp210x converter detected [ 190.335225][ T7694] loop5: detected capacity change from 0 to 1024 [ 190.441589][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1265'. [ 190.682741][ T46] hfsplus: b-tree write err: -5, ino 4 [ 190.699378][ T5468] usb 5-1: cp210x converter now attached to ttyUSB0 [ 190.737439][ T5468] usb 5-1: USB disconnect, device number 11 [ 190.748195][ T5468] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.814216][ T5468] cp210x 5-1:0.0: device disconnected [ 190.887291][ T7708] loop5: detected capacity change from 0 to 16 [ 190.953451][ T7708] erofs: (device loop5): mounted with root inode @ nid 36. [ 190.997343][ T7708] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 191.049507][ T7708] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 191.106616][ T7708] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 191.780369][ T7703] loop7: detected capacity change from 0 to 32768 [ 191.838741][ T7703] (syz.7.1267,7703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.904319][ T7703] (syz.7.1267,7703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.980490][ T7736] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 192.030840][ T7703] JBD2: Ignoring recovery information on journal [ 192.086720][ T7736] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1280'. [ 192.214342][ T7703] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 192.216852][ T7748] loop4: detected capacity change from 0 to 64 [ 192.641175][ T5889] ocfs2: Unmounting device (7,7) on (node local) [ 193.227914][ T7771] loop3: detected capacity change from 0 to 4096 [ 193.673304][ T7787] netlink: 'syz.7.1299': attribute type 3 has an invalid length. [ 193.681119][ T7787] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1299'. [ 193.813350][ T14] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 193.896644][ T7755] loop4: detected capacity change from 0 to 40427 [ 193.918061][ T7755] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 193.952940][ T7755] F2FS-fs (loop4): invalid crc value [ 194.004063][ T7755] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.014849][ T14] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 194.047412][ T14] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 194.102195][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 194.152014][ T7801] loop6: detected capacity change from 0 to 512 [ 194.162479][ T7755] F2FS-fs (loop4): Start checkpoint disabled! [ 194.166035][ T14] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 194.196973][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205575][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.242618][ T7755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 194.258103][ T7801] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 194.270789][ T7806] loop7: detected capacity change from 0 to 8 [ 194.299931][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.323231][ T7801] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.354237][ T7806] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 194.371001][ T14] usb 6-1: Product: syz [ 194.387703][ T14] usb 6-1: Manufacturer: syz [ 194.407727][ T4353] udevd[4353]: incorrect cramfs checksum on /dev/loop7 [ 194.427906][ T14] usb 6-1: SerialNumber: syz [ 194.454009][ T7806] cramfs: Error -3 while decompressing! [ 194.459148][ T14] usb 6-1: config 0 descriptor?? [ 194.504651][ T7806] cramfs: ffffffff96b50582(639)->ffff888053bd8000(4096) [ 194.524100][ T14] usb-storage 6-1:0.0: USB Mass Storage device detected [ 194.541235][ T7806] cramfs: bad data blocksize 4294966699 [ 194.557879][ T5846] EXT4-fs (loop6): unmounting filesystem. [ 194.570960][ T4353] udevd[4353]: incorrect cramfs checksum on /dev/loop7 [ 194.578257][ T7806] cramfs: Error -3 while decompressing! [ 194.601555][ T14] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 194.626796][ T7806] cramfs: ffffffff96b50582(639)->ffff888053bd8000(4096) [ 194.643292][ T26] audit: type=1800 audit(1750125904.756:1709): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1308" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 194.730293][ T14] usb 6-1: USB disconnect, device number 7 [ 194.768853][ T7824] process 'syz.3.1312' launched './file2' with NULL argv: empty string added [ 195.323357][ T7837] loop4: detected capacity change from 0 to 1024 [ 195.331263][ T7837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.363744][ T7837] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.413103][ T7837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.498154][ T7837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 195.765399][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 195.876953][ T7853] device ip6gretap1 entered promiscuous mode [ 195.982232][ T7835] loop6: detected capacity change from 0 to 40427 [ 196.037569][ T7835] F2FS-fs (loop6): invalid crc value [ 196.069361][ T7835] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 196.275524][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 196.281706][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 196.313721][ T7835] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 197.040932][ T7898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.048929][ T7898] IPv6: NLM_F_CREATE should be set when creating new route [ 197.056261][ T7898] IPv6: NLM_F_CREATE should be set when creating new route [ 197.494385][ T7910] loop5: detected capacity change from 0 to 2048 [ 197.511945][ T7910] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.577710][ T7910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.703150][ T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 197.913372][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 197.934672][ T27] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 197.946743][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 197.983467][ T27] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 198.022871][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.058852][ T27] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.090883][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.118810][ T27] usb 7-1: Product: syz [ 198.123700][ T27] usb 7-1: Manufacturer: syz [ 198.143059][ T27] usb 7-1: SerialNumber: syz [ 198.581240][ T27] usb 7-1: 0:2 : does not exist [ 198.627561][ T27] usb 7-1: USB disconnect, device number 3 [ 198.689851][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.112969][ T26] audit: type=1326 audit(1750125909.216:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2638e929 code=0x7ffc0000 [ 199.187431][ T26] audit: type=1326 audit(1750125909.256:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f0c2638e929 code=0x7ffc0000 [ 199.293896][ T26] audit: type=1326 audit(1750125909.256:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2638e929 code=0x7ffc0000 [ 199.426869][ T26] audit: type=1326 audit(1750125909.256:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2638e929 code=0x7ffc0000 [ 199.483374][ T7987] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 199.571891][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 199.978057][ T8009] loop6: detected capacity change from 0 to 8 [ 200.076921][ T8014] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 200.183383][ T7102] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 200.396190][ T7102] usb 8-1: Using ep0 maxpacket: 16 [ 200.417515][ T7102] usb 8-1: config 166 has an invalid interface number: 177 but max is 1 [ 200.470744][ T7102] usb 8-1: config 166 has an invalid interface number: 34 but max is 1 [ 200.501335][ T8030] loop5: detected capacity change from 0 to 8 [ 200.508167][ T7102] usb 8-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 200.552654][ T8030] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 200.559458][ T7102] usb 8-1: config 166 has no interface number 0 [ 200.573134][ T7102] usb 8-1: config 166 has no interface number 1 [ 200.587101][ T7102] usb 8-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 200.610411][ T8030] cramfs: Error -3 while decompressing! [ 200.672725][ T8030] cramfs: ffffffff96b4c568(26)->ffff888053e59000(4096) [ 200.680513][ T7102] usb 8-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 200.709655][ T8030] cramfs: Error -5 while decompressing! [ 200.725923][ T7102] usb 8-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 200.739495][ T8030] cramfs: ffffffff96b4c582(26)->ffff88807296a000(4096) [ 200.750311][ T8038] netlink: 'syz.6.1397': attribute type 1 has an invalid length. [ 200.763171][ T8030] cramfs: Error -3 while decompressing! [ 200.773399][ T7102] usb 8-1: config 166 interface 177 has no altsetting 0 [ 200.783336][ T8030] cramfs: ffffffff96b4c568(26)->ffff888053e59000(4096) [ 200.793330][ T7102] usb 8-1: config 166 interface 34 has no altsetting 0 [ 200.807226][ T26] audit: type=1800 audit(1750125910.916:1714): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1392" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 200.820002][ T7102] usb 8-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 200.890606][ T7102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.928020][ T7102] usb 8-1: Product: syz [ 200.932260][ T7102] usb 8-1: Manufacturer: syz [ 200.946874][ T7102] usb 8-1: SerialNumber: syz [ 201.214083][ T7102] ums-realtek 8-1:166.177: USB Mass Storage device detected [ 201.295860][ T52] block nbd4: Attempted send on invalid socket [ 201.302663][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.347930][ T7102] ums-realtek 8-1:166.34: USB Mass Storage device detected [ 201.365676][ T8059] hpfs: hpfs_map_sector(): read error [ 201.490722][ T7102] usb 8-1: Found UVC 0.00 device syz (0bda:0138) [ 201.521391][ T7102] usb 8-1: No valid video chain found. [ 201.566749][ T8070] --map-set only usable from mangle table [ 201.572000][ T7102] usb 8-1: USB disconnect, device number 3 [ 201.698610][ T8074] syz.4.1410 (8074): /proc/8073/oom_adj is deprecated, please use /proc/8073/oom_score_adj instead. [ 201.991710][ T8078] loop6: detected capacity change from 0 to 4096 [ 202.032856][ T8078] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 202.086962][ T8078] ntfs3: loop6: Failed to load $Extend. [ 202.422812][ T8095] libceph: resolve '0' (ret=-3): failed [ 202.443575][ T8098] netlink: 'syz.5.1420': attribute type 2 has an invalid length. [ 202.802273][ T8110] loop3: detected capacity change from 0 to 2048 [ 202.896090][ T8118] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.956898][ T8110] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=3, rec_len=16, name_len=1 [ 203.018801][ T8110] Remounting filesystem read-only [ 203.550254][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1438'. [ 204.072261][ T8162] loop7: detected capacity change from 0 to 512 [ 204.100317][ T8162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.156817][ T8162] EXT4-fs (loop7): Test dummy encryption mode enabled [ 204.275155][ T8162] EXT4-fs (loop7): 1 truncate cleaned up [ 204.280915][ T8162] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 204.596546][ T5889] EXT4-fs (loop7): unmounting filesystem. [ 204.936033][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1460'. [ 205.132127][ T8202] loop4: detected capacity change from 0 to 2048 [ 205.230746][ T8210] loop7: detected capacity change from 0 to 1024 [ 205.238823][ T8202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.308377][ T8210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 205.383245][ T5464] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 205.422256][ T8210] EXT4-fs error (device loop7): ext4_free_inode:355: comm syz.7.1464: bit already cleared for inode 15 [ 205.576121][ T5464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.606786][ T5464] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.636110][ T5464] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 205.691057][ T5464] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 205.760296][ T5464] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.790690][ T5464] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.828794][ T5464] usb 4-1: config 1 interface 1 has no altsetting 0 [ 205.871206][ T5464] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.884284][ T5889] EXT4-fs (loop7): unmounting filesystem. [ 205.925320][ T5464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.953204][ T5464] usb 4-1: Product: syz [ 205.963209][ T5464] usb 4-1: Manufacturer: syz [ 205.978102][ T5464] usb 4-1: SerialNumber: syz [ 206.014639][ T8205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.268996][ T8236] device wireguard0 entered promiscuous mode [ 206.332145][ T8241] loop6: detected capacity change from 0 to 256 [ 206.350492][ T8241] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 206.479014][ T5464] usb 4-1: USB disconnect, device number 5 [ 206.513170][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 206.520355][ T8241] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 206.553269][ T8241] exFAT-fs (loop6): Filesystem has been set read-only [ 206.739506][ T8250] xt_cgroup: xt_cgroup: no path or classid specified [ 206.771764][ T8252] loop4: detected capacity change from 0 to 256 [ 207.103704][ T8261] tc_dump_action: action bad kind [ 207.864624][ T8292] overlayfs: bad mount option "redirect_dir=on:/" [ 208.151878][ T8301] block device autoloading is deprecated and will be removed. [ 209.126943][ T8344] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.843097][ T4333] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 210.043192][ T4333] usb 6-1: Using ep0 maxpacket: 32 [ 210.052803][ T4333] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 210.091803][ T4333] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.116246][ T8381] loop4: detected capacity change from 0 to 2048 [ 210.122769][ T4333] usb 6-1: config 0 has no interface number 0 [ 210.155153][ T4333] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.206535][ T4333] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 210.253257][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.261329][ T4333] usb 6-1: Product: syz [ 210.281826][ T8381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.309279][ T8381] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.334467][ T4333] usb 6-1: Manufacturer: syz [ 210.339143][ T4333] usb 6-1: SerialNumber: syz [ 210.410768][ T4333] usb 6-1: config 0 descriptor?? [ 210.436058][ T4333] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 210.479482][ T4333] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 210.590476][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 210.598848][ T8370] loop7: detected capacity change from 0 to 32768 [ 210.640638][ T4333] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 210.663769][ T4333] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 210.747678][ T8370] XFS (loop7): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 210.843216][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.883452][ T951] usb 6-1: USB disconnect, device number 8 [ 210.890681][ T5889] XFS (loop7): Unmounting Filesystem [ 211.073171][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 211.091654][ T27] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 211.110319][ T27] usb 4-1: config 0 has no interface number 0 [ 211.117618][ T27] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 211.174089][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 211.193260][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.212817][ T27] usb 4-1: Product: syz [ 211.217443][ T27] usb 4-1: Manufacturer: syz [ 211.232372][ T27] usb 4-1: SerialNumber: syz [ 211.240362][ T27] usb 4-1: config 0 descriptor?? [ 211.254248][ T8397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.482583][ T8397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.749258][ T27] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 211.779346][ T27] asix: probe of 4-1:0.188 failed with error -71 [ 211.815018][ T27] usb 4-1: USB disconnect, device number 6 [ 211.964855][ T8439] futex_wake_op: syz.7.1546 tries to shift op by 32; fix this program [ 212.005756][ T8418] loop6: detected capacity change from 0 to 32768 [ 212.191207][ T8418] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 212.239623][ T8418] XFS (loop6): Mounting V5 Filesystem [ 212.415437][ T8458] netlink: 'syz.5.1551': attribute type 1 has an invalid length. [ 212.424295][ T8418] XFS (loop6): Ending clean mount [ 212.433191][ T8458] netlink: 'syz.5.1551': attribute type 3 has an invalid length. [ 212.441095][ T8458] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1551'. [ 212.451210][ T8418] XFS (loop6): Quotacheck needed: Please wait. [ 212.524713][ T8418] XFS (loop6): Quotacheck: Done. [ 212.540097][ T8452] loop7: detected capacity change from 0 to 4096 [ 212.622024][ T8452] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 212.752301][ T8468] loop5: detected capacity change from 0 to 8 [ 212.800595][ T5846] XFS (loop6): Unmounting Filesystem [ 212.848070][ T8468] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.879130][ T8468] SQUASHFS error: Failed to read block 0x91: -5 [ 212.948011][ T8468] SQUASHFS error: Unable to read metadata cache entry [8f] [ 212.990008][ T8468] SQUASHFS error: Unable to read inode 0x11f [ 213.198593][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1558'. [ 213.299361][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1559'. [ 213.333526][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1560'. [ 213.602025][ T8491] usb usb1: usbfs: process 8491 (syz.5.1564) did not claim interface 0 before use [ 213.790699][ T8498] xt_hashlimit: max too large, truncated to 1048576 [ 214.531236][ T8530] loop4: detected capacity change from 0 to 64 [ 214.582404][ T8532] loop3: detected capacity change from 0 to 512 [ 214.620425][ T8532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.706848][ T8532] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.790120][ T8532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 214.820713][ T8532] System zones: 0-2, 18-18, 34-34 [ 214.925462][ T8532] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 215.043402][ T8532] EXT4-fs (loop3): 1 truncate cleaned up [ 215.049143][ T8532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.083908][ T8545] loop7: detected capacity change from 0 to 64 [ 215.196750][ T8532] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.1579: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 215.294545][ T8532] EXT4-fs (loop3): Remounting filesystem read-only [ 215.420186][ T8555] loop4: detected capacity change from 0 to 128 [ 215.470931][ T8559] loop5: detected capacity change from 0 to 256 [ 215.519252][ T8555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.564126][ T8555] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.576618][ T8559] FAT-fs (loop5): Directory bread(block 64) failed [ 215.603756][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 215.610197][ T8559] FAT-fs (loop5): Directory bread(block 65) failed [ 215.702803][ T8555] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 215.712345][ T8559] FAT-fs (loop5): Directory bread(block 66) failed [ 215.752918][ T8559] FAT-fs (loop5): Directory bread(block 67) failed [ 215.773567][ T8555] EXT4-fs warning (device loop4): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 215.782440][ T8559] FAT-fs (loop5): Directory bread(block 68) failed [ 215.813580][ T8559] FAT-fs (loop5): Directory bread(block 69) failed [ 215.863882][ T8559] FAT-fs (loop5): Directory bread(block 70) failed [ 215.886143][ T8559] FAT-fs (loop5): Directory bread(block 71) failed [ 215.892847][ T8559] FAT-fs (loop5): Directory bread(block 72) failed [ 215.953565][ T8559] FAT-fs (loop5): Directory bread(block 73) failed [ 216.011182][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 216.080531][ T8573] loop3: detected capacity change from 0 to 256 [ 216.156671][ T8573] FAT-fs (loop3): Directory bread(block 64) failed [ 216.205060][ T8573] FAT-fs (loop3): Directory bread(block 65) failed [ 216.211751][ T8573] FAT-fs (loop3): Directory bread(block 66) failed [ 216.227111][ T8579] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.272527][ T8579] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.323477][ T8573] FAT-fs (loop3): Directory bread(block 67) failed [ 216.330211][ T8573] FAT-fs (loop3): Directory bread(block 68) failed [ 216.393174][ T8573] FAT-fs (loop3): Directory bread(block 69) failed [ 216.408718][ T8573] FAT-fs (loop3): Directory bread(block 70) failed [ 216.443910][ T8573] FAT-fs (loop3): Directory bread(block 71) failed [ 216.495962][ T8573] FAT-fs (loop3): Directory bread(block 72) failed [ 216.502664][ T8573] FAT-fs (loop3): Directory bread(block 73) failed [ 216.584073][ T8587] loop5: detected capacity change from 0 to 512 [ 216.706726][ T8587] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 216.732645][ T8587] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 216.753162][ T8598] netlink: 'syz.6.1603': attribute type 3 has an invalid length. [ 216.761729][ T8596] device lo entered promiscuous mode [ 216.789648][ T8596] device tunl0 entered promiscuous mode [ 216.803079][ T8587] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1600: Failed to acquire dquot type 1 [ 216.824131][ T8596] device gre0 entered promiscuous mode [ 216.829831][ T8598] netlink: 'syz.6.1603': attribute type 28 has an invalid length. [ 216.844891][ T8596] device gretap0 entered promiscuous mode [ 216.865646][ T8587] EXT4-fs (loop5): 1 truncate cleaned up [ 216.871383][ T8587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 216.899215][ T8598] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1603'. [ 216.911709][ T8596] device erspan0 entered promiscuous mode [ 216.928343][ T8596] device ip_vti0 entered promiscuous mode [ 216.943500][ T8587] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.974082][ T8596] device ip6_vti0 entered promiscuous mode [ 216.981046][ T8596] device sit0 entered promiscuous mode [ 217.027786][ T8596] device ip6tnl0 entered promiscuous mode [ 217.060173][ T8596] device ip6gre0 entered promiscuous mode [ 217.097036][ T8596] device syz_tun entered promiscuous mode [ 217.135062][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 217.144004][ T8596] device ip6gretap0 entered promiscuous mode [ 217.150749][ T8596] device bridge0 entered promiscuous mode [ 217.213902][ T8596] device vcan0 entered promiscuous mode [ 217.230017][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.270617][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.293534][ T8596] device bond0 entered promiscuous mode [ 217.323350][ T8596] device bond_slave_0 entered promiscuous mode [ 217.339890][ T8596] device bond_slave_1 entered promiscuous mode [ 217.372163][ T8596] device wlan1 entered promiscuous mode [ 217.384542][ T8596] device team0 entered promiscuous mode [ 217.402930][ T8596] device team_slave_0 entered promiscuous mode [ 217.419891][ T8596] device team_slave_1 entered promiscuous mode [ 217.443443][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1610'. [ 217.444702][ T8596] device dummy0 entered promiscuous mode [ 217.500529][ T8596] device nlmon0 entered promiscuous mode [ 217.522723][ T8596] device caif0 entered promiscuous mode [ 217.573340][ T5464] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 217.582010][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.655919][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1606'. [ 217.675231][ T8607] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1606'. [ 217.775160][ T5464] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.820158][ T5464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 217.860794][ T5464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 217.897114][ T5464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.920541][ T5464] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.939607][ T5464] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 217.949191][ T5464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.968071][ T5464] usb 6-1: config 0 descriptor?? [ 217.986550][ T8610] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 218.147177][ T8634] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1617'. [ 218.256555][ T5464] usb 6-1: USB disconnect, device number 9 [ 218.650588][ T8656] loop4: detected capacity change from 0 to 256 [ 218.711056][ T8656] FAT-fs (loop4): Directory bread(block 64) failed [ 218.770775][ T8656] FAT-fs (loop4): Directory bread(block 65) failed [ 218.812396][ T8656] FAT-fs (loop4): Directory bread(block 66) failed [ 218.859881][ T8656] FAT-fs (loop4): Directory bread(block 67) failed [ 218.884640][ T8656] FAT-fs (loop4): Directory bread(block 68) failed [ 218.891265][ T8656] FAT-fs (loop4): Directory bread(block 69) failed [ 218.969417][ T8656] FAT-fs (loop4): Directory bread(block 70) failed [ 218.998522][ T8656] FAT-fs (loop4): Directory bread(block 71) failed [ 219.037134][ T8656] FAT-fs (loop4): Directory bread(block 72) failed [ 219.066166][ T8656] FAT-fs (loop4): Directory bread(block 73) failed [ 219.427866][ T8683] netlink: 212168 bytes leftover after parsing attributes in process `syz.7.1635'. [ 219.635632][ T8683] syz.7.1635 (8683) used greatest stack depth: 17160 bytes left [ 219.937202][ T8702] loop7: detected capacity change from 0 to 256 [ 220.008320][ T8702] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 220.106980][ T26] audit: type=1800 audit(1750125930.216:1715): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1644" name="file2" dev="loop7" ino=1048649 res=0 errno=0 [ 220.155723][ T8708] loop6: detected capacity change from 0 to 1024 [ 220.240441][ T8712] delete_channel: no stack [ 220.632489][ T8719] loop3: detected capacity change from 0 to 4096 [ 220.673278][ T951] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 220.710347][ T8719] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 220.828326][ T8733] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1656'. [ 220.905602][ T951] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 220.923510][ T951] usb 8-1: config 0 has no interface number 0 [ 220.959654][ T951] usb 8-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 220.995377][ T951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.044140][ T951] usb 8-1: Product: syz [ 221.048385][ T951] usb 8-1: Manufacturer: syz [ 221.068421][ T951] usb 8-1: SerialNumber: syz [ 221.091802][ T951] usb 8-1: config 0 descriptor?? [ 221.129092][ T951] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 221.189371][ T951] dvb-usb: bulk message failed: -22 (4/0) [ 221.213155][ T951] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 221.263297][ T951] dvb-usb: bulk message failed: -22 (5/0) [ 221.279365][ T951] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 221.360247][ T951] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 221.429418][ T951] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 221.483485][ T951] usb 8-1: USB disconnect, device number 4 [ 221.865822][ T8767] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1671'. [ 221.933133][ T8767] tc_dump_action: action bad kind [ 222.492239][ T8754] loop3: detected capacity change from 0 to 32768 [ 222.823290][ T8800] x_tables: duplicate underflow at hook 1 [ 223.174861][ T8815] loop3: detected capacity change from 0 to 764 [ 223.222060][ T8818] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1690'. [ 223.256459][ T8815] Symlink component flag not implemented [ 223.269285][ T8819] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1691'. [ 223.283200][ T8815] Symlink component flag not implemented [ 223.319931][ T8815] Symlink component flag not implemented (129) [ 223.345158][ T8815] Symlink component flag not implemented (6) [ 223.855346][ T8842] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.1700'. [ 223.913166][ T8842] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 224.242023][ T8856] loop5: detected capacity change from 0 to 512 [ 224.299048][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1707'. [ 224.377521][ T8856] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.431402][ T8856] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.665150][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.681413][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 224.751141][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.757869][ T8907] loop7: detected capacity change from 0 to 32768 [ 227.018808][ T4259] Bluetooth: hci1: Malformed LE Event: 0x1d [ 227.269566][ T8958] loop6: detected capacity change from 0 to 1024 [ 227.415165][ T8964] loop4: detected capacity change from 0 to 2048 [ 227.533543][ T8968] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.565036][ T8969] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 227.596128][ T8964] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 227.665946][ T8964] Remounting filesystem read-only [ 228.011398][ T8986] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1757'. [ 228.033361][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 228.218150][ T8990] loop3: detected capacity change from 0 to 256 [ 228.253443][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 228.277923][ T14] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 228.304436][ T14] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 228.306181][ T8990] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 228.338404][ T14] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 228.386393][ T14] usb 7-1: config 250 has no interface number 0 [ 228.427295][ T8999] loop5: detected capacity change from 0 to 256 [ 228.433088][ T14] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 228.498263][ T14] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 228.548530][ T14] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 228.619128][ T14] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 228.674419][ T14] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 228.738526][ T14] usb 7-1: config 250 interface 228 has no altsetting 0 [ 228.758916][ T9008] loop4: detected capacity change from 0 to 64 [ 228.780798][ T14] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 228.842925][ T14] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 228.880712][ T14] usb 7-1: Product: syz [ 228.896429][ T14] usb 7-1: SerialNumber: syz [ 228.931927][ T14] hub 7-1:250.228: bad descriptor, ignoring hub [ 228.963881][ T14] hub: probe of 7-1:250.228 failed with error -5 [ 229.162503][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1771'. [ 229.303370][ T4252] usb 7-1: USB disconnect, device number 4 [ 230.081386][ T9054] __vm_enough_memory: pid: 9054, comm: syz.6.1786, no enough memory for the allocation [ 230.104947][ T9056] loop3: detected capacity change from 0 to 8 [ 230.780612][ T9041] loop7: detected capacity change from 0 to 32768 [ 230.930674][ T9043] loop5: detected capacity change from 0 to 32768 [ 231.118641][ T9043] XFS (loop5): Mounting V5 Filesystem [ 231.156044][ T9060] loop4: detected capacity change from 0 to 32768 [ 231.182706][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.193629][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.203768][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.239084][ T9060] (syz.4.1787,9060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.253795][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.264234][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.270586][ T9060] (syz.4.1787,9060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.276713][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.298195][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.308964][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.322512][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.349029][ T9089] device batadv_slave_0 entered promiscuous mode [ 231.422902][ T9060] JBD2: Ignoring recovery information on journal [ 231.423952][ T9043] XFS (loop5): Ending clean mount [ 231.530442][ T9043] XFS (loop5): Quotacheck needed: Please wait. [ 231.620702][ T9043] XFS (loop5): Quotacheck: Done. [ 231.738838][ T9060] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 231.896471][ T4451] XFS (loop5): Unmounting Filesystem [ 232.065319][ T9100] loop6: detected capacity change from 0 to 4096 [ 232.095181][ T9107] netlink: 'syz.3.1802': attribute type 8 has an invalid length. [ 232.111951][ T9108] loop7: detected capacity change from 0 to 64 [ 232.121230][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 232.211223][ T9100] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 232.286049][ T9100] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 232.313173][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 232.353200][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 232.418944][ T9100] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 232.541840][ T9100] ntfs: volume version 3.1. [ 232.553174][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): Inode is not in use! [ 232.561793][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 232.648772][ T9100] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 232.761875][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 232.853270][ T9100] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 233.083386][ T9121] loop3: detected capacity change from 0 to 8192 [ 233.115178][ T9121] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.147047][ T9121] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 233.203809][ T9121] REISERFS (device loop3): using ordered data mode [ 233.210396][ T9121] reiserfs: using flush barriers [ 233.280291][ T9121] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7143454, max trans age 30 [ 233.357095][ T9121] REISERFS (device loop3): checking transaction log (loop3) [ 233.441878][ T9121] REISERFS (device loop3): Using rupasov hash to sort names [ 233.515401][ T9121] REISERFS (device loop3): using 3.5.x disk format [ 233.522233][ T9121] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 233.594792][ T9121] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 233.635622][ T9121] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 233.715432][ T9121] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 233.776953][ T9121] REISERFS (device loop3): Remounting filesystem read-only [ 233.803465][ T9121] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data [ 233.814251][ T9154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.833192][ T9121] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 233.961582][ T9121] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 234.033643][ T9121] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 234.042183][ T9121] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 234.151429][ T9163] loop6: detected capacity change from 0 to 1764 [ 234.158024][ T9121] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 234.209550][ T9121] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data [ 234.234887][ T9121] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 234.338813][ T9163] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 234.514486][ T9173] loop4: detected capacity change from 0 to 64 [ 234.682971][ T9181] loop5: detected capacity change from 0 to 1024 [ 234.944276][ T4820] hfsplus: b-tree write err: -5, ino 4 [ 235.015228][ T9191] loop6: detected capacity change from 0 to 8 [ 235.115980][ T9195] Mount JFS Failure: -22 [ 235.164424][ T9195] jfs_mount failed w/return code = -22 [ 235.406449][ T4252] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 235.613178][ T4252] usb 7-1: Using ep0 maxpacket: 8 [ 235.629704][ T4252] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 235.668518][ T9213] loop5: detected capacity change from 0 to 2048 [ 235.683142][ T4252] usb 7-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 235.704241][ T4252] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 235.723312][ T4252] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.750090][ T9218] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.752194][ T9217] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 235.773987][ T4252] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.802276][ T9213] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 235.821528][ T4252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.855354][ T4252] usb 7-1: Product: syz [ 235.859608][ T4252] usb 7-1: Manufacturer: syz [ 235.874503][ T9213] Remounting filesystem read-only [ 235.892173][ T4252] usb 7-1: SerialNumber: syz [ 235.923915][ T4252] usb 7-1: config 0 descriptor?? [ 235.942059][ T4252] cdc_ncm 7-1:0.0: skipping garbage [ 235.948095][ T9222] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1847'. [ 235.961972][ T4252] cdc_ncm 7-1:0.0: CDC Union missing and no IAD found [ 235.991628][ T4252] cdc_ncm 7-1:0.0: bind() failure [ 236.175998][ T7102] usb 7-1: USB disconnect, device number 5 [ 236.399889][ T9236] loop3: detected capacity change from 0 to 64 [ 236.933053][ T9253] netlink: 'syz.6.1863': attribute type 1 has an invalid length. [ 237.305664][ T26] audit: type=1326 audit(1750125947.416:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.5.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 237.379176][ T26] audit: type=1326 audit(1750125947.446:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.5.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 237.399795][ T9240] loop4: detected capacity change from 0 to 32768 [ 237.505437][ T26] audit: type=1326 audit(1750125947.446:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.5.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 237.567124][ T26] audit: type=1326 audit(1750125947.446:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.5.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 238.531309][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1885'. [ 238.614132][ T9298] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.633318][ T9298] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.642207][ T9298] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.710331][ T9298] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.755207][ T9306] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.018916][ T9320] trusted_key: encrypted_key: insufficient parameters specified [ 239.049696][ T9318] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.138229][ T9324] tmpfs: Bad value for 'mpol' [ 239.281699][ T9328] loop4: detected capacity change from 0 to 64 [ 239.435653][ T9326] loop7: detected capacity change from 0 to 4096 [ 239.478625][ T9326] ntfs3: loop7: ino=3, Correct links count -> 2. [ 239.817326][ T9340] loop3: detected capacity change from 0 to 128 [ 239.894285][ T9340] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 239.952098][ T9340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.031065][ T9346] loop6: detected capacity change from 0 to 1024 [ 240.051633][ T9340] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 240.148283][ T9340] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 240.760123][ T9366] loop4: detected capacity change from 0 to 256 [ 241.215675][ T9379] loop4: detected capacity change from 0 to 2048 [ 241.258206][ T9383] loop3: detected capacity change from 0 to 64 [ 241.279587][ T9379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.304090][ T9355] loop6: detected capacity change from 0 to 32768 [ 241.398743][ T9355] JBD2: Ignoring recovery information on journal [ 241.627256][ T9355] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 241.909503][ T9398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.915064][ T5846] ocfs2: Unmounting device (7,6) on (node local) [ 242.145396][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'. [ 242.183130][ T9403] netlink: 74 bytes leftover after parsing attributes in process `syz.5.1935'. [ 242.656412][ T9423] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 242.776397][ T26] audit: type=1326 audit(1750125952.886:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.1945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x0 [ 243.126662][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1952'. [ 243.240171][ T9447] loop7: detected capacity change from 0 to 256 [ 243.325992][ T9447] FAT-fs (loop7): Directory bread(block 64) failed [ 243.332651][ T9447] FAT-fs (loop7): Directory bread(block 65) failed [ 243.390188][ T9451] loop5: detected capacity change from 0 to 512 [ 243.393200][ T9447] FAT-fs (loop7): Directory bread(block 66) failed [ 243.426779][ T9447] FAT-fs (loop7): Directory bread(block 67) failed [ 243.448040][ T9447] FAT-fs (loop7): Directory bread(block 68) failed [ 243.485779][ T9455] trusted_key: encrypted_key: keyword 'ryptfs' not recognized [ 243.493555][ T9447] FAT-fs (loop7): Directory bread(block 69) failed [ 243.500360][ T9447] FAT-fs (loop7): Directory bread(block 70) failed [ 243.535408][ T9451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 243.560721][ T9447] FAT-fs (loop7): Directory bread(block 71) failed [ 243.570937][ T9447] FAT-fs (loop7): Directory bread(block 72) failed [ 243.574306][ T9451] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.583126][ T9447] FAT-fs (loop7): Directory bread(block 73) failed [ 243.840234][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 244.022814][ T9474] loop3: detected capacity change from 0 to 64 [ 244.066781][ T9479] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1969'. [ 244.096246][ T9480] loop7: detected capacity change from 0 to 64 [ 244.717036][ T9502] loop5: detected capacity change from 0 to 64 [ 245.082043][ T9507] loop7: detected capacity change from 0 to 4096 [ 245.719164][ T9500] loop3: detected capacity change from 0 to 32768 [ 245.789339][ T9500] XFS: attr2 mount option is deprecated. [ 245.929723][ T9500] XFS (loop3): Mounting V5 Filesystem [ 246.007198][ T26] audit: type=1326 audit(1750125956.116:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 246.093766][ T9553] loop7: detected capacity change from 0 to 256 [ 246.110303][ T26] audit: type=1326 audit(1750125956.176:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 246.142270][ T26] audit: type=1326 audit(1750125956.176:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 246.144965][ T9500] XFS (loop3): Ending clean mount [ 246.165853][ T26] audit: type=1326 audit(1750125956.176:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 246.284811][ T9500] XFS (loop3): Quotacheck needed: Please wait. [ 246.402500][ T9500] XFS (loop3): Quotacheck: Done. [ 246.423416][ T951] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.503178][ T4252] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 246.533810][ T4260] XFS (loop3): Unmounting Filesystem [ 246.623695][ T951] usb 6-1: Using ep0 maxpacket: 8 [ 246.641502][ T951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 246.676405][ T951] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 246.701895][ T4252] usb 8-1: config 0 has an invalid interface number: 206 but max is 1 [ 246.710757][ T951] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 246.719302][ T4252] usb 8-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 246.731972][ T951] usb 6-1: Product: syz [ 246.739505][ T4252] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.749027][ T951] usb 6-1: Manufacturer: syz [ 246.753996][ T951] usb 6-1: SerialNumber: syz [ 246.758973][ T4252] usb 8-1: config 0 has no interface number 0 [ 246.767883][ T4252] usb 8-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 246.780643][ T4252] usb 8-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 246.796066][ T4252] usb 8-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 27768, setting to 64 [ 246.807679][ T4252] usb 8-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 246.821238][ T4252] usb 8-1: config 0 interface 206 has no altsetting 0 [ 246.845126][ T4252] usb 8-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 246.883104][ T4252] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.891231][ T4252] usb 8-1: Product: syz [ 246.901365][ T4252] usb 8-1: Manufacturer: syz [ 246.913549][ T4252] usb 8-1: SerialNumber: syz [ 246.956611][ T4252] usb 8-1: config 0 descriptor?? [ 246.963794][ T9553] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 246.971080][ T9553] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 247.004591][ T951] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 247.012913][ T951] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 247.053271][ T951] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 247.061221][ T951] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 247.212164][ T951] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 247.241958][ T951] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 247.269862][ T951] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 247.294317][ T4252] usb 8-1: USB disconnect, device number 5 [ 247.312841][ T951] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 247.374465][ T9581] libceph: resolve '0.0' (ret=-3): failed [ 247.389945][ T951] usb 6-1: USB disconnect, device number 10 [ 247.453745][ T951] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 247.506287][ T951] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 247.567527][ T951] visor 6-1:1.0: device disconnected [ 247.642663][ T9593] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 247.649041][ T9595] loop4: detected capacity change from 0 to 256 [ 247.674090][ T9593] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 247.682626][ T9593] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 247.734043][ T9595] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 247.759607][ T9595] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 247.775782][ T9585] udevd[9585]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.813146][ T9595] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 248.222269][ T9609] loop6: detected capacity change from 0 to 2048 [ 248.284680][ T9614] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.309327][ T9612] loop4: detected capacity change from 0 to 2048 [ 248.365859][ T9609] NILFS (loop6): error -2 truncating bmap (ino=16) [ 248.385033][ T9612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.522304][ T9614] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 248.574143][ T9614] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 248.630104][ T9614] Remounting filesystem read-only [ 248.670408][ T5846] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 248.829832][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2030'. [ 248.852955][ T9624] loop7: detected capacity change from 0 to 512 [ 248.945736][ T9624] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 249.008066][ T9624] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 249.054733][ T9624] EXT4-fs (loop7): 1 truncate cleaned up [ 249.099509][ T9624] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 249.173733][ T9624] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 249.310293][ T5889] EXT4-fs (loop7): unmounting filesystem. [ 249.363902][ T9608] loop5: detected capacity change from 0 to 32768 [ 249.478302][ T9608] XFS (loop5): Mounting V5 Filesystem [ 249.635348][ T9608] XFS (loop5): Ending clean mount [ 249.648966][ T9652] xt_TCPMSS: Only works on TCP SYN packets [ 249.691588][ T9608] XFS (loop5): Quotacheck needed: Please wait. [ 249.851949][ T9608] XFS (loop5): Quotacheck: Done. [ 249.983947][ T9662] netlink: 'syz.7.2047': attribute type 3 has an invalid length. [ 250.002281][ T4451] XFS (loop5): Unmounting Filesystem [ 250.008810][ T9626] loop3: detected capacity change from 0 to 40427 [ 250.059928][ T9626] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 250.092045][ T9626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 250.096837][ T9665] loop4: detected capacity change from 0 to 256 [ 250.115292][ T9626] F2FS-fs (loop3): invalid crc value [ 250.192465][ T9626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.231268][ T9665] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 250.395043][ T9626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 250.402252][ T9626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 250.432656][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2052'. [ 250.530520][ T9626] syz.3.2034: attempt to access beyond end of device [ 250.530520][ T9626] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.965047][ T9729] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2077'. [ 252.048799][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2079'. [ 252.337369][ T26] audit: type=1326 audit(1750125962.446:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 252.406074][ T26] audit: type=1326 audit(1750125962.466:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 252.460961][ T9706] loop6: detected capacity change from 0 to 32768 [ 252.507122][ T9752] loop7: detected capacity change from 0 to 164 [ 252.515018][ T26] audit: type=1326 audit(1750125962.466:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 252.538653][ T26] audit: type=1326 audit(1750125962.466:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.7.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 252.617640][ T9706] XFS (loop6): Mounting V5 Filesystem [ 252.629365][ T9752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 252.684008][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2088'. [ 252.703235][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2088'. [ 252.788423][ T9752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 252.823587][ T9752] Symlink component flag not implemented [ 252.833186][ T9752] Symlink component flag not implemented [ 252.839370][ T9706] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 252.850263][ T9752] Symlink component flag not implemented (7) [ 252.850277][ T9752] Symlink component flag not implemented (116) [ 252.955488][ T9706] XFS (loop6): Starting recovery (logdev: internal) [ 253.050057][ T9706] XFS (loop6): Ending recovery (logdev: internal) [ 253.265119][ T26] audit: type=1326 audit(1750125963.376:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.5.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 253.338388][ T26] audit: type=1326 audit(1750125963.396:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.5.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 253.362171][ T5846] XFS (loop6): Unmounting Filesystem [ 253.445995][ T26] audit: type=1326 audit(1750125963.396:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.5.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 253.558195][ T26] audit: type=1326 audit(1750125963.396:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.5.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006518e929 code=0x7ffc0000 [ 253.853082][ T7102] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.885520][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2107'. [ 254.073613][ T7102] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.125303][ T7102] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.150073][ T7102] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.169756][ T7102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.210679][ T9790] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.245611][ T9812] loop6: detected capacity change from 0 to 256 [ 254.539090][ T7102] usb 5-1: USB disconnect, device number 12 [ 254.576111][ T9820] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 254.653500][ T9819] loop7: detected capacity change from 0 to 4096 [ 254.883559][ T5464] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 255.033193][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 255.085816][ T5464] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.105089][ T5464] usb 7-1: config 0 has no interface number 0 [ 255.139878][ T5464] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 255.169765][ T5464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.188619][ T5464] usb 7-1: Product: syz [ 255.201942][ T5464] usb 7-1: Manufacturer: syz [ 255.210469][ T5464] usb 7-1: SerialNumber: syz [ 255.232381][ T9842] xt_l2tp: v2 sid > 0xffff: 262144 [ 255.236153][ T5464] usb 7-1: config 0 descriptor?? [ 255.239428][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 255.272308][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 255.296401][ T9845] loop4: detected capacity change from 0 to 512 [ 255.309588][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.311366][ T9845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.364531][ T14] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.412716][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.416167][ T9845] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 255.433233][ T9845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 255.443393][ T9845] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 255.461170][ T5464] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 255.479554][ T5464] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 255.489595][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.490575][ T5464] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 255.503098][ T9845] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 255.507484][ T5464] usb 7-1: media controller created [ 255.536594][ T5464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.550729][ T14] usb 4-1: Product: syz [ 255.580252][ T9845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.582803][ T14] usb 4-1: Manufacturer: syz [ 255.628964][ T14] usb 4-1: SerialNumber: syz [ 255.636515][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642861][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.675418][ T9845] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2130: dx entry: limit 65535 != root limit 120 [ 255.691738][ T5464] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 255.723251][ T9845] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2130: Corrupt directory, running e2fsck is recommended [ 255.770725][ T5464] usb 7-1: USB disconnect, device number 6 [ 255.828562][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 255.890799][ T14] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.962787][ T26] audit: type=1326 audit(1750125966.066:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.7.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 256.016945][ T14] usb 4-1: USB disconnect, device number 7 [ 256.033972][ T26] audit: type=1326 audit(1750125966.076:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.7.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f1235b8e929 code=0x7ffc0000 [ 256.283828][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.387494][ T9872] __vm_enough_memory: pid: 9872, comm: syz.7.2141, no enough memory for the allocation [ 256.778412][ T9887] loop6: detected capacity change from 0 to 256 [ 256.905802][ T9887] FAT-fs (loop6): Directory bread(block 64) failed [ 256.912423][ T9887] FAT-fs (loop6): Directory bread(block 65) failed [ 256.968744][ T9887] FAT-fs (loop6): Directory bread(block 66) failed [ 256.993181][ T9887] FAT-fs (loop6): Directory bread(block 67) failed [ 256.999851][ T9887] FAT-fs (loop6): Directory bread(block 68) failed [ 257.070390][ T9887] FAT-fs (loop6): Directory bread(block 69) failed [ 257.114306][ T9887] FAT-fs (loop6): Directory bread(block 70) failed [ 257.132546][ T9887] FAT-fs (loop6): Directory bread(block 71) failed [ 257.153183][ T9887] FAT-fs (loop6): Directory bread(block 72) failed [ 257.159784][ T9887] FAT-fs (loop6): Directory bread(block 73) failed [ 257.168991][ T9899] loop4: detected capacity change from 0 to 164 [ 257.213500][ T9899] rock: directory entry would overflow storage [ 257.243902][ T9899] rock: sig=0x66, size=4, remaining=3 [ 257.277024][ T9887] FAT-fs (loop6): Filesystem has been set read-only [ 257.285921][ T9899] rock: directory entry would overflow storage [ 257.302432][ T9899] rock: sig=0x66, size=4, remaining=3 [ 257.322178][ T9887] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006c61) [ 257.400621][ T14] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 257.563311][ T7102] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 257.608203][ T14] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 257.625538][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2165'. [ 257.634242][ T14] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 257.635196][ T9913] trusted_key: encrypted_key: keylen parameter is missing [ 257.642542][ T14] usb 6-1: Product: syz [ 257.658810][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 257.669544][ T14] usb 6-1: Manufacturer: syz [ 257.685055][ T14] usb 6-1: SerialNumber: syz [ 257.708210][ T14] usb 6-1: config 0 descriptor?? [ 257.713318][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 257.763373][ T7102] usb 8-1: Using ep0 maxpacket: 16 [ 257.817077][ T7102] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 257.872036][ T7102] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.892844][ T7102] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.934752][ T14] hso 6-1:0.0: Failed to find BULK IN ep [ 257.944586][ T7102] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.961000][ T14] usb-storage 6-1:0.0: USB Mass Storage device detected [ 258.003108][ T7102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.011231][ T7102] usb 8-1: Product: syz [ 258.017886][ T7102] usb 8-1: Manufacturer: syz [ 258.022540][ T7102] usb 8-1: SerialNumber: syz [ 258.150535][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2172'. [ 258.157838][ T4252] usb 6-1: USB disconnect, device number 11 [ 258.278070][ T7102] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 258.377089][ T7102] usb 8-1: USB disconnect, device number 6 [ 258.388639][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.290455][ T9974] loop4: detected capacity change from 0 to 128 [ 259.337449][ T9974] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 259.455346][ T9978] loop7: detected capacity change from 0 to 164 [ 259.500758][ T9978] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 259.528599][ T4253] sysv_free_block: flc_count > flc_size [ 259.546476][ T4253] sysv_free_block: flc_count > flc_size [ 259.568002][ T4253] sysv_free_block: flc_count > flc_size [ 259.588418][ T4253] sysv_free_block: flc_count > flc_size [ 259.606724][ T4253] sysv_free_block: flc_count > flc_size [ 259.624864][ T4253] sysv_free_block: flc_count > flc_size [ 259.642821][ T4253] sysv_free_block: flc_count > flc_size [ 259.667166][ T4253] sysv_free_block: flc_count > flc_size [ 259.685152][ T4253] sysv_free_block: flc_count > flc_size [ 259.703361][ T4253] sysv_free_block: flc_count > flc_size [ 259.728760][ T4253] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 259.737185][ T9982] xt_nat: multiple ranges no longer supported [ 259.748639][ T9954] loop5: detected capacity change from 0 to 40427 [ 259.772209][ T9954] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 259.790472][ T9954] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 259.858128][ T9954] F2FS-fs (loop5): invalid crc value [ 259.900734][ T9954] F2FS-fs (loop5): Found nat_bits in checkpoint [ 260.009412][ T9992] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 260.110043][ T9954] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 260.155002][ T9954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 260.235863][ T9954] syz.5.2182: attempt to access beyond end of device [ 260.235863][ T9954] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.647481][T10011] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.2210'. [ 261.329105][T10035] loop3: detected capacity change from 0 to 64 [ 261.364147][T10035] hfs: unable to locate alternate MDB [ 261.370228][T10035] hfs: continuing without an alternate MDB [ 261.498649][T10042] netlink: 'syz.7.2224': attribute type 32 has an invalid length. [ 261.634442][T10045] loop4: detected capacity change from 0 to 256 [ 261.713911][T10050] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 261.742763][T10045] FAT-fs (loop4): Directory bread(block 64) failed [ 261.764379][T10045] FAT-fs (loop4): Directory bread(block 65) failed [ 261.785261][T10045] FAT-fs (loop4): Directory bread(block 66) failed [ 261.829732][T10045] FAT-fs (loop4): Directory bread(block 67) failed [ 261.845592][T10045] FAT-fs (loop4): Directory bread(block 68) failed [ 261.861483][T10045] FAT-fs (loop4): Directory bread(block 69) failed [ 261.905785][T10045] FAT-fs (loop4): Directory bread(block 70) failed [ 261.950451][T10045] FAT-fs (loop4): Directory bread(block 71) failed [ 261.979935][T10045] FAT-fs (loop4): Directory bread(block 72) failed [ 261.989176][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 261.989191][ T26] audit: type=1326 audit(1750125972.106:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.6.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf18e929 code=0x7ffc0000 [ 262.002378][T10045] FAT-fs (loop4): Directory bread(block 73) failed [ 262.091209][ T26] audit: type=1326 audit(1750125972.156:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.6.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0adf18e929 code=0x7ffc0000 [ 262.198727][ T26] audit: type=1326 audit(1750125972.156:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.6.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf18e929 code=0x7ffc0000 [ 262.269677][T10066] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 262.321174][ T26] audit: type=1326 audit(1750125972.156:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.6.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf18e929 code=0x7ffc0000 [ 262.381031][T10068] netlink: 'syz.7.2235': attribute type 1 has an invalid length. [ 262.553190][T10074] netlink: 'syz.6.2238': attribute type 1 has an invalid length. [ 263.933130][ T4333] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 263.995382][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2267'. [ 264.124979][ T4333] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.147768][ T4333] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.161042][T10140] [U] [ 264.164416][T10140] [U] [ 264.167148][T10140] [U] [ 264.169877][T10140] [U] [ 264.186425][ T4333] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.193502][T10140] [U] [ 264.202088][T10140] [U] [ 264.204817][T10140] [U] [ 264.207543][T10140] [U] [ 264.232543][ T4333] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.239781][T10140] [U] [ 264.244369][T10140] [U] [ 264.247103][T10140] [U] [ 264.256646][T10139] [U] [ 264.279618][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.303133][ T4333] usb 6-1: Product: syz [ 264.307727][ T4333] usb 6-1: Manufacturer: syz [ 264.332155][ T4333] usb 6-1: SerialNumber: syz [ 264.357513][T10116] loop4: detected capacity change from 0 to 40427 [ 264.368240][ T4333] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 264.393046][ T4333] cdc_ncm 6-1:1.0: bind() failure [ 264.400473][T10116] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 264.438179][T10116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.486114][T10116] F2FS-fs (loop4): invalid crc value [ 264.527891][T10116] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.562159][T10149] loop7: detected capacity change from 0 to 512 [ 264.598169][ T7102] usb 6-1: USB disconnect, device number 12 [ 264.643680][T10149] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 264.662498][T10116] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.703108][T10116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 264.749211][T10149] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 264.827475][T10134] loop3: detected capacity change from 0 to 32768 [ 264.851486][T10116] syz.4.2258: attempt to access beyond end of device [ 264.851486][T10116] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.004280][T10160] bond0: option all_slaves_active: invalid value (5) [ 265.023889][T10134] XFS (loop3): Mounting V5 Filesystem [ 265.109182][T10134] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 265.196319][T10134] XFS (loop3): Starting recovery (logdev: internal) [ 265.254839][T10134] XFS (loop3): Ending recovery (logdev: internal) [ 265.469738][ T4260] XFS (loop3): Unmounting Filesystem [ 265.764612][T10181] netlink: 'syz.6.2286': attribute type 2 has an invalid length. [ 265.784806][T10181] netlink: 'syz.6.2286': attribute type 1 has an invalid length. [ 266.243140][T10195] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.295216][T10200] loop3: detected capacity change from 0 to 64 [ 267.159960][T10228] loop7: detected capacity change from 0 to 256 [ 267.325117][T10228] FAT-fs (loop7): Directory bread(block 64) failed [ 267.331731][T10228] FAT-fs (loop7): Directory bread(block 65) failed [ 267.370376][T10232] loop3: detected capacity change from 0 to 164 [ 267.388073][T10228] FAT-fs (loop7): Directory bread(block 66) failed [ 267.416926][T10228] FAT-fs (loop7): Directory bread(block 67) failed [ 267.434118][T10228] FAT-fs (loop7): Directory bread(block 68) failed [ 267.440694][T10228] FAT-fs (loop7): Directory bread(block 69) failed [ 267.468597][T10201] loop6: detected capacity change from 0 to 32768 [ 267.478045][T10228] FAT-fs (loop7): Directory bread(block 70) failed [ 267.498086][T10232] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 267.518720][T10228] FAT-fs (loop7): Directory bread(block 71) failed [ 267.561099][T10201] ERROR: (device loop6): diNewExt: no free extents [ 267.561099][T10201] [ 267.571256][T10228] FAT-fs (loop7): Directory bread(block 72) failed [ 267.613322][T10228] FAT-fs (loop7): Directory bread(block 73) failed [ 267.626515][T10201] ialloc: diAlloc returned -5! [ 267.873671][ T4333] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 267.901447][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 267.925465][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 268.063326][ T4333] usb 5-1: Using ep0 maxpacket: 16 [ 268.076347][ T4333] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 268.143157][ T4333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.151218][ T4333] usb 5-1: Product: syz [ 268.210187][ T4333] usb 5-1: Manufacturer: syz [ 268.239471][ T4333] usb 5-1: SerialNumber: syz [ 268.271199][ T4333] r8152-cfgselector 5-1: config 0 descriptor?? [ 268.332464][T10254] loop6: detected capacity change from 0 to 4096 [ 268.371524][T10254] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 268.490893][T10254] ntfs3: loop6: failed to convert "c46c" to cp857 [ 268.619088][T10265] loop5: detected capacity change from 0 to 2048 [ 268.652349][T10265] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 268.720006][ T4333] r8152-cfgselector 5-1: Unknown version 0x0000 [ 268.749376][T10270] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.757034][ T4333] r8152-cfgselector 5-1: bad CDC descriptors [ 268.831064][ T4333] r8152-cfgselector 5-1: Unknown version 0x0000 [ 268.870743][ T4333] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 269.008249][T10276] loop6: detected capacity change from 0 to 8 [ 269.086736][T10276] SQUASHFS error: Failed to read block 0x738: -5 [ 269.095693][T10276] SQUASHFS error: Unable to read metadata cache entry [736] [ 269.544286][T10292] loop4: detected capacity change from 0 to 512 [ 269.593137][T10292] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.675253][T10292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 269.675494][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2341'. [ 269.675514][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2341'. [ 269.748209][T10292] Quota error (device loop4): write_blk: dquota write failed [ 269.755840][T10292] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 269.766261][T10292] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.2339: Failed to acquire dquot type 0 [ 269.794316][T10292] EXT4-fs (loop4): 1 truncate cleaned up [ 269.801564][T10292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.937819][T10307] device batadv1 entered promiscuous mode [ 269.954668][T10307] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 270.042587][T10305] loop3: detected capacity change from 0 to 4096 [ 270.173428][ T7102] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 270.365005][ T7102] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.378010][ T7102] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024 [ 270.409837][ T7102] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 270.430534][ T7102] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.457136][ T7102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.496003][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.509006][ T4333] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 270.524029][ T7102] usb 5-1: invalid MIDI out EP 0 [ 270.637965][T10323] loop5: detected capacity change from 0 to 4096 [ 270.645967][ T7102] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 270.703096][ T4333] usb 7-1: Using ep0 maxpacket: 16 [ 270.712528][ T4333] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 270.730259][ T7102] usb 5-1: USB disconnect, device number 14 [ 270.769688][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.801724][ T4333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.816764][ T4333] usb 7-1: Product: syz [ 270.820999][ T4333] usb 7-1: Manufacturer: syz [ 270.829348][ T4333] usb 7-1: SerialNumber: syz [ 270.852426][ T4333] r8152-cfgselector 7-1: config 0 descriptor?? [ 270.882202][T10332] loop7: detected capacity change from 0 to 1764 [ 271.029677][ T4451] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 271.061317][ T4451] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 271.303538][ T4333] r8152-cfgselector 7-1: Unknown version 0x0000 [ 271.313708][ T4333] r8152-cfgselector 7-1: bad CDC descriptors [ 271.347406][ T4333] r8152-cfgselector 7-1: Unknown version 0x0000 [ 271.358987][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 271.364631][ T4333] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 271.861427][T10359] loop5: detected capacity change from 0 to 1024 [ 271.910966][T10359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.050592][T10359] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 272.119500][T10359] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 272.162383][T10359] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2366: Failed to acquire dquot type 0 [ 272.261029][T10359] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 272.338993][T10359] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.2366: corrupted inode contents [ 272.388345][T10359] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #13: comm syz.5.2366: mark_inode_dirty error [ 272.413822][T10359] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.2366: corrupted inode contents [ 272.449547][T10359] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.2366: mark_inode_dirty error [ 272.472094][T10359] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.2366: corrupted inode contents [ 272.540628][T10359] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 272.578378][T10359] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #13: comm syz.5.2366: corrupted inode contents [ 272.618040][T10359] EXT4-fs error (device loop5): ext4_truncate:4312: inode #13: comm syz.5.2366: mark_inode_dirty error [ 272.656398][T10359] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 272.674359][T10359] EXT4-fs (loop5): 1 truncate cleaned up [ 272.690364][T10359] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 272.792046][T10359] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 272.843222][T10359] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 272.852694][T10359] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2366: Failed to acquire dquot type 0 [ 272.870899][T10402] syz.6.2385 uses old SIOCAX25GETINFO [ 273.091956][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 273.093205][T10408] loop7: detected capacity change from 0 to 256 [ 273.147978][T10408] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 273.515477][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2396'. [ 273.553418][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2396'. [ 273.593153][ T27] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 273.803347][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 273.810393][ T27] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 273.830673][ T27] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 273.853206][ T27] usb 6-1: config 0 has no interface number 1 [ 273.886047][ T27] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 273.916195][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.933094][ T27] usb 6-1: Product: syz [ 273.937984][ T27] usb 6-1: Manufacturer: syz [ 273.942615][ T27] usb 6-1: SerialNumber: syz [ 273.965003][ T27] usb 6-1: config 0 descriptor?? [ 273.989395][T10407] loop3: detected capacity change from 0 to 32768 [ 274.007345][ T27] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 274.030077][T10407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2388 (10407) [ 274.090298][ T27] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 274.137888][T10407] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.167867][T10407] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 274.181517][T10407] BTRFS info (device loop3): using free space tree [ 274.206664][ T951] usb 6-1: USB disconnect, device number 13 [ 274.222666][ T3623] udevd[3623]: worker [4954] terminated by signal 33 (Unknown signal 33) [ 274.252096][ T3623] udevd[3623]: worker [4954] failed while handling '/devices/virtual/block/loop3' [ 274.473868][T10407] BTRFS info (device loop3): enabling ssd optimizations [ 274.555035][T10435] loop6: detected capacity change from 0 to 32768 [ 274.634062][ T4260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.315387][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2419'. [ 275.551663][T10492] loop4: detected capacity change from 0 to 1024 [ 275.617417][T10492] hfsplus: xattr searching failed [ 275.763523][T10497] loop5: detected capacity change from 0 to 1764 [ 275.846649][T10497] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 276.119771][ T26] audit: type=1326 audit(1750125986.226:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 276.165005][T10507] loop6: detected capacity change from 0 to 4096 [ 276.176478][ T26] audit: type=1326 audit(1750125986.226:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 276.198958][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.294106][T10507] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 276.321737][T10507] ntfs3: loop6: Failed to load $Extend. [ 276.350492][ T26] audit: type=1326 audit(1750125986.226:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 276.449967][ T26] audit: type=1326 audit(1750125986.226:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10512 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b418e929 code=0x7ffc0000 [ 277.832726][T10578] loop4: detected capacity change from 0 to 64 [ 278.310423][T10595] loop4: detected capacity change from 0 to 256 [ 278.337628][T10596] loop7: detected capacity change from 0 to 512 [ 278.350437][T10595] exfat: Deprecated parameter 'utf8' [ 278.363128][ T27] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 278.366708][T10595] exfat: Deprecated parameter 'utf8' [ 278.397042][T10595] exfat: Deprecated parameter 'utf8' [ 278.442138][T10595] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 278.463424][T10596] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 278.472454][T10596] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.483052][ T7102] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 278.540458][T10595] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 278.550299][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 278.572009][ T27] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 278.601093][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.619368][T10595] exFAT-fs (loop4): Filesystem has been set read-only [ 278.635528][ T27] usb 6-1: config 0 has no interface number 0 [ 278.650501][ T27] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 278.685825][ T27] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 278.703066][ T27] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.707923][ T7102] usb 4-1: Using ep0 maxpacket: 8 [ 278.733115][ T27] usb 6-1: config 0 interface 52 has no altsetting 0 [ 278.740018][ T7102] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 278.758514][ T7102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.761831][ T27] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 278.790384][ T7102] usb 4-1: Product: syz [ 278.793341][ T27] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 278.803390][ T5889] EXT4-fs (loop7): unmounting filesystem. [ 278.825047][ T7102] usb 4-1: Manufacturer: syz [ 278.833515][ T7102] usb 4-1: SerialNumber: syz [ 278.833553][ T27] usb 6-1: Product: syz [ 278.865160][ T7102] usb 4-1: config 0 descriptor?? [ 278.889849][ T7102] gspca_main: sq930x-2.14.0 probing 2770:930c [ 278.890588][ T27] usb 6-1: SerialNumber: syz [ 278.897365][T10609] netlink: 'syz.4.2476': attribute type 21 has an invalid length. [ 278.909564][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2476'. [ 278.943092][ T27] usb 6-1: config 0 descriptor?? [ 278.963811][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2475'. [ 278.972861][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2475'. [ 279.022247][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2475'. [ 279.166473][ T27] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input10 [ 279.201702][ T3608] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 279.231068][ T3608] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 279.280501][ T3608] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 279.288385][ T7102] gspca_sq930x: ucbus_write failed -71 [ 279.312743][ T3608] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 279.440513][ T5839] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 279.466560][ T4252] usb 6-1: USB disconnect, device number 14 [ 279.573289][ T7102] gspca_sq930x: Sensor ov9630 not yet treated [ 279.583096][T10629] syz.6.2485 uses obsolete (PF_INET,SOCK_PACKET) [ 279.593799][ T7102] sq930x: probe of 4-1:0.0 failed with error -22 [ 279.625070][ T7102] usb 4-1: USB disconnect, device number 8 [ 279.975667][ T26] audit: type=1400 audit(1750125990.086:1745): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=10640 comm="syz.3.2492" [ 280.006737][T10644] netlink: 'syz.7.2494': attribute type 2 has an invalid length. [ 280.066090][T10645] loop6: detected capacity change from 0 to 2048 [ 280.123279][ T5468] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.171752][T10650] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.282584][T10645] NILFS (loop6): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 280.313728][ T5468] usb 5-1: Using ep0 maxpacket: 8 [ 280.319462][T10645] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=13) [ 280.320700][ T5468] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 280.366199][T10645] Remounting filesystem read-only [ 280.380396][T10645] NILFS (loop6): error -5 truncating bmap (ino=13) [ 280.420842][ T5468] usb 5-1: config 2 has no interface number 0 [ 280.437933][ T5468] usb 5-1: config 2 interface 31 has no altsetting 0 [ 280.488491][ T5468] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 280.520100][ T5468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.534854][ T5846] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 280.545875][ T5468] usb 5-1: Product: syz [ 280.551593][ T5468] usb 5-1: Manufacturer: syz [ 280.556479][ T5468] usb 5-1: SerialNumber: syz [ 280.844850][T10664] loop5: detected capacity change from 0 to 4096 [ 280.848567][ T4333] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 280.984155][ T5468] ch9200: probe of 5-1:2.31 failed with error -22 [ 281.019402][ T5468] usb 5-1: USB disconnect, device number 15 [ 281.044905][ T4333] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 281.063182][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.109425][ T4333] usb 4-1: config 0 descriptor?? [ 281.137398][ T4333] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 281.363353][ T5468] usb 4-1: USB disconnect, device number 9 [ 281.617004][T10695] loop6: detected capacity change from 0 to 256 [ 281.852592][T10698] loop4: detected capacity change from 0 to 4096 [ 281.932215][T10706] netlink: 744 bytes leftover after parsing attributes in process `syz.5.2523'. [ 282.159112][T10712] netlink: 'syz.7.2525': attribute type 10 has an invalid length. [ 282.211702][ T4253] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 282.240852][ T4253] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 282.255287][T10712] team0: Device ipvlan1 failed to register rx_handler [ 282.307096][T10714] loop3: detected capacity change from 0 to 4096 [ 282.418610][T10721] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.484608][T10714] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 282.661246][T10724] loop4: detected capacity change from 0 to 512 [ 282.783157][T10724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.792196][T10724] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.802869][T10733] IPVS: length: 87 != 24 [ 282.806050][T10735] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2534'. [ 282.910645][T10724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2531: bg 0: block 18: invalid block bitmap [ 282.977264][T10724] Quota error (device loop4): write_blk: dquota write failed [ 283.011871][T10724] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 283.070707][T10724] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.2531: Failed to acquire dquot type 1 [ 283.274686][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 283.342285][T10748] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 283.506468][T10755] loop6: detected capacity change from 0 to 164 [ 283.595898][T10755] Unsupported NM flag settings (8) [ 283.650103][T10759] loop5: detected capacity change from 0 to 512 [ 283.744600][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2549'. [ 283.779363][T10763] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 283.808777][T10759] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 283.873219][T10759] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.966350][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 284.125203][T10771] loop4: detected capacity change from 0 to 4096 [ 284.172678][T10781] futex_wake_op: syz.6.2556 tries to shift op by -1; fix this program [ 284.208077][T10771] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 284.233252][T10771] ntfs3: loop4: Failed to load $Extend. [ 284.650505][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2564'. [ 284.680289][T10794] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 284.763166][ T4301] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 284.958176][ T4301] usb 7-1: Using ep0 maxpacket: 32 [ 284.966656][ T4301] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 285.008716][ T4301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.061525][ T4301] usb 7-1: config 0 descriptor?? [ 285.087926][ T4301] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 285.426582][T10824] loop5: detected capacity change from 0 to 256 [ 285.444780][T10824] exfat: Deprecated parameter 'utf8' [ 285.450170][T10824] exfat: Deprecated parameter 'utf8' [ 285.483171][T10824] exfat: Deprecated parameter 'namecase' [ 285.489402][ T4301] gspca_nw80x: reg_r err -71 [ 285.494276][ T4301] nw80x: probe of 7-1:0.0 failed with error -71 [ 285.515527][T10824] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 285.534422][ T4301] usb 7-1: USB disconnect, device number 8 [ 285.658915][T10828] loop4: detected capacity change from 0 to 2048 [ 285.730585][T10832] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.827109][T10828] NILFS (loop4): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 285.881725][T10828] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=13) [ 285.920068][T10828] Remounting filesystem read-only [ 285.930665][T10828] NILFS (loop4): error -5 truncating bmap (ino=13) [ 285.992804][T10837] loop7: detected capacity change from 0 to 4096 [ 286.072034][ T4253] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 286.296675][T10851] usb usb8: usbfs: process 10851 (syz.4.2588) did not claim interface 0 before use [ 286.588203][T10862] netlink: 'syz.5.2604': attribute type 10 has an invalid length. [ 286.711199][T10862] team0: Device ipvlan1 failed to register rx_handler [ 287.150573][T10884] loop5: detected capacity change from 0 to 1024 [ 287.214263][ T7102] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 287.225056][T10884] hfsplus: bad catalog entry type [ 287.424727][ T7102] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 287.442011][T10895] netlink: 'syz.7.2611': attribute type 5 has an invalid length. [ 287.447793][ T7102] usb 4-1: config 0 has no interface number 0 [ 287.472422][ T7102] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 287.509161][ T7102] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 287.533048][ T4252] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 287.550247][ T7102] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.590749][ T7102] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 287.620495][ T7102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.644788][ T7102] usb 4-1: config 0 descriptor?? [ 287.655151][ T7102] gspca_main: spca561-2.14.0 probing abcd:cdee [ 287.783089][ T4252] usb 7-1: Using ep0 maxpacket: 8 [ 287.790301][ T4252] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 287.808886][ T4252] usb 7-1: config 2 has no interface number 0 [ 287.828545][ T4252] usb 7-1: config 2 interface 31 has no altsetting 0 [ 287.847929][ T4252] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 287.863234][ T7102] spca561: probe of 4-1:0.156 failed with error -22 [ 287.864528][ T5468] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 287.874232][ T7102] usb 4-1: MIDIStreaming interface descriptor not found [ 287.893142][ T4252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.924990][ T4252] usb 7-1: Product: syz [ 287.929256][ T4252] usb 7-1: Manufacturer: syz [ 287.951765][ T4252] usb 7-1: SerialNumber: syz [ 287.965348][ T7102] usb 4-1: USB disconnect, device number 10 [ 288.074964][ T5468] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.105719][ T5468] usb 8-1: config 0 interface 0 has no altsetting 0 [ 288.135471][ T5468] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.151163][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2618'. [ 288.160518][ T5468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.183886][ T5468] usb 8-1: Product: syz [ 288.188128][ T5468] usb 8-1: Manufacturer: syz [ 288.193162][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2618'. [ 288.202157][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2618'. [ 288.228317][ T5468] usb 8-1: SerialNumber: syz [ 288.245289][ T5468] usb 8-1: config 0 descriptor?? [ 288.260424][ T5468] usb 8-1: selecting invalid altsetting 0 [ 288.267748][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2618'. [ 288.272807][T10900] loop5: detected capacity change from 0 to 32768 [ 288.284501][T10911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2618'. [ 288.312218][T10900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2613 (10900) [ 288.381005][T10900] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.407825][T10900] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 288.430418][ T4252] ch9200: probe of 7-1:2.31 failed with error -22 [ 288.435117][T10900] BTRFS info (device loop5): using free space tree [ 288.455323][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.460147][ T4252] usb 7-1: USB disconnect, device number 9 [ 288.489807][ T5468] usb 8-1: USB disconnect, device number 7 [ 288.689078][T10900] BTRFS info (device loop5): enabling ssd optimizations [ 288.805687][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.919465][ T4451] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.069584][T10941] loop4: detected capacity change from 0 to 64 [ 289.200122][ T26] audit: type=1800 audit(1750125999.316:1746): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2624" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 289.251268][T10945] netlink: 'syz.3.2626': attribute type 27 has an invalid length. [ 289.765673][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2633'. [ 290.566968][T10996] loop5: detected capacity change from 0 to 128 [ 290.616304][T10998] netlink: 'syz.6.2651': attribute type 8 has an invalid length. [ 290.624274][ T4252] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 290.642942][T10998] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.2651'. [ 290.853126][ T4252] usb 5-1: Using ep0 maxpacket: 16 [ 290.861419][ T4252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.886694][T11006] netlink: 'syz.6.2657': attribute type 10 has an invalid length. [ 290.899086][ T4252] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.909735][T11006] device veth1_macvtap left promiscuous mode [ 290.919908][ T4252] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 290.930398][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.944581][ T4252] usb 5-1: Product: syz [ 290.950483][ T4252] usb 5-1: Manufacturer: syz [ 290.958619][ T4252] usb 5-1: SerialNumber: syz [ 290.967970][ T4252] r8152-cfgselector 5-1: config 0 descriptor?? [ 290.979033][T11006] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 290.998918][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2655'. [ 291.204108][ T4252] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 291.243316][T11016] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 291.410602][ T4296] usb 5-1: USB disconnect, device number 16 [ 291.681103][ T1043] block nbd5: Attempted send on invalid socket [ 291.687475][ T1043] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.690819][T11035] netlink: 'syz.7.2669': attribute type 32 has an invalid length. [ 291.705247][ T52] block nbd5: Attempted send on invalid socket [ 291.711447][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.721125][ T52] block nbd5: Attempted send on invalid socket [ 291.728033][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.738807][ T52] block nbd5: Attempted send on invalid socket [ 291.745074][ T52] I/O error, dev nbd5, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.763781][ T1043] block nbd5: Attempted send on invalid socket [ 291.770059][ T1043] I/O error, dev nbd5, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.780530][ T1043] block nbd5: Attempted send on invalid socket [ 291.786875][ T1043] I/O error, dev nbd5, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.796286][T11033] VFS: unable to find oldfs superblock on device nbd5 [ 292.115305][T11049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 292.289101][T11058] loop7: detected capacity change from 0 to 512 [ 292.315680][T11058] EXT4-fs: Ignoring removed oldalloc option [ 292.366612][T11058] EXT4-fs: Ignoring removed orlov option [ 292.390613][T11058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.432369][T11058] EXT4-fs (loop7): orphan cleanup on readonly fs [ 292.504395][T11066] loop3: detected capacity change from 0 to 64 [ 292.521408][T11058] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2682: bg 0: block 248: padding at end of block bitmap is not set [ 292.538963][T11058] Quota error (device loop7): write_blk: dquota write failed [ 292.563106][T11058] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 292.623087][T11058] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.2682: Failed to acquire dquot type 1 [ 292.691890][T11058] EXT4-fs (loop7): 1 truncate cleaned up [ 292.761103][T11058] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 292.833909][T11058] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 292.939067][T11058] EXT4-fs error (device loop7): __ext4_remount:6623: comm syz.7.2682: Abort forced by user [ 292.977777][T11058] EXT4-fs (loop7): Remounting filesystem read-only [ 292.993180][T11058] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 293.003251][T11058] ext4 filesystem being remounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.108688][ T5889] EXT4-fs (loop7): unmounting filesystem. [ 293.318789][T11087] loop4: detected capacity change from 0 to 4096 [ 293.348169][T11087] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 293.496446][T11099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.563267][ T4333] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 293.723315][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2705'. [ 293.766792][ T4333] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 293.791491][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.822267][ T4333] usb 6-1: Product: syz [ 293.827034][ T4333] usb 6-1: Manufacturer: syz [ 293.852088][ T4333] usb 6-1: SerialNumber: syz [ 293.860058][ T4333] usb 6-1: config 0 descriptor?? [ 293.878490][ T4333] go7007: probe of 6-1:0.0 failed with error -12 [ 293.919338][T11113] loop4: detected capacity change from 0 to 512 [ 293.955618][T11113] EXT4-fs: Ignoring removed oldalloc option [ 293.963189][T11113] EXT4-fs: Ignoring removed orlov option [ 293.988943][T11113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.065030][T11113] EXT4-fs (loop4): orphan cleanup on readonly fs [ 294.095961][ T4252] usb 6-1: USB disconnect, device number 15 [ 294.106200][T11113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2708: bg 0: block 248: padding at end of block bitmap is not set [ 294.189575][T11113] Quota error (device loop4): write_blk: dquota write failed [ 294.226996][T11126] loop7: detected capacity change from 0 to 64 [ 294.233427][T11113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 294.248114][T11113] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.2708: Failed to acquire dquot type 1 [ 294.269417][T11113] EXT4-fs (loop4): 1 truncate cleaned up [ 294.313431][T11113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.367327][T11113] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 294.486504][T11113] EXT4-fs error (device loop4): __ext4_remount:6623: comm syz.4.2708: Abort forced by user [ 294.508760][T11113] EXT4-fs (loop4): Remounting filesystem read-only [ 294.525720][T11113] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 294.538027][T11113] ext4 filesystem being remounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.573415][ T5665] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 294.625292][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 294.789110][ T5665] usb 7-1: Using ep0 maxpacket: 16 [ 294.799253][ T5665] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 294.832129][ T5665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.852308][ T5665] usb 7-1: Product: syz [ 294.870636][ T5665] usb 7-1: Manufacturer: syz [ 294.884688][ T5665] usb 7-1: SerialNumber: syz [ 294.908909][ T5665] r8152-cfgselector 7-1: config 0 descriptor?? [ 295.289932][T11137] loop7: detected capacity change from 0 to 32768 [ 295.321283][T11137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2719 (11137) [ 295.346543][ T5665] r8152-cfgselector 7-1: Unknown version 0x0000 [ 295.354216][ T5665] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 295.412151][T11137] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.482255][T11137] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 295.518553][T11137] BTRFS info (device loop7): turning on flush-on-commit [ 295.548936][T11137] BTRFS info (device loop7): enabling disk space caching [ 295.574610][T11137] BTRFS info (device loop7): turning off barriers [ 295.581114][T11137] BTRFS info (device loop7): doing ref verification [ 295.620532][T11164] loop3: detected capacity change from 0 to 8 [ 295.632426][T11137] BTRFS info (device loop7): enabling auto defrag [ 295.660086][T11164] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 295.674033][T11137] BTRFS info (device loop7): force clearing of disk cache [ 295.693100][T11137] BTRFS info (device loop7): enabling ssd optimizations [ 295.700103][T11137] BTRFS info (device loop7): using spread ssd allocation scheme [ 295.701182][T11164] cramfs: Error -3 while decompressing! [ 295.743311][T11164] cramfs: ffffffff96b50548(18)->ffff888052460000(4096) [ 295.757702][T11164] cramfs: Error -3 while decompressing! [ 295.773317][T11137] BTRFS info (device loop7): using default commit interval 30s [ 295.773677][T11164] cramfs: ffffffff96b50548(18)->ffff888052460000(4096) [ 295.799090][ T26] audit: type=1800 audit(1750126005.906:1747): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2731" name="file1" dev="loop3" ino=324 res=0 errno=0 [ 295.827300][T11137] BTRFS info (device loop7): disk space caching is enabled [ 295.878404][T11169] loop5: detected capacity change from 0 to 1024 [ 295.968822][T11169] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 296.005069][T11169] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.180834][T11169] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2733: inode #458752: comm syz.5.2733: iget: illegal inode # [ 296.225956][T11137] BTRFS info (device loop7): rebuilding free space tree [ 296.274910][T11137] BTRFS info (device loop7): disabling free space tree [ 296.284957][T11169] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2733: error while reading EA inode 458752 err=-117 [ 296.303144][T11137] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.336960][T11137] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.481891][ T4451] EXT4-fs (loop5): unmounting filesystem. [ 296.891316][ T5889] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.545559][T11234] loop5: detected capacity change from 0 to 256 [ 297.689441][T11203] loop4: detected capacity change from 0 to 32768 [ 297.889080][T11203] XFS (loop4): Mounting V5 Filesystem [ 297.971516][T11203] XFS (loop4): Ending clean mount [ 297.992816][T11203] XFS (loop4): Quotacheck needed: Please wait. [ 298.116100][T11203] XFS (loop4): Quotacheck: Done. [ 298.214204][T11266] netlink: 'syz.7.2766': attribute type 2 has an invalid length. [ 298.242392][ T4253] XFS (loop4): Unmounting Filesystem [ 298.465847][T11273] netlink: 'syz.5.2771': attribute type 8 has an invalid length. [ 298.513817][T11273] netlink: 399 bytes leftover after parsing attributes in process `syz.5.2771'. [ 298.960133][T11288] loop5: detected capacity change from 0 to 2048 [ 299.267728][T11298] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2784'. [ 299.316518][T11298] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2784'. [ 299.331879][T11278] loop6: detected capacity change from 0 to 32768 [ 299.367423][T11278] XFS: noikeep mount option is deprecated. [ 299.503967][T11278] XFS (loop6): Mounting V5 Filesystem [ 299.651871][T11278] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 299.686839][T11278] XFS (loop6): Starting recovery (logdev: internal) [ 299.730344][T11278] XFS (loop6): Ending recovery (logdev: internal) [ 299.854667][ T5846] XFS (loop6): Unmounting Filesystem [ 300.156514][T11328] netlink: 'syz.5.2796': attribute type 6 has an invalid length. [ 300.310615][T11332] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 300.310615][T11332] SȘȞZ6' [ 300.382051][T11335] tmpfs: Bad value for 'mpol' [ 300.645183][T11346] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2803'. [ 300.913190][T11357] snd_dummy snd_dummy.0: control 5:1:0:syz0:4 is already present [ 301.256895][T11363] loop3: detected capacity change from 0 to 4096 [ 301.274257][T11363] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 302.422034][T11413] ip6t_srh: unknown srh match flags 4000 [ 302.675376][T11385] loop7: detected capacity change from 0 to 32768 [ 302.729412][T11385] (syz.7.2822,11385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.813066][T11385] (syz.7.2822,11385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.832874][T11425] netlink: 'syz.5.2842': attribute type 7 has an invalid length. [ 302.935587][T11385] JBD2: Ignoring recovery information on journal [ 302.993816][T11385] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 303.026929][T11433] loop4: detected capacity change from 0 to 256 [ 303.130226][T11385] [ 303.132621][T11385] ====================================================== [ 303.139671][T11385] WARNING: possible circular locking dependency detected [ 303.146725][T11385] 6.1.141-syzkaller #0 Not tainted [ 303.151968][T11385] ------------------------------------------------------ [ 303.158999][T11385] syz.7.2822/11385 is trying to acquire lock: [ 303.165088][T11385] ffff888070f5b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 303.177675][T11385] [ 303.177675][T11385] but task is already holding lock: [ 303.185046][T11385] ffff888070ff60a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 303.194628][T11385] [ 303.194628][T11385] which lock already depends on the new lock. [ 303.194628][T11385] [ 303.205028][T11385] [ 303.205028][T11385] the existing dependency chain (in reverse order) is: [ 303.214039][T11385] [ 303.214039][T11385] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 303.221707][T11385] __mutex_lock+0x120/0xaf0 [ 303.226765][T11385] dquot_commit+0x5a/0x410 [ 303.231764][T11385] ext4_write_dquot+0x1f0/0x360 [ 303.237249][T11385] mark_all_dquot_dirty+0x1e3/0x400 [ 303.242975][T11385] __dquot_free_space+0x7ec/0xbc0 [ 303.248525][T11385] ext4_free_blocks+0x1bab/0x2640 [ 303.254082][T11385] ext4_ext_remove_space+0x1f0d/0x4490 [ 303.260071][T11385] ext4_ext_truncate+0x211/0x370 [ 303.265538][T11385] ext4_truncate+0xa0b/0x1230 [ 303.270776][T11385] ext4_evict_inode+0xb35/0x1100 [ 303.276242][T11385] evict+0x485/0x870 [ 303.280666][T11385] ext4_orphan_cleanup+0xbd3/0x1400 [ 303.286384][T11385] ext4_fill_super+0x7b78/0x8110 [ 303.291853][T11385] get_tree_bdev+0x3f1/0x610 [ 303.296969][T11385] vfs_get_tree+0x88/0x270 [ 303.301926][T11385] do_new_mount+0x24a/0xa40 [ 303.306960][T11385] __se_sys_mount+0x2d6/0x3c0 [ 303.312180][T11385] do_syscall_64+0x4c/0xa0 [ 303.317124][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.323548][T11385] [ 303.323548][T11385] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 303.331192][T11385] down_write+0x36/0x60 [ 303.335878][T11385] ext4_truncate+0x987/0x1230 [ 303.341084][T11385] ext4_setattr+0x10cb/0x19f0 [ 303.346285][T11385] notify_change+0xc74/0xf40 [ 303.351407][T11385] do_truncate+0x197/0x220 [ 303.356351][T11385] do_sys_ftruncate+0x312/0x3c0 [ 303.361747][T11385] do_syscall_64+0x4c/0xa0 [ 303.366701][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.373145][T11385] [ 303.373145][T11385] -> #4 (jbd2_handle){++++}-{0:0}: [ 303.380445][T11385] start_this_handle+0x1f49/0x2150 [ 303.386105][T11385] jbd2__journal_start+0x2b7/0x5a0 [ 303.391742][T11385] jbd2_journal_start+0x26/0x30 [ 303.397116][T11385] ocfs2_start_trans+0x372/0x6c0 [ 303.402576][T11385] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 303.408838][T11385] ocfs2_dismount_volume+0x1fc/0x930 [ 303.414645][T11385] generic_shutdown_super+0x130/0x340 [ 303.420547][T11385] kill_block_super+0x7c/0xe0 [ 303.425756][T11385] deactivate_locked_super+0x93/0xf0 [ 303.431568][T11385] cleanup_mnt+0x463/0x4f0 [ 303.436515][T11385] task_work_run+0x1ca/0x250 [ 303.441658][T11385] exit_to_user_mode_loop+0xe6/0x110 [ 303.447472][T11385] exit_to_user_mode_prepare+0xb1/0x140 [ 303.453561][T11385] syscall_exit_to_user_mode+0x16/0x40 [ 303.459539][T11385] do_syscall_64+0x58/0xa0 [ 303.464480][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.470902][T11385] [ 303.470902][T11385] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 303.479421][T11385] down_read+0x42/0x2d0 [ 303.484103][T11385] ocfs2_start_trans+0x366/0x6c0 [ 303.489569][T11385] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 303.495814][T11385] ocfs2_dismount_volume+0x1fc/0x930 [ 303.501623][T11385] generic_shutdown_super+0x130/0x340 [ 303.507516][T11385] kill_block_super+0x7c/0xe0 [ 303.512726][T11385] deactivate_locked_super+0x93/0xf0 [ 303.518542][T11385] cleanup_mnt+0x463/0x4f0 [ 303.523500][T11385] task_work_run+0x1ca/0x250 [ 303.528611][T11385] exit_to_user_mode_loop+0xe6/0x110 [ 303.534426][T11385] exit_to_user_mode_prepare+0xb1/0x140 [ 303.540499][T11385] syscall_exit_to_user_mode+0x16/0x40 [ 303.546485][T11385] do_syscall_64+0x58/0xa0 [ 303.551430][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.557874][T11385] [ 303.557874][T11385] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 303.565356][T11385] ocfs2_start_trans+0x267/0x6c0 [ 303.570820][T11385] ocfs2_write_info+0x117/0x350 [ 303.576196][T11385] dquot_set_dqinfo+0x459/0x6c0 [ 303.581597][T11385] quota_setinfo+0x2a4/0x2b0 [ 303.586729][T11385] __se_sys_quotactl+0x295/0x6b0 [ 303.592211][T11385] do_syscall_64+0x4c/0xa0 [ 303.597151][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.603576][T11385] [ 303.603576][T11385] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 303.612435][T11385] down_write+0x36/0x60 [ 303.617117][T11385] ocfs2_lock_global_qf+0x1e5/0x270 [ 303.622851][T11385] ocfs2_write_info+0xd0/0x350 [ 303.628154][T11385] dquot_set_dqinfo+0x459/0x6c0 [ 303.633524][T11385] quota_setinfo+0x2a4/0x2b0 [ 303.638637][T11385] __se_sys_quotactl+0x295/0x6b0 [ 303.644096][T11385] do_syscall_64+0x4c/0xa0 [ 303.649034][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.655506][T11385] [ 303.655506][T11385] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 303.666062][T11385] __lock_acquire+0x2cf8/0x7c50 [ 303.671463][T11385] lock_acquire+0x1b4/0x490 [ 303.676508][T11385] down_write+0x36/0x60 [ 303.681216][T11385] ocfs2_lock_global_qf+0x1c7/0x270 [ 303.686957][T11385] ocfs2_acquire_dquot+0x2a0/0xb10 [ 303.692598][T11385] dqget+0x778/0xeb0 [ 303.697026][T11385] dquot_get_next_dqblk+0xb0/0x380 [ 303.702663][T11385] quota_getnextquota+0x283/0x450 [ 303.708214][T11385] __se_sys_quotactl+0x295/0x6b0 [ 303.713677][T11385] do_syscall_64+0x4c/0xa0 [ 303.718625][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.725046][T11385] [ 303.725046][T11385] other info that might help us debug this: [ 303.725046][T11385] [ 303.735285][T11385] Chain exists of: [ 303.735285][T11385] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &ei->i_data_sem --> &dquot->dq_lock [ 303.735285][T11385] [ 303.751196][T11385] Possible unsafe locking scenario: [ 303.751196][T11385] [ 303.758643][T11385] CPU0 CPU1 [ 303.764002][T11385] ---- ---- [ 303.769366][T11385] lock(&dquot->dq_lock); [ 303.773793][T11385] lock(&ei->i_data_sem); [ 303.780740][T11385] lock(&dquot->dq_lock); [ 303.787679][T11385] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 303.794974][T11385] [ 303.794974][T11385] *** DEADLOCK *** [ 303.794974][T11385] [ 303.803116][T11385] 2 locks held by syz.7.2822/11385: [ 303.808309][T11385] #0: ffff888079f040e0 (&type->s_umount_key#83){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 303.818500][T11385] #1: ffff888070ff60a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 303.828508][T11385] [ 303.828508][T11385] stack backtrace: [ 303.834410][T11385] CPU: 1 PID: 11385 Comm: syz.7.2822 Not tainted 6.1.141-syzkaller #0 [ 303.842562][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.852620][T11385] Call Trace: [ 303.855903][T11385] [ 303.858845][T11385] dump_stack_lvl+0x168/0x22e [ 303.863532][T11385] ? load_image+0x3b0/0x3b0 [ 303.868062][T11385] ? show_regs_print_info+0x12/0x12 [ 303.873289][T11385] ? print_circular_bug+0x12b/0x1a0 [ 303.878508][T11385] check_noncircular+0x274/0x310 [ 303.883464][T11385] ? add_chain_block+0x940/0x940 [ 303.888423][T11385] ? lockdep_lock+0xdc/0x1e0 [ 303.893023][T11385] ? lockdep_unlock+0x133/0x2d0 [ 303.897883][T11385] ? lockdep_lock+0x1e0/0x1e0 [ 303.902566][T11385] ? _find_first_zero_bit+0xcf/0x100 [ 303.907855][T11385] __lock_acquire+0x2cf8/0x7c50 [ 303.912741][T11385] ? verify_lock_unused+0x140/0x140 [ 303.917966][T11385] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 303.924134][T11385] lock_acquire+0x1b4/0x490 [ 303.928649][T11385] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 303.934029][T11385] ? __might_sleep+0xd0/0xd0 [ 303.938633][T11385] ? read_lock_is_recursive+0x10/0x10 [ 303.944009][T11385] ? do_raw_spin_lock+0x11d/0x280 [ 303.949050][T11385] ? __rwlock_init+0x140/0x140 [ 303.953829][T11385] down_write+0x36/0x60 [ 303.957992][T11385] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 303.963371][T11385] ocfs2_lock_global_qf+0x1c7/0x270 [ 303.968608][T11385] ? lock_buffer+0x80/0x80 [ 303.973025][T11385] ? trace_contention_end+0x5f/0x170 [ 303.978319][T11385] ocfs2_acquire_dquot+0x2a0/0xb10 [ 303.983435][T11385] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 303.989068][T11385] ? from_kuid+0x155/0x670 [ 303.993488][T11385] ? ocfs2_destroy_dquot+0x40/0x40 [ 303.998621][T11385] ? percpu_counter_add_batch+0x13b/0x160 [ 304.004363][T11385] dqget+0x778/0xeb0 [ 304.008285][T11385] dquot_get_next_dqblk+0xb0/0x380 [ 304.013418][T11385] quota_getnextquota+0x283/0x450 [ 304.018464][T11385] ? quota_getquota+0x4c0/0x4c0 [ 304.023326][T11385] ? end_current_label_crit_section+0x170/0x170 [ 304.029580][T11385] ? bpf_lsm_capable+0x5/0x10 [ 304.034265][T11385] ? security_capable+0x85/0xb0 [ 304.039122][T11385] ? bpf_lsm_quotactl+0x5/0x10 [ 304.043892][T11385] ? security_quotactl+0x85/0xb0 [ 304.048839][T11385] ? do_quotactl+0x615/0x710 [ 304.053439][T11385] __se_sys_quotactl+0x295/0x6b0 [ 304.058383][T11385] ? __x64_sys_quotactl+0xa0/0xa0 [ 304.063417][T11385] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 304.069420][T11385] ? lock_chain_count+0x20/0x20 [ 304.074278][T11385] ? lockdep_hardirqs_on+0x94/0x140 [ 304.079491][T11385] do_syscall_64+0x4c/0xa0 [ 304.083919][T11385] ? clear_bhb_loop+0x60/0xb0 [ 304.088601][T11385] ? clear_bhb_loop+0x60/0xb0 [ 304.093282][T11385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.099189][T11385] RIP: 0033:0x7f1235b8e929 [ 304.103646][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.123255][T11385] RSP: 002b:00007f12369b3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 304.131677][T11385] RAX: ffffffffffffffda RBX: 00007f1235db5fa0 RCX: 00007f1235b8e929 [ 304.139651][T11385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000900 [ 304.147622][T11385] RBP: 00007f1235c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 304.155603][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.163581][T11385] R13: 0000000000000000 R14: 00007f1235db5fa0 R15: 00007ffd5abd4428 [ 304.171559][T11385] [ 304.214535][T11437] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2847'. [ 304.249293][T11437] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2847'. [ 304.357373][T11430] loop6: detected capacity change from 0 to 32768 [ 304.371070][T11430] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 304.389578][T11430] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 304.408708][ T5889] ocfs2: Unmounting device (7,7) on (node local) [ 304.437603][ T5846] ocfs2: Unmounting device (7,6) on (node local)