last executing test programs: 2.575065201s ago: executing program 4 (id=17816): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r0, @ANYRES16], 0xd) 2.496094856s ago: executing program 2 (id=17818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.450089788s ago: executing program 4 (id=17819): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x8001, &(0x7f00000006c0)=ANY=[], 0xfd, 0x156, &(0x7f00000001c0)="$eJzsjsFLYlEUxn9Xn844ozMOODAzMMPALEYcHJ9PDFq0UEoSsgeFm7b5IuFZURAuq3WL/gAXRdBKJKJli7KVpRC6dNFf4C5oWdz3nlDb1ve3ufd83znfOTNTvThR8OMw+cF9t6zK7wWzVFg8O7/4hA/eAe8dq7axKZsrbuNlDlblq8Fo15WvIz7Atv4vr9uyHuUgDuQ/wko1gC4HvYX5mNRsK407H/8D7a+uZrzUNKBqWxlP+6Ex9CIsmfd0BH9l3pfp4TjvAag3Am4XycTJT3/OK6g3/rWaN/PdTjGZ+GXtG4Xvx+FvfspWEBDSH6Q6ybtUq9nvdUtzZsnsZQxjIqOndT3bN2+7xezOAdpseBuWxOu8oMwow56AhoCm44+uxODeXV77fBoLAWtREI4TAdqHj2ZNePdJx/mHxhcjUCgUCoVCoVAoFAqF4o08BwAA//9yfVeX") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) 2.343928034s ago: executing program 0 (id=17822): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x10c0}}, 0x1006) 2.07657843s ago: executing program 4 (id=17823): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) 1.711131961s ago: executing program 4 (id=17824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000005c0)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) 1.320255574s ago: executing program 2 (id=17827): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 1.320005384s ago: executing program 4 (id=17828): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0x2, &(0x7f0000000200)={[{@noquota}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@noquota}, {@nointegrity}]}, 0x5, 0x6188, &(0x7f0000004940)="$eJzs3c1vHGcdB/Df7K7XL6Wp1UNVIoTcNryU0ryWECjQ9AAHLhxQriiR61YRKaAkoLSKiCtfOPBHgJA4IsSRE39AD1y58QcQKQGBeuqg8T6PM56uvXbd3Vl7Ph/JmfntM+N9Jt+dffHM7BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPzwBz++UETE9V+lG1YjPhf9iF7EclWvRcTy2mpefhARz8d2czwXEQuLEdX62/88E/FaRHx4KuLR4/vr1c0XD9iP7//5H3/4yVM/+vufFs797y93+6/vtdy9e7/9718fHG2bAQAAoGvKsiyL9DH/dPp832u7UwDATOTX/zLJt6vnrt6cs/6o1Wq1+hjWdeV4D+pFRGzW16neMzgcDwDHzGZ81HYXaJH8O20QEU+13QlgrhVtd4CpePT4/nqR8i3qrwdro/Z8Lsiu/DeLnes79ppO0jzHZFaPr63ox7N79Gd5Rn2YJzn/XjP/66P2YVpu2vnPyl75D0eXPnVOzr/fzL/h5OTfG5t/V+X8B4fKvy9/AAAAAACYY/nv/6stH/9dPPqmHMh+x3/XZtQHAAAAAAAAAPisHXX8vx3G/wMAAIC5VX1Wr/zu1JPb9voutur2a0XE043lgY5JF8ustN0PAAAAAAAAAAAAAOiSwegc3mtFxEJEPL2yUpZl9VPXrA/rqOsfd13ffuiytp/kAQBg5MNTjWv5i4iliLiWvutvYWVlpSyXllfKlXJ5Mb+fHS4ulcu1z7V5Wt22ODzAG+LBsKx+2VJtvbpJn5cntTd/X3Vfw7J/gI7NRouBA0BEjF6NHnlFOmHK8plo+10Ox4P9/+Sx/3MQbT9OAQAAgOkry7Is0td5n07H/HttdwoAmIn8+t88LqBWq9Vqtfrk1XXleA/qRURs1tep3jMYjh8AjpnN+KjtLtAi+XfaICKeb7sTwFwr2u4AU/Ho8f31IuVb1F8P0vju+VyQXflvFtvr5fXHTSdpnmMyq8fXVvTj2T3689yM+jBPcv69Zv7XR+3DtNy085+VvfKvtnO1hf60Leffb+bfcHLy743Nv6ty/oND5d+XPwAAAAAAzLH89//VuTr+O/y0mzPRfsd/16Z2rwAAAAAAAAAwXY8e31/P173m4/9fGLOc6z9Pppx/If9Oyvn3Gvl/tbFcvzb/8M0n+f/78f31P9791+fz9KD5L+aZIj2yivSIKNI9FYM0PcrWfdLWQn9Y3dNC0esP0jk/5cLbcTNuxUac37VsL/1/PGm/sKu96unCdnvZH7Vf3NU+SO3Vz6j90q72hXSmU7mcf//ZWI+fx614a7u9alucsP1LE9rLCe05/378Z6fP9v/uyPkPaj9V/iupvWhMKw8/6H1iv69Px93P1Ztf/M356W/ORFvR39m2umr7XmyhP9v/J08N45d3Nm6fvXfj7t3bFyJNdt16MdLkM5bzz89TO8//L43a8/N+fX99+MHw0PnPi60Y7Jn/S7X5antfnnHf2pDzH6afnP9bqX38/n8s868e3vvu/6/Mvk8AAAAAAAAAAAAAAACwr7Isty8RvRoRl9P1P21dmwkAzNbV9JUbZZJvn1Xdn/H9qdXHvC7mrD8zrT8u56s/avVxrOvK8d6oFxHxt/o6lyPi1+N+GQAwzz6OiH+23QlaI/8Oy9/3V03PtN0ZYKbuvPf+T2/curVx+07bPQEAAAAAAAAAPq08/udabfzvM2VZPmgst2v81zdj7ajjfw7yzM4Ao3sMVN0//DbtZ6s37Pdqw42/EHuN/72wM7ff+N+DCfe3MKF9OKF9cUL70oT2sRd61OT8X6iNd34mIk43hl8/AeO/bttv/NfmmPddkPN/sfZ4rvL/SmO5ev7l749z/r1d+Z+7++4vzt157/1Xb757452NdzZ+dunChfOXLl++cuXKubdv3to4P/q3xR5PV84/j33tPNBuyfnnzOXfLTn/L6Va/t2S8/9yquXfLTn//H5P/t2S88+ffeTfLTn/l1Mt/27J+X8t1fLvlpz/K6mWf7fk/L+eavl3S87/1VTLv1ty/mdTLf9uyfmfS/UB81+edr+YjZx/PsJl/++WnH8+s0H+3ZLzv5hq+XdLzv9SquXfLTn/11It/27J+X8j1fLvlpz/5VTLv1ty/t9Mtfy7Jed/JdXy75ac/7dSLf9uyfl/O9WHyn91ev1iNnL+r6fa/t8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfyPV8u+WJ9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq6zvh/42VevnTcDIX8nfwNrxxjjbLLrl/iF1sWE14a3EgiFlmK73rVZ8BteuyQ0kh0FSiSMGlW0DRdtAUVtbiqsKhe0CigXqFWlSqS9oDeICpWLqAooIFWiVchWc+Z5np05Ozuz6x3bM+d8PlL8886cmXPmzJmz+13nOwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKNNb5/50kCWZbX/8j/WZ9mNtb+vHV+fX/aW672FAAAAwGr9Kv/zpVvSBQeXcaOGZf7p9d9/Zn5+fj772NCfjnx1fj5dMZ5lI2uyLL8uuvzjjw80LhM8lo0NDDZ8Pdhh9UMdrh/ucP1Ih+tHO1y/psP1Yx2uX7QDFllb/31Mfmdb8r+ur+/S7NZsJL9uS4tbPTawZnAw/i4nN5DfZn7kWDabnchmsqmm5evLDuTLP7uptq73ZHFdgw3r2lg7Qn7+yNG4DQNhH29pWtfCfUY/fVs2/oufP3L0r8+9eHur2XE3NN1ffTu3ba5t5xfCJfVtHcjWpH0St3OwYTs3tnhOhpq2cyC/Xe3vxe18aZnbObSwmddU8Tkfywbzvz+f76fhxl/rpf20MVz2yzuzLLu4sNnFZRatKxvM1jVdMrjw/IzVj8jafdQOpVdnwys6Tjct4zitzektzcdp8TURn/9N4XbDS2xD49P000dHG573l+ev5DiNao96qddK8Rjs9mulV47BeFw8nz/ox1seg1vC439k69LHYMtjp8UxmB53wzG4udMxODg6lG9zehIG8tssHIM7mpYfytc0kM8XtrY/BifPnTwzOffw5++ePXnk+MzxmVO7duyY2rVnz759+yaPzZ6Ymar/eYV7u/etywbTa2Bz2HfxNfCmwrKNh+r8N0YXnX+v9HU41uZ1uL6wbLdfh8PFBzdwbV6Qi4/p+mvjI7WdPnZpMFviNZY/P9tX/zpMj7vhdTjc8Dps+T2lxetweBmvw9oyZ7Yv72eW4Yb/Wm3D0t8LVncMrm84Bos/jxSPwW7/PNIrx+BYOC5+uH3p7wUbw/Y+PrHSn0eGFh2D6eGGc0/tkvTz/ti+fLQ6Lu+oXXHDaHZ+bubsPQ8dOXfu7I4sjGviNQ3HSvF4XdfwmLJFx+vgio/Xg7Ovf/yOFpevD/tq7O7aH2NLPle1ZXbf0/65yr+7td6fTZfuzMLosmu9P1t9N6/tz9Es+9r3Hn3gO4987e1L7s9a3vzC5Op/Fk+5tOH8O7LE+Tfm/lfq60t39djQyHD99TuU9s5I0/m4+akazs9dA/m6X5pc3vl4JPx3rc/Ht7Y5H28oLNvt8/FI8cHF8/FAp992rE7x+RwLx8mJqfbn49oyG3au9Jgcbns+vjPMgbD/3xySQspFDcfOUsdtWtfw8Eh4XMNxDc3H6a6m5UdCNqut6+mdV3acbruzfl9D6dEtuFbH6Xhh2W4fp+l3X0sdpwOdfvt2ZYrP51g4Lm7d1f44rS3z3O7VnzvXxr82nDtHOx2DI0OjtW0eSQdhfr7P5tfGY/Ce7Gh2OjuRTefXjubH00C+rol7l3cMjhae/6Krda7c0OYY3FZYttvHYPo+ttSxNzC8+MF3QfH5HAvHxZP3tj8Ga8u8Y293f3bdFi5JyzT87Fr8/dpSv/O6o7CbrtaxMhy283t72/9utrbMiX0rzZnt99Nd4ZIbWuyn4uu38TU12nA8T2fXZj9tCNv54r6l91Nte2rLfHX/Mo+ng1mWXfjsffnve8O/r/zd+R880/TvLq3+TefCZ+/72U3H/nEl2w9A/3ulPtbVv9c1/MvUcv79HwAAAOgLMfcPhpnI/wAAAFAaMffH/ys8kf8BAACgNGLuHw4zqUj+3/COF2dfuZClZv58EK9Pu+H++nKx4zoVvh6fX1C7/L6nZv77Hy4sb92DWZa9fP8ftlx+w/1xu+rGw3Zefmfz5Ys8c/ey1n34wQtpvY399a+H+4+PZ7mHQasK7lSWZc/e8pV8PeMfv5TP5+4/nM8HLj7+WG2Zl/bXv463f+E19eX/IpR/Dx470nT7F8J++EmYU+9tvT/i7b516c0b9350YX3xdgObb84f9pOfrN9vfJ+cJx6rLx/381Lb/50vP/2t2vIPvbH19l8YbL39T4f7fSrM/3ldffnG56D2dbzdF8P2x/XF293zze+23P7LX6ovf+Zd9eUOhxnXvy18veVdL8427q+HBo40Pa7s3fXl4vqnfvDH+fXx/uL9F7d/7NClpv1RPD6e+7f6/UwWlo+Xx/VEf19Yf+1+Go/PuP6n/+hw037utP7LD7zwutr9Ftd/V2G5M5/dnq9/4f6a37HpL7/4lZbri9tz8G/PND2egx8Kr+Ow/ic/GY7HcP3/Xq7fX/HdFQ5/qPn8E5f/+voLTY8nes8v6uu//Nbj+VwztnbdDTfedPPFN9T2XZY9v6Z+f53Wf/yvTjdt/zduq++PeH3s6BfXv5S4/rOfmzh1eu787HTaq4/ckr93zvvq2xO395Zwbi1+fej0uU/NnB2fGp/KsvHyvoXeFftmmD+rj4vtl55fdAbd/mB4Pu/482fXbf3XL8fL//0j9csvvbf+fetNYbknwuXrw/O3svUv9uSm2/LX98BzYQvnF79f8Gps3PJf+5a1YHj8xZ8L4vF+5rWfyvdD7br8+0Z8Xa9y+380Xb+fb4f9Oh/emXnzbQvra1w+vjfCpQ/XX++r3n/hNBef178Jz/f7f1K//7hd8fH+KPwc890Nzee7eHx8+8Jg8f7zd/G4GM4n2cX69XGpuL8vvXRby82L70OSXbw9//pP0v3cvqKHuZS5h+cmT8yeOv/Q5LmZuXOTcw9//tDJ0+dPnTuUv5fnoU93uv3C+Wldfn6antmzO8vPVqfr4yq73tt/5sGj03untk7PHDty/ti5B8/MnD1+dG7u6Mz03NYjx47NfK7T7WenD+zYuX/X3p0Tx2enD+zbv3/X/onZU6drm1HfqA72TH1m4tTZQ/lN5g7s3r/j3nt3T02cPD09c2Dv1NTE+U63z783TdRu/QcTZ2dOHDk3e3JmYm728zMHduzfs2dnx3cDPHnm2Nz45NnzpybPz82cnaw/lvFz+cW1732dbk85zf1H/efZooH6G/FlH7xrT3p/1pqnHl3yruqLFN5A9MXwXjT//Koz+5bzdcz9I2EmFcn/AAAAUAUx94+Gmcj/AAAAUBox968JM5H/AQAAoDRi7h8LM6lI/i9d/3/DhWWtX/9f/79xf+n/V6z//+Fe6//Xzxf6/92x2v69/n+g/6//r/+v/6//Txf0Wv8/5v61WVbJ/A8AAABVEHP/ujAT+R8AAABKI+b+G8JM5H8AAAAojZj7bwwzqUj+1//X/9f/1//X/2+9fv3//qT/357+fwf6/5NZtfr/F7u5/fr/+v8s1mv9/5j7bwozqUj+BwAAgCqIuf/mMBP5HwAAAEoj5v5bwkzkfwAAAOhPaxdfFHP/+jCTiuR//X/9f/1//X/9/9br1//vT/r/7en/d6D/7/P/9f/1/+mqXuv/x9z/qjCTiuR/AAAAqIKY+18dZvoFrPwPAAAAvWf4ym4Wc/9rwkwW5f8rXAEAAABw3cXcf2tWKIJX5N//9f/1//X/9f/1/1uvf/n9/6FM/7936P+3p//fgf6//r/+v/4/XdVr/f8892dj2WvDTCqS/wEAAKAKYu6/LcxE/gcAAIDeNrb8RWPu/3/FG8r/AAAAUBox928IM6lI/tf/1//X/9f/1/9vvX6f/9+f9P/b0//voNf6/4UjSP+/t7df/1//n8V6rf8fc//tYSYVyf8AAABQBTH33xFmIv8DAABAacTc///DTOR/AAAAKI2Y+zeGmVQk/+v/93j/P/b+9P/1//X/9f/1/5dF/789/f8Oeq3/X6D/39vbr/+v/89ivdb/j7n/dWEmFcn/AAAAUAUx978+zET+BwAAgNKIuf8NYSbyPwAAAJRGzP3jYSYVyf/6/z3e//f5//r/+v/6//r/K6L/357+fwf6//r/+v/6/3RVr/X/Y+7fFGZSkfwPAAAAVRBz/+YwE/kfAAAASiPm/jvDTOR/AAAAKI2Y+7eEmVQk/+v/6//r/+v/6/+3Xr/+f3/S/29vOf3//Jym/6//r/+v/6//Txf0Wv8/5v43hplUJP8DAABAFcTcvzXMRP4HAACA0oi5/01hJvI/AAAAlEbM/dvCTCqS//X/+6X/P6z/r/+v/194PPr/+v+t6P+35/P/O9D/1//X/9f/p6t6rf8fc/+bw0wqkv8BAACgCmLu3x5mIv8DAABAacTcf1eYifwPAAAApRFz/0SYSUXyv/5/v/T/ff5/pv/flf7/w7/U/9f/L7cq9P8/sdI7baD/34H+v/6//r/+P13Va/3/mPvvDjOpSP4HAACAKoi5/54wE/kfAAAASiPm/skwE/kfAAAASiPm/qkwk4rkf/1//X/9/2r1/1f9+f9vWLhf/f86/f/eUoX+/2ro/3eg/6//f937/yP6/5RKr/X/Y+7fEWZSkfwPAAAAVRBz/84wE/kfAAAASiPm/l1hJvI/AAAAlEbM/bvDTCqS//X/9f/1//X/ff5/6/Xr//cn/f/2ut//jw9R/1//X//f5//r/7NYr/X/Y+6/N8ykIvkfAAAAqiDm/j1hJvI/AAAAlEbM/XvDTOR/AAAAKI2Y+/eFmVQk/+v/6//r/+v/6/+3Xr/+f3/S/2/P5/93oP+v/6//r/9PV/Va/z/m/v1hJhXJ/wAAAFAFMfe/JcxE/gcAAIDSiLn/18JM5H8AAAAojZj7fz3MpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/QJhJRfI/AAAAVEHM/b8RZiL/AwAAQGnE3P/WMBP5HwAAAEoj5v6DYSYVyf/6//r/+v/6//r/rdev/9+f9P/b0//vQP9f/1//X/+fruq1/n/M/W8LM6lI/gcAAIAqiLn/vjAT+R8AAABKI+b+t4eZyP8AAABQGjH3vyPMpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmFcn/AAAAUAUx978rzET+BwAAgNKIuf/dYSbyPwAAAJRGzP3vCTOpSP7X/9f/1//X/9f/b71+/f/+pP/fnv5/B/r/Jev/j9+k/6//z9XSKgEtdmX9/xtfXnKFq+z/x9z/m2EmFcn/AAAAUAUx998fZiL/AwAAQGnE3P/eMBP5HwAAAEoj5v73hZlUJP/r/+v/6//r/+v/t16//n9/0v9vr8/6/7+6OVyu/1+n/9/b29+T/f8fL9X/n19TvL3+P1fDlfX/W+pK/z/m/veHmVQk/wMAAEAVxNz/gTAT+R8AAABKI+b+D4aZyP8AAABQGjH3/1aYSUXyv/5/bTsW2sv6//r/+QX6//r/+v99S/+/vT7r//v8/wL9/97e/p7s//v8f66zXuv/x9z/oTCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7v9wmIn8DwAAAKURc/9Hwkwqkv/1/33+v/6//r/+f+v16//3J/3/9vT/O9D/1//vtf7/f+r/0996rf8fc/+DYSYVyf8AAABQBTH3fzTMRP4HAACA0oi5/7fDTOR/AAAAKI2Y+z8WZlKR/K//3y/9/3H9f/1//f/C49H/1/9vRf+/Pf3/DvT/9f97rf/v8//pc73W/4+5/+NhJsvP/2PLXhIAAAC4LmLu/50wk4r8+z8AAABUQcz9vxtmIv8DAABAacTc/4kwk4rkf/3/fun/+/z/TP9f/7/wePT/9f9buXb9/3jm0f/X/9f/j/T/9f/1/ynqtf5/zP2/F2ZSkfwPAAAAVRBz/yfDTOR/AAAA6Aut/p/sopj7D4WZyP8AAABQGjH3Hw4zqUj+1//X/9f/79H+/59t/pcffv8Dh3fo/+v/6/+vyFXt/8eTTfz8/9qL3+f/6//r/yf6//r/+v8U9Vr/P+b+I2EmFcn/AAAAUAUx9/9+mIn8DwAAAKURc//RMBP5HwAAAEoj5v7pMJOK5H/9f/1//f8e7f/38ef/x/2h/9+sa/3/eNLV/2/p2n3+f/3rJ/T/r7D/P9ryUv1//f9+3n79f/1/Frsq/f/5NenClfb/Y+6fCTOpSP4HAACAKgi5f/BYfS5cIf8DAABAacTcfzzMRP4HAACA0oi5/1NhJhXJ//r/+v/6//r/Pv+/9fp7tv/v8//b0v9v72r1/9d3afv1//X/+3n79f/1/1ms1z7/P+b+2TCTiuR/AAAAqIKY+z8dZiL/AwAAQGnE3P+ZMBP5HwAAAEoj5v4TYSYVyf/6//r/+v/6//r/rdev/9+f9P/b653P/29N/1//v5+3X/9f/5/Feq3/H3P/yTCTiuR/AAAAqIKY+0+Fmcj/AP/H3n00W16VexzfB7vL7uIFOHBClUNfAgMd6wtw4MSBVlkORMWcaMwRcw6YMwZQbBMqigFMKGYxZ8WAGbXa0vM8T5+wz3+fbvc5Z/3X+nwmz73tbfa+Xkr40f29CwAAupG7/5K4xf4HAACAbuTuf0jcMsj+1//r/7vt/++h/9/r8/X/+v+e6f+nHW3/v3fUmfT/+v85f3/9v/6f3Vrr/3P3PzRuGWT/AwAAwAhy9z8sbrH/AQAAoBu5+y+NW+x/AAAA6Ebu/ofHLYPs/x39/8ZizP4/M179/0H2/xd4/1//r//X/x+8w+3/L//vf/Lp/73/r/8P+n/9v/6fnVrr/3P3PyJuGWT/AwAAwAhy9z8ybrH/AQAAoBu5+x8Vt9j/AAAA0I3c/Y+OWwbZ/97/9/5/t+//6//3/Hz9v/6/Z97/nzZS/3/pLRc++PZr73r6XD5f/z9C/3/DgX1//b/+n91a6/9z9z8mbhlk/wMAAMAIcvc/Nm6x/wEAAKAbufsfF7fY/wAAANCN3P2Pj1sG2f/6f/2//l//r/9f/vn6/3nS/08bqf8/n8/X/4/Q/x/c99f/6//ZrbX+P3f/E+KWQfY/AAAAjCB3/xPjFvsfAAAAupG7/7K4xf4HAACAbuTuPxW3DLL/9f8H3///W/+v/4+r/9f/6/8Pnv5/mv5/Bf2//l//r/9nrVrr/3P3Xx63DLL/AQAAYAS5+58Ut9j/AAAA0I3c/U+OW+x/AAAA6Ebu/qfELYPsf/2/9//1//p//f/yz9f/z5P+f9rh9//L/gq5N/3/7Pv/4/p//b/+n63Osf+/Y+I/ttfS/+fuf2rcMsj+BwAAgBHk7n9a3GL/AwAAQDdy9z89brH/AQAAoBu5+58Rtwyy//X/+v999f/xf+PL9P/6/y30/5v0/23R/09r5v3/jWNLf1j/P/v+3/v/+n/9P9u09v5/7v5nxi2D7H8AAAAYQe7+Z8Ut9j8AAAB0I3f/s+MW+x8AAAC6kbv/OXHLIPtf/6//9/6//l//v/zzp/r/01u+n/6/Lfr/ac30/3vQ/+v/5/z99f/6f3Zrrf/P3f/cuGWQ/Q8AAAAjyN1/Rdxi/wMAAEA3cvc/L26x/wEAAKAbufufH7cMsv+X9/9n/3X9//7o/7d/f/3/8j8/1tX/5x9R/z/Z/9/T+/9j0v9P0/+voP/X/+v/9+r/T676+fp/lmmt/8/d/4K4ZZD9DwAAACPI3f/CuMX+BwAAgG7k7n9R3GL/AwAAQDdy9784bhlk/3v/X/+v/59f/+/9/01H+f7/4tD7/2P6/33S/0/T/6+g/9f/6/+9/89atdb/5+5/SdwyyP4HAACAEeTuf2ncYv8DAADAPGz9vQM7f0NpyN3/srjF/gcAAIBu5O5/edwyyP7X/+v/9f/6/7H7/xMz6f+9/79f+v9p+v8Vjrb/3+i0/z/WWf9/5V4/v4X+/zL9P43Z1v9fd/bHj6r/z93/irhlkP0PAAAAI8jd/8q4xf4HAACAbuTuf1XcYv8DAABAN3L3vzpuGWT/H3j/f3Lvz9b/6//1//r/o+//5/L+v/5/v/T/0/T/K3j/3/v/3v/X/7NW2/r/LY6q/8/d/5q49Y8ABtn/AAAAMILc/a+NW+x/AAAA6Ebu/ivjFvsfAAAAupG7/3VxyyD73/v/+n/9v/5f/7/88/X/86T/n6b/X0H/r//X/+v/WavW+v/c/a+PWwbZ/wAAADCC3P1viFvsfwAAAOhG7v43xi32PwAAAHQjd/+b4pZB9r/+/2D7//zxGff/x5d9f/2//n+h/9f/N2rY/n9j2V+Jdtuj/7/pgafuvf1H9P/6f/2//l//zxo00f+fOft3l7n73xy3DLL/AQAAYAS5+98St9j/AAAA0I3c/W+NW+x/AAAA6Ebu/rfFLf/b/zsr1Pk5seJf1/83/f7/yfxjef9f/6//1//r//dn2P5/n7z/v4L+X/+v/9f/s1ZN9P9b/vvc/W+PW/z6PwAAAHQjd/874hb7HwAAALqRu/+dcYv9DwAAAN3I3f+uuGWQ/a//b7r/b+H9f/2//l//H/T/86D/n6b/X0H/r//X/+v/WavW+v/c/VfFLYPsfwAAABhB7v53xy32PwAAAHQjd/974hb7HwAAALqRu/+9ccsg+1//r//X/+v/9f/LP1//P0/6/2n6/8VicfXEF1jW/5+5s/5f/6//1/9znlrr/3P3vy9uGWT/AwAAwAhy918dt9j/AAAA0I3c/dfELfY/AAAAdCN3//vjlkH2v/5f/6//1/8P1P9v6P/7p/+fpv9fwfv/+n/9v/6ftWqt/8/d/4G4ZZD9DwAAACPI3X9t3GL/AwAAQDdy938wbrH/AQAAoBu5+0/HLXvu/wsO4VsdHv2//l//r/8fqP/v8P3/E6s/eDAH1/8v9P/6f/3/Cvp//b/+n51a6/9z938obvHr/wAAANCN3P0fjlvsfwAAAOhG7v6PxC32PwAAAHQjd/9H45ZB9r/+X/+v/9f/6/+Xf/48+v/Vnzsa7/9P0/+voP/X/+v/9f+sVWv9f+7+j8Utg+x/AAAAGEHu/uviFvsfAAAAupG7/+Nxi/0PAAAA3cjd/4m4ZZD9r//X/2/v/xcL/b/+X/+/6RD6/xML/f/a6f+n6f9X0P/32f9fsOio/z+558/X/9Oi1vr/3P2fjFsG2f8AAAAwgtz918ct9j8AAAB0I3f/p+IW+x8AAAC6kbv/03HLIPtf/6//n+37/8fjJ+j/9f/z7f/r31X9//ro/6fp/1fQ//fZ/3v/X//PkWmt/8/df0PcMsj+BwAAgBHk7v9M3GL/AwAAQDdy9382brH/AQAAoBu5+z8Xtwyy//X/+v/Z9v/e/9f/6//1/0vo/6fp/1fQ/+v/9f/6f9aqtf4/d//n45ZB9j8AAACMIHf/jXGL/Q8AAADdyN1/U9xi/wMAAEA3cvd/IW4ZZP/r//X/+v959v8n9P/6f/3/Uq30/xdffK+b9f/6f/2//l//r/8fXWv9f+7+L8Ytg+x/AAAAGEHu/i/FLfY/AAAAdCN3/5fjFvsfAAAAupG7/ytxyyD7f3f/f3yxWahuWtb/R6Om/99C/7/9++v/l//54f1//b/+/+C10v97///8vr/+X/8/5+9/Tv3/Rbt/vv6fHrXW/+fuvzluGWT/AwAAwAhy9381brH/AQAAoBu5+78Wt9j/AAAA0I3c/bfELYPsf+//6//1//p//f/yz9f/z5P+f5r+fwX9v/7f+/+X3P9O+n/Wp7X+P3f/1+OWQfY/AAAAjCB3/zfiFvsfAAAAupG7/5txi/0PAAAA3cjd/624ZZD9r//X/+v/9f/6/+Wfr/+fJ/3/NP3/Co32//l3qPr/tr9/N/2/9/9Zo9b6/9z9345bBtn/AAAAMILc/d+JW+x/AAAA6Ebu/u/GLfY/AAAAdCN3//filkH2//r7/4v0/0H/30r/fz/9/47P1//r/3um/8+/oi+n/1+h0f4/6f/b/v76f/0/u7XW/+fuvzVuGWT/AwAAwAhy938/brH/AQAAoBu5+38Qt9j/AAAA0I3c/T+MWwbZ/97/H6v/31iM2P97/1//r/8fif5/mv5/Bf2//l//r/9nPeL/GU1r/X/u/h/FLYPsfwAAAJir+9z9Qbfu9382d/+P4xb7HwAAALqRu/8ncYv9DwAAAN3I3f/TuGWQ/a//H6v/H/P9f/2//l//PxL9/zT9/wr6f/2//l//z1q11v/n7v9Z3LJl+B075/8tAQAAgJbk7v953DLIr/8DAADACHL3/yJu2bX/z+zzd7UDAAAArcnd/8u4ZR+//n+3A/tWh0f/33j/v+i//79tof/X/2/S/+v/10H/P+3/7P/PbOj/9f8T9P/6f/0/O7XW/+fu/1Xc4vf/AwAAwJxt+ycKuft/HbfY/wAAANCN3P2/iVvsfwAAAOhG7v7fxi2D7H/9f+P9/3m9/3+y/qs59P/e/z/A/v+KE0s/X/+v/++Z/n+a9/9X0P/r//X/+n/WqrX+P3f/bXHLIPsfAAAARpC7/3dxi/0PAAAA3cjd//u4xf4HAACAbuTu/0PcMsj+1//32P/P6/1//b/3/8+//7/LhaduvO8DrrlK/89Zh9n/558L+v9D6f+vX/bH0//r/1v6/vp//T+7tdb/5+7/Y9wyyP4HAACAEeTuvz1usf8BAACgG7n7/xS32P8AAADQjdz9f45bBtn/+n/9fyv9f/57fQT9/6n59f/ZFO+r/z+52PH5/fT/3v/X/+/m/f9pM+7/vf+v/2/+++v/9f/s1lr/n7v/L3HLIPsfAAAARpC7/69xi/0PAAAA3cjd/7e4xf4HAACAbuTu/3vcMsj+1//r/1vp/5P3/8/+PO//b9L/6//Phf5/mv5/Bf2//l//r/9nrVrr/3P3/yNuGWT/AwAAwAhy998Rt9j/AAAA0I3c/f+MW+x/AAAA6Ebu/n/FLYPsf/2//l//r//X/y//fP3/POn/p+n/V9D/6//1//p/1qq1/j93/38CAAD//6cxal0=") setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) 1.104101276s ago: executing program 2 (id=17832): syslog(0x4, 0x0, 0x0) syslog(0x3, &(0x7f0000002380)=""/29, 0x1d) 1.007989532s ago: executing program 2 (id=17834): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110, 0x2, 0xfffffffd}}], 0x28}, 0x0) 848.234091ms ago: executing program 3 (id=17838): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2a, 0x334, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) 788.221205ms ago: executing program 2 (id=17839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x80}]}}}]}, 0x60}}, 0x0) 772.696285ms ago: executing program 1 (id=17840): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xaf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 720.311378ms ago: executing program 0 (id=17841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, 0x8) 652.251573ms ago: executing program 3 (id=17842): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'ipvlan0\x00', @random='..\b\x00'}) 652.108102ms ago: executing program 2 (id=17843): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r0, &(0x7f0000001e80)=""/96, 0x60) 616.707814ms ago: executing program 1 (id=17844): syslog(0x4, 0x0, 0x0) syslog(0x3, &(0x7f0000002380)=""/29, 0x1d) 531.24434ms ago: executing program 3 (id=17845): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 454.095994ms ago: executing program 1 (id=17846): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 404.233137ms ago: executing program 3 (id=17847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xbcd93b4ed8cde295}, 0x8000) 404.122467ms ago: executing program 0 (id=17848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x7f, 0x41, 0x1, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) 377.845948ms ago: executing program 3 (id=17849): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x1000000, &(0x7f0000000640)={[{@subsystem='blkio'}]}) 371.575989ms ago: executing program 1 (id=17850): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x8, 0xfffffff5, 0x2, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x5a, 0x29, 0x0, @local, @rand_addr=0x64010100}}}}) 244.220856ms ago: executing program 3 (id=17851): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x10c0}}, 0x1006) 244.061866ms ago: executing program 1 (id=17852): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x2d) 240.271226ms ago: executing program 0 (id=17853): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x2081) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x1ff, 0x9, 0x4, 0x110010, 0x3, {}, {0x2, 0x2, 0x68, 0x2, 0x10, 0xf, "bed1543e"}, 0x101, 0x2, {&(0x7f00000000c0)=[{0xf6e, 0x9, {0x0}, 0x4}, {0xeca0, 0x2, {0x0}, 0xfffffff7}]}, 0x8}) 148.932752ms ago: executing program 1 (id=17854): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x3) 139.007582ms ago: executing program 0 (id=17855): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x8000) 66.084006ms ago: executing program 0 (id=17856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) 0s ago: executing program 4 (id=17857): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, @raw_data=[0x80b, 0x400008, 0x1012, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) kernel console output (not intermixed with test programs): invalid length. [ 991.696243][T11363] netlink: 'syz.4.14379': attribute type 2 has an invalid length. [ 991.760668][T11363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14379'. [ 992.222898][T11404] netlink: 'syz.0.14394': attribute type 5 has an invalid length. [ 992.523521][T11409] loop1: detected capacity change from 0 to 4096 [ 992.605655][T11409] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 992.957228][T11455] netlink: 'syz.0.14412': attribute type 1 has an invalid length. [ 993.007446][T11455] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.14412'. [ 993.400587][T11497] loop1: detected capacity change from 0 to 2048 [ 993.461838][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14429'. [ 993.479921][T11497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.715208][T11526] netlink: 'syz.1.14437': attribute type 30 has an invalid length. [ 993.745952][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14437'. [ 993.780426][T11526] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 993.826027][T11526] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 994.978992][T11668] device wlan0 entered promiscuous mode [ 995.647432][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14493'. [ 995.776199][T11736] netlink: 'syz.1.14498': attribute type 1 has an invalid length. [ 995.905847][T11747] netlink: 'syz.4.14502': attribute type 4 has an invalid length. [ 995.971534][T11747] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14502'. [ 996.042302][T11759] loop1: detected capacity change from 0 to 64 [ 996.064601][T11747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 996.184289][T11759] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 996.202133][T11771] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 996.756605][T11832] xt_ecn: cannot match TCP bits for non-tcp packets [ 997.179975][T16273] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 997.329800][T11891] netlink: 'syz.2.14551': attribute type 2 has an invalid length. [ 997.486898][T16273] usb 2-1: Using ep0 maxpacket: 8 [ 997.582667][ T4269] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 997.620082][T11919] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 997.641434][T16273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 997.679583][T16273] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 997.721332][T16273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 997.881770][ T4269] usb 4-1: Using ep0 maxpacket: 16 [ 997.956685][T16273] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 997.986410][T16273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.029786][T16273] usb 2-1: Product: syz [ 998.034790][ T4269] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.049572][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14563'. [ 998.065908][T16273] usb 2-1: Manufacturer: syz [ 998.074541][ T4269] usb 4-1: config 0 has no interfaces? [ 998.093622][T16273] usb 2-1: SerialNumber: syz [ 998.180275][T16273] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 998.266816][ T4269] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 998.297742][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.327865][ T4269] usb 4-1: Product: syz [ 998.360409][ T4269] usb 4-1: Manufacturer: syz [ 998.366514][ T4269] usb 4-1: SerialNumber: syz [ 998.389951][ T4269] r8152-cfgselector 4-1: config 0 descriptor?? [ 998.459616][T10761] usb 2-1: USB disconnect, device number 78 [ 998.549416][T11958] loop2: detected capacity change from 0 to 128 [ 998.642151][T11958] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: none. [ 998.662594][ T4269] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 998.670566][T11958] ext4 filesystem being mounted at /2882/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 998.741497][T11910] loop4: detected capacity change from 0 to 32768 [ 998.752891][T11958] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.14571: No space for directory leaf checksum. Please run e2fsck -D. [ 998.769317][T11958] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.14571: checksumming directory block 0 [ 998.849870][T11910] XFS (loop4): Mounting V5 Filesystem [ 998.897285][T16273] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 998.958314][T11910] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 999.009622][T16264] usb 4-1: USB disconnect, device number 87 [ 999.016137][T11910] XFS (loop4): Starting recovery (logdev: internal) [ 999.035117][T11910] XFS (loop4): Ending recovery (logdev: internal) [ 999.045398][T11983] ipt_REJECT: TCP_RESET invalid for non-tcp [ 999.085028][T11910] XFS (loop4): Quotacheck needed: Please wait. [ 999.164026][T11910] XFS (loop4): Quotacheck: Done. [ 999.169965][T16273] usb 1-1: Using ep0 maxpacket: 16 [ 999.295730][ T4291] XFS (loop4): Unmounting Filesystem [ 999.314530][T16273] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 999.330478][T16273] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 999.359922][T16273] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 999.375533][T16273] usb 1-1: config 0 interface 0 has no altsetting 0 [ 999.581873][T16273] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 999.592877][T16273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.601098][T16273] usb 1-1: Product: syz [ 999.665517][T16273] usb 1-1: Manufacturer: syz [ 999.678150][T16273] usb 1-1: SerialNumber: syz [ 999.709384][T16273] usb 1-1: config 0 descriptor?? [ 999.891257][T12040] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14592'. [ 1000.138048][T12058] QAT: Stopping all acceleration devices. [ 1000.249486][T16264] usb 1-1: USB disconnect, device number 47 [ 1000.504031][ T26] audit: type=1400 audit(2000001399.358:64): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12099 comm="syz.2.14610" [ 1000.907093][T16356] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1001.210187][T16356] usb 2-1: Using ep0 maxpacket: 32 [ 1001.256949][T12149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1001.335002][T16356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.354855][T16356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.387103][T16356] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1001.410512][T16356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.423913][T16356] usb 2-1: config 0 descriptor?? [ 1001.485635][T16356] hub 2-1:0.0: USB hub found [ 1001.562696][T12216] loop2: detected capacity change from 0 to 512 [ 1001.640542][T12216] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 1001.640542][T12216] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1001.640542][T12216] [ 1001.707770][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.14637: inode #262144: comm syz.2.14637: iget: illegal inode # [ 1001.747642][T16356] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 1001.763456][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14637: error while reading EA inode 262144 err=-117 [ 1001.832628][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.14637: inode #262144: comm syz.2.14637: iget: illegal inode # [ 1001.857506][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14637: error while reading EA inode 262144 err=-117 [ 1001.876683][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.14637: inode #1: comm syz.2.14637: iget: illegal inode # [ 1001.927145][T12216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.14637: error while reading EA inode 1 err=-117 [ 1001.978802][T12216] EXT4-fs (loop2): 1 orphan inode deleted [ 1002.007160][T12216] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 1002.033244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.094088][T16356] usbhid 2-1:0.0: can't add hid device: -71 [ 1002.100164][T16356] usbhid: probe of 2-1:0.0 failed with error -71 [ 1002.180038][T16356] usb 2-1: USB disconnect, device number 79 [ 1002.257693][T12263] netlink: 'syz.0.14649': attribute type 1 has an invalid length. [ 1002.316566][T12263] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14649'. [ 1002.447020][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14654'. [ 1002.877015][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14665'. [ 1002.908761][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14665'. [ 1003.099670][T12334] loop4: detected capacity change from 0 to 8 [ 1003.147203][T12341] loop1: detected capacity change from 0 to 512 [ 1003.155138][T12334] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1003.219387][T12334] cramfs: Error -5 while decompressing! [ 1003.225667][T12334] cramfs: ffffffff964000a8(26)->ffff88805850d000(4096) [ 1003.242334][T12341] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 1003.242334][T12341] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1003.242334][T12341] [ 1003.268104][T12334] cramfs: Error -3 while decompressing! [ 1003.304468][T12334] cramfs: ffffffff964000c2(26)->ffff888041fd3000(4096) [ 1003.333297][T12334] cramfs: Error -3 while decompressing! [ 1003.361609][T12341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1003.372787][T12334] cramfs: ffffffff964000dc(16)->ffff888041c1a000(4096) [ 1003.404340][T12334] cramfs: Error -5 while decompressing! [ 1003.429530][T12334] cramfs: ffffffff964000a8(26)->ffff88805850d000(4096) [ 1003.475747][T12341] EXT4-fs (loop1): 1 truncate cleaned up [ 1003.481833][T12341] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000001002,inode_readahead_blks=0x0000000000100000,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue. Quota mode: none. [ 1003.517098][T12368] netlink: 'syz.0.14684': attribute type 2 has an invalid length. [ 1003.525074][T12368] netlink: 'syz.0.14684': attribute type 1 has an invalid length. [ 1003.789972][T12397] netlink: 'syz.3.14694': attribute type 46 has an invalid length. [ 1003.848285][T12400] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1003.883020][T12400] overlayfs: missing 'lowerdir' [ 1004.237237][T12448] netlink: 'syz.4.14711': attribute type 1 has an invalid length. [ 1004.268682][T12451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1004.281624][T12448] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14711'. [ 1004.817352][T12494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1004.900936][T12494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1005.012573][T16273] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1005.303781][T16273] usb 4-1: Using ep0 maxpacket: 32 [ 1005.429618][T16273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.557816][T10761] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1005.608494][T12543] x_tables: unsorted underflow at hook 2 [ 1005.632832][T16273] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1005.646738][T16273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.676856][T16273] usb 4-1: Product: syz [ 1005.681073][T16273] usb 4-1: Manufacturer: syz [ 1005.708012][T16273] usb 4-1: SerialNumber: syz [ 1005.729389][T16273] usb 4-1: config 0 descriptor?? [ 1005.791619][T16273] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1005.824985][T10761] usb 2-1: Using ep0 maxpacket: 16 [ 1005.909765][T12557] netlink: 'syz.2.14747': attribute type 10 has an invalid length. [ 1005.953411][T10761] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1005.961907][T10761] usb 2-1: config 0 has no interface number 0 [ 1005.970536][T10761] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1005.983999][T12562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14749'. [ 1005.998492][T10761] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1006.084767][T12569] netlink: 420 bytes leftover after parsing attributes in process `syz.2.14751'. [ 1006.135169][T10761] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1006.156373][ T4269] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1006.160345][T10761] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1006.202156][T10761] usb 2-1: Manufacturer: syz [ 1006.206819][T10761] usb 2-1: SerialNumber: syz [ 1006.240547][T10761] usb 2-1: config 0 descriptor?? [ 1006.252559][T16273] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1006.261826][T16273] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 1006.269718][T12526] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1006.286963][T16273] usb 4-1: USB disconnect, device number 88 [ 1006.423573][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 1006.534757][T12607] netlink: 'syz.2.14761': attribute type 3 has an invalid length. [ 1006.543381][T10761] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 1006.550416][T10761] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 1006.570659][T10761] usb 2-1: USB disconnect, device number 80 [ 1006.583943][ T4269] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1006.603444][ T4269] usb 1-1: config 0 has no interface number 0 [ 1006.615274][ T4269] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1006.667066][T12617] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.780920][ T4269] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1006.811068][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1006.821600][ T4269] usb 1-1: Product: syz [ 1006.836059][ T4269] usb 1-1: SerialNumber: syz [ 1006.861048][T12632] binder: 12631:12632 unknown command 0 [ 1006.878584][ T4269] usb 1-1: config 0 descriptor?? [ 1006.905302][T12632] binder: 12631:12632 ioctl c0306201 200000000640 returned -22 [ 1006.940323][ T4269] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1007.183537][ T4269] usb 1-1: USB disconnect, device number 48 [ 1007.355980][T12675] loop2: detected capacity change from 0 to 256 [ 1007.449147][T12675] FAT-fs (loop2): Directory bread(block 64) failed [ 1007.484444][T12675] FAT-fs (loop2): Directory bread(block 65) failed [ 1007.500298][T12675] FAT-fs (loop2): Directory bread(block 66) failed [ 1007.547908][T12675] FAT-fs (loop2): Directory bread(block 67) failed [ 1007.566271][T12675] FAT-fs (loop2): Directory bread(block 68) failed [ 1007.586973][T12675] FAT-fs (loop2): Directory bread(block 69) failed [ 1007.608626][T12675] FAT-fs (loop2): Directory bread(block 70) failed [ 1007.630177][T12675] FAT-fs (loop2): Directory bread(block 71) failed [ 1007.642650][T12675] FAT-fs (loop2): Directory bread(block 72) failed [ 1007.658290][T12675] FAT-fs (loop2): Directory bread(block 73) failed [ 1007.685378][T12696] dlm: dev_write: no op 0 0 [ 1008.159483][T12729] device sit0 entered promiscuous mode [ 1008.219511][T12729] netlink: 'syz.0.14797': attribute type 1 has an invalid length. [ 1008.249175][T12729] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14797'. [ 1008.333829][T12739] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 1008.369618][T12739] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1008.412121][T12739] Error parsing options; rc = [-22] [ 1008.597816][T12756] netlink: 'syz.1.14806': attribute type 1 has an invalid length. [ 1008.631566][T12756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14806'. [ 1008.677990][T12756] NCSI netlink: No device for ifindex 0 [ 1008.702373][T12763] cifs: Unknown parameter 'h}#úä [ 1008.702373][T12763] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1008.702373][T12763] SÃȘØÈžZ§6ŸÂ' [ 1008.803740][T12769] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14811'. [ 1008.845952][T12772] netlink: 'syz.1.14812': attribute type 1 has an invalid length. [ 1008.904076][T12772] netlink: 'syz.1.14812': attribute type 3 has an invalid length. [ 1008.967837][T12772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14812'. [ 1009.114954][T12785] loop4: detected capacity change from 0 to 16 [ 1009.170325][T12789] netlink: 'syz.3.14816': attribute type 15 has an invalid length. [ 1009.200652][T12789] netlink: 25 bytes leftover after parsing attributes in process `syz.3.14816'. [ 1009.222316][T12785] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1009.260704][ T4330] udevd[4330]: incorrect cramfs checksum on /dev/loop4 [ 1009.368948][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1009.477767][T12815] loop4: detected capacity change from 0 to 512 [ 1009.481439][T12804] device batadv1 entered promiscuous mode [ 1009.601568][T12815] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1009.637222][T12823] loop1: detected capacity change from 0 to 2048 [ 1009.658444][T12815] ext4 filesystem being mounted at /2760/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.748920][T12823] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1009.807260][T12823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.950061][T12823] UDF-fs: unknown compression code (0) [ 1009.981678][T12859] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14833'. [ 1010.353958][T12895] loop2: detected capacity change from 0 to 512 [ 1010.375027][T12898] netlink: 160 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1010.435369][T12909] netlink: 'syz.3.14848': attribute type 2 has an invalid length. [ 1010.483882][T12895] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 1010.550377][T12895] ext4 filesystem being mounted at /2962/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.838291][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14860'. [ 1011.077370][T12973] netlink: 'syz.2.14868': attribute type 1 has an invalid length. [ 1011.853802][T13012] __nla_validate_parse: 3 callbacks suppressed [ 1011.853821][T13012] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14881'. [ 1012.332894][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14887'. [ 1012.364431][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14887'. [ 1012.391669][T13023] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14887'. [ 1012.473913][T13031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14888'. [ 1012.647920][T13047] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1012.698989][T13047] overlayfs: conflicting options: userxattr,metacopy=on [ 1012.864519][T13067] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1012.934299][T13067] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1012.935048][T13075] loop4: detected capacity change from 0 to 256 [ 1012.959454][T13067] overlayfs: missing 'lowerdir' [ 1013.092711][T13075] FAT-fs (loop4): Directory bread(block 64) failed [ 1013.128605][T13075] FAT-fs (loop4): Directory bread(block 65) failed [ 1013.135358][T13075] FAT-fs (loop4): Directory bread(block 66) failed [ 1013.183219][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14910'. [ 1013.201355][T13075] FAT-fs (loop4): Directory bread(block 67) failed [ 1013.208029][T13075] FAT-fs (loop4): Directory bread(block 68) failed [ 1013.242071][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14913'. [ 1013.247434][T13075] FAT-fs (loop4): Directory bread(block 69) failed [ 1013.290322][T13075] FAT-fs (loop4): Directory bread(block 70) failed [ 1013.310345][T13075] FAT-fs (loop4): Directory bread(block 71) failed [ 1013.317333][T13075] FAT-fs (loop4): Directory bread(block 72) failed [ 1013.372432][T13075] FAT-fs (loop4): Directory bread(block 73) failed [ 1013.373583][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14915'. [ 1013.665247][T13135] loop1: detected capacity change from 0 to 1024 [ 1013.778836][T16273] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1013.899545][T17547] hfsplus: b-tree write err: -5, ino 4 [ 1014.026929][T13155] tmpfs: Bad value for 'mpol' [ 1014.217320][T16273] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 1014.245464][T16273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.251222][T13169] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1014.294364][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14933'. [ 1014.304489][T16273] usb 1-1: config 0 has no interface number 0 [ 1014.306910][T13169] overlayfs: missing 'lowerdir' [ 1014.313611][T16273] usb 1-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30 [ 1014.409780][T16273] usb 1-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 1014.428876][T13175] loop1: detected capacity change from 0 to 2048 [ 1014.437906][T16273] usb 1-1: config 0 interface 111 has no altsetting 0 [ 1014.458227][T16273] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1014.491892][T13175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1014.541706][T16273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.572749][T16273] usb 1-1: config 0 descriptor?? [ 1014.636767][T16273] usb 1-1: selecting invalid altsetting 0 [ 1014.926204][ T5654] usb 1-1: USB disconnect, device number 49 [ 1015.046650][T13241] loop4: detected capacity change from 0 to 512 [ 1015.154251][T13241] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 1015.154251][T13241] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1015.154251][T13241] [ 1015.306757][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.14950: inode #262144: comm syz.4.14950: iget: illegal inode # [ 1015.375866][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.14950: error while reading EA inode 262144 err=-117 [ 1015.436331][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.14950: inode #262144: comm syz.4.14950: iget: illegal inode # [ 1015.511552][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.14950: error while reading EA inode 262144 err=-117 [ 1015.578330][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.14950: inode #1: comm syz.4.14950: iget: illegal inode # [ 1015.651437][T13241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.14950: error while reading EA inode 1 err=-117 [ 1015.744052][T13241] EXT4-fs (loop4): 1 orphan inode deleted [ 1015.750243][T13241] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 1015.804439][T13239] loop1: detected capacity change from 0 to 32768 [ 1016.001130][T13239] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 1016.001130][T13239] [ 1016.212668][T13310] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1016.548783][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14979'. [ 1016.681392][T13342] loop1: detected capacity change from 0 to 2048 [ 1016.776311][T13342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.896597][T13336] loop4: detected capacity change from 0 to 8192 [ 1017.029399][T13336] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1017.038751][T13336] REISERFS (device loop4): using ordered data mode [ 1017.114124][T13336] reiserfs: using flush barriers [ 1017.120562][T13336] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1017.137653][T13336] REISERFS (device loop4): checking transaction log (loop4) [ 1017.283112][T13386] ceph: No source [ 1017.322885][T13388] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1017.526159][T13336] REISERFS (device loop4): Using tea hash to sort names [ 1017.534467][T13400] comedi comedi0: dt2814: I/O port conflict (0x5,2) [ 1017.558344][T13336] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1017.867795][T13426] libceph: resolve '0..' (ret=-3): failed [ 1018.034528][T13438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15014'. [ 1018.096060][T13443] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1018.709294][T13499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.810614][T13499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1018.915116][T13516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1019.302044][T13543] device gtp0 entered promiscuous mode [ 1019.445936][T10761] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1019.840481][T10761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1019.879157][T10761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1019.914141][T10761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1019.946856][T10761] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1020.008795][T10761] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1020.060582][T10761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.108857][T10761] usb 2-1: config 0 descriptor?? [ 1020.292600][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15078'. [ 1020.389387][T10761] hdpvr 2-1:0.0: firmware version 0x1e dated [ 1020.594663][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15089'. [ 1020.594693][T13660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15089'. [ 1020.594928][T13659] netlink: 'syz.3.15088': attribute type 1 has an invalid length. [ 1020.594950][T13659] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.15088'. [ 1020.594966][T13659] netlink: 'syz.3.15088': attribute type 1 has an invalid length. [ 1020.642122][T10761] hdpvr 2-1:0.0: device init failed [ 1020.642187][T10761] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1020.644873][T10761] usb 2-1: USB disconnect, device number 81 [ 1020.846999][T13677] ip6t_REJECT: ECHOREPLY is not supported [ 1020.955292][T13686] netlink: 'syz.2.15096': attribute type 15 has an invalid length. [ 1021.017102][T13692] netlink: 'syz.3.15098': attribute type 1 has an invalid length. [ 1021.402620][T13724] device gre0 left promiscuous mode [ 1021.483895][T13731] netlink: 'syz.0.15111': attribute type 1 has an invalid length. [ 1021.505105][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.515486][T13731] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15111'. [ 1021.529346][T16274] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1021.568928][T13724] device vlan0 left promiscuous mode [ 1021.585442][T13724] device ipvlan1 left promiscuous mode [ 1021.608391][T13724] device netdevsim0 left promiscuous mode [ 1021.636266][T13724] device wlan0 left promiscuous mode [ 1021.644745][T13724] device gretap1 left promiscuous mode [ 1021.661137][T13724] device bridge2 left promiscuous mode [ 1021.855156][T13744] loop1: detected capacity change from 0 to 512 [ 1021.941745][T13744] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1021.963544][T13744] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1022.018341][T13744] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1022.057630][T13744] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1022.096156][T13744] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 1022.119124][T13744] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1022.143291][T13744] EXT4-fs (loop1): mount failed [ 1022.192534][T16274] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1022.201814][T16274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.242187][T16274] usb 4-1: Product: syz [ 1022.246611][T16274] usb 4-1: Manufacturer: syz [ 1022.262178][T16274] usb 4-1: SerialNumber: syz [ 1022.319812][T16274] usb 4-1: config 0 descriptor?? [ 1022.397642][T16274] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1022.551191][T13800] loop2: detected capacity change from 0 to 1024 [ 1022.652097][T16273] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1022.854039][ T4269] usb 4-1: USB disconnect, device number 89 [ 1022.919216][T16273] usb 1-1: Using ep0 maxpacket: 8 [ 1023.128479][T13855] IPv6: Can't replace route, no match found [ 1023.251073][T16273] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1023.261407][T16273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.269528][T16273] usb 1-1: Product: syz [ 1023.280600][T13862] loop2: detected capacity change from 0 to 512 [ 1023.294541][T16273] usb 1-1: Manufacturer: syz [ 1023.309465][T16273] usb 1-1: SerialNumber: syz [ 1023.323943][T13862] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1023.351950][T16273] usb 1-1: config 0 descriptor?? [ 1023.423917][T16273] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1023.430264][T13862] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1023.525633][T13881] loop4: detected capacity change from 0 to 256 [ 1023.713304][T13881] FAT-fs (loop4): Directory bread(block 64) failed [ 1023.730928][T13881] FAT-fs (loop4): Directory bread(block 65) failed [ 1023.774908][T13881] FAT-fs (loop4): Directory bread(block 66) failed [ 1023.781498][T13881] FAT-fs (loop4): Directory bread(block 67) failed [ 1023.820473][T13881] FAT-fs (loop4): Directory bread(block 68) failed [ 1023.856216][T13881] FAT-fs (loop4): Directory bread(block 69) failed [ 1023.888603][T13881] FAT-fs (loop4): Directory bread(block 70) failed [ 1023.913435][T16273] gspca_sq930x: ucbus_write failed -71 [ 1023.919122][T16273] sq930x: probe of 1-1:0.0 failed with error -71 [ 1023.921829][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15159'. [ 1023.932483][T13881] FAT-fs (loop4): Directory bread(block 71) failed [ 1023.963610][T16273] usb 1-1: USB disconnect, device number 50 [ 1024.020528][T13881] FAT-fs (loop4): Directory bread(block 72) failed [ 1024.027131][T13881] FAT-fs (loop4): Directory bread(block 73) failed [ 1024.273441][T13936] x_tables: unsorted underflow at hook 2 [ 1025.670505][T14023] loop2: detected capacity change from 0 to 256 [ 1027.556677][T14055] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1027.718483][T14051] loop1: detected capacity change from 0 to 4096 [ 1027.748195][T14066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15206'. [ 1027.858457][T14051] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1027.945033][T14082] loop4: detected capacity change from 0 to 8 [ 1028.650875][T14155] 9pnet: Insufficient options for proto=fd [ 1028.761030][T14164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15239'. [ 1028.762098][T14133] loop4: detected capacity change from 0 to 8192 [ 1028.864536][T14133] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1028.898069][T14133] REISERFS (device loop4): using ordered data mode [ 1028.904770][T14133] reiserfs: using flush barriers [ 1028.932266][T14133] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1029.045312][T14133] REISERFS (device loop4): checking transaction log (loop4) [ 1029.075139][T14133] REISERFS (device loop4): Using r5 hash to sort names [ 1029.095726][T14189] overlayfs: missing 'lowerdir' [ 1029.127902][T14133] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1029.226091][T14133] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1029.438567][T14208] loop2: detected capacity change from 0 to 256 [ 1029.545273][T14208] exfat: Deprecated parameter 'namecase' [ 1029.649990][T14208] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1029.684596][T14222] openvswitch: netlink: Message has 4 unknown bytes. [ 1029.719157][T14218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1030.073184][T14241] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1030.597537][T14281] netlink: 'syz.1.15276': attribute type 3 has an invalid length. [ 1030.645786][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.712598][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.752074][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.815982][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.864395][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.893470][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.935780][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.964149][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1030.985312][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1031.006031][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15277'. [ 1031.235471][T14327] loop2: detected capacity change from 0 to 2048 [ 1031.299215][T14327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1031.398907][T14342] printk: syz.4.15298 (14342): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 1031.413497][T14343] 9pnet: p9_fd_create_tcp (14343): problem connecting socket to 127.0.0.1 [ 1031.728237][T14376] bond0: Error: Cannot enslave bond to itself. [ 1031.957281][T14397] ALSA: mixer_oss: invalid OSS volume 'u' [ 1032.114640][T14410] xt_l2tp: invalid flags combination: c [ 1032.242759][T14423] loop2: detected capacity change from 0 to 164 [ 1032.303305][T14423] rock: directory entry would overflow storage [ 1032.348194][T14423] rock: sig=0x66, size=4, remaining=3 [ 1032.402502][T14423] rock: directory entry would overflow storage [ 1032.408724][T14423] rock: sig=0x66, size=4, remaining=3 [ 1032.505460][T14423] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1032.597805][T14457] device gtp0 entered promiscuous mode [ 1033.374739][T14502] loop4: detected capacity change from 0 to 24 [ 1033.394482][T14502] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1033.498023][T14502] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1033.712347][T14516] device veth0_macvtap left promiscuous mode [ 1034.052069][T14541] device syz_tun left promiscuous mode [ 1034.090200][T14541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1034.108023][T14541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1034.116409][T14544] MTD: Couldn't look up './bus': -15 [ 1034.131873][T14541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1034.238460][T14497] loop1: detected capacity change from 0 to 32768 [ 1034.493057][T14497] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1034.493057][T14497] [ 1034.579665][T14497] ERROR: (device loop1): remounting filesystem as read-only [ 1034.602434][T14497] ialloc: diAlloc returned -5! [ 1035.188975][T14593] binder: BC_ACQUIRE_RESULT not supported [ 1035.223462][T14593] binder: 14592:14593 ioctl c0306201 200000000580 returned -22 [ 1035.286424][T14602] device veth0_macvtap left promiscuous mode [ 1035.903919][T14648] autofs4:pid:14648:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1035.962294][T14655] ieee802154 phy1 wpan1: encryption failed: -22 [ 1035.983227][T14648] autofs4:pid:14648:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1035.985461][T14659] loop4: detected capacity change from 0 to 128 [ 1036.171891][T14659] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1036.261163][T14659] hpfs: filesystem error: improperly stopped [ 1036.267231][T14659] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1036.342358][T14659] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1036.386690][T14659] hpfs: You really don't want any checks? You are crazy... [ 1036.411327][T14659] hpfs: hpfs_map_sector(): read error [ 1036.416798][T14659] hpfs: code page support is disabled [ 1036.453663][T14659] hpfs: hpfs_map_4sectors(): unaligned read [ 1036.488557][T14659] hpfs: hpfs_map_4sectors(): unaligned read [ 1036.518309][T14659] hpfs: filesystem error: unable to find root dir [ 1036.565739][T14659] hpfs: bad mount options. [ 1036.632129][T14703] loop1: detected capacity change from 0 to 256 [ 1036.919963][T14721] device veth0_macvtap left promiscuous mode [ 1037.460083][T14745] loop4: detected capacity change from 0 to 4096 [ 1037.591063][T14745] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1037.601864][T14769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1037.832637][ T4269] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1037.970743][T14796] netlink: 'syz.2.15444': attribute type 5 has an invalid length. [ 1038.028803][T14796] device  entered promiscuous mode [ 1038.131958][ T4269] usb 1-1: Using ep0 maxpacket: 8 [ 1038.281838][ T4269] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1038.309183][ T4269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.340274][ T4269] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 1038.381563][ T4269] usb 1-1: config 0 has no interface number 0 [ 1038.396952][ T4269] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1038.408810][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.428069][ T4269] usb 1-1: config 0 descriptor?? [ 1038.484821][T10761] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1038.747782][T14862] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1038.762664][T10761] usb 2-1: Using ep0 maxpacket: 8 [ 1038.775821][T14870] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.898487][T14875] netlink: 'syz.3.15468': attribute type 1 has an invalid length. [ 1038.920936][T14875] __nla_validate_parse: 39 callbacks suppressed [ 1038.920955][T14875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15468'. [ 1038.933898][T10761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1038.981836][ T4269] usb 1-1: USB disconnect, device number 51 [ 1039.051613][T10761] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 1039.060074][T10761] usb 2-1: config 11 has no interface number 0 [ 1039.091152][T14897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.096169][T10761] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1039.156980][T10761] usb 2-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.219177][T10761] usb 2-1: config 11 interface 244 has no altsetting 0 [ 1039.414901][T10761] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1039.424203][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.468195][T10761] usb 2-1: Product: syz [ 1039.478813][T10761] usb 2-1: Manufacturer: syz [ 1039.483646][T10761] usb 2-1: SerialNumber: syz [ 1039.721229][T14949] netlink: 'syz.4.15491': attribute type 16 has an invalid length. [ 1039.740566][T14949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15491'. [ 1039.796134][T14955] device veth0_macvtap left promiscuous mode [ 1039.822111][T10761] usb 2-1: USB disconnect, device number 82 [ 1041.344849][T15047] netlink: 'syz.2.15519': attribute type 21 has an invalid length. [ 1041.379062][T15047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15519'. [ 1042.158040][T15098] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1042.416176][T15061] loop1: detected capacity change from 0 to 32768 [ 1042.568720][T15061] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1042.729073][ T4269] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1042.934274][T15141] loop1: detected capacity change from 0 to 64 [ 1043.028142][ T4269] usb 1-1: Using ep0 maxpacket: 8 [ 1043.223613][ T4269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1043.349314][ T4269] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1043.457755][T15172] loop2: detected capacity change from 0 to 256 [ 1043.593772][T15172] FAT-fs (loop2): Directory bread(block 64) failed [ 1043.609654][T15172] FAT-fs (loop2): Directory bread(block 65) failed [ 1043.639777][T15172] FAT-fs (loop2): Directory bread(block 66) failed [ 1043.648761][ T4269] usb 1-1: string descriptor 0 read error: -22 [ 1043.655496][ T4269] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1043.689115][T15172] FAT-fs (loop2): Directory bread(block 67) failed [ 1043.709711][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.723214][T15172] FAT-fs (loop2): Directory bread(block 68) failed [ 1043.730044][T15172] FAT-fs (loop2): Directory bread(block 69) failed [ 1043.759130][T15172] FAT-fs (loop2): Directory bread(block 70) failed [ 1043.786741][ T4269] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1043.791506][T15172] FAT-fs (loop2): Directory bread(block 71) failed [ 1043.818926][ T4269] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1043.820626][T15172] FAT-fs (loop2): Directory bread(block 72) failed [ 1043.840772][ T4269] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1043.861741][T15172] FAT-fs (loop2): Directory bread(block 73) failed [ 1043.904930][ T4269] usb 1-1: media controller created [ 1043.968081][ T4269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1044.130561][ T4269] usb 1-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1044.203848][ T4269] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1044.456552][ T4269] DVB: Unable to find symbol qt1010_attach() [ 1044.533031][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15579'. [ 1044.622383][ T4269] usb 1-1: USB disconnect, device number 52 [ 1045.487043][ T4269] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1045.543211][T15355] netlink: 'syz.4.15612': attribute type 1 has an invalid length. [ 1045.775582][ T4269] usb 3-1: Using ep0 maxpacket: 32 [ 1046.118515][ T4269] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1046.138846][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.197563][ T4269] usb 3-1: Product: syz [ 1046.202120][ T4269] usb 3-1: Manufacturer: syz [ 1046.243140][ T4269] usb 3-1: SerialNumber: syz [ 1046.280715][ T4269] usb 3-1: config 0 descriptor?? [ 1046.344313][ T4269] ati_remote_probe: Unexpected desc.bNumEndpoints [ 1046.542644][T15425] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1046.578149][T16356] usb 3-1: USB disconnect, device number 71 [ 1046.787828][T15445] Cannot find del_set index 3 as target [ 1047.730074][T15506] netlink: 'syz.3.15662': attribute type 30 has an invalid length. [ 1047.746857][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15662'. [ 1048.218818][T15564] device gtp0 entered promiscuous mode [ 1048.608019][T15597] loop2: detected capacity change from 0 to 128 [ 1048.750387][T15597] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1048.765949][T15607] loop4: detected capacity change from 0 to 512 [ 1048.772600][T15597] FAT-fs (loop2): Filesystem has been set read-only [ 1048.850279][T15607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1049.002807][T15607] EXT4-fs (loop4): 1 truncate cleaned up [ 1049.043717][T15607] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,user_xattr,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 1049.066805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.398678][T15647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.520073][T15657] netlink: 'syz.3.15696': attribute type 21 has an invalid length. [ 1049.586802][T15657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15696'. [ 1049.651293][T15657] netlink: 'syz.3.15696': attribute type 5 has an invalid length. [ 1049.677721][T15657] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15696'. [ 1050.115276][T15706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.291299][T15718] loop4: detected capacity change from 0 to 512 [ 1050.327007][T15718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1050.370561][T15718] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.15717: inode has both inline data and extents flags [ 1050.394942][T15728] xt_l2tp: invalid flags combination: 0 [ 1050.412761][T15718] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.15717: couldn't read orphan inode 15 (err -117) [ 1050.435695][T15718] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,nojournal_checksum,norecovery,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1050.456925][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.705771][T15751] netlink: 'syz.1.15728': attribute type 10 has an invalid length. [ 1051.268869][T15802] netlink: 'syz.1.15741': attribute type 1 has an invalid length. [ 1051.421569][T15816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15745'. [ 1051.452703][T15816] netlink: 'syz.2.15745': attribute type 3 has an invalid length. [ 1051.519810][T16268] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1051.719587][T16356] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1051.794500][T16268] usb 4-1: Using ep0 maxpacket: 32 [ 1051.922939][T16268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1051.934483][T16268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1051.944517][T16268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1051.989177][T16356] usb 1-1: Using ep0 maxpacket: 32 [ 1052.029911][T16356] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 1052.115245][T16268] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1052.124699][T16268] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1052.135502][T16268] usb 4-1: Product: syz [ 1052.139756][T16268] usb 4-1: Manufacturer: syz [ 1052.144532][T16268] usb 4-1: SerialNumber: syz [ 1052.152777][T16268] usb 4-1: config 0 descriptor?? [ 1052.420491][ T4269] usb 4-1: USB disconnect, device number 90 [ 1053.002781][T16356] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1053.035595][T16356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.044368][T16356] usb 1-1: Product: syz [ 1053.063944][T16356] usb 1-1: Manufacturer: syz [ 1053.080079][T16356] usb 1-1: SerialNumber: syz [ 1053.087794][T16356] usb 1-1: config 0 descriptor?? [ 1053.409991][T16356] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 1053.436469][T16356] usb 1-1: USB disconnect, device number 53 [ 1053.701465][T15887] loop4: detected capacity change from 0 to 1024 [ 1053.859254][ T4305] hfsplus: b-tree write err: -5, ino 4 [ 1053.923188][T15902] netlink: 'syz.3.15767': attribute type 1 has an invalid length. [ 1053.931956][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15767'. [ 1054.476563][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15785'. [ 1054.499291][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15785'. [ 1054.524359][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15785'. [ 1054.561949][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15785'. [ 1054.927798][T15969] loop1: detected capacity change from 0 to 8192 [ 1054.993125][T15969] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1055.012563][T15969] REISERFS (device loop1): using ordered data mode [ 1055.019614][T15969] reiserfs: using flush barriers [ 1055.063236][T15969] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1055.082423][T15969] REISERFS (device loop1): checking transaction log (loop1) [ 1055.094305][T15969] REISERFS (device loop1): Using r5 hash to sort names [ 1055.110008][T15969] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1055.173685][T15988] loop4: detected capacity change from 0 to 512 [ 1055.217482][T15988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1055.338545][T15988] EXT4-fs (loop4): 1 truncate cleaned up [ 1055.369521][T15988] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,nodiscard,nodioread_nolock,,errors=continue. Quota mode: none. [ 1055.705101][T16025] netlink: 'syz.2.15807': attribute type 21 has an invalid length. [ 1055.900791][T16036] fuse: blksize only supported for fuseblk [ 1056.619289][T16087] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 1057.321470][T16268] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1057.341518][T16148] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15850'. [ 1057.433327][ T26] audit: type=1326 audit(2000001452.610:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.4.15851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4525f4ceb9 code=0x0 [ 1057.455334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.599449][T16176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15854'. [ 1057.759033][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15858'. [ 1057.862602][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15858'. [ 1057.899823][T16268] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1057.925679][T16268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.970033][T16268] usb 2-1: Product: syz [ 1057.984498][T16268] usb 2-1: Manufacturer: syz [ 1057.989335][T16268] usb 2-1: SerialNumber: syz [ 1058.081196][T16268] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1058.233416][T16222] netlink: 'syz.2.15871': attribute type 4 has an invalid length. [ 1058.261603][T16222] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15871'. [ 1058.392791][T16235] netlink: 180 bytes leftover after parsing attributes in process `syz.3.15875'. [ 1058.618413][T16254] kAFS: unable to lookup cell '.,' [ 1058.711465][T16268] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1058.763200][T16262] loop4: detected capacity change from 0 to 1024 [ 1058.848433][T16262] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1058.887568][T16262] hfsplus: filesystem is marked journaled, leaving read-only. [ 1059.146002][T16356] usb 2-1: USB disconnect, device number 83 [ 1059.468424][T16315] loop2: detected capacity change from 0 to 4096 [ 1059.520241][T16325] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1059.583490][T16315] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1059.798658][ T4287] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1059.844677][ T4287] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1059.851751][ T4287] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1060.026226][T16268] usb 2-1: Service connection timeout for: 256 [ 1060.032453][T16268] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1060.052010][T16366] netlink: 'syz.4.15914': attribute type 1 has an invalid length. [ 1060.085855][T16268] ath9k_htc: Failed to initialize the device [ 1060.095123][T16366] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.15914'. [ 1060.111060][T16356] usb 2-1: ath9k_htc: USB layer deinitialized [ 1060.281165][T16389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15920'. [ 1060.909025][T16452] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15941'. [ 1060.998861][T16460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1061.210751][T16487] CIFS mount error: No usable UNC path provided in device string! [ 1061.210751][T16487] [ 1061.242559][T16487] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1061.356508][T16498] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 1061.451324][T16503] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.15954'. [ 1061.882611][T16525] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1061.974857][T16530] loop4: detected capacity change from 0 to 256 [ 1062.053299][T16534] loop1: detected capacity change from 0 to 1024 [ 1062.151960][T16534] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1062.173709][T16530] FAT-fs (loop4): Directory bread(block 64) failed [ 1062.205594][T16530] FAT-fs (loop4): Directory bread(block 65) failed [ 1062.228138][T16534] EXT4-fs (loop1): invalid journal inode [ 1062.259152][T16530] FAT-fs (loop4): Directory bread(block 66) failed [ 1062.277121][T16534] EXT4-fs (loop1): can't get journal size [ 1062.287981][T16530] FAT-fs (loop4): Directory bread(block 67) failed [ 1062.304630][T16530] FAT-fs (loop4): Directory bread(block 68) failed [ 1062.314499][T16534] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 1062.335598][T16530] FAT-fs (loop4): Directory bread(block 69) failed [ 1062.364041][T16530] FAT-fs (loop4): Directory bread(block 70) failed [ 1062.400287][T16530] FAT-fs (loop4): Directory bread(block 71) failed [ 1062.443850][T16530] FAT-fs (loop4): Directory bread(block 72) failed [ 1062.450691][T16530] FAT-fs (loop4): Directory bread(block 73) failed [ 1062.720457][T16268] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1062.865118][T16579] netlink: 'syz.3.15986': attribute type 10 has an invalid length. [ 1062.987658][T16268] usb 1-1: Using ep0 maxpacket: 8 [ 1063.073454][T16594] __nla_validate_parse: 1 callbacks suppressed [ 1063.073471][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15981'. [ 1063.169432][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15981'. [ 1063.189907][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15981'. [ 1063.297675][T16268] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1063.318865][T16268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.341875][T16268] usb 1-1: Product: syz [ 1063.356854][T16268] usb 1-1: Manufacturer: syz [ 1063.373128][T16268] usb 1-1: SerialNumber: syz [ 1063.409128][T16622] loop4: detected capacity change from 0 to 512 [ 1063.418470][T16268] usb 1-1: config 0 descriptor?? [ 1063.460201][T16268] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1063.735857][T16268] pwc: send_video_command error -71 [ 1063.741591][T16268] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1063.762157][T16268] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1063.786179][T16268] usb 1-1: USB disconnect, device number 54 [ 1064.062220][T16622] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1064.115862][T16622] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1064.174190][T16622] System zones: 0-2, 18-18, 34-35 [ 1064.208745][T16622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1064.399053][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16001'. [ 1064.874541][T16713] loop4: detected capacity change from 0 to 128 [ 1064.965336][T16722] netlink: 'syz.1.16017': attribute type 1 has an invalid length. [ 1065.022575][T16722] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16017'. [ 1065.108605][T16729] loop2: detected capacity change from 0 to 128 [ 1065.233498][T16729] UBIFS error (pid: 16729): cannot open "./file0", error -22 [ 1065.910277][T16796] netlink: 'syz.4.16038': attribute type 10 has an invalid length. [ 1066.439088][T16838] openvswitch: netlink: Actions may not be safe on all matching packets [ 1066.598000][T16843] QAT: Invalid ioctl 1075883590 [ 1066.635621][T16843] QAT: Invalid ioctl 1075883590 [ 1066.671114][T16843] QAT: Invalid ioctl 1075883590 [ 1066.740079][T16843] QAT: Invalid ioctl 1075883590 [ 1066.772656][T16843] QAT: Invalid ioctl 1075883590 [ 1066.777799][T16843] QAT: Invalid ioctl 1075883590 [ 1066.845115][T16843] QAT: Invalid ioctl 1075883590 [ 1066.895078][T16843] QAT: Invalid ioctl 1075883590 [ 1066.934716][T16843] QAT: Invalid ioctl 1075883590 [ 1066.981151][T16843] QAT: Invalid ioctl 1075883590 [ 1067.237615][T16877] netlink: 'syz.2.16064': attribute type 1 has an invalid length. [ 1067.274458][T16877] netlink: 'syz.2.16064': attribute type 2 has an invalid length. [ 1067.352123][T16889] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1067.391098][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16068'. [ 1067.538446][T16904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16074'. [ 1067.593864][T16908] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1067.914809][T16939] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1067.915064][T16940] SET target dimension over the limit! [ 1067.980607][T16939] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1067.990229][T16939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.043634][T16945] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16085'. [ 1068.094392][T16952] netlink: 'syz.3.16089': attribute type 8 has an invalid length. [ 1068.380789][T16974] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1068.449079][T16979] futex_wake_op: syz.1.16098 tries to shift op by 32; fix this program [ 1068.654806][T16998] loop1: detected capacity change from 0 to 64 [ 1068.776520][T16998] Trying to free block not in datazone [ 1068.803364][T16998] Trying to free block not in datazone [ 1068.831682][T16998] Trying to free block not in datazone [ 1068.858018][T16998] Trying to free block not in datazone [ 1068.880927][T16998] minix_free_block (loop1:6): bit already cleared [ 1068.916168][T16998] Trying to free block not in datazone [ 1068.969374][T16998] Trying to free block not in datazone [ 1069.834945][T17084] loop1: detected capacity change from 0 to 128 [ 1070.084061][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16138'. [ 1070.141342][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16140'. [ 1070.210674][T17109] netlink: 830 bytes leftover after parsing attributes in process `syz.4.16141'. [ 1071.368902][T16355] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1071.668279][T16355] usb 4-1: Using ep0 maxpacket: 32 [ 1071.738569][T17136] ODEBUG: Out of memory. ODEBUG disabled [ 1071.839539][T16355] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1071.860674][T16355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.948307][T16355] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1072.301429][T17246] netlink: 'syz.0.16183': attribute type 1 has an invalid length. [ 1072.332221][T17249] netlink: 'syz.2.16184': attribute type 3 has an invalid length. [ 1072.340586][T17246] netlink: 220 bytes leftover after parsing attributes in process `syz.0.16183'. [ 1072.406023][T16355] gspca_nw80x: reg_r err -71 [ 1072.410907][T16355] nw80x: probe of 4-1:3.0 failed with error -71 [ 1072.459746][T16355] usb 4-1: USB disconnect, device number 91 [ 1072.584466][T17136] syz.1.16149 (17136): drop_caches: 2 [ 1072.859319][T17287] Cannot find del_set index 4 as target [ 1072.990346][T17301] netlink: 'syz.0.16199': attribute type 11 has an invalid length. [ 1073.004630][T17301] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16199'. [ 1073.048160][T17305] netlink: 'syz.2.16202': attribute type 1 has an invalid length. [ 1073.473757][T17336] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.16212'. [ 1073.746307][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16218'. [ 1073.799246][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16218'. [ 1074.073849][T16355] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1074.102015][T17388] loop2: detected capacity change from 0 to 256 [ 1074.187465][T17388] FAT-fs (loop2): Directory bread(block 64) failed [ 1074.244710][T17388] FAT-fs (loop2): Directory bread(block 65) failed [ 1074.244854][T17388] FAT-fs (loop2): Directory bread(block 66) failed [ 1074.244888][T17388] FAT-fs (loop2): Directory bread(block 67) failed [ 1074.244967][T17388] FAT-fs (loop2): Directory bread(block 68) failed [ 1074.245001][T17388] FAT-fs (loop2): Directory bread(block 69) failed [ 1074.245072][T17388] FAT-fs (loop2): Directory bread(block 70) failed [ 1074.245105][T17388] FAT-fs (loop2): Directory bread(block 71) failed [ 1074.245175][T17388] FAT-fs (loop2): Directory bread(block 72) failed [ 1074.245208][T17388] FAT-fs (loop2): Directory bread(block 73) failed [ 1074.511733][T17409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16235'. [ 1074.532110][T16355] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 1074.553493][T16355] usb 4-1: config 0 has no interface number 0 [ 1074.561021][T16355] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1074.615480][T17415] SET target dimension over the limit! [ 1074.668183][T17418] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1074.744992][T17426] No source specified [ 1074.793584][T16355] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1074.816061][T16355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.816149][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16243'. [ 1074.833020][T16355] usb 4-1: Product: syz [ 1074.838816][T16355] usb 4-1: Manufacturer: syz [ 1074.847768][T16355] usb 4-1: SerialNumber: syz [ 1074.874158][T16355] usb 4-1: config 0 descriptor?? [ 1074.907852][T17360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1074.940924][T16355] ums-karma 4-1:0.46: USB Mass Storage device detected [ 1075.062757][T16355] ums-karma: probe of 4-1:0.46 failed with error -5 [ 1075.215599][T17468] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1075.224591][ T4269] usb 4-1: USB disconnect, device number 92 [ 1075.646122][T17506] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1076.297370][ T4269] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1076.585955][ T4269] usb 4-1: Using ep0 maxpacket: 32 [ 1076.658344][T17604] 9pnet: Could not find request transport: xen [ 1076.746648][ T4269] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.773326][ T4269] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.851479][T17615] loop4: detected capacity change from 0 to 1024 [ 1076.939800][ T4269] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1076.960343][T16273] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1076.983323][ T4269] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1077.010550][ T4269] usb 4-1: Product: syz [ 1077.024604][ T4269] usb 4-1: Manufacturer: syz [ 1077.089376][ T4269] hub 4-1:4.0: USB hub found [ 1077.313211][ T4269] hub 4-1:4.0: 8 ports detected [ 1077.323228][T17657] __nla_validate_parse: 1 callbacks suppressed [ 1077.323246][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16311'. [ 1077.345274][ T4269] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1077.387882][T16273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.398215][T16273] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.526826][T16264] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1077.550277][ T4269] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1077.561759][ T4269] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1077.601613][T16273] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1077.622875][ T4269] usb 4-1: USB disconnect, device number 93 [ 1077.633425][T16273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.648860][T16273] usb 3-1: Product: syz [ 1077.653082][T16273] usb 3-1: Manufacturer: syz [ 1077.658992][T16273] usb 3-1: SerialNumber: syz [ 1077.668896][T16273] usb 3-1: config 0 descriptor?? [ 1077.783338][T16264] usb 2-1: Using ep0 maxpacket: 32 [ 1077.922434][T16264] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1077.937738][T16264] usb 2-1: config 0 has no interface number 0 [ 1077.944943][T16264] usb 2-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1077.959282][T16264] usb 2-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1077.975410][T16264] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1077.996252][T16264] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1078.001092][T16273] usb 3-1: USB disconnect, device number 72 [ 1078.007939][T16264] usb 2-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1078.167240][T17723] netlink: 'syz.0.16329': attribute type 21 has an invalid length. [ 1078.184099][T17723] IPv6: NLM_F_CREATE should be specified when creating new route [ 1078.195036][T17723] IPv6: Can't replace route, no match found [ 1078.211806][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16328'. [ 1078.222952][T16264] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1078.249269][T16264] usb 2-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 1078.270881][T16264] usb 2-1: Product: syz [ 1078.282622][T16264] usb 2-1: Manufacturer: syz [ 1078.305289][T16264] usb 2-1: SerialNumber: syz [ 1078.316815][T16264] usb 2-1: config 0 descriptor?? [ 1078.350282][T17649] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1078.372813][T16264] spcp8x5 2-1:0.110: required endpoints missing [ 1078.518377][T17748] sctp: [Deprecated]: syz.3.16336 (pid 17748) Use of int in max_burst socket option. [ 1078.518377][T17748] Use struct sctp_assoc_value instead [ 1078.654782][T16264] usb 2-1: USB disconnect, device number 84 [ 1078.868483][T17776] vivid-000: disconnect [ 1078.910966][T17774] vivid-000: reconnect [ 1079.053023][T17790] loop2: detected capacity change from 0 to 256 [ 1079.117403][T17797] cgroup: Unknown subsys name 'noxattr' [ 1079.154998][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1079.193746][T17790] FAT-fs (loop2): Directory bread(block 64) failed [ 1079.228280][T17790] FAT-fs (loop2): Directory bread(block 65) failed [ 1079.253171][T17790] FAT-fs (loop2): Directory bread(block 66) failed [ 1079.320096][T17790] FAT-fs (loop2): Directory bread(block 67) failed [ 1079.350139][T17790] FAT-fs (loop2): Directory bread(block 68) failed [ 1079.364316][T17790] FAT-fs (loop2): Directory bread(block 69) failed [ 1079.389043][T17790] FAT-fs (loop2): Directory bread(block 70) failed [ 1079.410853][T17790] FAT-fs (loop2): Directory bread(block 71) failed [ 1079.451308][T17790] FAT-fs (loop2): Directory bread(block 72) failed [ 1079.462067][T16268] Bluetooth: hci4: command 0x0405 tx timeout [ 1079.483127][T17790] FAT-fs (loop2): Directory bread(block 73) failed [ 1079.526024][T16264] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1079.739069][T17828] loop1: detected capacity change from 0 to 4096 [ 1079.782512][T16264] usb 4-1: Using ep0 maxpacket: 16 [ 1079.814842][T17828] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1079.921493][T16264] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1079.930129][T16264] usb 4-1: config 254 has no interface number 0 [ 1079.983016][T16264] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1080.018658][T16264] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1080.136043][ T4269] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1080.188865][T16264] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1080.197980][T16264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.228840][T16264] usb 4-1: Product: syz [ 1080.244375][T16264] usb 4-1: Manufacturer: syz [ 1080.249234][T16264] usb 4-1: SerialNumber: syz [ 1080.317412][T17803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1080.342900][T17879] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16376'. [ 1080.561089][T17803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1080.596079][T16264] usbtest 4-1:254.235: Linux gadget zero [ 1080.601796][T16264] usbtest 4-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1080.606995][ T4269] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1080.659089][ T4269] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1080.856277][T16264] usb 4-1: USB disconnect, device number 94 [ 1080.883849][ T4269] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.883885][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.883905][ T4269] usb 3-1: Product: syz [ 1080.883921][ T4269] usb 3-1: Manufacturer: syz [ 1080.883936][ T4269] usb 3-1: SerialNumber: syz [ 1081.225954][ T4269] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1081.239112][ T4269] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 1081.263780][ T4269] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1081.279382][ T4269] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 1081.420799][ T4269] usb 3-1: USB disconnect, device number 73 [ 1081.708100][T27658] udevd[27658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.314795][T18039] loop1: detected capacity change from 0 to 24 [ 1083.176365][T18103] netlink: 'syz.3.16438': attribute type 13 has an invalid length. [ 1083.177973][T18101] loop1: detected capacity change from 0 to 164 [ 1083.251011][T18106] syz.2.16441[18106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.251109][T18106] syz.2.16441[18106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.301839][T18075] syz.4.16429 (18075): drop_caches: 2 [ 1083.347741][T18111] loop2: detected capacity change from 0 to 512 [ 1083.364741][T18101] Unable to read rock-ridge attributes [ 1083.474061][T18111] EXT4-fs (loop2): #blocks per group too big: 294912 [ 1083.513888][T18101] Unable to read rock-ridge attributes [ 1083.534998][T18101] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1083.536056][T18120] PKCS7: Unknown OID: [4] 0.0 [ 1083.598630][T18120] PKCS7: Only support pkcs7_signedData type [ 1083.639203][T18123] netlink: 'syz.3.16445': attribute type 5 has an invalid length. [ 1083.993404][T18156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.016015][T16268] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1084.245176][T18173] netlink: 332 bytes leftover after parsing attributes in process `syz.4.16460'. [ 1084.301126][T16268] usb 4-1: Using ep0 maxpacket: 8 [ 1084.433085][T16268] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1084.461040][T16268] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.493118][T16268] usb 4-1: config 0 has no interface number 0 [ 1084.508402][ T4269] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1084.621457][T18200] loop4: detected capacity change from 0 to 256 [ 1084.684917][T16268] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1084.685816][T18200] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1084.705279][T16268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.748571][T16268] usb 4-1: Product: syz [ 1084.752818][T16268] usb 4-1: Manufacturer: syz [ 1084.774407][T16268] usb 4-1: SerialNumber: syz [ 1084.807761][T16268] usb 4-1: config 0 descriptor?? [ 1084.946135][ T4269] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1084.955457][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.988180][ T4269] usb 1-1: config 0 descriptor?? [ 1085.085200][T16268] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1085.091979][T16268] usb 4-1: No valid video chain found. [ 1085.174986][T18245] loop1: detected capacity change from 0 to 1024 [ 1085.341990][ T4269] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1085.360207][ T4269] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1085.397959][ T5654] usb 4-1: USB disconnect, device number 95 [ 1085.416522][ T4269] [drm:udl_init] *ERROR* Selecting channel failed [ 1085.500297][ T4269] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1085.514522][ T4269] [drm] Initialized udl on minor 2 [ 1085.534856][ T4269] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1085.553354][ T4305] hfsplus: b-tree write err: -5, ino 4 [ 1085.557953][ T4269] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1085.602505][ T4269] usb 1-1: USB disconnect, device number 55 [ 1085.641902][T16356] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1085.702091][T16356] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1085.750202][T18241] syz.2.16476 (18241): drop_caches: 2 [ 1085.773288][T16356] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1086.143783][T18315] device ipip0 entered promiscuous mode [ 1086.200458][T18301] loop1: detected capacity change from 0 to 4096 [ 1086.266409][T18301] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1086.305872][T18301] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1086.382220][T18301] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1086.612318][T18355] syz.3.16507 (18355): drop_caches: 2 [ 1086.816194][T18301] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1086.848040][T18301] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.16491: Logical block already allocated [ 1086.965699][T18336] loop4: detected capacity change from 0 to 32768 [ 1087.008138][T18381] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16515'. [ 1087.060385][T18381] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1087.082731][T18381] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1087.242204][T18336] XFS (loop4): Mounting V5 Filesystem [ 1087.450568][T18336] XFS (loop4): Ending clean mount [ 1087.530277][T16268] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1087.546200][T16268] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 1087.565460][T16268] XFS (loop4): Unmount and run xfs_repair [ 1087.571320][T16268] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1087.591567][T16268] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1087.601695][T16268] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 1087.611362][T16268] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1087.620785][T16268] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 1087.630506][T16268] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1087.639668][T16268] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1087.715106][T16268] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1087.768398][T16268] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1087.777889][T18336] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 1087.832695][T18336] XFS (loop4): Failed to initialize disk quotas. [ 1087.959726][ T4291] XFS (loop4): Unmounting Filesystem [ 1088.151623][T16268] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1088.570322][T16268] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 1088.609200][T16268] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1088.652228][T16268] usb 2-1: config 1 has no interface number 0 [ 1088.669171][T16268] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.718148][T16268] usb 2-1: config 1 interface 188 has no altsetting 0 [ 1088.901793][T16268] usb 2-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1088.930656][T16268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.965905][T16268] usb 2-1: Product: syz [ 1088.971129][T16268] usb 2-1: Manufacturer: syz [ 1088.987045][T16268] usb 2-1: SerialNumber: syz [ 1089.019254][T16264] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1089.117767][T18535] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 1089.136808][T18535] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1089.154282][T18535] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 1089.280984][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16569'. [ 1089.353204][T16268] usb 2-1: unknown interface protocol 0xc1, assuming v1 [ 1089.375922][T16268] usb 2-1: 188:2 : does not exist [ 1089.415354][T16268] usb 2-1: USB disconnect, device number 85 [ 1089.586081][T16264] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1089.611542][T16264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.631018][T16264] usb 4-1: Product: syz [ 1089.635495][T16264] usb 4-1: Manufacturer: syz [ 1089.685098][T16264] usb 4-1: SerialNumber: syz [ 1089.699966][T16264] usb 4-1: config 0 descriptor?? [ 1089.729433][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.758480][T16264] ch341 4-1:0.0: ch341-uart converter detected [ 1089.895011][T18612] qrtr: Invalid version 0 [ 1089.981415][T16264] usb 4-1: failed to receive control message: -71 [ 1089.997090][T16264] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1090.042556][T16264] usb 4-1: USB disconnect, device number 96 [ 1090.069850][T16264] ch341 4-1:0.0: device disconnected [ 1090.112820][T18610] loop2: detected capacity change from 0 to 4096 [ 1090.160290][T18631] xt_socket: unknown flags 0x50 [ 1090.173987][T18610] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1090.311916][T18610] ntfs3: loop2: failed to convert "c46c" to cp869 [ 1090.566146][T18653] Cannot find add_set index 3 as target [ 1090.668410][T18665] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.16598'. [ 1090.707678][T18596] loop4: detected capacity change from 0 to 32768 [ 1090.750415][T18670] Timeout policy `syz0' can only be used by L3 protocol number 3 [ 1090.794457][T18596] XFS: noikeep mount option is deprecated. [ 1090.926130][T18596] XFS (loop4): Mounting V5 Filesystem [ 1091.159423][T18707] loop1: detected capacity change from 0 to 128 [ 1091.194063][T18596] XFS (loop4): Ending clean mount [ 1091.223512][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16612'. [ 1091.246003][T18596] XFS (loop4): Quotacheck needed: Please wait. [ 1091.294948][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16612'. [ 1091.319899][T18707] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1091.379763][T18729] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1091.387448][T18707] ext4 filesystem being mounted at /3221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.520086][T18596] XFS (loop4): Quotacheck: Done. [ 1091.837196][ T4291] XFS (loop4): Unmounting Filesystem [ 1092.375990][T10761] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1092.493560][T16268] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1092.579088][T16263] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1092.643310][T10761] usb 4-1: Using ep0 maxpacket: 32 [ 1092.656227][T18808] loop4: detected capacity change from 0 to 2048 [ 1092.742812][T18808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1092.846367][T16263] usb 2-1: Using ep0 maxpacket: 16 [ 1092.884203][T16268] usb 1-1: config 0 has no interfaces? [ 1092.917215][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16645'. [ 1092.928340][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16645'. [ 1092.938053][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16645'. [ 1092.952854][T10761] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1092.953375][T18831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.969371][T10761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.986739][T16263] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1092.994185][T18833] loop4: detected capacity change from 0 to 4096 [ 1092.995130][T16263] usb 2-1: config 0 has no interface number 0 [ 1093.015920][T16263] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1093.039182][T10761] usb 4-1: Product: syz [ 1093.043554][T10761] usb 4-1: Manufacturer: syz [ 1093.048264][T10761] usb 4-1: SerialNumber: syz [ 1093.054775][T18833] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1093.080917][T18833] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1093.089899][T10761] usb 4-1: config 0 descriptor?? [ 1093.096218][T16268] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1093.113999][T16268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.129440][T18833] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1093.143240][T16268] usb 1-1: Product: syz [ 1093.174803][T18843] bond0: option arp_validate: invalid value (18446744073491447809) [ 1093.177717][ T4406] bond0: (slave bond_slave_0): interface is now down [ 1093.184048][T16268] usb 1-1: Manufacturer: syz [ 1093.209907][T16268] usb 1-1: SerialNumber: syz [ 1093.219489][ T4406] bond0: (slave bond_slave_1): interface is now down [ 1093.233334][ T4406] bond0: now running without any active interface! [ 1093.252834][T16263] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1093.284376][T16268] r8152-cfgselector 1-1: config 0 descriptor?? [ 1093.298895][T16263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.321904][T18833] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.16643: Logical block already allocated [ 1093.323309][T16263] usb 2-1: Product: syz [ 1093.340716][T18850] netlink: 'syz.2.16649': attribute type 1 has an invalid length. [ 1093.349293][T16263] usb 2-1: Manufacturer: syz [ 1093.359913][T16263] usb 2-1: SerialNumber: syz [ 1093.372765][T16263] usb 2-1: config 0 descriptor?? [ 1093.401939][T10761] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 097 [ 1093.595283][T16268] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1093.614279][T17547] usb 1-1: config 0 descriptor?? [ 1093.646203][T16268] usb 4-1: USB disconnect, device number 97 [ 1093.747381][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16657'. [ 1093.757312][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16657'. [ 1093.888934][T10761] usb 1-1: USB disconnect, device number 56 [ 1093.895455][T17547] usb 1-1: can't set config #0, error -71 [ 1093.915736][T16263] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 1093.941936][T16263] usb 2-1: USB disconnect, device number 86 [ 1094.041236][T18912] loop2: detected capacity change from 0 to 4096 [ 1094.119860][T18912] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1094.127589][T18912] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1094.146068][T18912] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1094.257040][T18912] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.16661: Logical block already allocated [ 1095.040460][T18979] netlink: 'syz.0.16683': attribute type 3 has an invalid length. [ 1095.045624][T18980] Invalid ELF header magic: != ELF [ 1095.579202][T19042] loop1: detected capacity change from 0 to 4096 [ 1095.603394][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16697'. [ 1095.671358][T19042] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1096.015150][T19088] tmpfs: Bad value for 'mpol' [ 1096.064567][T19096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16711'. [ 1096.064603][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16711'. [ 1096.394365][T19125] loop1: detected capacity change from 0 to 64 [ 1096.679814][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16726'. [ 1096.722079][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16726'. [ 1096.749362][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16726'. [ 1096.900740][T19171] netlink: 'syz.1.16733': attribute type 13 has an invalid length. [ 1097.767222][T19213] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16748'. [ 1098.262256][T19241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16758'. [ 1098.494088][T19259] device ipip1 entered promiscuous mode [ 1098.761520][T19281] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1098.927686][T19295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1099.349012][T19332] overlayfs: unrecognized mount option "\{\" or missing value [ 1099.522773][T19342] device batadv_slave_0 entered promiscuous mode [ 1099.599226][T19342] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1099.613583][T19355] QAT: failed to copy from user cfg_data. [ 1099.891072][T19376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16805'. [ 1099.960036][T19387] loop1: detected capacity change from 0 to 8 [ 1099.976235][T19390] xt_CONNSECMARK: invalid mode: 0 [ 1099.987985][ T26] audit: type=1400 audit(2000001492.411:66): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19386 comm="syz.4.16807" [ 1100.503355][T19448] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16829'. [ 1100.513781][T19430] xt_CT: No such helper "netbios-ns" [ 1100.665746][T19447] loop4: detected capacity change from 0 to 4096 [ 1100.748161][T19466] libceph: resolve '40.' (ret=-3): failed [ 1100.754563][T19447] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1100.794748][T19447] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1100.907756][T19447] ntfs: volume version 3.1. [ 1100.960002][T19447] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1100.981168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.050007][T19498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16843'. [ 1101.070517][T19447] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1101.104706][T19447] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1101.283544][T19447] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1101.306533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.324322][T19447] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1101.356850][T19447] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1101.537861][T16356] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1101.622832][T19547] netlink: 'syz.0.16857': attribute type 5 has an invalid length. [ 1101.826184][T19560] netlink: 'syz.0.16863': attribute type 1 has an invalid length. [ 1101.946486][T16356] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1101.987416][T16356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.009741][T19566] loop1: detected capacity change from 0 to 256 [ 1102.041220][T16356] usb 3-1: config 0 descriptor?? [ 1102.110159][T16356] usb 3-1: selecting invalid altsetting 3 [ 1102.126195][T16356] comedi comedi5: could not set alternate setting 3 in high speed [ 1102.163049][T16356] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1102.203458][T16356] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 1102.328953][T16263] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1102.356487][T16167] usb 3-1: USB disconnect, device number 74 [ 1102.466508][T19603] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16874'. [ 1102.521491][T16355] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1102.585639][T16263] usb 4-1: Using ep0 maxpacket: 8 [ 1102.690733][T19589] loop1: detected capacity change from 0 to 32768 [ 1102.713924][T16263] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1102.723205][T16263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.753948][T16263] usb 4-1: config 0 descriptor?? [ 1102.773249][T19589] XFS (loop1): Mounting V5 Filesystem [ 1102.819114][T19589] XFS (loop1): Ending clean mount [ 1102.836360][T16167] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1102.859944][T16167] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 1102.873819][T16167] XFS (loop1): Unmount and run xfs_repair [ 1102.885539][T16167] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1102.893150][T16167] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1102.903234][T16167] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 1102.912369][T16167] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1102.921400][T16167] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 1102.938256][T16167] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1102.947364][T16167] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.960069][T16355] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 1102.967488][T16167] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.972294][T16355] usb 1-1: config 0 has no interface number 0 [ 1102.980396][T16167] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.984659][T16355] usb 1-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 1102.999757][T19589] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 1103.005053][T16355] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 1103.024417][T19589] XFS (loop1): Failed to initialize disk quotas. [ 1103.025513][T16355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.050378][T16355] usb 1-1: config 0 descriptor?? [ 1103.056072][T16263] usb 4-1: string descriptor 0 read error: -71 [ 1103.062317][T16263] usb 4-1: Found UVC 0.00 device (2833:0201) [ 1103.094166][T16263] usb 4-1: No valid video chain found. [ 1103.116693][T16355] usb 1-1: Found UVC 0.00 device (8086:0b5b) [ 1103.121198][T16263] usb 4-1: USB disconnect, device number 98 [ 1103.148896][T16355] usb 1-1: No valid video chain found. [ 1103.182911][ T4283] XFS (loop1): Unmounting Filesystem [ 1103.383779][T16263] usb 1-1: USB disconnect, device number 57 [ 1103.841137][T16167] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1104.142143][T19697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16897'. [ 1104.232091][T16167] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 1104.251344][T16167] usb 2-1: config 0 has no interface number 1 [ 1104.262210][T16167] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1104.298638][T16167] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1104.424596][T16167] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1104.452678][T16167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1104.477763][T16167] usb 2-1: SerialNumber: syz [ 1104.496911][T16167] usb 2-1: config 0 descriptor?? [ 1104.819996][T16167] usb 2-1: Found UVC 0.00 device (0002:0000) [ 1104.830954][T16167] usb 2-1: No valid video chain found. [ 1104.881927][T16167] usb 2-1: USB disconnect, device number 87 [ 1105.538366][T19815] netlink: 'syz.1.16935': attribute type 21 has an invalid length. [ 1105.557511][T19815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16935'. [ 1105.859627][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16947'. [ 1105.993602][T19858] loop1: detected capacity change from 0 to 1024 [ 1106.128853][T19871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16955'. [ 1106.165571][T19871] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1106.173912][ T4426] hfsplus: b-tree write err: -5, ino 4 [ 1106.281055][T19885] cgroup: Invalid name [ 1106.284972][ T1092] block nbd2: Attempted send on invalid socket [ 1106.291413][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1107.095995][T19952] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1107.202078][T19953] loop1: detected capacity change from 0 to 2048 [ 1107.331917][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16990'. [ 1107.373865][T19968] netlink: 'syz.4.16990': attribute type 1 has an invalid length. [ 1107.440080][T19953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.011270][T20006] loop1: detected capacity change from 0 to 16 [ 1108.020318][T20008] netlink: 'syz.3.17002': attribute type 3 has an invalid length. [ 1108.107762][T20006] erofs: (device loop1): mounted with root inode @ nid 36. [ 1108.518881][T16356] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1108.569303][T19985] loop2: detected capacity change from 0 to 32768 [ 1108.626462][T19985] XFS: noikeep mount option is deprecated. [ 1108.642799][T16167] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1108.688031][T19985] XFS (loop2): Mounting V5 Filesystem [ 1108.828857][T16356] usb 4-1: Using ep0 maxpacket: 8 [ 1108.858924][T19985] XFS (loop2): Ending clean mount [ 1108.915109][T19985] XFS (loop2): Quotacheck needed: Please wait. [ 1108.989501][T16356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1108.996134][T19985] XFS (loop2): Quotacheck: Done. [ 1109.041768][T16356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.042788][T16167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.079282][T16167] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1109.102770][T16167] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1109.104530][T16356] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.126681][T16167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.150374][T16167] usb 2-1: config 0 descriptor?? [ 1109.186450][T16356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1109.215945][T16356] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1109.252967][T16356] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1109.263281][T16356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.308520][T16356] usb 4-1: config 0 descriptor?? [ 1109.333243][ T4287] XFS (loop2): Unmounting Filesystem [ 1109.353125][T20019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1109.684196][T16167] Bluetooth: Can't get version to change to load ram patch err [ 1109.691917][T16167] Bluetooth: Loading patch file failed [ 1109.730531][T16167] ath3k: probe of 2-1:0.0 failed with error -71 [ 1109.754363][T16167] usb 2-1: USB disconnect, device number 88 [ 1109.913077][T16356] usb 4-1: USB disconnect, device number 99 [ 1110.036431][T20136] overlayfs: missing 'lowerdir' [ 1110.236002][T20154] tmpfs: Bad value for 'mpol' [ 1110.243591][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17041'. [ 1110.271023][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17041'. [ 1110.564094][T20187] netlink: 'syz.3.17049': attribute type 1 has an invalid length. [ 1110.613287][T20195] libceph: resolve '0' (ret=-3): failed [ 1110.619367][T20187] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.17049'. [ 1110.763769][T16264] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1111.159521][T16264] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1111.173284][T16264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.213267][T16264] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1111.243923][T16264] usb 3-1: config 1 has no interface number 1 [ 1111.272148][T16264] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1111.320331][T16264] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33022, setting to 64 [ 1111.509886][T20273] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 1111.539750][T16264] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.557043][T16264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.565209][T16264] usb 3-1: Product: syz [ 1111.595469][T16264] usb 3-1: Manufacturer: syz [ 1111.608736][T16264] usb 3-1: SerialNumber: syz [ 1111.702797][T20288] netlink: 'syz.1.17085': attribute type 1 has an invalid length. [ 1111.740259][T20290] netlink: 'syz.1.17087': attribute type 9 has an invalid length. [ 1111.870285][T20301] 9pnet: p9_fd_create_tcp (20301): problem connecting socket to 127.0.0.1 [ 1112.047074][T16264] usb 3-1: USB disconnect, device number 75 [ 1112.135410][T20330] netlink: 'syz.3.17091': attribute type 1 has an invalid length. [ 1112.190543][T20330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17091'. [ 1112.223575][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17091'. [ 1112.328005][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.048809][T20404] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1113.056062][T16273] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1113.251603][T20417] loop1: detected capacity change from 0 to 4096 [ 1113.321664][T20417] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1113.348544][T20417] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1113.402952][T20417] ntfs: volume version 3.1. [ 1113.415185][T16355] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1113.426306][T20417] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1113.447823][T20417] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1113.468707][T16273] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1113.477141][T16273] usb 3-1: config 0 has no interface number 0 [ 1113.489272][T20417] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1113.585046][T20417] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1113.625746][T20417] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1113.644654][T20417] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1113.705796][T16273] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1113.725452][T16273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.737371][T16273] usb 3-1: Product: syz [ 1113.749078][T16273] usb 3-1: Manufacturer: syz [ 1113.753895][T16273] usb 3-1: SerialNumber: syz [ 1113.790320][T16273] usb 3-1: config 0 descriptor?? [ 1114.046052][T16355] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1114.062333][T16355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.086306][T16355] usb 1-1: Product: syz [ 1114.099734][T16355] usb 1-1: Manufacturer: syz [ 1114.104490][T16355] usb 1-1: SerialNumber: syz [ 1114.121293][T16355] usb 1-1: config 0 descriptor?? [ 1114.174463][T16273] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 1114.181063][T16273] usb 3-1: No valid video chain found. [ 1114.189171][T16355] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1114.217195][T16273] usb 3-1: USB disconnect, device number 76 [ 1114.237276][T20479] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1114.325781][T20520] netlink: 'syz.1.17143': attribute type 10 has an invalid length. [ 1114.335071][T20520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1114.513056][T20536] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 1114.570897][T20541] SET target dimension over the limit! [ 1114.655387][T16355] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1114.662571][T16355] sq905c 1-1:0.0: Reading version command failed [ 1114.698053][T16355] sq905c: probe of 1-1:0.0 failed with error -71 [ 1114.730330][T16355] usb 1-1: USB disconnect, device number 58 [ 1114.909130][T20574] netlink: 'syz.3.17160': attribute type 10 has an invalid length. [ 1114.939583][T20574] device veth0_vlan left promiscuous mode [ 1114.965965][T20574] device veth0_vlan entered promiscuous mode [ 1115.018465][T20574] team0: Device veth0_vlan failed to register rx_handler [ 1115.405243][ T26] audit: type=1400 audit(2000001506.835:67): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=20611 comm="syz.3.17172" [ 1116.082685][T20673] loop4: detected capacity change from 0 to 1024 [ 1116.132293][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.238916][T20673] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x000000000000000f,nodioread_nolock,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 1116.262038][T20673] ext4 filesystem being mounted at /3188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.505990][T16264] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1117.082154][T16264] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1117.091518][T16264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.119613][T20772] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1117.128887][T16264] usb 3-1: Product: syz [ 1117.133184][T16264] usb 3-1: Manufacturer: syz [ 1117.160286][T16264] usb 3-1: SerialNumber: syz [ 1117.179010][T16264] usb 3-1: config 0 descriptor?? [ 1117.255415][T16264] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1117.760593][T16355] usb 3-1: USB disconnect, device number 77 [ 1118.235511][T20857] netlink: 'syz.1.17254': attribute type 6 has an invalid length. [ 1118.617992][T20886] netlink: 'syz.2.17264': attribute type 10 has an invalid length. [ 1118.656130][T20889] sctp: [Deprecated]: syz.1.17265 (pid 20889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1118.656130][T20889] Use struct sctp_sack_info instead [ 1118.686116][T20886] openvswitch: netlink: Flow key attr not present in new flow. [ 1118.792659][T20900] netlink: 'syz.4.17268': attribute type 10 has an invalid length. [ 1118.845232][T20900] device veth0_vlan left promiscuous mode [ 1118.868507][T20900] device veth0_vlan entered promiscuous mode [ 1118.913600][T20900] team0: Device veth0_vlan failed to register rx_handler [ 1119.581758][T20977] netlink: 'syz.1.17295': attribute type 10 has an invalid length. [ 1119.616203][T20977] device veth0_vlan left promiscuous mode [ 1119.640163][T20983] --map-set only usable from mangle table [ 1119.655025][T20977] device veth0_vlan entered promiscuous mode [ 1119.673909][T20977] team0: Device veth0_vlan failed to register rx_handler [ 1119.726476][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17301'. [ 1120.451232][T21077] netlink: 'syz.0.17330': attribute type 1 has an invalid length. [ 1120.462862][T21074] xt_addrtype: ipv6 does not support BROADCAST matching [ 1120.495412][T21077] netlink: 'syz.0.17330': attribute type 9 has an invalid length. [ 1121.041531][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17351'. [ 1121.059059][T16356] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1121.074881][T21140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17351'. [ 1121.323540][T21175] loop1: detected capacity change from 0 to 764 [ 1121.347565][T16356] usb 4-1: Using ep0 maxpacket: 8 [ 1121.399623][T21175] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1121.461955][T21175] Symlink component flag not implemented [ 1121.486678][T16356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.493671][T21175] Symlink component flag not implemented (7) [ 1121.721793][T16356] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1121.739193][T16356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.762188][T16356] usb 4-1: Product: syz [ 1121.777976][T16356] usb 4-1: Manufacturer: syz [ 1121.793696][T16356] usb 4-1: SerialNumber: syz [ 1121.816884][T16356] usb 4-1: config 0 descriptor?? [ 1121.908287][T16356] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1121.925475][T16356] usb 4-1: selecting invalid altsetting 1 [ 1122.099073][T21246] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1122.132606][T21246] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1122.280311][T21241] loop4: detected capacity change from 0 to 4096 [ 1122.405066][T16356] usb 4-1: USB disconnect, device number 100 [ 1122.568651][T21241] ntfs: (device loop4): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 1122.701250][T21241] ntfs: volume version 3.1. [ 1122.749210][T21281] netlink: 'syz.0.17393': attribute type 4 has an invalid length. [ 1122.780075][T21281] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.17393'. [ 1123.148725][T21297] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1123.279003][T21306] x_tables: unsorted entry at hook 2 [ 1124.018769][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17425'. [ 1124.267073][T21376] loop2: detected capacity change from 0 to 1024 [ 1124.317649][T21383] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1124.461077][T21376] hfsplus: request for non-existent node 211 in B*Tree [ 1124.525452][T21376] hfsplus: request for non-existent node 211 in B*Tree [ 1124.643613][T21405] netlink: 'syz.0.17441': attribute type 1 has an invalid length. [ 1125.139810][T21452] openvswitch: netlink: Actions may not be safe on all matching packets [ 1125.354696][T21462] netlink: 256 bytes leftover after parsing attributes in process `syz.2.17460'. [ 1125.494144][T21467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1126.220646][T21512] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.903715][T21566] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1127.055751][T21575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1127.088519][T21579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17499'. [ 1127.131777][T21579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17499'. [ 1127.223974][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17502'. [ 1128.019312][T21653] netlink: 'syz.0.17521': attribute type 1 has an invalid length. [ 1128.306327][T21678] ip6t_srh: unknown srh match flags 4000 [ 1128.497421][T21697] netlink: 'syz.3.17534': attribute type 15 has an invalid length. [ 1128.655209][T21710] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17538'. [ 1128.692115][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17538'. [ 1128.745841][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17538'. [ 1128.788566][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17538'. [ 1129.280915][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1129.785073][T21812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17576'. [ 1129.932081][T21827] loop4: detected capacity change from 0 to 128 [ 1130.241306][T21855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.633434][T21899] loop4: detected capacity change from 0 to 256 [ 1130.728968][T21899] FAT-fs (loop4): Directory bread(block 64) failed [ 1130.767882][T21899] FAT-fs (loop4): Directory bread(block 65) failed [ 1130.819524][T21899] FAT-fs (loop4): Directory bread(block 66) failed [ 1130.826541][T21899] FAT-fs (loop4): Directory bread(block 67) failed [ 1130.883249][T21899] FAT-fs (loop4): Directory bread(block 68) failed [ 1130.914828][T21899] FAT-fs (loop4): Directory bread(block 69) failed [ 1130.936440][T21908] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1130.943025][T21908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1130.947361][T21899] FAT-fs (loop4): Directory bread(block 70) failed [ 1130.968402][T21899] FAT-fs (loop4): Directory bread(block 71) failed [ 1130.972797][ T26] audit: type=1400 audit(2000001521.399:68): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=21910 comm="syz.0.17607" [ 1130.975435][T21908] vhci_hcd vhci_hcd.0: Device attached [ 1131.016233][T21899] FAT-fs (loop4): Directory bread(block 72) failed [ 1131.033192][T21899] FAT-fs (loop4): Directory bread(block 73) failed [ 1131.054666][T21916] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1131.061235][T21916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1131.215029][T16273] vhci_hcd: vhci_device speed not set [ 1131.235696][T21916] vhci_hcd vhci_hcd.0: Device attached [ 1131.289763][T16273] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1131.348404][T21917] vhci_hcd: connection closed [ 1131.348611][T21909] vhci_hcd: connection reset by peer [ 1131.360719][ T144] vhci_hcd: stop threads [ 1131.365668][ T144] vhci_hcd: release socket [ 1131.372972][ T144] vhci_hcd: disconnect device [ 1131.423729][ T144] vhci_hcd: stop threads [ 1131.461125][ T144] vhci_hcd: release socket [ 1131.486797][ T144] vhci_hcd: disconnect device [ 1131.498498][T21942] ipt_CLUSTERIP: Please specify destination IP [ 1131.517727][T21944] loop4: detected capacity change from 0 to 256 [ 1131.566129][T21948] ubi0: attaching mtd0 [ 1131.613661][T21948] ubi0: scanning is finished [ 1131.649874][T21948] ubi0: empty MTD device detected [ 1131.843026][T21963] __nla_validate_parse: 1 callbacks suppressed [ 1131.843044][T21963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17621'. [ 1131.873756][T21948] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1131.910583][T21948] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1131.971212][T21948] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1132.002730][T21948] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1132.036610][T21948] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1132.091597][T21948] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1132.121552][T21948] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3886480239 [ 1132.155300][T21948] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1132.241232][T21965] ubi0: background thread "ubi_bgt0d" started, PID 21965 [ 1132.298023][T21995] xt_TCPMSS: Only works on TCP SYN packets [ 1132.898237][T22036] netlink: 'syz.3.17645': attribute type 1 has an invalid length. [ 1132.952801][T22043] netlink: 'syz.2.17647': attribute type 6 has an invalid length. [ 1132.982151][T22043] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17647'. [ 1133.113270][T22056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17653'. [ 1133.352553][T22082] netlink: 'syz.0.17662': attribute type 44 has an invalid length. [ 1133.355702][T22081] xt_l2tp: v2 doesn't support IP mode [ 1134.177490][T22141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17684'. [ 1134.303863][T22151] overlayfs: missing 'lowerdir' [ 1134.391392][T22159] trusted_key: encrypted_key: master key parameter is missing [ 1134.423566][T22160] netlink: 292 bytes leftover after parsing attributes in process `syz.1.17690'. [ 1134.764262][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17699'. [ 1135.168347][T22217] netlink: 'syz.4.17709': attribute type 7 has an invalid length. [ 1135.200646][T22217] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17709'. [ 1135.218865][T22222] netlink: 'syz.1.17711': attribute type 6 has an invalid length. [ 1135.242034][T22222] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17711'. [ 1135.370296][T22228] loop2: detected capacity change from 0 to 2048 [ 1135.530353][T22228] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,lazytime,norecovery,bsdgroups,grpquota,minixdf,noload,debug_want_extra_isize=0x0000000000000004,grpquota,,errors=continue. Quota mode: writeback. [ 1135.541911][T22256] xt_hashlimit: invalid interval [ 1136.285504][T22307] binder: 22306:22307 ioctl 40046210 0 returned -14 [ 1136.300190][T16356] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1136.603282][T16356] usb 3-1: Using ep0 maxpacket: 32 [ 1136.732194][T22341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17749'. [ 1136.753122][T16356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.774001][T16273] vhci_hcd: vhci_device speed not set [ 1136.822481][T22337] loop4: detected capacity change from 0 to 4096 [ 1136.827513][T16356] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.001392][T22337] ntfs3: loop4: Failed to load $Extend. [ 1137.052093][T16356] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1137.075706][T16356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.110059][T16356] usb 3-1: Product: syz [ 1137.129711][T22337] ntfs3: loop4: ino=5, "/" directory corrupted [ 1137.132551][T16356] usb 3-1: Manufacturer: syz [ 1137.163656][T16356] usb 3-1: SerialNumber: syz [ 1137.190987][T16356] usb 3-1: config 0 descriptor?? [ 1137.288729][T16356] qmi_wwan 3-1:0.0: bogus CDC Union: master=101, slave=0 [ 1137.296137][T16356] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 1137.556128][T16356] usb 3-1: USB disconnect, device number 78 [ 1137.762634][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17768'. [ 1138.187697][T22445] loop2: detected capacity change from 0 to 256 [ 1138.246678][T22450] loop4: detected capacity change from 0 to 512 [ 1138.312511][T22450] EXT4-fs (loop4): inline encryption not supported [ 1138.367257][T22450] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1138.387092][T22450] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1138.412859][T22450] EXT4-fs (loop4): 1 truncate cleaned up [ 1138.418749][T22450] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,inlinecrypt,nodelalloc,auto_da_alloc=0x0000000000000003,norecovery,,errors=continue. Quota mode: writeback. [ 1138.449065][T22450] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.17782: lblock 0 mapped to illegal pblock 4 (length 1) [ 1138.577468][T22468] loop2: detected capacity change from 0 to 4096 [ 1138.913764][ T4287] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1138.920364][ T4287] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1139.161569][T22522] netlink: 'syz.1.17802': attribute type 1 has an invalid length. [ 1139.181708][T22523] autofs4:pid:22523:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 1139.467529][T22553] netlink: 'syz.3.17815': attribute type 12 has an invalid length. [ 1139.535843][T22558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1139.604557][T22558] bridge0: port 3(team0) entered disabled state [ 1139.631293][T22568] loop4: detected capacity change from 0 to 8 [ 1139.647676][T22558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1139.685204][T22558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.724171][ T4330] udevd[4330]: incorrect cramfs checksum on /dev/loop4 [ 1139.743837][T22568] cramfs: Error -3 while decompressing! [ 1139.760081][T22558] device bridge_slave_0 left promiscuous mode [ 1139.765419][T22568] cramfs: ffffffff964000a8(26)->ffff88804b0db000(4096) [ 1139.802028][T22568] cramfs: Error -3 while decompressing! [ 1139.802047][T22568] cramfs: ffffffff964000c2(26)->ffff88804aaff000(4096) [ 1139.802074][T22568] cramfs: Error -3 while decompressing! [ 1139.802086][T22568] cramfs: ffffffff964000dc(16)->ffff88804d3be000(4096) [ 1139.802128][T22568] cramfs: Error -3 while decompressing! [ 1139.802140][T22568] cramfs: ffffffff964000a8(26)->ffff88804b0db000(4096) [ 1139.828268][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1139.830851][T22558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.901079][T22558] bond0: (slave bond_slave_0): Releasing backup interface [ 1139.913094][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1139.998598][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1140.032526][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1140.070120][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1140.106920][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1140.150036][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop4 [ 1140.171282][T22558] bond0: (slave bond_slave_1): Releasing backup interface [ 1140.250167][T22558] device team_slave_0 left promiscuous mode [ 1140.369726][T22558] team0: Port device team_slave_0 removed [ 1140.373194][T22558] device team_slave_1 left promiscuous mode [ 1140.476475][T22550] loop1: detected capacity change from 0 to 32768 [ 1140.514672][T22558] team0: Port device team_slave_1 removed [ 1140.517956][T22558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.570676][T22558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.570721][T22558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.658911][T22586] autofs4:pid:22586:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8192), cmd(0xc018937e) [ 1140.658945][T22586] autofs4:pid:22586:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1140.964791][T22604] comedi comedi0: comedi_config --init_data is deprecated [ 1141.245761][T22625] netlink: 'syz.2.17839': attribute type 5 has an invalid length. [ 1141.368523][T22634] ..: renamed from ipvlan0 [ 1141.423388][T22639] sctp: [Deprecated]: syz.0.17841 (pid 22639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1141.423388][T22639] Use struct sctp_sack_info instead [ 1141.573233][T22648] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1141.881428][T22593] loop4: detected capacity change from 0 to 32768 [ 1142.018151][ T4291] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 1142.018176][ T4291] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 1142.018191][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0 [ 1142.018209][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1142.018219][ T4291] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 1142.018247][ T4291] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 1142.018263][ T4291] RSP: 0018:ffffc900031efa80 EFLAGS: 00010202 [ 1142.018282][ T4291] RAX: 00000000000000ba RBX: ffff88802c983a08 RCX: dffffc0000000000 [ 1142.018296][ T4291] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 1142.018309][ T4291] RBP: 1ffff11005930749 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 1142.018323][ T4291] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff88814bf80110 [ 1142.018337][ T4291] R13: ffff88802c983a48 R14: 00000000000005d0 R15: ffff88802b4d3bac [ 1142.018351][ T4291] FS: 0000555585de1500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1142.018367][ T4291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.018381][ T4291] CR2: 0000555585dfca28 CR3: 0000000061820000 CR4: 00000000003506f0 [ 1142.018399][ T4291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.018410][ T4291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1142.018422][ T4291] Call Trace: [ 1142.018429][ T4291] [ 1142.018441][ T4291] bio_associate_blkg+0x23a/0x340 [ 1142.018461][ T4291] lbmStartIO+0x204/0x4c0 [ 1142.018481][ T4291] lbmWrite+0x361/0x480 [ 1142.018499][ T4291] jfs_flush_journal+0x537/0xec0 [ 1142.018520][ T4291] ? lmLogShutdown+0x850/0x850 [ 1142.018539][ T4291] ? dqput+0x460/0x460 [ 1142.018565][ T4291] ? writeback_inodes_sb_nr+0x30/0x30 [ 1142.018586][ T4291] jfs_sync_fs+0x79/0xa0 [ 1142.018601][ T4291] sync_filesystem+0xe6/0x220 [ 1142.018618][ T4291] generic_shutdown_super+0x6b/0x300 [ 1142.018637][ T4291] kill_block_super+0x7c/0xe0 [ 1142.018654][ T4291] deactivate_locked_super+0x93/0xf0 [ 1142.018672][ T4291] cleanup_mnt+0x42d/0x4e0 [ 1142.018691][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 1142.018713][ T4291] task_work_run+0x125/0x1a0 [ 1142.018734][ T4291] exit_to_user_mode_loop+0x10f/0x130 [ 1142.018753][ T4291] exit_to_user_mode_prepare+0xee/0x180 [ 1142.018774][ T4291] syscall_exit_to_user_mode+0x16/0x40 [ 1142.018793][ T4291] do_syscall_64+0x58/0xa0 [ 1142.018809][ T4291] ? clear_bhb_loop+0x30/0x80 [ 1142.018827][ T4291] ? clear_bhb_loop+0x30/0x80 [ 1142.018844][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1142.018862][ T4291] RIP: 0033:0x7f4525f4e117 [ 1142.018878][ T4291] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1142.018892][ T4291] RSP: 002b:00007ffeae8fffa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1142.018912][ T4291] RAX: 0000000000000000 RBX: 00007f4525fb671f RCX: 00007f4525f4e117 [ 1142.018925][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeae900060 [ 1142.018937][ T4291] RBP: 00007ffeae900060 R08: 00007ffeae901060 R09: 00000000ffffffff [ 1142.018950][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeae9010f0 [ 1142.018972][ T4291] R13: 00007f4525fb671f R14: 0000000000107553 R15: 00007ffeae901130 [ 1142.018996][ T4291] [ 1142.019003][ T4291] Modules linked in: [ 1142.019037][ T4291] ---[ end trace 4a7dfe581ec7e8ea ]--- [ 1142.019049][ T4291] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 1142.019071][ T4291] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 1142.019086][ T4291] RSP: 0018:ffffc900031efa80 EFLAGS: 00010202 [ 1142.019104][ T4291] RAX: 00000000000000ba RBX: ffff88802c983a08 RCX: dffffc0000000000 [ 1142.019117][ T4291] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 1142.019131][ T4291] RBP: 1ffff11005930749 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 1142.019146][ T4291] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff88814bf80110 [ 1142.019160][ T4291] R13: ffff88802c983a48 R14: 00000000000005d0 R15: ffff88802b4d3bac [ 1142.019173][ T4291] FS: 0000555585de1500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1142.019190][ T4291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.021607][ T4291] CR2: 0000555585dfca28 CR3: 0000000061820000 CR4: 00000000003506f0 [ 1142.021631][ T4291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.021641][ T4291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1142.021655][ T4291] Kernel panic - not syncing: Fatal exception [ 1142.021753][ T4291] Kernel Offset: disabled [ 1142.498718][ T4291] Rebooting in 86400 seconds..